last executing test programs: 4m48.811226258s ago: executing program 32 (id=38): semctl$SETVAL(0x0, 0x4, 0x10, 0xfffffffffffffffe) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) syz_io_uring_setup(0x493, &(0x7f0000000180)={0x0, 0x5eab, 0x8, 0x2, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) readv(r6, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/97, 0x61}, {0x0}], 0x2) r7 = gettid() r8 = syz_create_resource$binfmt(&(0x7f00000002c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r8, 0x41, 0x1ff) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x7, 0x80000000, 0x16, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x80, 0x2, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5, {0x67bc}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x1a, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000010000000000000000100000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018140000", @ANYRES32, @ANYBLOB="000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703e2ffcba803792000000000850000000e000000b70000000000000085200000040000", @ANYRES32=r6, @ANYBLOB="00000000090000008f14f4ff08000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0xb, 0x63, &(0x7f0000000440)=""/99, 0x41100, 0x8, '\x00', r10, 0x0, r11, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xa, 0xfffffffd, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000740), &(0x7f0000000800)=[{0x80004, 0x5, 0xa, 0x4}, {0x1, 0x5, 0x9, 0xa}, {0x2, 0x3, 0x0, 0xc}, {0x0, 0x4, 0xd, 0xb}], 0x10, 0x7}, 0x94) write$binfmt_aout(r9, &(0x7f0000000340)=ANY=[], 0xff2e) r12 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r14}, 0x10) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) ioctl$TCXONC(r9, 0x540a, 0x3) sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYRES8=r3, @ANYRES32=r7, @ANYRES16=r7, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000200000001000000", @ANYRES8=r11, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4044881) move_pages(r7, 0x3, &(0x7f0000000040)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil], &(0x7f00000000c0)=[0x100, 0x80000000, 0x0, 0x6, 0x5], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) 4m47.646239621s ago: executing program 33 (id=47): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b0, 0x80, 0x28000, 0x44024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0xc, 0x80000000, @vifc_lcl_addr=@rand_addr=0xc0000200, @private=0xa010100}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r5, 0x0, 0x4}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r6}, 0x18) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c00008008"], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000000)=0x1) r8 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r8, &(0x7f0000000400)=[{&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x1) 4m31.701511216s ago: executing program 34 (id=226): openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2101, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = gettid() bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)={0x14, 0x0, 0x205, 0xfffffffc, 0x25dfdbfd}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18) r3 = fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x0, &(0x7f0000000040), 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, 0x17, r3, 0x8, &(0x7f0000000340)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x13a0d, r1, 0x2, 0x0, &(0x7f0000000380)=[{0x5, 0x3, 0xe, 0x4}, {0x5, 0x4, 0x0, 0x5}], 0x10, 0xd}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000700)={'vxcan1\x00', {0x2, 0x0, @broadcast}}) mq_timedreceive(r5, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) setregid(0x0, 0xee01) getgid() r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r10) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r9, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r11, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x71}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]]}, 0x40}, 0x1, 0x0, 0x0, 0x20000811}, 0x800) 4m17.79525847s ago: executing program 5 (id=387): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=']) 4m17.634166523s ago: executing program 5 (id=389): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x16, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 4m17.530574635s ago: executing program 5 (id=393): semctl$SETVAL(0x0, 0x4, 0x10, 0xfffffffffffffffe) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) syz_io_uring_setup(0x493, &(0x7f0000000180)={0x0, 0x5eab, 0x8, 0x2, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) readv(r4, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/97, 0x61}, {0x0}], 0x2) r5 = gettid() r6 = syz_create_resource$binfmt(&(0x7f00000002c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x41, 0x1ff) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x7, 0x80000000, 0x16, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x80, 0x2, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x67bc}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x1a, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000010000000000000000100000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018140000", @ANYRES32, @ANYBLOB="000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703e2ffcba803792000000000850000000e000000b70000000000000085200000040000", @ANYRES32=r4], &(0x7f0000000380)='GPL\x00', 0xb, 0x63, &(0x7f0000000440)=""/99, 0x41100, 0x8, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xa, 0xfffffffd, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740), &(0x7f0000000800)=[{0x4, 0x1, 0x1, 0x4}, {0x80004, 0x5, 0xa, 0x4}, {0x1, 0x5, 0x9, 0xa}, {0x2, 0x3, 0x0, 0xc}, {0x0, 0x4, 0xd, 0xb}], 0x10, 0x7}, 0x94) write$binfmt_aout(r7, &(0x7f0000000340)=ANY=[], 0xff2e) r10 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x10) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) ioctl$TCXONC(r7, 0x540a, 0x3) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYRES8=r3, @ANYRES32=r5, @ANYRES16=r5, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000200000001000000", @ANYRES8=r9, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4044881) move_pages(r5, 0x3, &(0x7f0000000040)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil], &(0x7f00000000c0)=[0x100, 0x80000000, 0x0, 0x6, 0x5], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) 4m16.686785002s ago: executing program 5 (id=398): socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000800000181200c7", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300), 0x8800, &(0x7f0000000440)=ANY=[@ANYBLOB=',seclabel,fscontext=s']) 4m16.26384472s ago: executing program 5 (id=402): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000100"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socketpair(0x8, 0x80000, 0x2, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r5, &(0x7f0000000140)='2', 0xfcd1, 0xfecc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000740)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) socket$inet(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001000030525bd7000ffffffff00cf00003e721fb92d1fcfac9096ed8ef2b02940e361ba57bbc9b3cc630a7473b8c5548bc74e25fcab051f98196c591c53fac096940d8e6f26", @ANYRES32=0x0, @ANYBLOB="8b80000000000000"], 0x20}}, 0x0) 4m15.916069547s ago: executing program 5 (id=407): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5f, '\x00', 0x0, @fallback=0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) write$selinux_load(0xffffffffffffffff, 0x0, 0x44f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffffffffffc4, 0xe0882) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000200)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x40001, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r3, 0x0, 0x40000000) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea20700000000000000ccdc09da15fef6a608649e7531765f0ef82e3c0076a704259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 4m15.845770578s ago: executing program 35 (id=407): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5f, '\x00', 0x0, @fallback=0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) write$selinux_load(0xffffffffffffffff, 0x0, 0x44f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffffffffffc4, 0xe0882) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000200)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x40001, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r3, 0x0, 0x40000000) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea20700000000000000ccdc09da15fef6a608649e7531765f0ef82e3c0076a704259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 4m10.969770624s ago: executing program 2 (id=467): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) fsopen(&(0x7f0000000080)='tracefs\x00', 0x1) (fail_nth: 6) 4m10.628615461s ago: executing program 2 (id=470): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x848000000015, 0x805, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 4m10.467061874s ago: executing program 2 (id=472): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f0000000180)=0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'ip6_vti0\x00', 0x1}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r8}, 0x18) sendfile(r6, r5, 0x0, 0x7ffff088) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x4}, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, &(0x7f0000000400)=0x58, 0x4) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt(r9, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r9, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000002c"], 0xfdef) r10 = gettid() r11 = getpid() tgkill(r11, r10, 0xf) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xc, 0x7, 0xff, 0x0, 0x0, 0x5, 0x10, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x3a7, 0x1}, 0x6000, 0x979, 0x4, 0x3, 0x8, 0xa0, 0x4, 0x0, 0x0, 0x0, 0x8}, r11, 0x0, 0xffffffffffffffff, 0xb) sendto$inet(r2, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) add_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f0000000880), 0x0, 0xffffffffffffffff) fsopen(&(0x7f0000000080)='tracefs\x00', 0x1) 4m10.216604149s ago: executing program 2 (id=476): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000c00)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x216802, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x2) (async) ioctl$TIOCGPTPEER(r3, 0x5441, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) (async) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$xdp(0x2c, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x20, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x2, @perf_config_ext={0x2, 0x1}, 0x82b5, 0x11, 0x804, 0x9, 0x2, 0x9, 0x5a34, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffffc}, 0x0, 0x80001, 0xffffffffffffffff, 0x0) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x81800) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc2}}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0xa}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0xa}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000008, &(0x7f0000000200)={[{@grpid}, {@grpjquota}, {@nobarrier}]}, 0x1, 0x521, &(0x7f0000000b80)="$eJzs3d9rZFcdAPDvvcmkyW5qpiqyFmyLrewW3ZmksRpF2gqiTwW1vq8xmYSQSSZkJnUTiqb4BwgiKvgH+CL44KMg/RNEWNB3UVFEd/VR98qdudH8mEnGZJJZJ58PnMw598f5nnPJ3Lk/DvcGcG29EBFvRMRYRLwcETPF9LRIsd9J+XKPHr6zlKcksuytvyaRFNMO6srL4xFxs1htMiK++qWIbyQn4zZ399YX6/XadlGutja2qs3dvbtrG4urtdXa5vz83M8j4tWF2axwoX6WI+K1L/zxB9/9yRdf++Unvvm7e3++8628WZ/7UKfdEbF0oQA9dOoutbfFgXwbbV9GsCHJ+1MaG3YrAADoR36M//6I+Gj7+H8mxtpHcwAAAMAoyV6fjn8mERkAAAAwstKImI4krRRjAaYjTSuVzhjeD8aNtN5otj6+0tjZXM7nRZSjlK6s1WuzxVjhcpSSvDxXjLE9KL9yrDwfEc9ExPdnptrlylKjvjzsix8AAABwTdx8/uj5/z9m0nYeAAAAGDHlngUAAABgVDjlBwAAgNHn/B8AAABG2pfffDNP2cF7vJff3t1Zb7x9d7nWXK9s7CxVlhrbW5XVRmO1/cy+jbPqqzcaW5+MzZ371Vat2ao2d/fubTR2Nlv31o68AhsAAAC4Qs88/95vk4jY/+xUO0XxHECAI/4w7AYAgzQ27AYAQzM+7AYAQ1M6cwl7CBh1yRnzTw7e6VwrjF9dTnsAAIDBu/3hk/f/J4p5Z18bAP6fGesDANfP0bt7U0NrB3D1SucdAXhr0C0BhuV9nY+nes3v+fCOPu7/d64xZNm5GgYAAAzMdDslaaU4Tp+ONK1UIp6Ox1k5SsnKWr02W5wf/Gam9FRenmuvmZw5ZhgAAAAAAAAAAAAAAAAAAAAAAAAA6MiyJDIAAABgpEWkf0raT/OPuD3z0vTRqwPH3vr147d+eH+x1dqei5hI/jaTT5qIiNaPiumvZF4JAAAAAMM1lf/pnKcXn3PDbhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo+bRw3eWDtJVxv3L5yOi3C3+eEy2PyejFBE3/p7E+KH1kogYG0D8/Xcj4la3+Ek8zrKsXLSiW/ypS45fbm+a7vHTiLg5gPhwnb2X73/e6Pb9S+OF9mf37994kS6q9/4v/c/+b6zH/ufpY+Venn3ws2rP+O9GPDveff9zED/pxD8SIi+82Gcfv/61vb2uMw5V2S3+4VjV1sZWtbm7d3dtY3G1tlrbnJ+f+9TCpxdeXZitrqzVa8XfrmG+95FfPD6t/zd6xC8f7f+J7f9SX73P4l8P7j/8QKdQ6hb/zovdf39v9YifFr99Hyvy+fzbB/n9Tv6w53766+dO6/9yj/5PntH/O331Pz7z8le+8/uuc05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERet5/WBtudJyMTZy0w+IU29jEz27c7/48XqueDqJzLZRVYfjwE0Y+LE93QszlthErGf19XnPyQAADBi/nvQf9odJAAAAAAAAAAAAAAAAAAAAOAynfOxZJMR0ffCx2PuD6erAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn+ncAAAD//+8b0g8=") bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b703000000000000850000001b004000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb22}, 0x94) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000400)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x12, 0x9}]}) (async) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000400)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x12, 0x9}]}) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000140)='D&', 0x2}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) 4m9.893727056s ago: executing program 2 (id=486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x1, 0x3, 0x3}, 0x10) (async) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r9}, 0x10) (async) r10 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[], [], 0x6b}}) 4m8.979490334s ago: executing program 2 (id=500): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@init_itable_val}, {@quota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = open_tree(0xffffffffffffff9c, 0x0, 0x9001) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r3}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4042) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000380)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x2000, 0x80, 0x300}}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 4m8.937041415s ago: executing program 36 (id=500): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@init_itable_val}, {@quota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = open_tree(0xffffffffffffff9c, 0x0, 0x9001) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r3}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4042) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000380)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x2000, 0x80, 0x300}}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 3m50.838512912s ago: executing program 7 (id=711): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 3m50.783013022s ago: executing program 7 (id=715): semctl$SETVAL(0x0, 0x4, 0x10, 0xfffffffffffffffe) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) syz_io_uring_setup(0x493, &(0x7f0000000180)={0x0, 0x5eab, 0x8, 0x2, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) readv(r4, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/97, 0x61}, {0x0}], 0x2) r5 = gettid() r6 = syz_create_resource$binfmt(&(0x7f00000002c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x41, 0x1ff) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x7, 0x80000000, 0x16, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x80, 0x2, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r3, {0x67bc}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x1a, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000010000000000000000100000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018140000", @ANYRES32, @ANYBLOB="000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703e2ffcba803792000000000850000000e000000b70000000000000085200000040000", @ANYRES32=r4, @ANYBLOB="00000000090000008f14f4ff08000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0xb, 0x63, &(0x7f0000000440)=""/99, 0x41100, 0x8, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xa, 0xfffffffd, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000740), &(0x7f0000000800)=[{0x4, 0x1, 0x1, 0x4}, {0x80004, 0x5, 0xa, 0x4}, {0x1, 0x5, 0x9, 0xa}, {0x0, 0x4, 0xd, 0xb}], 0x10, 0x7}, 0x94) write$binfmt_aout(r7, &(0x7f0000000340)=ANY=[], 0xff2e) r10 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x10) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) ioctl$TCXONC(r7, 0x540a, 0x3) sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYRES8=r1, @ANYRES32=r5, @ANYRES16=r5, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000200000001000000", @ANYRES8=r9, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4044881) move_pages(r5, 0x3, &(0x7f0000000040)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil], &(0x7f00000000c0)=[0x100, 0x80000000, 0x0, 0x6, 0x5], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) 3m49.90369817s ago: executing program 7 (id=721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0) sendmsg$netlink(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000008400)=ANY=[@ANYBLOB], 0x3908}], 0x1, 0x0, 0x0, 0x4040885}, 0x240440c5) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="020302090a00000026bd7000fedbdf250800120000000200010000000400000006006c0003020000080000000000000000400000000000000000000000000000ac1414aa00"/80], 0x50}}, 0x8000) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000004c0)='netlink_extack\x00', r10, 0x0, 0x8}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) 3m49.779114342s ago: executing program 7 (id=724): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000700000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYRES8=r2, @ANYRES8=r2, @ANYRES64, @ANYRESDEC=r0, @ANYRESOCT=r1, @ANYRES64=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r3}, 0x10) syz_io_uring_setup(0x100261a, &(0x7f0000000680)={0x0, 0x2, 0x10100, 0x0, 0x24}, &(0x7f0000000100), &(0x7f0000000200)) r4 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000300)={[{@fat=@time_offset={'time_offset', 0x3d, 0xda}}, {@fat=@nocase}, {@nodots}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7ffd}}, {@nodots}, {@nodots}, {@dots}, {@fat=@quiet}, {@fat=@fmask={'fmask', 0x3d, 0x1fe}}, {@fat=@nfs_stale_rw}, {@fat=@usefree}, {@dots}, {@fat=@sys_immutable}, {@fat=@errors_remount}, {@fat=@nocase}]}, 0x21, 0x23d, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x1c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x4, r5, &(0x7f0000000000), 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0xc73, 0x0, r0, 0x0, '\x00', r7, r4, 0x4, 0x0, 0x4}, 0x50) ptrace$poke(0x5, r5, &(0x7f0000000340), 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r9, r11, 0xfffffffffffffc01, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r12, 0x0, 0x6}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 3m49.723865004s ago: executing program 7 (id=725): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x0, 0xfa, 0x5, 0x8, 0x7}, &(0x7f0000000200)=0x20) (async) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) (async, rerun: 32) unshare(0x64000600) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m49.227324013s ago: executing program 7 (id=731): epoll_create1(0x0) epoll_create1(0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (fail_nth: 3) 3m49.146288255s ago: executing program 37 (id=731): epoll_create1(0x0) epoll_create1(0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (fail_nth: 3) 1m53.863717399s ago: executing program 1 (id=2118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r4, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20008090) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f00000000c0)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') 1m53.529105577s ago: executing program 1 (id=2125): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r1, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 1m53.425412338s ago: executing program 1 (id=2127): semctl$SETVAL(0x0, 0x4, 0x10, 0xfffffffffffffffe) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) syz_io_uring_setup(0x493, &(0x7f0000000180)={0x0, 0x5eab, 0x8, 0x2, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) readv(r6, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/97, 0x61}, {0x0}], 0x2) r7 = gettid() r8 = syz_create_resource$binfmt(&(0x7f00000002c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r8, 0x41, 0x1ff) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x7, 0x80000000, 0x16, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x80, 0x2, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5, {0x67bc}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x1a, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000010000000000000000100000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018140000", @ANYRES32, @ANYBLOB="000000000000000018", @ANYRES32=r11, @ANYBLOB="0000000000000000b703e2ffcba803792000000000850000000e000000b70000000000000085200000040000", @ANYRES32=r6], &(0x7f0000000380)='GPL\x00', 0xb, 0x63, &(0x7f0000000440)=""/99, 0x41100, 0x8, '\x00', r10, 0x0, r11, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xa, 0xfffffffd, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740), &(0x7f0000000800)=[{0x4, 0x1, 0x1, 0x4}, {0x80004, 0x5, 0xa, 0x4}, {0x1, 0x5, 0x9, 0xa}, {0x2, 0x3, 0x0, 0xc}, {0x0, 0x4, 0xd, 0xb}], 0x10, 0x7}, 0x94) write$binfmt_aout(r9, &(0x7f0000000340)=ANY=[], 0xff2e) r12 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r14}, 0x10) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) ioctl$TCXONC(r9, 0x540a, 0x3) sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYRES8=r3, @ANYRES32=r7, @ANYRES16=r7, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000200000001000000", @ANYRES8=r11, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4044881) move_pages(r7, 0x3, &(0x7f0000000040)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil], &(0x7f00000000c0)=[0x100, 0x80000000, 0x0, 0x6, 0x5], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) 1m52.545392136s ago: executing program 1 (id=2141): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000140), 0x84, &(0x7f0000000540)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESHEX=r3]) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000000880)="659962a54ab1d74840da35479fb428bd38ca9636f2ab9e2dfe4e2a30b2682003ea72e010a9e3c0e9465d835eb05a157d6fa9920c9411189114c3a6a04f310e23ad9aa4eeb44caa6616c45bf9f8d5713aad5c1167ebecf2e3e83ddf3dba72899c5dc9c0f1d0c74d7bf6ac86386676904b5a2abf00f386ebb0178230b52b1bdc855e1de1157a35b3e556225d0703b61da9f39884514b3478d418cc0c065742cf6b25ef07ed74e47cf1175b0bb915c278b77213f00d5d055956a9f5b453e5967fbdbe658fdc3c2c4cb7d9faf1d6e30990bbc63fa2bf72dcfffa4a84444f9de3e892f892ac73f83a4eb3c7fd4d52a39f3081c106cb6b4a1cb60b6128573e39d9f5", 0xff}, {&(0x7f00000004c0)="61d3a9f5a7dd", 0x6}], 0x2, 0x69, 0x707) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0xb3, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r4, @ANYRESHEX=r5], &(0x7f0000000080)='syzkaller\x00', 0x8a, 0x0, 0x0, 0x40f00, 0x0, '\x00', r6, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x8, 0x4, 0x7ffc0002}]}) io_destroy(0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) syz_io_uring_setup(0x2e77, &(0x7f0000000180)={0x0, 0x5eab, 0x8, 0x2, 0x35f}, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x469, &(0x7f0000000100)="$eJzs3M9vFFUcAPDv7G5BfnZF/AGiomgk/mhpQeXgRRMTD5qY6AGPtRSCLNTQmghpbDEELyZKwt2YeDHxL/DkiagnE694NyTEcAE9rRl2dtlud8u2u91t3c8nGfpe9+2+73dm3s6bGaYBDKz96T9JxPaIuB4RwxGRq2+wpbKk7e7cmpv859bcZBLl8vt/J+nb4vatuclq0yT7ua1SKaQflLuURLFJvzPnL5yeKJWmzmX10dkzn4zOnL/w8qkzEyenTk6dHT969MjhsddeHX+lK3mmMd3e+/n0vj1vf3jl3cljVz769cdKvOXy1WuHFuXRHUMRMVdbJ42e625nfbejrpwU+hgIK7I5IgrZ3no9hiN/aWftteF464u+BgesqXK5XB5v/fJCGfgfS6LfEQD9UT3Qp+e/1aVHU4914eYblROgNO872VJ5pRAXszZDDee33bQ/Io4t/PttukTD9RQAgLXwczr/eanJ/K8Y8Uhdu53ZvaFiRDwYEbsi4qGI2B0RD0el7aMR8dgK+9/fUF86/8ndWF1m7Unnf69n97YWz/9qd8GK+ay2427+Q8mJU6WpQ9k6ORhDm9P6WNNPTyIW0p9/fN2q//r5X7qk/VfnglkcNwqbF7/n+MTsRMeJZ25ejNhbaJZ/EoV7WcSeiNi7yj5OvfDDvsW/yddK989/GV24z1T+LuL5yvZfiIb8q5Ll70+OPhClqUOj1b1iqd9+v/xeq/47yr8L0u2/ten+X8u/mNTfr51Z8hGb7tfH5T+/bHlOs9r9f1PywaLOP5uYnT03FrEpeWfp7+sucFfr1fZp/gcPNB//u+Lemng8ItKd+ImIeDIinspifzoinomIA8vk/8ubz368+vzXVpr//Iq2/8oL+dPXfmrVf3vb/0i1cjeodr7/2g2wk3UHAAAAG0UuIrZHkhuplXO5kZHK/5ffHVtzpemZ2RdPTH969njlGYFiDOWqV7qG666HjmXXhqv18aw+n9UPZ9eNr+a33K2PTE6Xjvc7eRhw21qM/9Rf+X5HB6w5z2vB4DL+YXCtfvz75oCN7j6jONerOIDecxSHwdVs/M/3IQ6g9xz/YXDVxv83bTSue9yr8eFNYONx/IfBZfzDQOrkuf51UYjvI5Zvk6yXUFdU+KqTtxd6EGHk1seK6mFhPB/RxzAK7f5Vizhfnu+4035/MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTHfwEAAP//qO7n/A==") r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) r12 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a98000000060a010400000000000000000a0000010900010073797a3100000000600004805c0001800c0001007061796c6f6164004c00028008000440000000ad08000240000000020800034000000086080001400000001508000440000000ef"], 0xc0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ptrace(0x10, r12) ptrace$setsig(0x4203, r12, 0x1, &(0x7f0000000140)={0x1b, 0x7, 0x7}) fsync(r11) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r4, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000009, 0x4082172, 0xffffffffffffffff, 0x0) 1m52.224980782s ago: executing program 1 (id=2148): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x3, 0x278, &(0x7f0000000280)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) r3 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='cpu=&0||!') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x3000046, &(0x7f0000000840)={[{@delalloc}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@i_version}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@abort}, {@nodelalloc}, {@nobh}, {@user_xattr}, {@dioread_lock}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10b142, 0x470e0589a70ae519) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r6, 0x2007ffa) sendfile(r6, r6, 0x0, 0x800000009) 1m51.874451969s ago: executing program 1 (id=2160): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x284, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x10}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xcd, 0xc5, "dda730f807f7ec3df2a27d18833a3bc820515e43f17f2a55b143ca6d4f9646f11872e9ce3176117cc95b71d955aa310c15bcf9c906a8bc5745b5f5975489311010fca046bc2e7bdb4716e0834a3157e672dda0f446972fa88997b827af3a3ee58765438ec8466a51d8f230274fc78b47616a45f19f90d3f0df9958a3fba49a4e339e18eba6a356b2e1ae868aa6af8caf6d4b5079695e453284e831889552b436290fdf6e80b156ef4e2be54b6f3c8ae2eb2ef3ffa84a28109559879dd8e766500de72d17b69b2b03e9"}, @NL80211_ATTR_VENDOR_DATA={0xd9, 0xc5, "d09e0ca68273a3ad387beb41ec0d0f06fe5c0d7cbacf2999931f295cbe7fb776b102979e2af42a34aea2c7d3bceecfc4714fbead9fe1dd1657c111ccc2396d2d17ae139f783cdc86802b93ce3935442ea340b538dbdc9f7ffdb935312b58fd0f3dce9de855ae73bdf51618efd42f57db5792d572c30374dc1a46713da186164a527653df6dae1968afc3c4edba9d0ac4fee332d733f64268c7c89c46b25d4f6d3e5b975a47bc44cdc8776273c5ea9a08183b326fbce940a41e9258c396ac985340f8fe8f73496e439a8bf1fc349f46c50f4de91fe2"}, @NL80211_ATTR_VENDOR_DATA={0xba, 0xc5, "97dae972c705db753fa31e947f1ebda25865508273bce4fdf54d47d7f060b3c41f70972bbd1bbf3af2309b14a9f7de88c83c74903b845d33f42774b2d9e3279a43f932677e2949fdc7a2b56d4dd49a63c00ac99556a26e12afc9c8a20697b8b027d74be938fee6019b47c81ba77d7d8ff63f5d82cc765300219c699a7e21515ea8990648413be47df7d23bdcc82a0d99487011f3656a130338cefe7f912afef3a04d5418d99e4f623b622894252a539432d045f0df27"}]}, 0x284}, 0x1, 0x0, 0x0, 0x40}, 0x24004004) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x8, 0x1000, 0x5, 0x2604a, r0, 0x40, '\x00', r1, 0xffffffffffffffff, 0x3, 0x5, 0x4, 0xf}, 0x50) setrlimit(0x8, &(0x7f00000004c0)={0xfffffffffffffff8, 0x9}) connect$pppl2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @remote}, 0x1, 0x2, 0x2, 0x2}}, 0x26) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@float={0x5, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000580)=""/241, 0x28, 0xf1, 0x1, 0x10000, 0x10000, @value=r0}, 0x28) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x40000, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x9e0, 0x10}, &(0x7f0000000740)=0xc) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000780)={r4, 0x3, 0x400, 0xd6}, &(0x7f00000007c0)=0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x11, 0x8, &(0x7f00000008c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], &(0x7f0000000900)='syzkaller\x00', 0x364, 0x1000, &(0x7f0000000940)=""/4096, 0x41000, 0xa, '\x00', r1, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001940)={0x2, 0xf, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001980)=[{0x3, 0x1, 0xa, 0x1}, {0x4, 0x4, 0x10, 0x5}, {0x5, 0x4, 0x0, 0xc}, {0x1, 0x5, 0x4, 0x5}, {0x3, 0x1, 0x8}], 0x10, 0x6}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000001ac0)=0x706, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b00)='./cgroup.cpu/syz0\x00', 0x1ff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001b40)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@local}}, &(0x7f0000001c40)=0xe8) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000001c80)=@fragment={0x6c, 0x0, 0x80, 0x0, 0x0, 0x0, 0x64}, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001cc0)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0xa, 0xfffffff8, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xffffffe8, '\x00', r7, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50) clock_nanosleep(0x6, 0x1, &(0x7f0000001dc0)={0x0, 0x989680}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001e00), r9) r10 = accept$inet6(r0, &(0x7f0000001e40)={0xa, 0x0, 0x0, @local}, &(0x7f0000001e80)=0x1c) getpeername$inet6(r10, &(0x7f0000001ec0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000001f00)=0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x9, 0x12, &(0x7f0000001f40)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000002000)='syzkaller\x00', 0x78, 0xcc, &(0x7f0000002040)=""/204, 0x1f00, 0x20, '\x00', 0x0, @fallback=0x14, r0, 0x8, &(0x7f0000002140)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r6, 0x2, 0x0, &(0x7f0000002180)=[{0x2, 0x5, 0x7, 0x3}, {0x0, 0x5, 0x7, 0x2}], 0x10, 0x40}, 0x94) mount$bind(&(0x7f0000002280)='./file0\x00', &(0x7f00000022c0)='./file0\x00', &(0x7f0000002300), 0x40008, 0x0) setsockopt$MRT6_PIM(r0, 0x29, 0xcf, &(0x7f0000002340), 0x4) alarm(0x9) socket(0x8, 0x80000, 0xffffffb6) 1m51.874028999s ago: executing program 38 (id=2160): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x284, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x10}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xcd, 0xc5, "dda730f807f7ec3df2a27d18833a3bc820515e43f17f2a55b143ca6d4f9646f11872e9ce3176117cc95b71d955aa310c15bcf9c906a8bc5745b5f5975489311010fca046bc2e7bdb4716e0834a3157e672dda0f446972fa88997b827af3a3ee58765438ec8466a51d8f230274fc78b47616a45f19f90d3f0df9958a3fba49a4e339e18eba6a356b2e1ae868aa6af8caf6d4b5079695e453284e831889552b436290fdf6e80b156ef4e2be54b6f3c8ae2eb2ef3ffa84a28109559879dd8e766500de72d17b69b2b03e9"}, @NL80211_ATTR_VENDOR_DATA={0xd9, 0xc5, "d09e0ca68273a3ad387beb41ec0d0f06fe5c0d7cbacf2999931f295cbe7fb776b102979e2af42a34aea2c7d3bceecfc4714fbead9fe1dd1657c111ccc2396d2d17ae139f783cdc86802b93ce3935442ea340b538dbdc9f7ffdb935312b58fd0f3dce9de855ae73bdf51618efd42f57db5792d572c30374dc1a46713da186164a527653df6dae1968afc3c4edba9d0ac4fee332d733f64268c7c89c46b25d4f6d3e5b975a47bc44cdc8776273c5ea9a08183b326fbce940a41e9258c396ac985340f8fe8f73496e439a8bf1fc349f46c50f4de91fe2"}, @NL80211_ATTR_VENDOR_DATA={0xba, 0xc5, "97dae972c705db753fa31e947f1ebda25865508273bce4fdf54d47d7f060b3c41f70972bbd1bbf3af2309b14a9f7de88c83c74903b845d33f42774b2d9e3279a43f932677e2949fdc7a2b56d4dd49a63c00ac99556a26e12afc9c8a20697b8b027d74be938fee6019b47c81ba77d7d8ff63f5d82cc765300219c699a7e21515ea8990648413be47df7d23bdcc82a0d99487011f3656a130338cefe7f912afef3a04d5418d99e4f623b622894252a539432d045f0df27"}]}, 0x284}, 0x1, 0x0, 0x0, 0x40}, 0x24004004) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x8, 0x1000, 0x5, 0x2604a, r0, 0x40, '\x00', r1, 0xffffffffffffffff, 0x3, 0x5, 0x4, 0xf}, 0x50) setrlimit(0x8, &(0x7f00000004c0)={0xfffffffffffffff8, 0x9}) connect$pppl2tp(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @remote}, 0x1, 0x2, 0x2, 0x2}}, 0x26) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@float={0x5, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000580)=""/241, 0x28, 0xf1, 0x1, 0x10000, 0x10000, @value=r0}, 0x28) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x40000, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x9e0, 0x10}, &(0x7f0000000740)=0xc) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000780)={r4, 0x3, 0x400, 0xd6}, &(0x7f00000007c0)=0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x11, 0x8, &(0x7f00000008c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], &(0x7f0000000900)='syzkaller\x00', 0x364, 0x1000, &(0x7f0000000940)=""/4096, 0x41000, 0xa, '\x00', r1, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001940)={0x2, 0xf, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001980)=[{0x3, 0x1, 0xa, 0x1}, {0x4, 0x4, 0x10, 0x5}, {0x5, 0x4, 0x0, 0xc}, {0x1, 0x5, 0x4, 0x5}, {0x3, 0x1, 0x8}], 0x10, 0x6}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000001ac0)=0x706, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b00)='./cgroup.cpu/syz0\x00', 0x1ff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001b40)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@local}}, &(0x7f0000001c40)=0xe8) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000001c80)=@fragment={0x6c, 0x0, 0x80, 0x0, 0x0, 0x0, 0x64}, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001cc0)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0xa, 0xfffffff8, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xffffffe8, '\x00', r7, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50) clock_nanosleep(0x6, 0x1, &(0x7f0000001dc0)={0x0, 0x989680}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001e00), r9) r10 = accept$inet6(r0, &(0x7f0000001e40)={0xa, 0x0, 0x0, @local}, &(0x7f0000001e80)=0x1c) getpeername$inet6(r10, &(0x7f0000001ec0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000001f00)=0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x9, 0x12, &(0x7f0000001f40)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000002000)='syzkaller\x00', 0x78, 0xcc, &(0x7f0000002040)=""/204, 0x1f00, 0x20, '\x00', 0x0, @fallback=0x14, r0, 0x8, &(0x7f0000002140)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r6, 0x2, 0x0, &(0x7f0000002180)=[{0x2, 0x5, 0x7, 0x3}, {0x0, 0x5, 0x7, 0x2}], 0x10, 0x40}, 0x94) mount$bind(&(0x7f0000002280)='./file0\x00', &(0x7f00000022c0)='./file0\x00', &(0x7f0000002300), 0x40008, 0x0) setsockopt$MRT6_PIM(r0, 0x29, 0xcf, &(0x7f0000002340), 0x4) alarm(0x9) socket(0x8, 0x80000, 0xffffffb6) 52.218515145s ago: executing program 4 (id=2821): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 51.970957369s ago: executing program 4 (id=2824): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x200}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xdf40}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) write$char_usb(r5, 0x0, 0x0) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x2, {0x0, 0xc25ecb9d809030cb, 0x2}, {0x1}, 0x2}, {0x3, 0x2, {0x1, 0xf0, 0x1}, {0x1, 0x0, 0x1}, 0x0, 0x1}, {0x2, 0x2, {0x1, 0x0, 0x1}, {0x0, 0xff, 0x4}, 0x0, 0x1}, {0x1, 0x2, {0x0, 0x0, 0x3}, {0x1, 0x1}, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x3}, {0x2, 0xff, 0x4}, 0x2, 0xff}], 0xa0) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3}, 0x18) sendmsg$can_j1939(r4, 0x0, 0xee) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r3, {0xa, 0x9}, {0xb, 0xfff3}, {0xffff, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") 51.743639454s ago: executing program 4 (id=2829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000090000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)="1d32d83a27ec25cb4b5a61bbb42d1fafe4f7e485269cd7be31e410a22129403c7449c60966b7e5406aa41fb5340a3fd72ffc84f991", 0x35}, {&(0x7f00000000c0)="373faea428e424d043d0c31a913c497a01da9e5ba370d55ad5f21086f9fb27dfc4651c8002019b52ba8edfce5f817779c4885bc13c3614b94c668fb6c35dd01f86a075f4fc1c0a4ab24b29ffe9cb5a605a7eb1b2c67f4e61c209f5d56ca408c89accd253511fb707cd213bee6782822ac45a5e06af5894074cc07bb030f94573386a5d0b5d382686cc50e145114b567f4e9aace9bd7cf26389cb3eae14fd039e496245e95530229b8c77332e4da3204323fbce3fd7455bc4c3d3d370c599536065162996c9e8d48ab202a9bfa64fe15db07bb93fb3e652b4f3acfbc42db6d748269b9c876d8009ce", 0xe8}, {&(0x7f00000001c0)="5d065e486a56d723a02beac6ee956c6be6af50abb3829bf140e7dd676943434a3640d69fdd25da16387c978af0280f9321bd10ecf8b56b2ff7bf8405e90ebad093636b8ff32f943ac763bf44ce8cbffe0d2da035dcf5c7ca4b6a85d3b41b4589825fcb354f4fe3f7364ef2a59c9b17d6e56c9aabb8bb6c18f34c16c39b548a2dc9d09d87264afd52b9c04a0853d11f5f8f94deb609b3d9273e29d4fcb861e7e8c404e22cb66ec7c4e1ab85ed26798458ecab6efe1906a1e6be887a96", 0xbc}, {&(0x7f00000003c0)="a8dd5fc30295a7d4196e56646ab5bc73b020aa49c9b85e72e64fa84d7af663500eaa2a3712b7ecdfbad6d9da8dfa3d4d4d4df8d7b2eccef5de12b34695ebfdd64e333d80f2919455ed1262ce9d4601a6aebfe1746c63a6c03ed7cac28811cebe0e63366db3", 0x65}, {&(0x7f0000000540)="328fc67de10fa88eaa7ce89d3c0a82c8b3d71d79cda723004abb0ee2db38521727e425df33e9e1f33ff62f3a29c0d840365cf0a4fcb91752c864c513e1a080147cfe55a95c02b0a03e1a48c4b36c8ffe88201b73c2e86c5f326721b514ad9359c7bc642171988e651026c5f77d4c8b677e54bb5c9dc2e2b0eebf110b587b920f9a63753d8d481ff09eab21d402b256e3bbc1feb5d0a072a38442b805ce5997b754ac3ed6db59db933b1581678b9c6179276a8d0e6b37d7f86217a32d748e12bd7895a73c54c6b6df013ea470aa4a224aea170fff605a4b1f935f984f5701867bdf", 0xe1}, {&(0x7f0000000440)="aa1eb73c856331401e3bf4d93e434384692abe35d4fb6302b88f5e7400151d26874be5a22fd4fc89cd18924b78fb779a089311514e50ccc9faec853c0866be6f2ec0541ec57772e52b02d3ef9f94642ead49fe9d50465577a58098fbe06247b6939126833978b570c6633b715463dcbc13a046fbd67ff1e7a1d847a53604b7a564eaf80081f0780eadc919c3518740690b7f525ef8749154eaace0c62ee213ff2a2982e0be", 0xa5}, {&(0x7f0000000640)="e74d425c5a05e949f2a88ea973fd76562451954e1a0ab4a3526cb74988f0dc64be89c5b0aba0c3027230e3085d0bb3088dd69ab333e8b595623c573687f6f6593727673afca269", 0x47}, {&(0x7f00000006c0)="ae9fa30520d0261911e72c959dfd26dadfa30b3ecd97695da26d3a6716257848846019e42733d5c5100d4895a7ad39269d6e567f442dbb170144c4a963971deb9cf34c590c0f41baf74c2251d5059445e15f9f47287eb5c9e2634ebcad535b2b97a25102f76477c058c10201630175aff0ac5c32bbc1db4b41d7d3ab25cfc8615035e670e569ede8456e011ae0bdccbb2ef077be1c2ef223a1fa7d547e854d87ea42bb8fd3534700e140a876667453ec72925528af", 0xb5}], 0x8, 0x0, 0x0, 0x8000}, 0x40) 51.639194026s ago: executing program 4 (id=2830): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100062, 0x0, 0xfffffffc, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="02030003100000002cbd7000fcdbdf2502000900080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001090000000000000002000100000000000000070c0000000005000500000000000a000800ffffffff000000000000000000000000000000010700"], 0x80}, 0x1, 0x7}, 0x0) 51.611928667s ago: executing program 4 (id=2831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x18, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f00001bb000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, r3, 0xe0930000) sched_setaffinity(r1, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x57dee456f617327e) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0x8, 0xd215) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRESDEC=r2], &(0x7f0000000240)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r8}, 0xe) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpu.stat\x00', 0x275a, 0xe00) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 49.759053473s ago: executing program 4 (id=2844): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x28020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x8, 0x9}, 0x220, 0x0, 0x800, 0x0, 0x3, 0x2, 0x2, 0x0, 0x0, 0x0, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x56, 0x4, 0x0, 0x0, 0x0, 0x4, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x295, 0x32, 0x5, 0x9, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001d80)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) open(&(0x7f00000001c0)='./file0\x00', 0x500, 0x40) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000001700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001280)="57c5", 0x2}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f0000000240)={r9, 0x2}, 0x8) r10 = socket(0x18, 0x5, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') connect$pppoe(r10, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) sendfile(r10, r3, 0x0, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 35.467919154s ago: executing program 39 (id=2844): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x28020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x8, 0x9}, 0x220, 0x0, 0x800, 0x0, 0x3, 0x2, 0x2, 0x0, 0x0, 0x0, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x56, 0x4, 0x0, 0x0, 0x0, 0x4, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x295, 0x32, 0x5, 0x9, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001d80)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) open(&(0x7f00000001c0)='./file0\x00', 0x500, 0x40) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000001700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001280)="57c5", 0x2}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f0000000240)={r9, 0x2}, 0x8) r10 = socket(0x18, 0x5, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') connect$pppoe(r10, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) sendfile(r10, r3, 0x0, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 2.103666539s ago: executing program 8 (id=3421): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x7}}, './mnt\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffd, 0x0) syz_usb_disconnect(r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x9, 0x8, 0x0, 0x7ffc0000}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") unshare(0x22020400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r5, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) munmap(&(0x7f00007a4000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x1000) syz_pidfd_open(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.734944086s ago: executing program 0 (id=3432): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240), 0x1, 0x55f, &(0x7f0000000c80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp']) 1.712951057s ago: executing program 0 (id=3434): semctl$SETVAL(0x0, 0x4, 0x10, 0xfffffffffffffffe) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) syz_io_uring_setup(0x493, &(0x7f0000000180)={0x0, 0x5eab, 0x8, 0x2, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) readv(r4, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/97, 0x61}, {0x0}], 0x2) gettid() r5 = syz_create_resource$binfmt(&(0x7f00000002c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x41, 0x1ff) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x7, 0x80000000, 0x16, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x80, 0x2, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r3, {0x67bc}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x1a, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018140000", @ANYRES32, @ANYBLOB="000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703e2ffcba803792000000000850000000e000000b70000000000000085200000040000", @ANYRES32=r4], &(0x7f0000000380)='GPL\x00', 0xb, 0x63, &(0x7f0000000440)=""/99, 0x41100, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xa, 0xfffffffd, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740), &(0x7f0000000800)=[{0x4, 0x1, 0x1, 0x4}, {0x80004, 0x5, 0xa, 0x4}, {0x1, 0x5, 0x9, 0xa}, {0x2, 0x3, 0x0, 0xc}, {0x0, 0x4, 0xd, 0xb}], 0x10, 0x7}, 0x94) write$binfmt_aout(r6, &(0x7f0000000340)=ANY=[], 0xff2e) r9 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) 852.818404ms ago: executing program 3 (id=3446): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000000)={'bond_slave_1\x00', {0x2, 0x4e23, @loopback}}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f000801}, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, 0x0, &(0x7f00000006c0)) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$peekuser(0x3, r4, 0x80) prlimit64(r4, 0x9, &(0x7f0000000700)={0xfffffffffffffffc, 0xf}, &(0x7f0000001980)) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x14, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000340), 0x8, 0xd3, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r10, @ANYBLOB="08000200", @ANYRES32=r12], 0x40}}, 0x4008054) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) sendmsg$xdp(r15, &(0x7f0000000800)={&(0x7f0000000100)={0x2c, 0x8, r14, 0x3f}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000240)="bb5f7e4249b2484d06d4352dcbf3cba5da8d9472eb7eb54cdf76e1a7fc63c5998a3f7d6f3bb88b3658ddeb2a", 0x2c}, {&(0x7f00000003c0)="e4c2e401fdda83693e74485f122ea59b611b91eb6124ffb1281cb522647a11079e8150c7be5fa3c7317180fa644049837ea2287ba2697414356ab07ba76e19ff6eb97fa8cbe9f145db38e06a66a426f064ba4d76095965d09df1469337abdbece3ff2503b5504e", 0x67}, {&(0x7f0000000880)="178403f5d99c370e38fde9e097a955d6f4116ab0063394d329540c2da04e624fc0d5b3345af94e4aa8a5321e43b06948b98b0452bb2f7ab1197d32ee4f6b13191decfb9386958c9ec368658000344a71394ede24f76299b392a7f7d51fc3bef8b9b2f2a3d2c4bc01afad3e508abab8eefd3ee267611f7148e4425c8c419bf75d17706877caeca1835614873b8d09625a61611a8edbfef8224d498c3b09f9fcde3549b05346396907dec8907ab0559eeabec8951e4381f1c928b5e75937f417d50f3945ea5f5511962a6bb10edb2135349b9c1ca391eeec9c2b23641dcfc84b994e459b1ce72275570c09284633656b23efec2d69232eb2a2bb546aff3431c193bdd68b5731c7124b2c9d3244ee75f25f5ec0dfe7cee3791ec5564fa58c7d1104c4e875dca8046b5ff0395baaed01b2e602e625d995c0b423b973dc84fff3e86aa328c01599b3e6642aadb5627a1eb0313d656a3c82eb91555d75f33c95f7a7908bb2f69fe76ce1fd990ce429300d99813e34ccbb4b48d8ff165dfac4a617c888145b31534e255261fcc6ddd4b90c41d3915b476cc4acf57c2f5d02b87144046d61b738b3dbd25a126aabdb72a8969b485c87b5efcf678601fbbb4af08a61f5c64b1f7dd023703c50486afe9aa284faeb0b3d0438b6052f9e2b9c562fc42801ab16439980682b792c1a9a5f1ca80521298579e71284cbe459590ae4abb072dab382021ad304854a448d1d786ab15c4d76b521519c5fd0486313eafdd60b1fe77359c301296a4d86a19968bfc3bac2e8c1806c568fdc17bdea08bc234df0c8399350698b4bc9f97b019ac2cd41549ce52ffddbd49c027cb20b67dffe03cb05b4c8b5415b44d8bafaca5346568ae6eace9ca1f662fdd27c400b51a53a8578935c5957f16927b49a9281a5487c3d751060811318aded82c8d66bde2eb52c3fcc265fc08ceecd02504bb9e594de03ecbcb63ebb40dc2f167585ecb96281fa35668f55fa4f2b87b38b6935af390bd5ab424ff3052e87dfef94b82193a4f640359ae2125b73b4cf25588886b2b2d8e3392682630d30d1747e614ec675a6d66916a4e3577235cc2d4beed3c321e98594014e5d997b18205e54f64f72f97577b05ec8315daffa0bb1f1706773cec4f9d8f84154820f7666931856e9b1c5fd858f8b065c36071b893db1516fcaf3310257b35bec287f7ed3af7a7b9c375604c201721630a2058832056314c8dea99a23ed79be65138995282a2751d8bf20a2ece308f7ef938417d20b023ddc3144ad5027862a7a5f3f7ccbffe768bd4bf481cc7c305e7a04a9d32d47a0692d00199491304bf0fe64c42ac871b893a6a82fd8d174fb944c42f0b1dfc39cf7721ef89d8cb108cee8cd8ac60a76cf8c8b7f93a9feb2ed73cb634f3781d50442f6b5e87078b04d776d736da3e0787c1ad4b8e4b56a4a283d94e41a46e3ad46d873b97250187e00b1ec40de27259b95d2f0ce7e6cd90ff5f715a8b8f9e843ce914797dcf80f193459b43c9ab433c2b6210e921025f3bd00f9ed6bc5a8f7cfbe9183034c25192d94ac2fe1afef2d0d0996aac8d5d8ddb2ca8e0f6e2a9a52d734c5bf2954cf6f735ec08ce5c3572591d5ac78dbc9a7712f0d6031bfd68abf9277aef37128e065a6a5f1b970ffdaa7ae22c028e4ed68fb41f0bfbecac8cac894f9636a570ec1c22118158d77df7e7030c4537595df17975c3600b8b3a5206ea12bb25df9ef8563b85fc930ee3852afb23fdd02c3c433230445642840bff3edbe11610d31c810e674c24df5de7cfc24049edaadd5e39d9db87c73d62dff5c70e2c9c7d4b94cc3b85706df7c4f24f776fa22ccc52d1bf34b4ee58f07e78f09aed827fe079f088a41855245eb1bd740d9d8d887b3da3cd33845b4166b0fb04e83581a3ea8c144e8092de4835cfa9b961d75300c58f9aa238e2fd27803a1167b1d79fbdc5accb15a6cde0127278a874af8a6ce8438b99ecb7fcd3b901e3be0cf0817013d2046a0c27f697162e341353c1dd7e96160b86fad6ff1ac0127c18b881758ff918a1c16f0bfae9cdce83d499c79430f959ac15cd0c3353748b893001283d3448c321f2f0305111b9b134149cd4a96f204727e9bdc696baf4f5cb5060b5db1f01c0e4771145aa92fbfc467bc8af3d527ceac02b2948c17d23d529fb2aa43c56dcbdbc76974cee8a87ad79b58c8ce29766f7003921e37b3eb52216c0103ba12f194eabdcaa7a5531dce5c91ae99807e65b37e9b48073d2ff81da93a525815dd1ace3c9b4bb48486bc218ad9b390c7ff73eff68c77af33316a786777407f43634ea4c6ca49c3a28ee1bfb8e2c93c17b24bebabd8388b6962d617d0e0836f8ec738151c14b1aee5b427f0cdb8f01391be3810cf316b948080635ecda8ea2d0bdc686c65acdd88db039edce3d7b1b99621efaa5960f4f3a28a3cab4b13d79b73ae08cfbfef90cb4422f6c42e7bea25a35980bd68fcc6a13312724d5ae9cc0860c244e5769b5f00820e5d69bf5b8fadb97f711801fbb06c554a69ed8a8d32851eec399226bbc475b6a42d60b4311d22da0719e260badf01d104e8602e7dbbc669fadcd4686089f5d6967d1c415abeb0b6faf0f458aef0eeabeab8450e1c859c5891df73e446ab2f7b007ceefc2536775cb4b8c8a32039e96d00fa934f8936237390c747a8435030063910e6c88c6eb679652f13d1e1bd9511871de9a747ec78143fb1538bb4637910bba7c132a7205d48664eecf058e8eaf399cb92007d07736babfce1d2141974c16404c058693f07a33ce9c1650fd06cb8ae7ca27efa53ce3391fe49760bba61d2a4b16436d25ed042423240885ebb0f9980b214000e4af33ca596a10308bf460aa474558e9026e9e04923a49ee549cef22f10852b4be4a706b911fc3517ec701af227522ad329acc92e81d353828b88abeeede5f3b443a0f61f944b0190bee413eca0fca2784b055d5cfe4f52033cf26186e5d9d147651c61a616fe3cc9c34b97dba97cadcba6787280608c7596db37474e3dcf8dafd07a3cca7f938f0d9408d1157bd12fa752044ce9ff384b3b6287e4f28c3253ca8f29c96bfa1ad19b8962e82e567a7a55e16cf67af22feed3bba0a909d950fb84ff363a63348b883b0d6c70b0bb556cb30ecf73df9af36e4ac34ca62cdd6c3799e8836bf1e0af8bafd372fb9a6e348447366b817f7da922ae9624c3a8bb8144ba42ec977a574f553a0ca0c3c0707fcdf022dcb175b666d26e9d3fc76e0241fe78bd32c649b688517c6d25d2900bf35cdc047ac8f5646a5c290b8ffa579e7265026e9d5bd1fe41c3e34ecfaaa2b21b61dedae7fa77dcfc47c731f1f6853afbe56e80abc8a14274eab104bf01bef0a53561f51f9cd3bf17faec35189601c8330adf51c564ab1386473a0c91dc74aef200aad1aa8255ace04e6f0e660dba76a94fea6ebcfe28bd6899d430381e610fcd8c127b4624b96052c8c289354da1746596fff23afed6edd6769a0337a025f7d57632fc5ceaf32cd8abc1247a6d6a440bdfa2d6815f3b264337be7ac986b713a6f8a64f62e99b05b1904944e4fa1883157c71c04aaa33d3085e8528a7e06b6aed2864178a52e66648a73e24003a8f5370fcd4648e87ae56897aece35ea4cb2e5baa3e80606eaf0a1c9821e926d34e328aedb0aa380cc63fdb76178bde33abbbd444c3d2b1df8e12879f7ef3e74f5cb6b32aacd1168d9118df05060d3c966adbc88c0c5861f5eb46e1593380f6ee11431bf01a08fbd9adcff42fe65c500bbd53f207338c1af4e67f6609d3c2b780ca5aa1a6444bc8ca16a1ad710d532153adb719219af0cc18fc78106cd5c791bf043be015f12eddec3ab79d1b8b0d2110f61d21303d7764ba5e62636c51d24a85ddf5848446ac38266a87bce640caf690e93c73b231a6236a5f74717e99455ebc12e9667188d019cee3b5d74d1aac2d135093fe6a5ddeb7c59c62c1dc1926d1b0babb6572289a52ee8771ee84b4ab94b0f6e4bf230ba4d86d22a2c5d33e39898b823866f493c1ec524f5e96cb6b93e4c14183b7d2231c2cb7897062890c3c4e87ee2c008f86af692c37dd68c1ac1fb7a8c0db84a34d88828c44f7ea4ea346d4ab98acd9414a3e1eaaab74985dc7585286fa05a0f7f494d1f13d182b1e3a7557a8a930b8f476d0e7ecf227424a57a36c5932e5bc80812c453fa613e975a3ff49a78da99c88a245b86d5b7162c27094c84fafa971420a10cab0ac52b28a50a4a422d82a27018102dc0fcee5aa9d79e2aebf33cff62f56f12e8ed24bd62bf4a7d7b106938b5d21eea54c28c70d46aed164c0cbdf7578eccef4d22f367e99d74ff9ce87b52afd5c98dc8db272d85cdf50c6f7a88f31976e8485451a601db0a82e19fff401c362fa8c03149465d9834e08bf409e29310d44f6ab875800efe010508dfd4557ff28926ec65f8a92cee8b2b41cb9f1dc5564a611024f937f84a7e6ac5946fb30d85908db0f30e2cd72d63201eaa0d9f45718c1abacceb5c70db946ee2ca1b985f350a22da19831198e42a918a902647e747cc727b075fe7ac7c03e3ef3c910e610685197b9d7588619ef83e095b4825635a8e0043ba4b43ccb95426783da92cb998b4b05ea777fa18298e7a1af6176cb325b8d9bf7c38e34ee7e6031627819d5763a7a1ebb453080bce37e16fb856820b5254eed07a2c43834e30e3f9168fbabf467a7cabb2f8acc510aa7f95ff0eca8e66775c0523bf016df2a2e29d6a4ec2d147743a7abefcdd7465e7b9fbe023b67b3f5081df7638806e472c9acc4d12a049ab9dd5dc58f3d2f4e098c3e64de9043c15d06493462c24c6fe80e8465d675564f7dfff8008ac1820338537b5d4f2bbb53e4fde04931d3a7a1b10fbb8c6dd940e8ebd9aefdfc2c4b93794d2baf6d247057166ccfe42b0993a39a7ef89f982f640dfb2b3053e753673c73dff5e6b3a595895df0d324fdce42d5bc36588b2e615c9780e7ffaee6194c9a92ee95ed7edf32c28e201cf7288faabfbd0e3e4959912ec0a82c7588eaebd07f4521cd8b955ed655f767c05e625919f65fe2c8bd882e05a8576b075b621326faa478d78f40126ceeff78717a67823d56a2af4b1b381b14a9686a52d020209ab3580cdce90973e35c6a6872367d3ba3023b065251c595c7c5d5e3ae691f2b954c92442d6d8fb1a07d8788d130f4c5bcc82558860dec94ba401ef5e3d6e6d59ba84e39d47c0d66a7eebd02843e1aebdf32ac676c7a5150ee1d4d7001f4dd97ac2befb9cffc2b960a4d2ce1853556fc1b2ca4cadb28f4c52398e985332e6fbdd77b554e9bb2917484c8b30d2e80e667d70f2220393ce2e37eee9239000406cb411907be20f96522b874592b94cd63ae2706e1801a36a603d28365bbc1b528411eed69d6b740add706aa87d0dceb8764b291bd8414969c7b6e3ea68f2098b6e973097a3f777c40de64ae885ca6ab0f9fdebc3d0bfcb1210babf8390462e9fa0904d63d435ead92034d6f370461155e550e19148a6f5503dfea1dd78924b866fef786805201d8b9e54aec14c3ea502d585f785bd2d596683ba60724514301bbc117c6701eb876fa957a22b6df481ec7fdb4c5d6780f78693a7b1f3265ad740bf1323eae4c256fb6b904e4266b67647de37b1ef49c7da1273031c42b8aa61473854a25b9e22fb9b83786809e32b995f0bb2cc089dab47228e7c302c7ac0db942686b10629d7d89679d3762ec728231d7ae6cf229c34b8ed2a50aa44e072990f9af42a0530c30885a175be9f034a0ecbebbe4b86c62764f7011e402d6b8", 0x1000}, {&(0x7f0000000440)="eea02670b36ac83b3105cc2e7ab41e66f9be2f3fd2cba6de9c76e495880a8dc55c3971abd2f97a9154ce3a1855fb8a79a5c9c1e47c8cb73fc0c4f69bac8c", 0x3e}, {&(0x7f0000000480)="d5543ae11504b4d934e28598e8861180f5576949108907bf8da2571b1e4c64545204f0326116a8d529a58096ccab83", 0x2f}, {&(0x7f0000000580)="76bb3af0910e3fe28c08b0693f62b00dd2b36119ec4c97e688a49b2bb0aef46d44009deb047d7fdac7d4d4878f12300e6322090d52c7adb84cfdba9bda2f4d707e3fef1b4d7378a5758209a06b8c647bfa5e56c1d9cfd681054cea28a4219b1877ce18cfda56bb85d2ed675fc983d95babf9bf7624dcf33785d33d7f8d15dce66b2f34244d7eaf446f23630faa95373907081507c4f5d9980f05380b2c16fdc346a9ef4dabba2097052e7fbae9a813c6ee60cb30c89711cf1029", 0xba}, {&(0x7f00000004c0)="ec621af2c608a07e64d734f6da0a24cc979232979cbc3a8f466b4bc7789713b0b3c093d84f78b1802317db72a6309f6f84896f97e1c550686b6d16fe", 0x3c}, {&(0x7f0000000500)="ec43119010ece4832154cd62aae380c6b587ce55fdd568ccf4df7e76e6ee1e0fbe4e7bc598410964f9d66a6f70ac", 0x2e}, {&(0x7f0000000640)="a73575c046d957d04f6a939db22502dfef8b8be038b87249f9cfd20a90fe765cf1f6bd8f37b5eab1c895", 0x2a}], 0x9, 0x0, 0x0, 0x4080}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000001880)={0xf0, r5, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0xfffffffffffffc5c, 0x3, 0x3}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) 851.053854ms ago: executing program 9 (id=3447): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000800)=@urb_type_iso={0x0, {0xf}, 0x1, 0xe7, &(0x7f0000000300)="3a860fa7c5463d9c9444ae2508f3ffff38419f501b07fff6c8052ee82e2da5d589a653bd196450457a7bd81b81f76afb3b1327e9281bd4caf2407b9152a07ea0", 0x40, 0x5, 0x3ff, 0x41, 0x6, 0x7, &(0x7f0000000140)="f842d28f7e533f724d38ae1dda4a98a944ef380fc4afa08c57521ad86c7dca6ccdf3c962c9f765683e51b85023fa9a39242202340c6e597d1b58411cc1a6beb0e7edaf95b12e700735597fb351bcb5e6a6d7d76fb600a2d0546ffe5b9597164081cfeb12a9c24eee3e96f677dfda6102de", [{0x6, 0xffff, 0xfffffc0e}, {0x3, 0xfffffffb, 0x8}, {0x7fff, 0x452}, {0xfff, 0x8001}, {0x7fffffff, 0xd2, 0x7}, {0xaa9, 0x1, 0x1}, {0x800, 0x4, 0x4}, {0x8, 0x6, 0x5}, {0x47, 0xb, 0x5}, {0x4, 0x7, 0x31}, {0xcf8, 0x7, 0xa3a9}, {0x0, 0x2, 0x4}, {0x7ff, 0xfffffffc, 0x9}, {0xd7cd, 0x3, 0xdb9a}, {0x40b2, 0x200, 0x6}, {0xdde3, 0x2b, 0x5}, {0x9, 0x8, 0x6}, {0xb5ec, 0x7, 0x1}, {0x2, 0x3407eba8, 0x7}, {0x6, 0x1000, 0x7}, {0x40, 0x6, 0x5}, {0xff, 0x5, 0x28}, {0x6, 0x8, 0x1}, {0xb5, 0x2, 0x7ff}, {0x1ff, 0x3ff, 0x90c0}, {0x5, 0x2af, 0xb}, {0x1, 0x9, 0xffffffff}, {0x7, 0x7ff, 0x300000}, {0x200, 0xfffffffa}, {0x6, 0x11, 0x8}, {0x1, 0x10000, 0xfffffff7}, {0x80000001, 0x7fffffff, 0xf1}, {0x338, 0x6, 0x1}, {0x6, 0x93, 0x8}, {0xdfc, 0x100, 0x32e3}, {0x8, 0x8, 0xa}, {0x1, 0xffffff43, 0x7fff}, {0x101, 0x5, 0x10001}, {0x5, 0x86f4, 0xfffffffd}, {0x85, 0x87, 0x18000000}, {0xe893, 0x401, 0x4}, {0x7fff, 0x7, 0x2}, {0x3ff, 0x1, 0xd}, {0x200, 0x400, 0x3}, {0x7, 0x7, 0xffff8c45}, {0x1000, 0x8, 0x7}, {0x0, 0x40, 0x9}, {0x4, 0x1, 0x7}, {0x4, 0x2, 0x10000}, {0xfb5, 0x7fffffff, 0x7}, {0x80, 0x0, 0x80}, {0xf4, 0x0, 0x38308b9e}, {0x1, 0x8, 0x814e000}, {0x9, 0xa, 0x74ba}, {0x8, 0x3, 0x1}, {0x5, 0xfffffff7}, {0xfffffff8, 0x3bc1c45f, 0x7}, {0x4, 0x2, 0x2}, {0x4529, 0x800, 0x9}, {0x8, 0xfff, 0x10000}, {0x3, 0x2, 0x3e18}, {0xb69c, 0x1, 0x9}, {0x7, 0x7c4, 0x6}, {0x2, 0x53, 0x574}, {0x58ea7ce, 0x316defb7, 0x3}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c80, &(0x7f00000000c0)={[{@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@usrquota}]}, 0x1, 0x79c, &(0x7f0000001cc0)="$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") stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="080000000200000092bfff7f0000ffffffff"], 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, r6, &(0x7f0000000240)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r5, @ANYRES8=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) setreuid(0x0, 0xee01) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x400, 0x4) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 840.129784ms ago: executing program 0 (id=3448): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, &(0x7f0000001bc0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0xa1, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 762.676785ms ago: executing program 8 (id=3449): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 672.825497ms ago: executing program 0 (id=3450): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={0x0, r0}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="ddff26bd7000fbdbdf250300000008000400260e0000050005000400000008000400040000000800040007000000080003009ffe15edf055f805140004f9fe880000000000000000000000000001060005004e21000005000200210000000800020003000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r10}, 0x10) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r11, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_int(r11, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4) close(r11) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x1, 0x803, 0x0) 653.220548ms ago: executing program 9 (id=3451): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYBLOB="1bc3ce125e7f771e11802797149fa2aca6e01373553527c6b650d7180ab967ee4b713f1ddbf42ef856ebdd01265e97e8a4015082c4b2e66dad", @ANYBLOB="0000800000000300b702001014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000002000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0xfffffffffffffffd, 0x100000000, 0x2000000000000000, 0xc, 0x7, 0xffffffffffffffff, 0x7b, 0xfffffffffffffffd, 0x6ac}) getgroups(0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 593.553238ms ago: executing program 3 (id=3453): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 577.359769ms ago: executing program 6 (id=3454): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) 575.037219ms ago: executing program 8 (id=3455): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7991}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 563.922299ms ago: executing program 3 (id=3456): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) 553.374149ms ago: executing program 0 (id=3457): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\t\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r5}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x400) pselect6(0x40, &(0x7f0000000100)={0x2, 0x8000000000000000, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000180)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffff}, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000400)}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a69700005000400000000000900020073797a310000000005000500020000000500010006"], 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 484.55986ms ago: executing program 3 (id=3460): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, &(0x7f0000001bc0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0xa1, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 484.024331ms ago: executing program 6 (id=3461): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) unshare(0x2c020400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r7, &(0x7f0000002bc0)=[{{&(0x7f0000001200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}}, {{&(0x7f00000013c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000880)={[{@mblk_io_submit}, {@dioread_lock}, {@quota}, {@bsdgroups}], [{@fsmagic={'fsmagic', 0x3d, 0x4000}}, {@seclabel}, {@subj_user={'subj_user', 0x3d, '$[\xb7(^}-}%{-'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@audit}, {@pcr={'pcr', 0x3d, 0x25}}, {@permit_directio}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x30, 0x51, 0x62, 0x61, 0x37, 0x38, 0x66], 0x2d, [0x63, 0x33, 0x63, 0x66], 0x2d, [0x35, 0x36, 0x66, 0x65], 0x2d, [0x63, 0x30, 0x37, 0x34], 0x2d, [0x63, 0x0, 0x61, 0x37, 0x61, 0x0, 0x61, 0x63]}}}, {@euid_eq}]}, 0x2, 0x5ad, &(0x7f0000002340)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") 469.456511ms ago: executing program 8 (id=3462): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x800}, 0x50) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000510300000000000000000000000000273d81dde908335b32b959340ae95607c8d5aa40c02b773bcafc74fc05e73d11d3bcbf39dbe887f28e3cadc7ac80e8e47726cd799a4ecc5f99879888ffe2cd1bfac38a70e4e8b46b4468088862292c24feba5d4d3135e937703dc087695d6a"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = open(0x0, 0x149040, 0x10) fcntl$setlease(r2, 0x400, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x18a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) r3 = openat$incfs(r2, &(0x7f00000005c0)='.log\x00', 0x248200, 0x101) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000440)=@raw=[@exit, @exit, @map_fd={0x18, 0x9, 0x1, 0x0, r2}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfff}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x978}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x80}], &(0x7f00000001c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000001300)=""/4096, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x4, 0xf, 0x2, 0x8}, 0x10, 0x27db2, r1, 0xa, &(0x7f0000000600)=[r3, r0], &(0x7f00000008c0)=[{0x1, 0x2, 0x6, 0x3}, {0x0, 0x4, 0x8}, {0x0, 0x4, 0x7, 0x4}, {0x4, 0x2, 0x9, 0x7}, {0x0, 0x4, 0x7, 0x3}, {0x4, 0x3}, {0x0, 0x1, 0x5, 0x1}, {0x0, 0x3, 0xe, 0x7}, {0x3, 0x3, 0x6, 0x3}, {0x1, 0x3, 0xf, 0x5}], 0x10, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r6, &(0x7f00000024c0)={@val={0x0, 0xf8}, @val={0x0, 0x0, 0x3}, @ipv4=@icmp={{0x5, 0x4, 0x1, 0x16, 0x1c, 0x65, 0x0, 0x4, 0x1, 0x0, @remote, @broadcast}, @address_reply={0x12, 0x0, 0x0, 0xffff}}}, 0x2a) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r8}, 0x18) (async) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x3b, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) (async) perf_event_open(&(0x7f0000000540)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, @perf_config_ext, 0x1205e, 0xce3b, 0x0, 0x4, 0x0, 0x40, 0x0, 0x0, 0x2df619b0, 0x0, 0x1000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) recvmsg(0xffffffffffffffff, 0x0, 0x100) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) (async) fcntl$setlease(r2, 0x400, 0x2) (async) syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00') (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)={0x24, r11, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0x2}]}]}, 0x24}}, 0x0) 466.445961ms ago: executing program 9 (id=3463): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x12, {0x2, 0x4e21, @empty}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$eJzs3c9rJFkdAPBvdbpjMpOZZNWDLrj+2JXMoNOdbNzd4GFdQfS0oK73MSadENJJh3RndxIWN4N/gCCigie9eBH8AwRZ8OJRhAU9KyqK6IwevDgl1V2dmWS6O5mZnnQ2/flAdb2qV1Xf9zqp6npVj6oARtYnIuK1iLiXpun1iJjO5xfyIQ7aQ7bc3TtvL2dDEmn6xj+TSPJ5nW0l+fhyvtpERHz9KxHfSh6O29jb31iq1ao7+XSlubldaezt31jfXFqrrlW3FhbmX158ZfGlxbmB1PNKRLz6pb/+4Ls/+/Krv/rsW3+6+fdr386KNZXnP1iPR1RsfU50z2xXvXQkO1th5zGDnUfFVg1zk92WGHtozu2nXCYAALrLzvE/GBGfiojrMR1j+eksAAAAcHGkX5iKsSQi7W68x3wAAADgfaTQ6gObFMp5X4CpKBTK5XYf3g/HpUKt3mh+ZrW+u7XS7is7E6XC6nqtOpf3FZ6JUpJNz7fS96dfPDa9EBHPRMT3pydb0+Xlem1l2Bc/AAAAYERcPtb+/890u/0PAAAAXDAzwy4AAAAA8NRp/wMAAMDFp/0PAAAAF9pXX389G9LO+69X3tzb3ai/eWOl2tgob+4ul5frO9vltXp9rfXMvs2Ttler17c/F1u7tyrNaqNZaezt39ys7241b673ekM2AAAA8LQ98/F3/5BExMHnJ1tDZvx0q55yMeC8Kh6mknzcZbf+49X2+C9nVCjgTIwNuwDA0BSHXQBgaErDLgAwdMkJ+T077/w2H39ysOUBAAAGb/ajve//F/quedA/Gzj37MQwutz/h9HVuv9/2p68ThbgQik5A4CR98T3/0+Upo9UIAAAYOCmWkNSKOeX96aiUCiXI660XgtQSlbXa9W5iLgaEb+fLn0gm55vrZmc2GYAAAAAAAAAAAAAAAAAAAAAAAAAANrSNIkUAAAAuNAiCn9Lft1+lv/s9AtTx68PjCf/nY78FaFv/fiNH95aajZ35rP5/zqc3/xRPv/FYVzBAAAAgJHwSC/w77TTO+14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiku3feXu4MJyz6ziDj/uOLETHTLX4xJlrjiShFxKV/J1F8YL0kIsYGEH8y+/hIt/hJVqzDkN3iTw4g/sHtvvFjJv8WusW/PID4MMrezY4/rx3b/44cWLrvf8WII9OPq/fxLw6Pf2M99v8rp4zx7Hu/qPSMfzvi2WL3408nftIj/vOnjP/Nb+zv98pLfxIx2/X3JzkSq9Lc3K409vZvrG8urVXXqlsLC/MvL76y+NLiXGV1vVbNP7vG+N7HfnmvX/0v9Yg/06f+VyPihVPW/3/v3brzoXay1C3+tefz+Encj/+bn+ZLPBy/kP/2fTpPZ/mznfRBO/2g537+u+f61X+lR/1P+vtf61/t8U7i+te+8+f+iwIAZ6mxt7+xVKtVdy5sImuln4NiSOSJ8XP0X/fOQDeYpmma7VNPsJ0kzsPX0koM+8gEAAAM2v2T/mGXBAAAAAAAAAAAAAAAAAAAAEbXWTxO7HjMg8NUMohHaAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMT/AwAA//+VPdXC") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000e3662606000700000000000700"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000ec18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0x3800, 0x1) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setpriority(0x1, 0x0, 0x9) 375.709823ms ago: executing program 6 (id=3464): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a0088a8bbbbbbbbbbbbaaaaaaaaaabb81002a0086dd6354f023005806"], 0x96) (fail_nth: 4) 87.092428ms ago: executing program 3 (id=3465): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x88c, 0x30, 0xffff, 0x4, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x8, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x22, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x27ffdbfc, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0xeeb, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400, 0x8, 0x0, 0x0, 0x0, 0x81b, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x49, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0xffffffff, 0x0, 0x40, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, 0x4, 0xfffffffe, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xf853, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x2, 0x0, 0x100, 0xfffffffc, 0x0, 0x0, 0x1ffc, 0x0, 0x0, 0x0, 0x55, 0xfff, 0x1000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffff9c, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x100000]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x7, 0xfffeffff, 0x3ff, 0x8, {0x4, 0x0, 0x400, 0xff32, 0x7fff, 0x7}, {0x7, 0x2, 0x5, 0x8, 0xd3, 0x766}, 0xfeea, 0x4, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0xc, 0x7ff, 0x9, 0x3, 0x80000000, 0x6, 0x3, 0x2, 0x1, 0x80000000, 0x2, 0x4, 0x80, 0x5, 0x3, 0x5, 0x9d, 0xfffffffe, 0x2, 0x8c, 0x80000001, 0x6, 0x7f, 0x2, 0x0, 0x5, 0x76, 0x3, 0x2, 0x7, 0x800, 0x0, 0x10000, 0xf0, 0x8, 0xb8, 0x151, 0xfff, 0x6, 0x9, 0x401, 0xfffffff8, 0x5, 0x8, 0xfffffffa, 0x4, 0x7, 0x8000, 0xf9, 0xfff, 0x7fff, 0x1, 0x0, 0xff, 0x5c0078f0, 0x7f, 0x1, 0x2, 0xfffffffa, 0x8, 0x7, 0x7, 0x7, 0x6, 0x80000000, 0x5, 0x4, 0x3, 0x6, 0xffffffff, 0x10000, 0x5, 0x6, 0x3, 0x2, 0x1, 0x8, 0x3, 0x74, 0x4, 0xfee, 0x401, 0x5, 0x5, 0xfff, 0x8f4, 0x3, 0x8000, 0x2, 0x6, 0x1, 0x1ff, 0x9, 0x1, 0x6, 0x9, 0xc, 0x0, 0x80, 0xe, 0xd, 0x6, 0x8, 0xfffffffe, 0xef, 0x2, 0x3, 0x1f, 0x7, 0x9, 0xb7d, 0x2, 0xfffff001, 0x2, 0x0, 0x10001, 0xd5b, 0x5, 0x0, 0x1, 0x7, 0x3, 0x7, 0x8, 0x1, 0x4, 0x8, 0x101, 0x200, 0x6, 0x80000000, 0x5, 0x2, 0x2, 0x7fff, 0x5, 0x6, 0x3ff, 0x7, 0xffff935a, 0x8, 0xf64, 0x0, 0x4, 0x80000001, 0x3, 0xfe000000, 0x3, 0x2, 0x8, 0xba, 0x400000, 0x3, 0x8, 0x7, 0x5, 0x2, 0x400, 0x7, 0x1ff, 0x1, 0x746, 0x2, 0x6, 0x0, 0x1, 0x6, 0x53a, 0x5, 0x8, 0x6, 0x8, 0x3, 0x7ff, 0x6, 0xf, 0xa, 0x3, 0xfffff000, 0xdae4, 0x5, 0xa, 0x5, 0x7, 0x2, 0x1000, 0xe, 0x4, 0x0, 0x6, 0x1, 0x0, 0x9, 0x5, 0x10000, 0x3, 0x2, 0x7ff, 0x4, 0x5, 0x4, 0x4, 0x0, 0x80000000, 0x80, 0x5a78, 0xf96, 0x7, 0x6, 0x80, 0xc, 0xfffffff9, 0x7, 0x4, 0x5, 0x4, 0x9, 0x2, 0xffff4fba, 0x5, 0x3, 0x800, 0x93, 0x3, 0x3000000, 0x8, 0x80000001, 0x6, 0x6, 0xde4a, 0x9, 0xd, 0x10001, 0x4c, 0x8, 0xf0, 0x0, 0x5, 0x9, 0x4, 0x2, 0x8, 0x3, 0x2, 0x5, 0x9, 0x2, 0x4, 0x9, 0x7, 0x5, 0x10001, 0x8, 0x9]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 54.273669ms ago: executing program 3 (id=3466): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 53.568149ms ago: executing program 9 (id=3467): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 36.973309ms ago: executing program 6 (id=3468): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7991}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 35.847539ms ago: executing program 9 (id=3469): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={0x0, r0}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="ddff26bd7000fbdbdf250300000008000400260e0000050005000400000008000400040000000800040007000000080003009ffe15edf055f805140004f9fe880000000000000000000000000001060005004e21000005000200210000000800020003000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r10}, 0x10) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r11, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_int(r11, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4) close(r11) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x1, 0x803, 0x0) 3.60855ms ago: executing program 6 (id=3470): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\t\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 [ 290.137270][T13608] __dump_stack+0x1d/0x30 [ 290.137290][T13608] dump_stack_lvl+0xe8/0x140 [ 290.137308][T13608] dump_stack+0x15/0x1b [ 290.137322][T13608] should_fail_ex+0x265/0x280 [ 290.137347][T13608] should_fail+0xb/0x20 [ 290.137372][T13608] should_fail_usercopy+0x1a/0x20 [ 290.137486][T13608] _copy_from_user+0x1c/0xb0 [ 290.137525][T13608] ___sys_recvmsg+0xaa/0x370 [ 290.137548][T13608] ? _parse_integer+0x27/0x40 [ 290.137586][T13608] do_recvmmsg+0x1ef/0x540 [ 290.137615][T13608] ? fput+0x8f/0xc0 [ 290.137652][T13608] __x64_sys_recvmmsg+0xe5/0x170 [ 290.137682][T13608] x64_sys_call+0x27a6/0x2ff0 [ 290.137777][T13608] do_syscall_64+0xd2/0x200 [ 290.137813][T13608] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 290.137843][T13608] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 290.137907][T13608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.137926][T13608] RIP: 0033:0x7fa771d4eec9 [ 290.137941][T13608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.137959][T13608] RSP: 002b:00007fa7707af038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 290.137987][T13608] RAX: ffffffffffffffda RBX: 00007fa771fa5fa0 RCX: 00007fa771d4eec9 [ 290.138003][T13608] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 290.138018][T13608] RBP: 00007fa7707af090 R08: 0000000000000000 R09: 0000000000000000 [ 290.138032][T13608] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 290.138120][T13608] R13: 00007fa771fa6038 R14: 00007fa771fa5fa0 R15: 00007ffdcca1ba38 [ 290.138144][T13608] [ 290.407182][T13624] lo speed is unknown, defaulting to 1000 [ 290.503691][T13640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3038'. [ 290.531489][T13640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3038'. [ 290.540700][T13640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3038'. [ 290.716515][T13655] program syz.3.3043 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.740330][T13657] SELinux: policydb magic number 0x78758c does not match expected magic number 0xf97cff8c [ 290.750631][T13657] SELinux: failed to load policy [ 290.768943][T13657] loop8: detected capacity change from 0 to 128 [ 290.776612][T13657] FAT-fs (loop8): bogus number of reserved sectors [ 290.783171][T13657] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 290.792506][T13657] FAT-fs (loop8): Can't find a valid FAT filesystem [ 290.828341][T13661] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 290.929722][T13667] FAULT_INJECTION: forcing a failure. [ 290.929722][T13667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.943016][T13667] CPU: 0 UID: 0 PID: 13667 Comm: syz.8.3049 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 290.943114][T13667] Tainted: [W]=WARN [ 290.943150][T13667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 290.943162][T13667] Call Trace: [ 290.943167][T13667] [ 290.943173][T13667] __dump_stack+0x1d/0x30 [ 290.943210][T13667] dump_stack_lvl+0xe8/0x140 [ 290.943227][T13667] dump_stack+0x15/0x1b [ 290.943241][T13667] should_fail_ex+0x265/0x280 [ 290.943262][T13667] should_fail+0xb/0x20 [ 290.943280][T13667] should_fail_usercopy+0x1a/0x20 [ 290.943327][T13667] _copy_from_user+0x1c/0xb0 [ 290.943369][T13667] ____sys_sendmsg+0x1c5/0x4e0 [ 290.943409][T13667] ___sys_sendmsg+0x17b/0x1d0 [ 290.943464][T13667] __sys_sendmmsg+0x178/0x300 [ 290.943496][T13667] __x64_sys_sendmmsg+0x57/0x70 [ 290.943517][T13667] x64_sys_call+0x1c4a/0x2ff0 [ 290.943594][T13667] do_syscall_64+0xd2/0x200 [ 290.943678][T13667] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 290.943747][T13667] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 290.943780][T13667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.943857][T13667] RIP: 0033:0x7f6028e1eec9 [ 290.943881][T13667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.943904][T13667] RSP: 002b:00007f6027887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 290.943928][T13667] RAX: ffffffffffffffda RBX: 00007f6029075fa0 RCX: 00007f6028e1eec9 [ 290.943994][T13667] RDX: 0000000000000002 RSI: 0000200000005f40 RDI: 0000000000000003 [ 290.944009][T13667] RBP: 00007f6027887090 R08: 0000000000000000 R09: 0000000000000000 [ 290.944022][T13667] R10: 0000000004000004 R11: 0000000000000246 R12: 0000000000000001 [ 290.944044][T13667] R13: 00007f6029076038 R14: 00007f6029075fa0 R15: 00007ffe6bae4028 [ 290.944060][T13667] [ 291.170282][T13671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=13671 comm=syz.3.3050 [ 291.279063][T13680] FAULT_INJECTION: forcing a failure. [ 291.279063][T13680] name failslab, interval 1, probability 0, space 0, times 0 [ 291.291803][T13680] CPU: 1 UID: 0 PID: 13680 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 291.291838][T13680] Tainted: [W]=WARN [ 291.291845][T13680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 291.291859][T13680] Call Trace: [ 291.291865][T13680] [ 291.291874][T13680] __dump_stack+0x1d/0x30 [ 291.291897][T13680] dump_stack_lvl+0xe8/0x140 [ 291.291924][T13680] dump_stack+0x15/0x1b [ 291.292019][T13680] should_fail_ex+0x265/0x280 [ 291.292047][T13680] ? kobject_uevent_env+0x1c0/0x570 [ 291.292073][T13680] should_failslab+0x8c/0xb0 [ 291.292141][T13680] __kmalloc_cache_noprof+0x4c/0x320 [ 291.292191][T13680] kobject_uevent_env+0x1c0/0x570 [ 291.292263][T13680] ? device_pm_check_callbacks+0x683/0x6a0 [ 291.292301][T13680] kobject_uevent+0x1d/0x30 [ 291.292341][T13680] device_del+0x710/0x790 [ 291.292380][T13680] __del_gendisk+0x494/0x570 [ 291.292422][T13680] del_gendisk+0xac/0xf0 [ 291.292480][T13680] loop_remove+0x26/0x80 [ 291.292524][T13680] loop_control_ioctl+0x3b3/0x3f0 [ 291.292544][T13680] ? __pfx_loop_control_ioctl+0x10/0x10 [ 291.292566][T13680] __se_sys_ioctl+0xce/0x140 [ 291.292591][T13680] __x64_sys_ioctl+0x43/0x50 [ 291.292631][T13680] x64_sys_call+0x1816/0x2ff0 [ 291.292659][T13680] do_syscall_64+0xd2/0x200 [ 291.292697][T13680] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 291.292745][T13680] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 291.292840][T13680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.292870][T13680] RIP: 0033:0x7fa771d4eec9 [ 291.292937][T13680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.292963][T13680] RSP: 002b:00007fa7707af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.292988][T13680] RAX: ffffffffffffffda RBX: 00007fa771fa5fa0 RCX: 00007fa771d4eec9 [ 291.293076][T13680] RDX: 0000000000000004 RSI: 0000000000004c81 RDI: 0000000000000003 [ 291.293137][T13680] RBP: 00007fa7707af090 R08: 0000000000000000 R09: 0000000000000000 [ 291.293154][T13680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.293171][T13680] R13: 00007fa771fa6038 R14: 00007fa771fa5fa0 R15: 00007ffdcca1ba38 [ 291.293217][T13680] [ 291.530599][T13684] SELinux: policydb magic number 0x78758c does not match expected magic number 0xf97cff8c [ 291.543794][T13684] SELinux: failed to load policy [ 291.559870][T13684] loop8: detected capacity change from 0 to 128 [ 291.569440][T13684] FAT-fs (loop8): bogus number of reserved sectors [ 291.576111][T13684] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 291.585554][T13684] FAT-fs (loop8): Can't find a valid FAT filesystem [ 291.614133][T13691] loop8: detected capacity change from 0 to 164 [ 291.637879][T13691] Unable to read rock-ridge attributes [ 291.654906][T13691] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 292.012668][T13710] netlink: 830 bytes leftover after parsing attributes in process `syz.6.3064'. [ 292.068823][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3064'. [ 292.162525][T13716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3068'. [ 292.322720][T13723] FAULT_INJECTION: forcing a failure. [ 292.322720][T13723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.336023][T13723] CPU: 0 UID: 0 PID: 13723 Comm: syz.6.3071 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 292.336053][T13723] Tainted: [W]=WARN [ 292.336093][T13723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 292.336108][T13723] Call Trace: [ 292.336115][T13723] [ 292.336124][T13723] __dump_stack+0x1d/0x30 [ 292.336148][T13723] dump_stack_lvl+0xe8/0x140 [ 292.336170][T13723] dump_stack+0x15/0x1b [ 292.336184][T13723] should_fail_ex+0x265/0x280 [ 292.336258][T13723] should_fail+0xb/0x20 [ 292.336297][T13723] should_fail_usercopy+0x1a/0x20 [ 292.336329][T13723] strncpy_from_user+0x25/0x230 [ 292.336449][T13723] strncpy_from_user_nofault+0x68/0xf0 [ 292.336472][T13723] bpf_probe_read_user_str+0x2a/0x70 [ 292.336519][T13723] bpf_prog_b1bc9f7c1f89903c+0x41/0x47 [ 292.336614][T13723] bpf_trace_run3+0x10c/0x1d0 [ 292.336641][T13723] ? __io_req_caches_free+0x69/0x170 [ 292.336735][T13723] ? __io_req_caches_free+0x69/0x170 [ 292.336765][T13723] ? __io_req_caches_free+0x69/0x170 [ 292.336870][T13723] __traceiter_kmem_cache_free+0x38/0x60 [ 292.336892][T13723] ? __io_req_caches_free+0x69/0x170 [ 292.336913][T13723] kmem_cache_free+0x257/0x300 [ 292.337028][T13723] __io_req_caches_free+0x69/0x170 [ 292.337059][T13723] io_queue_deferred+0x1e/0x220 [ 292.337087][T13723] io_drain_req+0x24c/0x350 [ 292.337119][T13723] io_queue_sqe_fallback+0x132/0x140 [ 292.337153][T13723] io_submit_sqes+0xc2e/0x1060 [ 292.337193][T13723] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 292.337279][T13723] ? __rcu_read_unlock+0x4f/0x70 [ 292.337306][T13723] ? get_pid_task+0x96/0xd0 [ 292.337381][T13723] ? proc_fail_nth_write+0x13b/0x160 [ 292.337411][T13723] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 292.337510][T13723] ? vfs_write+0x7e8/0x960 [ 292.337543][T13723] ? fput+0x8f/0xc0 [ 292.337610][T13723] __x64_sys_io_uring_enter+0x78/0x90 [ 292.337640][T13723] x64_sys_call+0x2de1/0x2ff0 [ 292.337660][T13723] do_syscall_64+0xd2/0x200 [ 292.337699][T13723] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 292.337743][T13723] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 292.337835][T13723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.337903][T13723] RIP: 0033:0x7fa69291eec9 [ 292.337920][T13723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.338020][T13723] RSP: 002b:00007fa69137f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 292.338046][T13723] RAX: ffffffffffffffda RBX: 00007fa692b75fa0 RCX: 00007fa69291eec9 [ 292.338056][T13723] RDX: 00000000000004c1 RSI: 0000000000000627 RDI: 0000000000000003 [ 292.338069][T13723] RBP: 00007fa69137f090 R08: 0000000000000000 R09: 0000000000000000 [ 292.338080][T13723] R10: 0000000000000043 R11: 0000000000000246 R12: 0000000000000001 [ 292.338091][T13723] R13: 00007fa692b76038 R14: 00007fa692b75fa0 R15: 00007ffd48ee1778 [ 292.338167][T13723] [ 292.703218][T13726] loop8: detected capacity change from 0 to 1024 [ 292.717089][T13735] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3076'. [ 292.737840][T13726] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.780333][T13726] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.3072: Allocating blocks 497-513 which overlap fs metadata [ 292.828021][T13744] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.3072: Allocating blocks 497-513 which overlap fs metadata [ 292.870344][T13744] EXT4-fs (loop8): pa ffff8881004b1e70: logic 16, phys. 145, len 23 [ 292.878439][T13744] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 292.898778][ T4911] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.921239][T13749] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3080'. [ 292.940007][T13754] batadv_slave_1: entered promiscuous mode [ 292.946515][T13754] macsec1: entered promiscuous mode [ 292.951882][T13754] macsec1: entered allmulticast mode [ 292.957182][T13754] batadv_slave_1: entered allmulticast mode [ 292.964889][T13754] batadv_slave_1: left allmulticast mode [ 292.970626][T13754] batadv_slave_1: left promiscuous mode [ 292.977911][T13752] FAULT_INJECTION: forcing a failure. [ 292.977911][T13752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.991116][T13752] CPU: 1 UID: 0 PID: 13752 Comm: syz.3.3082 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 292.991143][T13752] Tainted: [W]=WARN [ 292.991188][T13752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 292.991202][T13752] Call Trace: [ 292.991209][T13752] [ 292.991218][T13752] __dump_stack+0x1d/0x30 [ 292.991319][T13752] dump_stack_lvl+0xe8/0x140 [ 292.991340][T13752] dump_stack+0x15/0x1b [ 292.991359][T13752] should_fail_ex+0x265/0x280 [ 292.991386][T13752] should_fail+0xb/0x20 [ 292.991409][T13752] should_fail_usercopy+0x1a/0x20 [ 292.991502][T13752] _copy_to_iter+0xd2/0xe70 [ 292.991529][T13752] ? schedule+0x5f/0xd0 [ 292.991547][T13752] ? _raw_spin_unlock_bh+0x36/0x40 [ 292.991566][T13752] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 292.991620][T13752] __skb_datagram_iter+0xc6/0x690 [ 292.991644][T13752] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 292.991690][T13752] skb_copy_datagram_iter+0x3d/0x110 [ 292.991719][T13752] tipc_recvstream+0x4d7/0x780 [ 292.991834][T13752] ? __pfx_tipc_recvstream+0x10/0x10 [ 292.991871][T13752] sock_recvmsg+0x139/0x170 [ 292.991905][T13752] ____sys_recvmsg+0xf5/0x280 [ 292.991935][T13752] ___sys_recvmsg+0x11f/0x370 [ 292.992007][T13752] __x64_sys_recvmsg+0xd1/0x160 [ 292.992041][T13752] x64_sys_call+0x2b42/0x2ff0 [ 292.992064][T13752] do_syscall_64+0xd2/0x200 [ 292.992195][T13752] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 292.992219][T13752] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 292.992247][T13752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.992320][T13752] RIP: 0033:0x7f757be0eec9 [ 292.992335][T13752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.992353][T13752] RSP: 002b:00007f757a86f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 292.992371][T13752] RAX: ffffffffffffffda RBX: 00007f757c065fa0 RCX: 00007f757be0eec9 [ 292.992383][T13752] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 292.992408][T13752] RBP: 00007f757a86f090 R08: 0000000000000000 R09: 0000000000000000 [ 292.992420][T13752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.992433][T13752] R13: 00007f757c066038 R14: 00007f757c065fa0 R15: 00007ffff466dc58 [ 292.992454][T13752] [ 292.997450][T13757] loop8: detected capacity change from 0 to 128 [ 293.235520][T13757] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 293.247571][T13757] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 293.302622][T13767] loop6: detected capacity change from 0 to 512 [ 293.356303][T13767] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.369189][T13767] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 293.715710][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 293.715766][ T29] audit: type=1400 audit(2000003509.518:13085): avc: denied { read write } for pid=13781 comm="syz.0.3090" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 293.746245][ T29] audit: type=1400 audit(2000003509.518:13086): avc: denied { open } for pid=13781 comm="syz.0.3090" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 293.805093][T13785] __nla_validate_parse: 3 callbacks suppressed [ 293.805111][T13785] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3091'. [ 293.945179][ T29] audit: type=1326 audit(2000003509.676:13087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13783 comm="syz.9.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa771d4eec9 code=0x7ffc0000 [ 293.969407][ T29] audit: type=1326 audit(2000003509.676:13088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13783 comm="syz.9.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa771d4eec9 code=0x7ffc0000 [ 293.993770][ T29] audit: type=1326 audit(2000003509.676:13089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13783 comm="syz.9.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa771d4eec9 code=0x7ffc0000 [ 294.017383][ T29] audit: type=1326 audit(2000003509.676:13090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13783 comm="syz.9.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa771d4eec9 code=0x7ffc0000 [ 294.041518][ T29] audit: type=1326 audit(2000003509.676:13091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13783 comm="syz.9.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa771d4eec9 code=0x7ffc0000 [ 294.065088][ T29] audit: type=1326 audit(2000003509.676:13092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13783 comm="syz.9.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa771d4eec9 code=0x7ffc0000 [ 294.089473][ T29] audit: type=1326 audit(2000003509.676:13093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13783 comm="syz.9.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa771d4eec9 code=0x7ffc0000 [ 294.113189][ T29] audit: type=1326 audit(2000003509.676:13094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13783 comm="syz.9.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa771d4eec9 code=0x7ffc0000 [ 294.266162][T13477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.337616][T13793] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3096'. [ 294.785057][T13802] loop8: detected capacity change from 0 to 256 [ 294.802173][T13802] vfat: Unknown parameter '·' [ 295.031472][T13813] FAULT_INJECTION: forcing a failure. [ 295.031472][T13813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.044569][T13813] CPU: 1 UID: 0 PID: 13813 Comm: syz.8.3103 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 295.044598][T13813] Tainted: [W]=WARN [ 295.044647][T13813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 295.044662][T13813] Call Trace: [ 295.044669][T13813] [ 295.044677][T13813] __dump_stack+0x1d/0x30 [ 295.044701][T13813] dump_stack_lvl+0xe8/0x140 [ 295.044792][T13813] dump_stack+0x15/0x1b [ 295.044807][T13813] should_fail_ex+0x265/0x280 [ 295.044842][T13813] should_fail+0xb/0x20 [ 295.044866][T13813] should_fail_usercopy+0x1a/0x20 [ 295.044954][T13813] _copy_from_user+0x1c/0xb0 [ 295.044990][T13813] bpf_test_init+0xdf/0x160 [ 295.045015][T13813] bpf_prog_test_run_skb+0x144/0xbd0 [ 295.045088][T13813] ? __rcu_read_unlock+0x4f/0x70 [ 295.045113][T13813] ? __fget_files+0x184/0x1c0 [ 295.045138][T13813] ? __rcu_read_unlock+0x4f/0x70 [ 295.045221][T13813] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 295.045246][T13813] bpf_prog_test_run+0x22a/0x390 [ 295.045279][T13813] __sys_bpf+0x4b9/0x7b0 [ 295.045380][T13813] __x64_sys_bpf+0x41/0x50 [ 295.045401][T13813] x64_sys_call+0x2aea/0x2ff0 [ 295.045419][T13813] do_syscall_64+0xd2/0x200 [ 295.045453][T13813] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 295.045480][T13813] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 295.045581][T13813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.045606][T13813] RIP: 0033:0x7f6028e1eec9 [ 295.045623][T13813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.045719][T13813] RSP: 002b:00007f6027887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 295.045737][T13813] RAX: ffffffffffffffda RBX: 00007f6029075fa0 RCX: 00007f6028e1eec9 [ 295.045751][T13813] RDX: 0000000000000050 RSI: 0000200000000a40 RDI: 000000000000000a [ 295.045767][T13813] RBP: 00007f6027887090 R08: 0000000000000000 R09: 0000000000000000 [ 295.045785][T13813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.045799][T13813] R13: 00007f6029076038 R14: 00007f6029075fa0 R15: 00007ffe6bae4028 [ 295.045824][T13813] [ 295.295770][T13815] FAULT_INJECTION: forcing a failure. [ 295.295770][T13815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.309066][T13815] CPU: 1 UID: 0 PID: 13815 Comm: syz.8.3104 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 295.309101][T13815] Tainted: [W]=WARN [ 295.309109][T13815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 295.309123][T13815] Call Trace: [ 295.309162][T13815] [ 295.309169][T13815] __dump_stack+0x1d/0x30 [ 295.309192][T13815] dump_stack_lvl+0xe8/0x140 [ 295.309214][T13815] dump_stack+0x15/0x1b [ 295.309309][T13815] should_fail_ex+0x265/0x280 [ 295.309388][T13815] should_fail+0xb/0x20 [ 295.309405][T13815] should_fail_usercopy+0x1a/0x20 [ 295.309500][T13815] strncpy_from_user+0x25/0x230 [ 295.309543][T13815] ? kmem_cache_alloc_noprof+0x186/0x310 [ 295.309575][T13815] ? getname_flags+0x80/0x3b0 [ 295.309624][T13815] getname_flags+0xae/0x3b0 [ 295.309651][T13815] user_path_at+0x28/0x130 [ 295.309687][T13815] do_sys_truncate+0x5c/0x130 [ 295.309715][T13815] __x64_sys_truncate+0x31/0x40 [ 295.309753][T13815] x64_sys_call+0x1a2f/0x2ff0 [ 295.309772][T13815] do_syscall_64+0xd2/0x200 [ 295.309803][T13815] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 295.309825][T13815] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 295.309866][T13815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.309887][T13815] RIP: 0033:0x7f6028e1eec9 [ 295.309947][T13815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.309966][T13815] RSP: 002b:00007f6027887038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 295.309982][T13815] RAX: ffffffffffffffda RBX: 00007f6029075fa0 RCX: 00007f6028e1eec9 [ 295.309993][T13815] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000080 [ 295.310061][T13815] RBP: 00007f6027887090 R08: 0000000000000000 R09: 0000000000000000 [ 295.310072][T13815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.310107][T13815] R13: 00007f6029076038 R14: 00007f6029075fa0 R15: 00007ffe6bae4028 [ 295.310129][T13815] [ 295.627656][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881045be600: rx timeout, send abort [ 295.635899][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881045be800: rx timeout, send abort [ 295.645128][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881045be600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 295.659455][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881045be800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 295.828497][T13837] loop6: detected capacity change from 0 to 2048 [ 295.871064][T13831] loop8: detected capacity change from 0 to 2048 [ 295.891253][T13837] EXT4-fs: Ignoring removed i_version option [ 295.994928][T13845] IPv6: Can't replace route, no match found [ 296.965610][T13831] Alternate GPT is invalid, using primary GPT. [ 296.971972][T13831] loop8: p2 p3 p7 [ 297.001599][T13837] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.247080][T13856] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3118'. [ 297.308296][T13857] IPv6: Can't replace route, no match found [ 297.361007][T13477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.529881][T13878] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3119'. [ 297.768681][T13889] SELinux: policydb magic number 0x78758c does not match expected magic number 0xf97cff8c [ 298.620538][T13889] SELinux: failed to load policy [ 298.878274][T13911] loop6: detected capacity change from 0 to 512 [ 298.913054][T13911] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.927621][T13911] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 299.121829][T13916] loop8: detected capacity change from 0 to 512 [ 299.624981][T13915] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3133'. [ 299.945594][T13916] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.959525][T13916] ext4 filesystem being mounted at /558/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 300.184102][T13477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.232211][T13937] loop6: detected capacity change from 0 to 512 [ 300.248223][T13932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3138'. [ 300.271393][T13937] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.307600][T13937] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.348886][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 300.348904][ T29] audit: type=1326 audit(2000003516.490:13144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13941 comm="syz.0.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d20e7eec9 code=0x7ffc0000 [ 300.379366][ T29] audit: type=1326 audit(2000003516.501:13145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13941 comm="syz.0.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d20e7eec9 code=0x7ffc0000 [ 300.403726][ T29] audit: type=1326 audit(2000003516.501:13146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13941 comm="syz.0.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d20e7eec9 code=0x7ffc0000 [ 300.427432][ T29] audit: type=1326 audit(2000003516.501:13147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13941 comm="syz.0.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d20e7eec9 code=0x7ffc0000 [ 300.451690][ T29] audit: type=1326 audit(2000003516.501:13148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13941 comm="syz.0.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3d20e7eec9 code=0x7ffc0000 [ 300.475345][ T29] audit: type=1326 audit(2000003516.501:13149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13941 comm="syz.0.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d20e7eec9 code=0x7ffc0000 [ 300.499680][ T29] audit: type=1326 audit(2000003516.501:13150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13941 comm="syz.0.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d20e7eec9 code=0x7ffc0000 [ 300.523359][ T29] audit: type=1326 audit(2000003516.501:13151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13941 comm="syz.0.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f3d20e7eec9 code=0x7ffc0000 [ 300.547497][ T29] audit: type=1326 audit(2000003516.501:13152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13941 comm="syz.0.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d20e7eec9 code=0x7ffc0000 [ 300.571082][ T29] audit: type=1326 audit(2000003516.501:13153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13941 comm="syz.0.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d20e7eec9 code=0x7ffc0000 [ 300.599625][T13477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.619236][ T4911] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.814256][T13974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3148'. [ 301.523755][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3153'. [ 301.658599][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3155'. [ 301.704874][T14009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3158'. [ 301.768192][T14014] loop8: detected capacity change from 0 to 512 [ 301.788503][T14003] netlink: 'syz.9.3157': attribute type 10 has an invalid length. [ 301.796523][T14003] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3157'. [ 301.824813][T14018] FAULT_INJECTION: forcing a failure. [ 301.824813][T14018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.837904][T14018] CPU: 0 UID: 0 PID: 14018 Comm: syz.0.3161 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 301.837959][T14018] Tainted: [W]=WARN [ 301.837965][T14018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 301.837976][T14018] Call Trace: [ 301.837982][T14018] [ 301.837991][T14018] __dump_stack+0x1d/0x30 [ 301.838081][T14018] dump_stack_lvl+0xe8/0x140 [ 301.838102][T14018] dump_stack+0x15/0x1b [ 301.838121][T14018] should_fail_ex+0x265/0x280 [ 301.838150][T14018] should_fail+0xb/0x20 [ 301.838191][T14018] should_fail_usercopy+0x1a/0x20 [ 301.838214][T14018] _copy_from_user+0x1c/0xb0 [ 301.838294][T14018] ___sys_sendmsg+0xc1/0x1d0 [ 301.838400][T14018] __x64_sys_sendmsg+0xd4/0x160 [ 301.838433][T14018] x64_sys_call+0x191e/0x2ff0 [ 301.838457][T14018] do_syscall_64+0xd2/0x200 [ 301.838484][T14018] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 301.838550][T14018] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 301.838583][T14018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.838607][T14018] RIP: 0033:0x7f3d20e7eec9 [ 301.838687][T14018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.838741][T14018] RSP: 002b:00007f3d1f8df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.838763][T14018] RAX: ffffffffffffffda RBX: 00007f3d210d5fa0 RCX: 00007f3d20e7eec9 [ 301.838777][T14018] RDX: 00000000240000c0 RSI: 0000200000000140 RDI: 0000000000000003 [ 301.838791][T14018] RBP: 00007f3d1f8df090 R08: 0000000000000000 R09: 0000000000000000 [ 301.838805][T14018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.838818][T14018] R13: 00007f3d210d6038 R14: 00007f3d210d5fa0 R15: 00007ffede40dbb8 [ 301.838835][T14018] [ 301.840986][T14014] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.893658][T14003] batman_adv: batadv0: Adding interface: veth1_vlan [ 301.894226][T14014] ext4 filesystem being mounted at /561/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.899081][T14003] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.122771][T14003] batman_adv: batadv0: Interface activated: veth1_vlan [ 302.164348][ T4911] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.260834][T14037] loop8: detected capacity change from 0 to 2048 [ 302.276343][T14037] EXT4-fs: Ignoring removed i_version option [ 302.347602][T14037] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.479899][ T4911] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.528513][T14049] loop8: detected capacity change from 0 to 1024 [ 302.549613][T14050] loop6: detected capacity change from 0 to 4096 [ 302.550091][T14056] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14056 comm=syz.0.3172 [ 302.558755][T14050] EXT4-fs: Ignoring removed mblk_io_submit option [ 302.575254][T14050] EXT4-fs: test_dummy_encryption option not supported [ 302.585780][T14049] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.598065][T14049] ext4 filesystem being mounted at /564/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.598841][T14056] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14056 comm=syz.0.3172 [ 302.646565][ T4911] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.669162][T14060] SELinux: policydb magic number 0x646e6f62 does not match expected magic number 0xf97cff8c [ 302.679544][T14060] SELinux: failed to load policy [ 302.700479][T14060] macvlan1: entered promiscuous mode [ 302.713823][T14060] ipvlan0: entered promiscuous mode [ 302.719837][T14060] ipvlan0: left promiscuous mode [ 302.729160][T14060] macvlan1: left promiscuous mode [ 302.859047][T14068] vhci_hcd: invalid port number 96 [ 302.864312][T14068] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 303.025478][T14087] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3183'. [ 303.181641][T14094] FAULT_INJECTION: forcing a failure. [ 303.181641][T14094] name failslab, interval 1, probability 0, space 0, times 0 [ 303.194407][T14094] CPU: 0 UID: 0 PID: 14094 Comm: syz.9.3185 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 303.194443][T14094] Tainted: [W]=WARN [ 303.194451][T14094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 303.194466][T14094] Call Trace: [ 303.194473][T14094] [ 303.194482][T14094] __dump_stack+0x1d/0x30 [ 303.194505][T14094] dump_stack_lvl+0xe8/0x140 [ 303.194574][T14094] dump_stack+0x15/0x1b [ 303.194588][T14094] should_fail_ex+0x265/0x280 [ 303.194615][T14094] ? __xdp_reg_mem_model+0x173/0x3e0 [ 303.194681][T14094] should_failslab+0x8c/0xb0 [ 303.194704][T14094] __kmalloc_cache_noprof+0x4c/0x320 [ 303.194736][T14094] __xdp_reg_mem_model+0x173/0x3e0 [ 303.194831][T14094] ? page_pool_create_percpu+0x51d/0x650 [ 303.194879][T14094] xdp_reg_mem_model+0x22/0x40 [ 303.194914][T14094] bpf_test_run_xdp_live+0x172/0xfe0 [ 303.194941][T14094] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 303.195011][T14094] ? 0xffffffffa0205240 [ 303.195028][T14094] ? synchronize_rcu+0x45/0x320 [ 303.195063][T14094] ? 0xffffffffa0205240 [ 303.195079][T14094] ? 0xffffffffa0205240 [ 303.195090][T14094] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 303.195129][T14094] ? 0xffffffffa02018d8 [ 303.195156][T14094] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 303.195188][T14094] bpf_prog_test_run_xdp+0x4f5/0x910 [ 303.195237][T14094] ? __rcu_read_unlock+0x4f/0x70 [ 303.195267][T14094] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 303.195286][T14094] bpf_prog_test_run+0x22a/0x390 [ 303.195314][T14094] __sys_bpf+0x4b9/0x7b0 [ 303.195352][T14094] __x64_sys_bpf+0x41/0x50 [ 303.195491][T14094] x64_sys_call+0x2aea/0x2ff0 [ 303.195538][T14094] do_syscall_64+0xd2/0x200 [ 303.195568][T14094] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 303.195590][T14094] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 303.195614][T14094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.195659][T14094] RIP: 0033:0x7fa771d4eec9 [ 303.195671][T14094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.195687][T14094] RSP: 002b:00007fa7707af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 303.195707][T14094] RAX: ffffffffffffffda RBX: 00007fa771fa5fa0 RCX: 00007fa771d4eec9 [ 303.195722][T14094] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 303.195737][T14094] RBP: 00007fa7707af090 R08: 0000000000000000 R09: 0000000000000000 [ 303.195758][T14094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.195768][T14094] R13: 00007fa771fa6038 R14: 00007fa771fa5fa0 R15: 00007ffdcca1ba38 [ 303.195856][T14094] [ 303.596997][T14103] SELinux: policydb magic number 0x646e6f62 does not match expected magic number 0xf97cff8c [ 303.729051][T14106] macvlan1: entered promiscuous mode [ 303.766525][T14103] SELinux: failed to load policy [ 303.771505][T14106] ipvlan0: entered promiscuous mode [ 303.804474][T14106] ipvlan0: left promiscuous mode [ 303.823544][T14106] macvlan1: left promiscuous mode [ 304.047614][T14124] FAULT_INJECTION: forcing a failure. [ 304.047614][T14124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.060850][T14124] CPU: 0 UID: 0 PID: 14124 Comm: syz.8.3195 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 304.060895][T14124] Tainted: [W]=WARN [ 304.060902][T14124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 304.060949][T14124] Call Trace: [ 304.060956][T14124] [ 304.060965][T14124] __dump_stack+0x1d/0x30 [ 304.060988][T14124] dump_stack_lvl+0xe8/0x140 [ 304.061007][T14124] dump_stack+0x15/0x1b [ 304.061021][T14124] should_fail_ex+0x265/0x280 [ 304.061082][T14124] should_fail+0xb/0x20 [ 304.061111][T14124] should_fail_usercopy+0x1a/0x20 [ 304.061141][T14124] _copy_from_user+0x1c/0xb0 [ 304.061174][T14124] ___sys_sendmsg+0xc1/0x1d0 [ 304.061230][T14124] __x64_sys_sendmsg+0xd4/0x160 [ 304.061262][T14124] x64_sys_call+0x191e/0x2ff0 [ 304.061284][T14124] do_syscall_64+0xd2/0x200 [ 304.061310][T14124] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 304.061400][T14124] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 304.061433][T14124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.061457][T14124] RIP: 0033:0x7f6028e1eec9 [ 304.061482][T14124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.061502][T14124] RSP: 002b:00007f6027887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.061523][T14124] RAX: ffffffffffffffda RBX: 00007f6029075fa0 RCX: 00007f6028e1eec9 [ 304.061538][T14124] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 304.061553][T14124] RBP: 00007f6027887090 R08: 0000000000000000 R09: 0000000000000000 [ 304.061568][T14124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.061582][T14124] R13: 00007f6029076038 R14: 00007f6029075fa0 R15: 00007ffe6bae4028 [ 304.061631][T14124] [ 304.280777][T14130] FAULT_INJECTION: forcing a failure. [ 304.280777][T14130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.294273][T14130] CPU: 0 UID: 0 PID: 14130 Comm: syz.0.3197 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 304.294374][T14130] Tainted: [W]=WARN [ 304.294382][T14130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 304.294406][T14130] Call Trace: [ 304.294411][T14130] [ 304.294418][T14130] __dump_stack+0x1d/0x30 [ 304.294441][T14130] dump_stack_lvl+0xe8/0x140 [ 304.294463][T14130] dump_stack+0x15/0x1b [ 304.294544][T14130] should_fail_ex+0x265/0x280 [ 304.294571][T14130] should_fail+0xb/0x20 [ 304.294633][T14130] should_fail_usercopy+0x1a/0x20 [ 304.294669][T14130] _copy_from_user+0x1c/0xb0 [ 304.294705][T14130] __sys_connect+0xd0/0x2b0 [ 304.294735][T14130] __x64_sys_connect+0x3f/0x50 [ 304.294758][T14130] x64_sys_call+0x2c08/0x2ff0 [ 304.294782][T14130] do_syscall_64+0xd2/0x200 [ 304.294845][T14130] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 304.294871][T14130] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 304.294904][T14130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.294929][T14130] RIP: 0033:0x7f3d20e7eec9 [ 304.295015][T14130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.295032][T14130] RSP: 002b:00007f3d1f8df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 304.295048][T14130] RAX: ffffffffffffffda RBX: 00007f3d210d5fa0 RCX: 00007f3d20e7eec9 [ 304.295059][T14130] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000004 [ 304.295077][T14130] RBP: 00007f3d1f8df090 R08: 0000000000000000 R09: 0000000000000000 [ 304.295087][T14130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.295129][T14130] R13: 00007f3d210d6038 R14: 00007f3d210d5fa0 R15: 00007ffede40dbb8 [ 304.295151][T14130] [ 304.631556][T14138] loop6: detected capacity change from 0 to 512 [ 304.662543][T14139] FAULT_INJECTION: forcing a failure. [ 304.662543][T14139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.675918][T14139] CPU: 1 UID: 0 PID: 14139 Comm: syz.9.3199 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 304.675951][T14139] Tainted: [W]=WARN [ 304.676014][T14139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 304.676027][T14139] Call Trace: [ 304.676032][T14139] [ 304.676039][T14139] __dump_stack+0x1d/0x30 [ 304.676059][T14139] dump_stack_lvl+0xe8/0x140 [ 304.676077][T14139] dump_stack+0x15/0x1b [ 304.676096][T14139] should_fail_ex+0x265/0x280 [ 304.676175][T14139] should_fail+0xb/0x20 [ 304.676267][T14139] should_fail_usercopy+0x1a/0x20 [ 304.676297][T14139] _copy_from_user+0x1c/0xb0 [ 304.676328][T14139] ___sys_sendmsg+0xc1/0x1d0 [ 304.676400][T14139] __sys_sendmmsg+0x178/0x300 [ 304.676441][T14139] __x64_sys_sendmmsg+0x57/0x70 [ 304.676517][T14139] x64_sys_call+0x1c4a/0x2ff0 [ 304.676542][T14139] do_syscall_64+0xd2/0x200 [ 304.676572][T14139] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 304.676598][T14139] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 304.676685][T14139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.676709][T14139] RIP: 0033:0x7fa771d4eec9 [ 304.676726][T14139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.676748][T14139] RSP: 002b:00007fa7707af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 304.676826][T14139] RAX: ffffffffffffffda RBX: 00007fa771fa5fa0 RCX: 00007fa771d4eec9 [ 304.676837][T14139] RDX: 0000000000000001 RSI: 0000200000000ac0 RDI: 0000000000000004 [ 304.676848][T14139] RBP: 00007fa7707af090 R08: 0000000000000000 R09: 0000000000000000 [ 304.676858][T14139] R10: 0000000020080058 R11: 0000000000000246 R12: 0000000000000001 [ 304.676943][T14139] R13: 00007fa771fa6038 R14: 00007fa771fa5fa0 R15: 00007ffdcca1ba38 [ 304.676960][T14139] [ 304.868902][T14142] loop8: detected capacity change from 0 to 512 [ 304.900927][T14142] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.913580][T14142] ext4 filesystem being mounted at /571/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 305.004265][T14138] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.018188][T14138] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.100075][T13477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.427232][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 305.427245][ T29] audit: type=1400 audit(2000003521.845:13301): avc: denied { mounton } for pid=14148 comm="syz.9.3204" path="/578/file0" dev="tmpfs" ino=3170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 305.526880][T14151] FAULT_INJECTION: forcing a failure. [ 305.526880][T14151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.540266][T14151] CPU: 0 UID: 0 PID: 14151 Comm: syz.9.3205 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 305.540302][T14151] Tainted: [W]=WARN [ 305.540378][T14151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.540393][T14151] Call Trace: [ 305.540401][T14151] [ 305.540408][T14151] __dump_stack+0x1d/0x30 [ 305.540433][T14151] dump_stack_lvl+0xe8/0x140 [ 305.540456][T14151] dump_stack+0x15/0x1b [ 305.540602][T14151] should_fail_ex+0x265/0x280 [ 305.540625][T14151] should_fail+0xb/0x20 [ 305.540647][T14151] should_fail_usercopy+0x1a/0x20 [ 305.540678][T14151] _copy_from_user+0x1c/0xb0 [ 305.540729][T14151] ___sys_sendmsg+0xc1/0x1d0 [ 305.540777][T14151] __x64_sys_sendmsg+0xd4/0x160 [ 305.540840][T14151] x64_sys_call+0x191e/0x2ff0 [ 305.540866][T14151] do_syscall_64+0xd2/0x200 [ 305.540920][T14151] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 305.540946][T14151] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 305.540976][T14151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.541071][T14151] RIP: 0033:0x7fa771d4eec9 [ 305.541085][T14151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.541161][T14151] RSP: 002b:00007fa7707af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.541185][T14151] RAX: ffffffffffffffda RBX: 00007fa771fa5fa0 RCX: 00007fa771d4eec9 [ 305.541200][T14151] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 305.541211][T14151] RBP: 00007fa7707af090 R08: 0000000000000000 R09: 0000000000000000 [ 305.541222][T14151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.541233][T14151] R13: 00007fa771fa6038 R14: 00007fa771fa5fa0 R15: 00007ffdcca1ba38 [ 305.541252][T14151] [ 305.722580][ T4911] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.737073][T14153] SELinux: policydb magic number 0x646e6f62 does not match expected magic number 0xf97cff8c [ 305.748088][T14153] SELinux: failed to load policy [ 305.761207][T14153] macvlan1: entered promiscuous mode [ 305.767737][T14153] ipvlan0: entered promiscuous mode [ 305.775014][T14153] ipvlan0: left promiscuous mode [ 305.780321][T14153] macvlan1: left promiscuous mode [ 305.886304][T14171] SELinux: policydb magic number 0x78758c does not match expected magic number 0xf97cff8c [ 305.897936][T14171] SELinux: failed to load policy [ 305.907245][ T29] audit: type=1326 audit(2000003522.339:13302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14170 comm="syz.6.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69291eec9 code=0x7ffc0000 [ 305.931003][ T29] audit: type=1326 audit(2000003522.339:13303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14170 comm="syz.6.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fa69291eec9 code=0x7ffc0000 [ 305.954721][ T29] audit: type=1326 audit(2000003522.339:13304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14170 comm="syz.6.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69291eec9 code=0x7ffc0000 [ 305.979033][ T29] audit: type=1326 audit(2000003522.339:13305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14170 comm="syz.6.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa69291eec9 code=0x7ffc0000 [ 306.003417][ T29] audit: type=1326 audit(2000003522.339:13306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14170 comm="syz.6.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69291eec9 code=0x7ffc0000 [ 306.027046][ T29] audit: type=1326 audit(2000003522.339:13307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14170 comm="syz.6.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa69291eec9 code=0x7ffc0000 [ 306.085195][T14172] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3210'. [ 306.094312][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3210'. [ 306.380914][ T29] audit: type=1326 audit(2000003522.412:13308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14170 comm="syz.6.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69291eec9 code=0x7ffc0000 [ 306.404588][ T29] audit: type=1326 audit(2000003522.412:13309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14170 comm="syz.6.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69291eec9 code=0x7ffc0000 [ 306.428289][ T29] audit: type=1326 audit(2000003522.423:13310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14170 comm="syz.6.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa69291eec9 code=0x7ffc0000 [ 306.471760][T14190] loop6: detected capacity change from 0 to 2048 [ 306.525681][T14196] SELinux: policydb magic number 0x646e6f62 does not match expected magic number 0xf97cff8c [ 306.539771][T14196] SELinux: failed to load policy [ 306.607331][T14196] macvlan1: entered promiscuous mode [ 306.618213][T14190] Alternate GPT is invalid, using primary GPT. [ 306.624710][T14190] loop6: p2 p3 p7 [ 306.673847][T14196] ipvlan0: entered promiscuous mode [ 306.698161][T14196] ipvlan0: left promiscuous mode [ 306.703508][T14204] SELinux: policydb magic number 0x78758c does not match expected magic number 0xf97cff8c [ 306.724222][T14196] macvlan1: left promiscuous mode [ 306.738038][T14204] SELinux: failed to load policy [ 306.936553][T14206] loop6: detected capacity change from 0 to 128 [ 307.045675][T14217] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3231'. [ 307.133463][T14206] bio_check_eod: 98 callbacks suppressed [ 307.133493][T14206] syz.6.3226: attempt to access beyond end of device [ 307.133493][T14206] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 307.244959][T14206] syz.6.3226: attempt to access beyond end of device [ 307.244959][T14206] loop6: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 307.259262][T14206] syz.6.3226: attempt to access beyond end of device [ 307.259262][T14206] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 307.272763][T14206] syz.6.3226: attempt to access beyond end of device [ 307.272763][T14206] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 307.286290][T14206] syz.6.3226: attempt to access beyond end of device [ 307.286290][T14206] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 307.301704][T14206] syz.6.3226: attempt to access beyond end of device [ 307.301704][T14206] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 307.315277][T14206] syz.6.3226: attempt to access beyond end of device [ 307.315277][T14206] loop6: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 307.329918][T14206] syz.6.3226: attempt to access beyond end of device [ 307.329918][T14206] loop6: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 307.345877][T14238] IPv6: Can't replace route, no match found [ 307.352073][T14206] syz.6.3226: attempt to access beyond end of device [ 307.352073][T14206] loop6: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 307.357243][T14235] bridge_slave_0: left allmulticast mode [ 307.366920][T14206] syz.6.3226: attempt to access beyond end of device [ 307.366920][T14206] loop6: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 307.371281][T14235] bridge_slave_0: left promiscuous mode [ 307.371403][T14235] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.398648][T14232] siw: device registration error -23 [ 307.406754][T14235] bridge_slave_1: left allmulticast mode [ 307.412492][T14235] bridge_slave_1: left promiscuous mode [ 307.418268][T14235] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.430960][T14235] bond0: (slave bond_slave_0): Releasing backup interface [ 307.441273][T14235] bond0: (slave bond_slave_1): Releasing backup interface [ 307.453959][T14235] team0: Port device team_slave_0 removed [ 307.462718][T14235] team0: Port device team_slave_1 removed [ 307.469269][T14235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.476737][T14235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.485636][T14235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.493817][T14235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.678453][T14254] FAULT_INJECTION: forcing a failure. [ 307.678453][T14254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.691698][T14254] CPU: 1 UID: 0 PID: 14254 Comm: syz.9.3247 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 307.691727][T14254] Tainted: [W]=WARN [ 307.691732][T14254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 307.691766][T14254] Call Trace: [ 307.691772][T14254] [ 307.691778][T14254] __dump_stack+0x1d/0x30 [ 307.691795][T14254] dump_stack_lvl+0xe8/0x140 [ 307.691810][T14254] dump_stack+0x15/0x1b [ 307.691822][T14254] should_fail_ex+0x265/0x280 [ 307.691894][T14254] should_fail+0xb/0x20 [ 307.691910][T14254] should_fail_usercopy+0x1a/0x20 [ 307.692015][T14254] _copy_from_user+0x1c/0xb0 [ 307.692125][T14254] kstrtouint_from_user+0x69/0xf0 [ 307.692145][T14254] ? 0xffffffff81000000 [ 307.692172][T14254] ? selinux_file_permission+0x1e4/0x320 [ 307.692194][T14254] proc_fail_nth_write+0x50/0x160 [ 307.692267][T14254] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 307.692379][T14254] vfs_write+0x266/0x960 [ 307.692398][T14254] ? vfs_read+0x4e6/0x770 [ 307.692416][T14254] ? __rcu_read_unlock+0x4f/0x70 [ 307.692509][T14254] ? __fget_files+0x184/0x1c0 [ 307.692539][T14254] ksys_write+0xda/0x1a0 [ 307.692561][T14254] __x64_sys_write+0x40/0x50 [ 307.692590][T14254] x64_sys_call+0x27fe/0x2ff0 [ 307.692609][T14254] do_syscall_64+0xd2/0x200 [ 307.692635][T14254] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 307.692667][T14254] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 307.692710][T14254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.692729][T14254] RIP: 0033:0x7fa771d4d97f [ 307.692742][T14254] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 307.692757][T14254] RSP: 002b:00007fa7707af030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 307.692775][T14254] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa771d4d97f [ 307.692787][T14254] RDX: 0000000000000001 RSI: 00007fa7707af0a0 RDI: 0000000000000006 [ 307.692834][T14254] RBP: 00007fa7707af090 R08: 0000000000000000 R09: 0000000000000000 [ 307.692845][T14254] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 307.692856][T14254] R13: 00007fa771fa6038 R14: 00007fa771fa5fa0 R15: 00007ffdcca1ba38 [ 307.692874][T14254] [ 307.987652][T14263] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3251'. [ 308.167730][T14276] loop6: detected capacity change from 0 to 1024 [ 308.195484][T14276] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.243054][T13477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.281638][T14284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3258'. [ 308.290615][T14284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3258'. [ 308.328975][T14286] loop6: detected capacity change from 0 to 1024 [ 308.351486][T14286] EXT4-fs: Ignoring removed i_version option [ 308.364400][T14286] EXT4-fs: Ignoring removed nobh option [ 308.384802][T14286] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.525395][T14290] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.549129][T13477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.605894][T14290] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.679636][T14290] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.691126][T14302] SELinux: policydb magic number 0x646e6f62 does not match expected magic number 0xf97cff8c [ 308.710924][T14302] SELinux: failed to load policy [ 308.726063][T14302] macvlan1: entered promiscuous mode [ 308.732510][T14302] ipvlan0: entered promiscuous mode [ 308.738405][T14302] ipvlan0: left promiscuous mode [ 308.745950][T14302] macvlan1: left promiscuous mode [ 308.758523][T14290] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.851841][ T31] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.852827][T14320] FAULT_INJECTION: forcing a failure. [ 308.852827][T14320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.873209][T14320] CPU: 1 UID: 0 PID: 14320 Comm: syz.6.3269 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 308.873246][T14320] Tainted: [W]=WARN [ 308.873254][T14320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 308.873269][T14320] Call Trace: [ 308.873302][T14320] [ 308.873311][T14320] __dump_stack+0x1d/0x30 [ 308.873349][T14320] dump_stack_lvl+0xe8/0x140 [ 308.873428][T14320] dump_stack+0x15/0x1b [ 308.873452][T14320] should_fail_ex+0x265/0x280 [ 308.873478][T14320] should_fail+0xb/0x20 [ 308.873500][T14320] should_fail_usercopy+0x1a/0x20 [ 308.873564][T14320] strncpy_from_user+0x25/0x230 [ 308.873598][T14320] ? __list_del_entry_valid_or_report+0x65/0x130 [ 308.873670][T14320] strncpy_from_user_nofault+0x68/0xf0 [ 308.873696][T14320] bpf_probe_read_user_str+0x2a/0x70 [ 308.873829][T14320] bpf_prog_b1bc9f7c1f89903c+0x41/0x47 [ 308.873849][T14320] bpf_trace_run3+0x10c/0x1d0 [ 308.873876][T14320] ? __kfree_skb+0x109/0x150 [ 308.873901][T14320] ? __kfree_skb+0x109/0x150 [ 308.873986][T14320] ? __kfree_skb+0x109/0x150 [ 308.874009][T14320] __traceiter_kmem_cache_free+0x38/0x60 [ 308.874036][T14320] ? __kfree_skb+0x109/0x150 [ 308.874059][T14320] kmem_cache_free+0x257/0x300 [ 308.874152][T14320] __kfree_skb+0x109/0x150 [ 308.874175][T14320] ? nlmon_xmit+0x4f/0x60 [ 308.874208][T14320] consume_skb+0x49/0x150 [ 308.874271][T14320] nlmon_xmit+0x4f/0x60 [ 308.874306][T14320] dev_hard_start_xmit+0x125/0x3e0 [ 308.874337][T14320] __dev_queue_xmit+0x10f9/0x2000 [ 308.874363][T14320] ? __dev_queue_xmit+0x182/0x2000 [ 308.874403][T14320] ? __skb_clone+0x2a6/0x2d0 [ 308.874444][T14320] __netlink_deliver_tap+0x3c3/0x500 [ 308.874477][T14320] netlink_unicast+0x66b/0x690 [ 308.874503][T14320] netlink_sendmsg+0x58b/0x6b0 [ 308.874533][T14320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.874561][T14320] __sock_sendmsg+0x145/0x180 [ 308.874597][T14320] ____sys_sendmsg+0x31e/0x4e0 [ 308.874640][T14320] ___sys_sendmsg+0x17b/0x1d0 [ 308.874747][T14320] __x64_sys_sendmsg+0xd4/0x160 [ 308.874793][T14320] x64_sys_call+0x191e/0x2ff0 [ 308.874817][T14320] do_syscall_64+0xd2/0x200 [ 308.874867][T14320] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 308.874908][T14320] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 308.874942][T14320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.875025][T14320] RIP: 0033:0x7fa69291eec9 [ 308.875043][T14320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.875064][T14320] RSP: 002b:00007fa69137f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.875085][T14320] RAX: ffffffffffffffda RBX: 00007fa692b75fa0 RCX: 00007fa69291eec9 [ 308.875098][T14320] RDX: 0000000000008840 RSI: 0000200000000740 RDI: 0000000000000004 [ 308.875111][T14320] RBP: 00007fa69137f090 R08: 0000000000000000 R09: 0000000000000000 [ 308.875123][T14320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.875176][T14320] R13: 00007fa692b76038 R14: 00007fa692b75fa0 R15: 00007ffd48ee1778 [ 308.875251][T14320] [ 308.882513][ T31] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.014114][T14323] SELinux: policydb magic number 0x78758c does not match expected magic number 0xf97cff8c [ 309.038718][ T31] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.043155][T14323] SELinux: failed to load policy [ 309.088518][ T31] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.233461][T14326] loop6: detected capacity change from 0 to 128 [ 309.286129][T14326] FAT-fs (loop6): bogus number of reserved sectors [ 309.293810][T14326] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 309.303200][T14326] FAT-fs (loop6): Can't find a valid FAT filesystem [ 309.374125][ T31] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.384013][ T31] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.451498][ T31] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.461379][ T31] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.489249][T14343] 9pnet_fd: Insufficient options for proto=fd [ 309.517961][ T31] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.527918][ T31] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.689162][ T31] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.699099][ T31] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.766192][T14357] loop6: detected capacity change from 0 to 512 [ 309.833635][T14357] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.846200][T14357] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 310.209077][T14367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3281'. [ 310.261080][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 310.261094][ T29] audit: type=1326 audit(2000003526.916:13521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.3.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757be0eec9 code=0x7ffc0000 [ 310.464027][ T29] audit: type=1326 audit(2000003526.948:13522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.3.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f757be0eec9 code=0x7ffc0000 [ 310.488315][ T29] audit: type=1326 audit(2000003526.948:13523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.3.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757be0eec9 code=0x7ffc0000 [ 310.511928][ T29] audit: type=1326 audit(2000003526.948:13524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.3.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f757be0eec9 code=0x7ffc0000 [ 310.536153][ T29] audit: type=1326 audit(2000003526.948:13525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.3.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757be0eec9 code=0x7ffc0000 [ 310.559764][ T29] audit: type=1326 audit(2000003526.948:13526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.3.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f757be0eec9 code=0x7ffc0000 [ 310.583871][ T29] audit: type=1326 audit(2000003526.948:13527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.3.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757be0eec9 code=0x7ffc0000 [ 310.607489][ T29] audit: type=1326 audit(2000003526.958:13528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.3.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f757be0eec9 code=0x7ffc0000 [ 310.631666][ T29] audit: type=1326 audit(2000003526.958:13529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.3.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757be0eec9 code=0x7ffc0000 [ 310.655214][ T29] audit: type=1326 audit(2000003526.958:13530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.3.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f757be0eec9 code=0x7ffc0000 [ 310.731258][T13477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.774591][T14382] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3287'. [ 310.784632][T14384] SELinux: policydb magic number 0x78758c does not match expected magic number 0xf97cff8c [ 310.795884][T14384] SELinux: failed to load policy [ 310.803008][T14386] loop6: detected capacity change from 0 to 1024 [ 310.803954][ T31] bond0 (unregistering): Released all slaves [ 310.816722][T14386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.829075][T14384] loop8: detected capacity change from 0 to 128 [ 310.837187][T14384] FAT-fs (loop8): bogus number of reserved sectors [ 310.843757][T14384] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 310.853162][T14384] FAT-fs (loop8): Can't find a valid FAT filesystem [ 310.856177][T14331] lo speed is unknown, defaulting to 1000 [ 310.867031][T13477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.890363][ T31] tipc: Left network mode [ 310.977199][ T31] hsr_slave_0: left promiscuous mode [ 310.985897][ T31] hsr_slave_1: left promiscuous mode [ 310.985905][T14403] IPv6: Can't replace route, no match found [ 310.998175][ T31] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 311.005237][ T31] batman_adv: batadv0: Removing interface: veth1_vlan [ 311.013594][T14407] IPv6: Can't replace route, no match found [ 311.020099][ T31] veth1_macvtap: left promiscuous mode [ 311.025859][ T31] veth0_macvtap: left promiscuous mode [ 311.032081][ T31] veth1_vlan: left promiscuous mode [ 311.037714][ T31] veth0_vlan: left promiscuous mode [ 311.328753][T14331] chnl_net:caif_netlink_parms(): no params data found [ 311.387616][T14331] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.394765][T14331] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.422491][T14426] loop6: detected capacity change from 0 to 512 [ 311.457063][T14331] bridge_slave_0: entered allmulticast mode [ 311.482655][T14331] bridge_slave_0: entered promiscuous mode [ 311.494265][T14331] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.501535][T14331] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.510927][T14331] bridge_slave_1: entered allmulticast mode [ 311.517601][T14331] bridge_slave_1: entered promiscuous mode [ 311.547785][T14331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.559517][T14331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.589152][T14331] team0: Port device team_slave_0 added [ 311.607080][T14331] team0: Port device team_slave_1 added [ 311.631878][T14426] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.644632][T14426] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 311.672473][T14331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.679671][T14331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.705683][T14331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.873410][T14434] FAULT_INJECTION: forcing a failure. [ 311.873410][T14434] name failslab, interval 1, probability 0, space 0, times 0 [ 311.886132][T14434] CPU: 0 UID: 0 PID: 14434 Comm: syz.0.3296 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 311.886196][T14434] Tainted: [W]=WARN [ 311.886205][T14434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 311.886219][T14434] Call Trace: [ 311.886224][T14434] [ 311.886230][T14434] __dump_stack+0x1d/0x30 [ 311.886308][T14434] dump_stack_lvl+0xe8/0x140 [ 311.886363][T14434] dump_stack+0x15/0x1b [ 311.886378][T14434] should_fail_ex+0x265/0x280 [ 311.886400][T14434] ? ip_setup_cork+0x176/0x410 [ 311.886434][T14434] should_failslab+0x8c/0xb0 [ 311.886512][T14434] __kmalloc_cache_noprof+0x4c/0x320 [ 311.886541][T14434] ip_setup_cork+0x176/0x410 [ 311.886571][T14434] ip_append_data+0xf8/0x130 [ 311.886682][T14434] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 311.886847][T14434] udp_sendmsg+0x282/0x13c0 [ 311.886878][T14434] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 311.886909][T14434] ? __rcu_read_unlock+0x4f/0x70 [ 311.887007][T14434] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 311.887090][T14434] ? __pfx_udp_sendmsg+0x10/0x10 [ 311.887191][T14434] inet_sendmsg+0xac/0xd0 [ 311.887218][T14434] __sock_sendmsg+0x102/0x180 [ 311.887254][T14434] ____sys_sendmsg+0x345/0x4e0 [ 311.887285][T14434] ___sys_sendmsg+0x17b/0x1d0 [ 311.887393][T14434] __sys_sendmmsg+0x178/0x300 [ 311.887432][T14434] __x64_sys_sendmmsg+0x57/0x70 [ 311.887510][T14434] x64_sys_call+0x1c4a/0x2ff0 [ 311.887533][T14434] do_syscall_64+0xd2/0x200 [ 311.887659][T14434] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 311.887687][T14434] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 311.887720][T14434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.887799][T14434] RIP: 0033:0x7f3d20e7eec9 [ 311.887816][T14434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.887846][T14434] RSP: 002b:00007f3d1f8df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 311.887863][T14434] RAX: ffffffffffffffda RBX: 00007f3d210d5fa0 RCX: 00007f3d20e7eec9 [ 311.887875][T14434] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 000000000000000b [ 311.887886][T14434] RBP: 00007f3d1f8df090 R08: 0000000000000000 R09: 0000000000000000 [ 311.887896][T14434] R10: 0000000004008804 R11: 0000000000000246 R12: 0000000000000001 [ 311.887909][T14434] R13: 00007f3d210d6038 R14: 00007f3d210d5fa0 R15: 00007ffede40dbb8 [ 311.887931][T14434] [ 312.158872][T14331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.165848][T14331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.191746][T14331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.231979][T13477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.262676][T14331] hsr_slave_0: entered promiscuous mode [ 312.281485][T14442] loop6: detected capacity change from 0 to 1024 [ 312.285693][T14331] hsr_slave_1: entered promiscuous mode [ 312.298328][T14331] debugfs: 'hsr0' already exists in 'hsr' [ 312.300635][T14442] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.304051][T14331] Cannot create hsr debugfs directory [ 312.336031][T13477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.454758][T14461] IPv6: Can't replace route, no match found [ 312.465266][T14464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3308'. [ 312.513267][T14470] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.526357][T14469] SELinux: failed to load policy [ 312.539080][T14470] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.552746][T14469] macvlan1: entered promiscuous mode [ 312.559371][T14469] ipvlan0: entered promiscuous mode [ 312.565174][T14469] ipvlan0: left promiscuous mode [ 312.570220][T14469] macvlan1: left promiscuous mode [ 312.621118][T14458] loop6: detected capacity change from 0 to 128 [ 312.632055][T14470] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.710533][T14470] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.730168][T14458] bio_check_eod: 98 callbacks suppressed [ 312.730201][T14458] syz.6.3305: attempt to access beyond end of device [ 312.730201][T14458] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 312.750024][T14478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3313'. [ 312.753775][T14458] syz.6.3305: attempt to access beyond end of device [ 312.753775][T14458] loop6: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 312.773541][T14458] syz.6.3305: attempt to access beyond end of device [ 312.773541][T14458] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 312.787094][T14458] syz.6.3305: attempt to access beyond end of device [ 312.787094][T14458] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 312.802288][T14458] syz.6.3305: attempt to access beyond end of device [ 312.802288][T14458] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 312.816264][T14458] syz.6.3305: attempt to access beyond end of device [ 312.816264][T14458] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 312.818206][T14480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=14480 comm=syz.0.3314 [ 312.830193][T14458] syz.6.3305: attempt to access beyond end of device [ 312.830193][T14458] loop6: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 312.830235][T14458] syz.6.3305: attempt to access beyond end of device [ 312.830235][T14458] loop6: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 312.830288][T14458] syz.6.3305: attempt to access beyond end of device [ 312.830288][T14458] loop6: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 312.849528][T14331] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 312.858564][T14458] syz.6.3305: attempt to access beyond end of device [ 312.858564][T14458] loop6: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 312.917356][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.925889][T14331] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 312.939509][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.947854][T14331] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 312.962035][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.970491][T14331] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 312.984654][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.992944][T14487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3317'. [ 313.027392][T14495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3319'. [ 313.059075][T14331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.072961][T14331] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.083918][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.091009][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.104250][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.111331][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.165059][T14507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3323'. [ 313.353308][T14331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.786798][T14532] SELinux: policydb magic number 0x78758c does not match expected magic number 0xf97cff8c [ 313.840316][T14532] SELinux: failed to load policy [ 313.881294][T14534] loop6: detected capacity change from 0 to 128 [ 313.912457][T14534] FAT-fs (loop6): bogus number of reserved sectors [ 313.919114][T14534] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 313.928574][T14534] FAT-fs (loop6): Can't find a valid FAT filesystem [ 313.999529][T14331] veth0_vlan: entered promiscuous mode [ 314.014942][T14331] veth1_vlan: entered promiscuous mode [ 314.053926][T14539] loop6: detected capacity change from 0 to 512 [ 314.063722][T14331] veth0_macvtap: entered promiscuous mode [ 314.071896][T14331] veth1_macvtap: entered promiscuous mode [ 314.093053][T14331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.105145][T14539] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.119046][T14331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.138139][ T8355] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.148284][T14539] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.177224][ T8355] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.222275][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.249334][T13477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.253626][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.303309][T14543] loop8: detected capacity change from 0 to 128 [ 314.337250][T14559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3336'. [ 314.455817][T14569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3337'. [ 314.469352][T14571] SELinux: policydb magic number 0x78758c does not match expected magic number 0xf97cff8c [ 314.543349][T14572] loop6: detected capacity change from 0 to 512 [ 314.560589][T14572] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.573412][T14572] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.325638][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 315.325651][ T29] audit: type=1326 audit(2000003532.208:13816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.0.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d20e75d67 code=0x7ffc0000 [ 315.355985][ T29] audit: type=1326 audit(2000003532.208:13817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.0.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d20e1af79 code=0x7ffc0000 [ 315.379537][ T29] audit: type=1326 audit(2000003532.208:13818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.0.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d20e75d67 code=0x7ffc0000 [ 315.403711][ T29] audit: type=1326 audit(2000003532.208:13819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.0.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d20e1af79 code=0x7ffc0000 [ 315.427200][ T29] audit: type=1326 audit(2000003532.208:13820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.0.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d20e7eec9 code=0x7ffc0000 [ 315.436511][T14571] SELinux: failed to load policy [ 315.451515][ T29] audit: type=1326 audit(2000003532.208:13821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.0.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f3d20e7eec9 code=0x7ffc0000 [ 315.479862][ T29] audit: type=1326 audit(2000003532.208:13822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.0.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d20e7eec9 code=0x7ffc0000 [ 315.503416][ T29] audit: type=1326 audit(2000003532.208:13823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.0.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3d20e7eec9 code=0x7ffc0000 [ 315.527601][ T29] audit: type=1326 audit(2000003532.208:13824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.0.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d20e75d67 code=0x7ffc0000 [ 315.551271][ T29] audit: type=1326 audit(2000003532.208:13825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.0.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d20e1af79 code=0x7ffc0000 [ 315.578996][T14578] loop9: detected capacity change from 0 to 512 [ 315.691676][T14578] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.704234][T14578] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.752239][T14587] FAULT_INJECTION: forcing a failure. [ 315.752239][T14587] name failslab, interval 1, probability 0, space 0, times 0 [ 315.765477][T14587] CPU: 1 UID: 0 PID: 14587 Comm: syz.3.3343 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 315.765523][T14587] Tainted: [W]=WARN [ 315.765529][T14587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 315.765540][T14587] Call Trace: [ 315.765545][T14587] [ 315.765551][T14587] __dump_stack+0x1d/0x30 [ 315.765596][T14587] dump_stack_lvl+0xe8/0x140 [ 315.765618][T14587] dump_stack+0x15/0x1b [ 315.765632][T14587] should_fail_ex+0x265/0x280 [ 315.765671][T14587] should_failslab+0x8c/0xb0 [ 315.765697][T14587] kmem_cache_alloc_noprof+0x50/0x310 [ 315.765722][T14587] ? __anon_vma_prepare+0xcd/0x2f0 [ 315.765746][T14587] __anon_vma_prepare+0xcd/0x2f0 [ 315.765769][T14587] do_wp_page+0x1926/0x24e0 [ 315.765871][T14587] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 315.765910][T14587] ? css_rstat_updated+0xb7/0x240 [ 315.765936][T14587] ? __rcu_read_lock+0x37/0x50 [ 315.765972][T14587] handle_mm_fault+0x77d/0x2c20 [ 315.766011][T14587] do_user_addr_fault+0x636/0x1090 [ 315.766056][T14587] exc_page_fault+0x62/0xa0 [ 315.766084][T14587] asm_exc_page_fault+0x26/0x30 [ 315.766139][T14587] RIP: 0033:0x7f757bcd0c03 [ 315.766213][T14587] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 315.766229][T14587] RSP: 002b:00007f757a86e4a0 EFLAGS: 00010202 [ 315.766246][T14587] RAX: 0000000000000400 RBX: 00007f757a86e540 RCX: 00007f757244f000 [ 315.766261][T14587] RDX: 00007f757a86e6e0 RSI: 0000000000000001 RDI: 00007f757a86e5e0 [ 315.766276][T14587] RBP: 00000000000000f9 R08: 0000000000000009 R09: 00000000000001b1 [ 315.766291][T14587] R10: 00000000000001d0 R11: 00007f757a86e540 R12: 0000000000000001 [ 315.766325][T14587] R13: 00007f757beadb80 R14: 0000000000000020 R15: 00007f757a86e5e0 [ 315.766345][T14587] [ 315.766366][T14587] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 316.086026][T14331] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.113741][T14594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14594 comm=syz.0.3345 [ 316.146868][T14593] FAULT_INJECTION: forcing a failure. [ 316.146868][T14593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.160083][T14593] CPU: 0 UID: 0 PID: 14593 Comm: syz.3.3346 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 316.160121][T14593] Tainted: [W]=WARN [ 316.160129][T14593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 316.160156][T14593] Call Trace: [ 316.160164][T14593] [ 316.160172][T14593] __dump_stack+0x1d/0x30 [ 316.160191][T14593] dump_stack_lvl+0xe8/0x140 [ 316.160163][T13477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.160212][T14593] dump_stack+0x15/0x1b [ 316.160242][T14593] should_fail_ex+0x265/0x280 [ 316.160305][T14593] should_fail+0xb/0x20 [ 316.160332][T14593] should_fail_usercopy+0x1a/0x20 [ 316.160437][T14593] _copy_to_user+0x20/0xa0 [ 316.160523][T14593] simple_read_from_buffer+0xb5/0x130 [ 316.160570][T14593] proc_fail_nth_read+0x10e/0x150 [ 316.160672][T14593] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 316.160722][T14593] vfs_read+0x1a5/0x770 [ 316.160748][T14593] ? __rcu_read_unlock+0x4f/0x70 [ 316.160796][T14593] ? __fget_files+0x184/0x1c0 [ 316.160829][T14593] ksys_read+0xda/0x1a0 [ 316.160892][T14593] __x64_sys_read+0x40/0x50 [ 316.160938][T14593] x64_sys_call+0x27bc/0x2ff0 [ 316.161025][T14593] do_syscall_64+0xd2/0x200 [ 316.161065][T14593] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 316.161098][T14593] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 316.161200][T14593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.161228][T14593] RIP: 0033:0x7f757be0d8dc [ 316.161248][T14593] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 316.161272][T14593] RSP: 002b:00007f757a86f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 316.161298][T14593] RAX: ffffffffffffffda RBX: 00007f757c065fa0 RCX: 00007f757be0d8dc [ 316.161371][T14593] RDX: 000000000000000f RSI: 00007f757a86f0a0 RDI: 0000000000000009 [ 316.161388][T14593] RBP: 00007f757a86f090 R08: 0000000000000000 R09: 0000000000000000 [ 316.161404][T14593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.161421][T14593] R13: 00007f757c066038 R14: 00007f757c065fa0 R15: 00007ffff466dc58 [ 316.161447][T14593] [ 316.415339][T14613] SELinux: policydb magic number 0x646e6f62 does not match expected magic number 0xf97cff8c [ 316.415783][T14614] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3352'. [ 316.440980][T14613] SELinux: failed to load policy [ 316.463371][T14613] macvlan1: entered promiscuous mode [ 316.473388][T14613] ipvlan0: entered promiscuous mode [ 316.486549][T14619] loop9: detected capacity change from 0 to 512 [ 316.493291][T14613] ipvlan0: left promiscuous mode [ 316.499583][T14613] macvlan1: left promiscuous mode [ 316.515714][T14619] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.530824][T14619] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.578153][T14624] SELinux: policydb magic number 0x78758c does not match expected magic number 0xf97cff8c [ 316.608817][T14624] SELinux: failed to load policy [ 316.659140][T14628] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3357'. [ 316.661452][T14331] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.682824][T14624] loop8: detected capacity change from 0 to 128 [ 316.691039][T14624] FAT-fs (loop8): bogus number of reserved sectors [ 316.697621][T14624] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 316.707689][T14624] FAT-fs (loop8): Can't find a valid FAT filesystem [ 316.733446][T14630] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3358'. [ 316.747254][T14632] loop8: detected capacity change from 0 to 1024 [ 316.754181][T14632] EXT4-fs: Ignoring removed bh option [ 316.760037][T14632] EXT4-fs: inline encryption not supported [ 316.773696][T14632] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 316.804357][T14632] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 316.816907][T14632] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.3359: lblock 2 mapped to illegal pblock 2 (length 1) [ 316.846837][T14635] netlink: 'syz.6.3361': attribute type 10 has an invalid length. [ 316.860540][T14638] SELinux: policydb magic number 0x78758c does not match expected magic number 0xf97cff8c [ 316.870741][T14632] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.3359: lblock 0 mapped to illegal pblock 48 (length 1) [ 316.871153][T14638] SELinux: failed to load policy [ 316.890650][T14635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.899721][T14641] netlink: 'syz.6.3361': attribute type 10 has an invalid length. [ 316.907695][T14632] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.3359: Failed to acquire dquot type 0 [ 316.916841][T14635] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 316.927801][T14641] batadv0: entered promiscuous mode [ 316.933059][T14632] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 316.933129][T14641] batadv0: entered allmulticast mode [ 316.952675][T14632] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.3359: mark_inode_dirty error [ 316.965262][T14632] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 316.970522][T14641] bond0: (slave batadv0): Releasing backup interface [ 316.978345][T14632] EXT4-fs (loop8): 1 orphan inode deleted [ 316.991893][ T12] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 316.992561][T14632] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.008314][T14641] bridge0: port 3(batadv0) entered blocking state [ 317.025159][T14641] bridge0: port 3(batadv0) entered disabled state [ 317.039556][ T12] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0 [ 317.040711][T14647] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 317.070274][T14647] SELinux: failed to load policy [ 317.114126][T14632] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.3359: lblock 0 mapped to illegal pblock 48 (length 1) [ 317.210934][T14659] SELinux: policydb magic number 0x78758c does not match expected magic number 0xf97cff8c [ 317.221325][T14659] SELinux: failed to load policy [ 317.234523][T14659] loop6: detected capacity change from 0 to 128 [ 317.242805][T14659] FAT-fs (loop6): bogus number of reserved sectors [ 317.249453][T14659] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 317.258854][T14659] FAT-fs (loop6): Can't find a valid FAT filesystem [ 317.344691][T14648] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.406924][T14668] loop6: detected capacity change from 0 to 8192 [ 317.469003][T14668] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.506828][ T8355] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 317.516109][ T8355] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 317.534745][T14668] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.595673][T14668] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.662642][T14668] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.727659][ T264] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.739211][ T264] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.755036][ T264] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.763671][ T264] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.826517][T14674] loop6: detected capacity change from 0 to 512 [ 317.860227][T14674] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.878502][T14674] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.904681][T13477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.915358][T14679] IPv6: Can't replace route, no match found [ 317.966817][T14694] __nla_validate_parse: 1 callbacks suppressed [ 317.966859][T14694] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3380'. [ 317.993151][T14693] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3379'. [ 318.004393][T14693] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3379'. [ 318.226412][T14699] loop6: detected capacity change from 0 to 128 [ 318.257907][T14704] loop8: detected capacity change from 0 to 512 [ 318.292429][T14704] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.305736][T14704] ext4 filesystem being mounted at /598/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 318.482370][T14699] bio_check_eod: 98 callbacks suppressed [ 318.482390][T14699] syz.6.3381: attempt to access beyond end of device [ 318.482390][T14699] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 318.538985][T14699] syz.6.3381: attempt to access beyond end of device [ 318.538985][T14699] loop6: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 318.575616][T14709] IPv6: Can't replace route, no match found [ 318.581696][T14699] syz.6.3381: attempt to access beyond end of device [ 318.581696][T14699] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 318.598736][T14699] syz.6.3381: attempt to access beyond end of device [ 318.598736][T14699] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 318.614439][T14699] syz.6.3381: attempt to access beyond end of device [ 318.614439][T14699] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 318.628788][T14699] syz.6.3381: attempt to access beyond end of device [ 318.628788][T14699] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 318.644072][T14699] syz.6.3381: attempt to access beyond end of device [ 318.644072][T14699] loop6: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 318.696259][T14699] syz.6.3381: attempt to access beyond end of device [ 318.696259][T14699] loop6: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 318.734954][T14699] syz.6.3381: attempt to access beyond end of device [ 318.734954][T14699] loop6: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 318.779778][T14699] syz.6.3381: attempt to access beyond end of device [ 318.779778][T14699] loop6: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 318.929921][ T4911] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.278292][T14720] chnl_net:caif_netlink_parms(): no params data found [ 319.366340][T14720] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.373739][T14720] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.388808][T14720] bridge_slave_0: entered allmulticast mode [ 319.401672][T14720] bridge_slave_0: entered promiscuous mode [ 319.417490][T14720] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.425204][T14720] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.439288][T14720] bridge_slave_1: entered allmulticast mode [ 319.445907][T14720] bridge_slave_1: entered promiscuous mode [ 319.475373][T14752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.482788][T14752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.490996][T14752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.498447][T14752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.507137][T14752] bridge0: port 3(batadv0) entered disabled state [ 319.516090][T14720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.527525][T14720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.538612][T14754] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 319.559340][T14754] SELinux: failed to load policy [ 319.564682][T14753] loop6: detected capacity change from 0 to 164 [ 319.568004][T14754] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3392'. [ 319.581937][T14720] team0: Port device team_slave_0 added [ 319.588951][T14720] team0: Port device team_slave_1 added [ 319.609044][T14720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.616119][T14720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.642064][T14720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.653522][T14720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.660555][T14720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.687126][T14720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.701428][T14760] loop9: detected capacity change from 0 to 128 [ 319.744042][ T37] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.758658][T14720] hsr_slave_0: entered promiscuous mode [ 319.765981][T14720] hsr_slave_1: entered promiscuous mode [ 319.772022][T14720] debugfs: 'hsr0' already exists in 'hsr' [ 319.777779][T14720] Cannot create hsr debugfs directory [ 319.800772][ T37] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.852356][ T37] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.908275][ T37] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.951413][T14768] SELinux: policydb magic number 0x78758c does not match expected magic number 0xf97cff8c [ 319.962022][T14768] SELinux: failed to load policy [ 319.987900][T14770] loop9: detected capacity change from 0 to 512 [ 319.996229][T14770] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 320.014785][T14770] EXT4-fs warning (device loop9): dx_probe:837: inode #2: comm syz.9.3399: Unimplemented hash flags: 0x0001 [ 320.026296][T14770] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.3399: Corrupt directory, running e2fsck is recommended [ 320.039274][T14770] EXT4-fs error (device loop9): ext4_readdir:264: inode #2: block 3: comm syz.9.3399: path /12/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 320.088594][T14331] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.184179][ T37] bond0 (unregistering): Released all slaves [ 320.241845][ T37] tipc: Left network mode [ 320.247059][ T37] IPVS: stopping backup sync thread 10359 ... [ 320.248617][T14782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3404'. [ 320.267161][ T37] hsr_slave_0: left promiscuous mode [ 320.273385][ T37] hsr_slave_1: left promiscuous mode [ 320.280696][ T37] veth1_macvtap: left promiscuous mode [ 320.372298][T14786] SELinux: policydb magic number 0x78758c does not match expected magic number 0xf97cff8c [ 320.382511][T14786] SELinux: failed to load policy [ 320.389679][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 320.389694][ T29] audit: type=1326 audit(2000003537.553:14065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14785 comm="syz.0.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d20e75d67 code=0x7ffc0000 [ 320.421379][ T29] audit: type=1326 audit(2000003537.553:14066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14785 comm="syz.0.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d20e1af79 code=0x7ffc0000 [ 320.444987][ T29] audit: type=1326 audit(2000003537.553:14067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14785 comm="syz.0.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d20e75d67 code=0x7ffc0000 [ 320.468508][ T29] audit: type=1326 audit(2000003537.553:14068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14785 comm="syz.0.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d20e1af79 code=0x7ffc0000 [ 320.492248][ T29] audit: type=1326 audit(2000003537.553:14069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14785 comm="syz.0.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d20e7eec9 code=0x7ffc0000 [ 320.515866][ T29] audit: type=1326 audit(2000003537.553:14070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14785 comm="syz.0.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d20e7eec9 code=0x7ffc0000 [ 320.516900][T14780] loop9: detected capacity change from 0 to 128 [ 320.539560][ T29] audit: type=1326 audit(2000003537.563:14071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14785 comm="syz.0.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3d20e7eec9 code=0x7ffc0000 [ 320.569291][ T29] audit: type=1326 audit(2000003537.563:14072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14785 comm="syz.0.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d20e7eec9 code=0x7ffc0000 [ 320.592910][ T29] audit: type=1326 audit(2000003537.563:14073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14785 comm="syz.0.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3d20e7eec9 code=0x7ffc0000 [ 320.616431][ T29] audit: type=1326 audit(2000003537.563:14074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14785 comm="syz.0.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d20e7eec9 code=0x7ffc0000 [ 320.661224][T14793] SELinux: policydb magic number 0x78758c does not match expected magic number 0xf97cff8c [ 320.671489][T14793] SELinux: failed to load policy [ 320.714527][T14797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3410'. [ 320.752681][T14720] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 320.764111][T14720] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 320.774308][T14720] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 320.785349][T14720] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 320.799214][ T37] IPVS: stop unused estimator thread 0... [ 320.826697][T14720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.841421][T14720] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.850981][ T8355] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.858155][ T8355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.878233][T14720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 320.889299][T14720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.903179][ T8355] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.910363][ T8355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.961998][T14720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.039257][T14824] netlink: 'syz.3.3412': attribute type 10 has an invalid length. [ 321.047514][T14824] team0: Device dummy0 is up. Set it down before adding it as a team port [ 321.069987][T14720] veth0_vlan: entered promiscuous mode [ 321.077663][T14720] veth1_vlan: entered promiscuous mode [ 321.092585][T14720] veth0_macvtap: entered promiscuous mode [ 321.099762][T14720] veth1_macvtap: entered promiscuous mode [ 321.110360][T14720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.119902][T14720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.133150][ T4996] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.146383][ T264] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.156419][ T264] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.166764][ T264] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.208065][T14831] loop8: detected capacity change from 0 to 2048 [ 321.215360][T14831] EXT4-fs: Ignoring removed i_version option [ 321.221650][T14829] Falling back ldisc for ttyS3. [ 321.237009][T14831] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.266436][T14720] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.313087][T14842] loop8: detected capacity change from 0 to 164 [ 321.320360][T14842] iso9660: Unknown parameter 'GPL' [ 321.350227][T14845] loop8: detected capacity change from 0 to 1024 [ 321.366025][T14848] SELinux: policydb magic number 0x78758c does not match expected magic number 0xf97cff8c [ 321.376186][T14848] SELinux: failed to load policy [ 321.383453][T14845] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.407841][T14720] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.479055][T14863] netlink: 'syz.9.3425': attribute type 1 has an invalid length. [ 321.521275][T14867] loop9: detected capacity change from 0 to 1024 [ 321.528107][T14867] EXT4-fs: Ignoring removed bh option [ 321.533536][T14867] EXT4-fs: inline encryption not supported [ 321.542960][T14867] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 321.554299][T14867] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 321.565338][T14867] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.3427: lblock 2 mapped to illegal pblock 2 (length 1) [ 321.580522][T14867] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.3427: lblock 0 mapped to illegal pblock 48 (length 1) [ 321.596890][T14867] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.3427: Failed to acquire dquot type 0 [ 321.608516][T14867] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 321.618284][T14867] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.3427: mark_inode_dirty error [ 321.632056][T14867] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 321.642324][T14867] EXT4-fs (loop9): 1 orphan inode deleted [ 321.648368][T14867] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.661753][ T264] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 321.680035][T14854] loop8: detected capacity change from 0 to 128 [ 321.680822][ T264] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 321.758412][T14876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3430'. [ 321.864953][T14888] 9pnet_fd: Insufficient options for proto=fd [ 321.901688][T14889] IPv6: Can't replace route, no match found [ 321.917553][T14874] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.927721][T14874] EXT4-fs error (device loop9): __ext4_get_inode_loc:4861: comm syz.9.3427: Invalid inode table block 1 in block_group 0 [ 321.940559][T14895] FAULT_INJECTION: forcing a failure. [ 321.940559][T14895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.941717][T14874] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 321.953706][T14895] CPU: 0 UID: 0 PID: 14895 Comm: syz.3.3437 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 321.953765][T14895] Tainted: [W]=WARN [ 321.953774][T14895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 321.953842][T14895] Call Trace: [ 321.953850][T14895] [ 321.953858][T14895] __dump_stack+0x1d/0x30 [ 321.953884][T14895] dump_stack_lvl+0xe8/0x140 [ 321.953909][T14895] dump_stack+0x15/0x1b [ 321.953932][T14895] should_fail_ex+0x265/0x280 [ 321.953963][T14895] should_fail+0xb/0x20 [ 321.953989][T14895] should_fail_usercopy+0x1a/0x20 [ 321.954101][T14895] _copy_from_user+0x1c/0xb0 [ 321.954142][T14895] ___sys_sendmsg+0xc1/0x1d0 [ 321.954190][T14895] __x64_sys_sendmsg+0xd4/0x160 [ 321.954226][T14895] x64_sys_call+0x191e/0x2ff0 [ 321.954266][T14895] do_syscall_64+0xd2/0x200 [ 321.954303][T14895] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 321.954334][T14895] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 321.954380][T14895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.954407][T14895] RIP: 0033:0x7f757be0eec9 [ 321.954424][T14895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.954448][T14895] RSP: 002b:00007f757a86f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.954545][T14895] RAX: ffffffffffffffda RBX: 00007f757c065fa0 RCX: 00007f757be0eec9 [ 321.954561][T14895] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 321.954577][T14895] RBP: 00007f757a86f090 R08: 0000000000000000 R09: 0000000000000000 [ 321.954593][T14895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.954608][T14895] R13: 00007f757c066038 R14: 00007f757c065fa0 R15: 00007ffff466dc58 [ 321.954704][T14895] [ 321.978905][T14898] loop6: detected capacity change from 0 to 1024 [ 321.983099][T14874] EXT4-fs error (device loop9): ext4_quota_off:7221: inode #3: comm syz.9.3427: mark_inode_dirty error [ 322.390483][T14898] EXT4-fs: Ignoring removed i_version option [ 322.399626][T14898] EXT4-fs: Ignoring removed nobh option [ 322.425072][T14898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.435283][T14905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3441'. [ 322.509703][T13477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.533263][T14914] loop6: detected capacity change from 0 to 1024 [ 322.540112][T14914] EXT4-fs: Ignoring removed bh option [ 322.546397][T14914] EXT4-fs: inline encryption not supported [ 322.552702][T14914] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 322.564190][T14914] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 322.578516][T14914] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.3443: lblock 2 mapped to illegal pblock 2 (length 1) [ 322.594227][T14914] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.3443: lblock 0 mapped to illegal pblock 48 (length 1) [ 322.610502][T14914] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.3443: Failed to acquire dquot type 0 [ 322.623988][T14914] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 322.633694][T14914] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.3443: mark_inode_dirty error [ 322.646044][T14914] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 322.669275][T14914] EXT4-fs (loop6): 1 orphan inode deleted [ 322.675576][T14914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.688294][ T264] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 322.688417][ T264] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 322.700062][T14925] bridge0: port 3(batadv1) entered blocking state [ 322.721029][T14925] bridge0: port 3(batadv1) entered disabled state [ 322.737808][T14923] SELinux: policydb magic number 0x646e6f62 does not match expected magic number 0xf97cff8c [ 322.753915][T14925] batadv1: entered allmulticast mode [ 322.759416][T14921] loop9: detected capacity change from 0 to 2048 [ 322.759745][T14921] EXT4-fs: Ignoring removed i_version option [ 322.766700][T14923] SELinux: failed to load policy [ 322.772782][T14914] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.3443: lblock 0 mapped to illegal pblock 48 (length 1) [ 322.795706][T14925] batadv1: entered promiscuous mode [ 322.796413][T14921] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.805156][T14923] macvlan1: entered promiscuous mode [ 322.825382][T14923] ipvlan0: entered promiscuous mode [ 322.831291][T14923] ipvlan0: left promiscuous mode [ 322.840502][T14923] macvlan1: left promiscuous mode [ 322.857746][T14331] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.894854][T14926] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.904182][T14941] loop9: detected capacity change from 0 to 512 [ 322.942038][T14941] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.993966][T14957] bridge_slave_0: left allmulticast mode [ 322.994972][T14941] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.999673][T14957] bridge_slave_0: left promiscuous mode [ 323.015758][T14957] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.046410][T14957] bridge_slave_1: left allmulticast mode [ 323.052447][T14957] bridge_slave_1: left promiscuous mode [ 323.058097][T14957] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.068638][T14331] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.070793][T14961] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3461'. [ 323.094974][T14957] bond0: (slave bond_slave_0): Releasing backup interface [ 323.102809][T14961] loop6: detected capacity change from 0 to 1024 [ 323.111278][T14961] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 323.119630][T14957] bond0: (slave bond_slave_1): Releasing backup interface [ 323.140303][T14957] team0: Port device team_slave_0 removed [ 323.148883][T14957] team0: Port device team_slave_1 removed [ 323.155373][T14957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.162762][T14957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.173017][ T264] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 323.182254][ T264] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 323.183016][T14976] loop9: detected capacity change from 0 to 1024 [ 323.199082][T14957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.202006][T14976] EXT4-fs: Ignoring removed bh option [ 323.206489][T14957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.212142][T14976] EXT4-fs: inline encryption not supported [ 323.231895][T14976] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 323.243223][T14976] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 323.248147][T14957] batadv1: left allmulticast mode [ 323.254770][T14976] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.3463: lblock 2 mapped to illegal pblock 2 (length 1) [ 323.257021][T14957] batadv1: left promiscuous mode [ 323.271565][T14976] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.3463: lblock 0 mapped to illegal pblock 48 (length 1) [ 323.276124][T14957] bridge0: port 3(batadv1) entered disabled state [ 323.291509][T14976] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.3463: Failed to acquire dquot type 0 [ 323.307970][T14976] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 323.317523][T14976] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.3463: mark_inode_dirty error [ 323.329513][T14976] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 323.335864][T14962] bridge0: port 1(batadv1) entered blocking state [ 323.341606][T14976] EXT4-fs (loop9): 1 orphan inode deleted [ 323.346264][T14962] bridge0: port 1(batadv1) entered disabled state [ 323.346406][T14962] batadv1: entered allmulticast mode [ 323.346925][T14962] batadv1: entered promiscuous mode [ 323.360745][ T37] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 323.370632][T14976] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.398169][ T37] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 323.482443][T14992] netdevsim netdevsim9: Direct firmware load for ..€ failed with error -2 [ 323.517193][T15000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.524643][T15000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.538215][T14999] loop6: detected capacity change from 0 to 764 [ 323.542432][T15000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.551991][T15000] ================================================================== [ 323.560064][T15000] BUG: KCSAN: data-race in console_flush_all / console_flush_all [ 323.567783][T15000] [ 323.570102][T15000] write to 0xffffffff86a20c48 of 8 bytes by task 14999 on cpu 1: [ 323.577816][T15000] console_flush_all+0x35a/0x730 [ 323.582763][T15000] console_unlock+0xa1/0x330 [ 323.587356][T15000] vprintk_emit+0x388/0x650 [ 323.591856][T15000] vprintk_default+0x26/0x30 [ 323.596439][T15000] vprintk+0x1d/0x30 [ 323.600364][T15000] _printk+0x79/0xa0 [ 323.604266][T15000] isofs_fill_super+0x1253/0x1270 [ 323.609328][T15000] get_tree_bdev_flags+0x28e/0x300 [ 323.614437][T15000] get_tree_bdev+0x1f/0x30 [ 323.618849][T15000] isofs_get_tree+0x1c/0x30 [ 323.623358][T15000] vfs_get_tree+0x57/0x1d0 [ 323.627787][T15000] do_new_mount+0x207/0x5e0 [ 323.632306][T15000] path_mount+0x4a4/0xb20 [ 323.636641][T15000] __se_sys_mount+0x28f/0x2e0 [ 323.641315][T15000] __x64_sys_mount+0x67/0x80 [ 323.645906][T15000] x64_sys_call+0x2b4d/0x2ff0 [ 323.650579][T15000] do_syscall_64+0xd2/0x200 [ 323.655086][T15000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.660975][T15000] [ 323.663318][T15000] read to 0xffffffff86a20c48 of 8 bytes by task 15000 on cpu 0: [ 323.670956][T15000] console_flush_all+0x563/0x730 [ 323.675890][T15000] console_unlock+0xa1/0x330 [ 323.680475][T15000] vprintk_emit+0x388/0x650 [ 323.684974][T15000] vprintk_default+0x26/0x30 [ 323.689567][T15000] vprintk+0x1d/0x30 [ 323.693466][T15000] _printk+0x79/0xa0 [ 323.697379][T15000] batadv_hardif_disable_interface+0xf0/0x990 [ 323.703447][T15000] batadv_meshif_destroy_netlink+0x48/0x2e0 [ 323.709347][T15000] rtnl_dellink+0x3bd/0x550 [ 323.713863][T15000] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 323.718803][T15000] netlink_rcv_skb+0x123/0x220 [ 323.723574][T15000] rtnetlink_rcv+0x1c/0x30 [ 323.727994][T15000] netlink_unicast+0x5bd/0x690 [ 323.732756][T15000] netlink_sendmsg+0x58b/0x6b0 [ 323.737530][T15000] __sock_sendmsg+0x145/0x180 [ 323.742226][T15000] ____sys_sendmsg+0x31e/0x4e0 [ 323.747000][T15000] ___sys_sendmsg+0x17b/0x1d0 [ 323.751672][T15000] __x64_sys_sendmsg+0xd4/0x160 [ 323.756521][T15000] x64_sys_call+0x191e/0x2ff0 [ 323.761198][T15000] do_syscall_64+0xd2/0x200 [ 323.765710][T15000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.771602][T15000] [ 323.773918][T15000] value changed: 0x000000000000304b -> 0x000000000000304c [ 323.781014][T15000] [ 323.783375][T15000] Reported by Kernel Concurrency Sanitizer on: [ 323.789545][T15000] CPU: 0 UID: 0 PID: 15000 Comm: syz.9.3472 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 323.800912][T15000] Tainted: [W]=WARN [ 323.804713][T15000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 323.814763][T15000] ================================================================== [ 323.824169][T15000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.841328][T14999] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 323.845717][ T1810] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 323.852633][T14999] FAULT_INJECTION: forcing a failure. [ 323.852633][T14999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.858628][ T1810] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 323.881499][T14999] CPU: 1 UID: 0 PID: 14999 Comm: syz.6.3473 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 323.881533][T14999] Tainted: [W]=WARN [ 323.881539][T14999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 323.881550][T14999] Call Trace: [ 323.881557][T14999] [ 323.881565][T14999] __dump_stack+0x1d/0x30 [ 323.881625][T14999] dump_stack_lvl+0xe8/0x140 [ 323.881641][T14999] dump_stack+0x15/0x1b [ 323.881653][T14999] should_fail_ex+0x265/0x280 [ 323.881706][T14999] should_fail+0xb/0x20 [ 323.881722][T14999] should_fail_usercopy+0x1a/0x20 [ 323.881742][T14999] _copy_from_user+0x1c/0xb0 [ 323.881767][T14999] bm_register_write+0xdb/0xbf0 [ 323.881803][T14999] ? avc_policy_seqno+0x15/0x30 [ 323.881822][T14999] ? selinux_file_permission+0x1e4/0x320 [ 323.881840][T14999] ? __pfx_bm_register_write+0x10/0x10 [ 323.881861][T14999] vfs_write+0x266/0x960 [ 323.881878][T14999] ? __rcu_read_unlock+0x4f/0x70 [ 323.881924][T14999] ? __fget_files+0x184/0x1c0 [ 323.881945][T14999] ksys_write+0xda/0x1a0 [ 323.881963][T14999] __x64_sys_write+0x40/0x50 [ 323.882008][T14999] x64_sys_call+0x27fe/0x2ff0 [ 323.882023][T14999] do_syscall_64+0xd2/0x200 [ 323.882046][T14999] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 323.882106][T14999] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 323.882126][T14999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.882184][T14999] RIP: 0033:0x7fa69291eec9 [ 323.882198][T14999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.882214][T14999] RSP: 002b:00007fa69137f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 323.882253][T14999] RAX: ffffffffffffffda RBX: 00007fa692b75fa0 RCX: 00007fa69291eec9 [ 323.882266][T14999] RDX: 000000000000002b RSI: 00002000000000c0 RDI: 0000000000000006 [ 323.882278][T14999] RBP: 00007fa69137f090 R08: 0000000000000000 R09: 0000000000000000 [ 323.882289][T14999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.882301][T14999] R13: 00007fa692b76038 R14: 00007fa692b75fa0 R15: 00007ffd48ee1778 [ 323.882319][T14999] [ 323.883320][T14983] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.101723][T14983] EXT4-fs error (device loop9): __ext4_get_inode_loc:4861: comm syz.9.3463: Invalid inode table block 1 in block_group 0 [ 324.114498][T14983] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 324.125536][T14983] EXT4-fs error (device loop9): ext4_quota_off:7221: inode #3: comm syz.9.3463: mark_inode_dirty error [ 325.987980][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 325.987994][ T29] audit: type=1400 audit(2000003543.433:14146): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=49624 daddr=10.128.1.88 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1