last executing test programs: 3m57.028524923s ago: executing program 32 (id=55): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000000c0)={0x63ee91c5, 0x84df}) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}, 0x44}], 0x1, 0x40010102, 0x0) 1m10.585616832s ago: executing program 4 (id=3271): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) 1m10.408766616s ago: executing program 2 (id=3274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x6000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000000)='\xaa\x00', &(0x7f0000000080)="fd", 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='syzkaller\x1b', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000002c0)='\xfcG\xd8\xc9\xa1S\xf7\xf7\xccl\x8e\a\xfb\x04\xb8\xec+O', &(0x7f0000000300)='\a', 0x1) close(r2) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) 1m10.243228228s ago: executing program 2 (id=3275): syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) 1m10.242852809s ago: executing program 2 (id=3276): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r1 = syz_io_uring_setup(0x4172, &(0x7f00000002c0)={0x0, 0x2, 0x10100, 0x0, 0x4}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/19, 0x13}], 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 1m10.1565622s ago: executing program 2 (id=3277): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8441, 0x141) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 1m9.848142917s ago: executing program 4 (id=3284): futimesat(0xffffffffffffffff, &(0x7f00000001c0)='./control\x00', 0x0) 1m9.817255357s ago: executing program 0 (id=3285): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r1 = syz_io_uring_setup(0x4172, &(0x7f00000002c0)={0x0, 0x2, 0x10100, 0x0, 0x4}, &(0x7f0000000100), &(0x7f00000000c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x1}, 0x18) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) mount$9p_tcp(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x801, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=tcp']) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 1m9.695510369s ago: executing program 4 (id=3287): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000340), &(0x7f0000000300)=r2}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x90}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x10}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_io_uring_setup(0x27f0, &(0x7f0000000340)={0x0, 0x400000, 0x10100, 0x400001, 0x28f}, &(0x7f0000000080), &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x6e27, &(0x7f00000003c0)={0x0, 0xd762, 0x100, 0x1, 0xbf, 0x0, r6}, &(0x7f00000002c0)=0x0, &(0x7f0000000780)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r6, 0x8184c, 0x0, 0x9, 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x1, 0x3a, '\x00', 0x3a, '[', 0x3a, './file0', 0x3a, [0x50, 0x43, 0x4f, 0x50, 0x4f, 0x46, 0x50, 0x4f]}, 0x31) 1m9.695213689s ago: executing program 0 (id=3288): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x6) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) 1m9.529477032s ago: executing program 3 (id=3289): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000, 0x2000000}, 0x10) 1m9.528801352s ago: executing program 4 (id=3290): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004000}, 0x40) rt_tgsigqueueinfo(0x0, 0x0, 0x24, &(0x7f0000000000)={0x17, 0xb, 0x85}) close(r1) lsetxattr$security_selinux(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300), &(0x7f0000000340)='system_u:object_r:dpkg_exec_t:s0\x00', 0x21, 0x1) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x7, 0x6, 0x7267, 0xb, 0x6, 0x1ffffffffff, 0x6, 0x9, 0x35}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='cubic\x00', 0xfe92) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000000540)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000001540)="fb", 0x1}], 0x1, &(0x7f0000000980)=[@init={0x18, 0x84, 0x0, {0x0, 0x7, 0x3, 0x5}}], 0x18, 0x8008}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400}) 1m9.453490104s ago: executing program 3 (id=3291): mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x49}, 0x2, 0x0, 0x1, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x401}, 0x11) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) 1m9.452999194s ago: executing program 0 (id=3292): r0 = socket$unix(0x1, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) creat(&(0x7f00000000c0)='./file0\x00', 0x48) connect$unix(r0, 0x0, 0x0) 1m9.375949046s ago: executing program 3 (id=3293): syz_emit_ethernet(0x7e, &(0x7f0000000080)={@link_local={0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x70, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @dest_unreach={0x3, 0xd, 0x0, 0x0, 0x7, 0x9, {0x15, 0x4, 0x0, 0x6, 0x65, 0x64, 0x4, 0x9, 0x84, 0x80, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x21, 0x0, 0x0, [0x4, 0x0, 0x8, 0x7]}, @rr={0x7, 0xb, 0x11, [@private=0xa010100, @rand_addr=0x64010101]}, @lsrr={0x83, 0xb, 0x88, [@empty, @dev={0xac, 0x14, 0x14, 0x2e}]}, @timestamp={0x44, 0x10, 0xfc, 0x0, 0x0, [0x2, 0x4, 0x0]}]}}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x22}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@discard}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@discard}]}, 0x1, 0x609, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvzCZ5kzbvm/bl5cUWxYCHFqTbpBarXmzrwR4KFuxBxENDk9TQ7Q+aFGwtNAUPCgoiXkV68R/wLr17E0G9eRaqSEVBS1dmd7bdbHbTNc3uppnPByY7zzOz+zzfnX12npnJsxNAYU1mf9KIXRH3TiURE03LxqO+cDJf786v105nUxLV6uu/JJHkeY31k/xxe54YjYhvjkb8t7S63MUrV8/OVKp11yP2L527uH/xytV9C+dmzsydmTs/feCFg4emXpw+OL0hcW7PH48df+3Jj957+/n5byv7kjgcJ4ffnY2WODbKZEzGvTzE5vyhiDiUzbR5Xx43WyCEQivln8fhiPh/TESplqqbiIUPB1o5oKeqpYgqUFCJ9g8F1egHNI7tuzsOPtnjXkn/3D5SPwBaHf9Q/dxIjNaOjbbdSZqOjOrnNnZsQPlZGXev7f4sm2LFeYg/7m+doQ0op5PlGxHxRLv4k1rddtQizeJPV9QjiYipiBjJ6/fKI9QhaZrvxXmYtaw3/jQiDuePWf7RdZY/2ZLud/wAFNOtI/mOfDlLPdj/ZX2PRv8n2vR/xtvsu9Zj0Pu/zv2/xv5+tHaOPG3ph2V9lhPtX3K4NePHD4590qn85v5fNmXlN/qC/XD7RsTulvjfz4LN+z9Z/Emb7Z+tcupwd2W8+t3PxzotG3T81ZsRe9oe/zzolWZza1yf3D+/UJmbqv9tW8ZXX7/1Rafym+IfHdT239Yh/qbtn7Y+L3tPLnZZxpcnbp7rtCz7Hrlbvb7G9k9/Gknqx5sjec47M0tLl6YjRpLj+SpN+QfWrktjncZrZPHvfaZ9+1/x+b+x8nXGGl+ZXbj4xtk7nZat5/PfdDH5XrXLOnSSxT/78O2/qv1neR93Wcbvb15+qtOyteIfe5TAAAAAAAAAoIDS2jXYJC3fn0/Tcrk+XvZ/sS2tXFhcenb+wuXzsxF7a/8POZw2rnRP1NNJlp7O/x+2kT7Qkn4uInZGxKelsVq6fPpCZXbQwQMAAAAAAAAAAAAAAAAAAMAmsT0f/9+4T/Vvpfr4f6AgenmDOWBz67r9l3pbD6D/au1/1S2egCLQ/4fi0v6huLR/KC7tH4pL+4fi0v6huLR/KC7tHwAAAAC2pJ1P3/ohiYjll8ZqU2YkX2ZEEGxtw4OuADAwRvRDcd2/9K+zD4XTVf//z/zHAXtfHWAAknaZtc5Bde3Gf6vtMwEAAAAAAAAAAACAHtizq/P4f2ODYWsz7A+K6xHG//vpAHjM+el/KC7H+MDDRvGPdlpg/D8AAAAAAAAAAAAA9M14bUrScj4WeDzStFyO+HdE7IjhZH6hMjcVEf+JiO9Lw//K0tODrjQAAAAAAAAAAAAAAAAAAABsMYtXrp6dqVTmLjXP/LUqZ2vPNO6C2oeyXo5/+KxI+v+2jEXEwDdKz2aGmnKSiOVsy2+Kil1ajM1RjdrMgL+YAAAAAAAAAAAAAAAAAACggJrGHre3+/M+1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u/B/f97NzPoGAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAx9PfAQAA//+BdkCC") ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000300)={0x14, 0x23, 0x7, 0x6, "2127230ade56dfc1a39a1e91385fd67f3309cd02000300"}) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 1m9.320499937s ago: executing program 0 (id=3294): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="180500000000000000000000000000003cc00000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000090d6b04ca3039c0dde771f4ab2d3ca9791a2a14566c644ad10edf4952e8b9cc4a7aad1af8977a978d78c2bfe6d3ae5af97c443c75717f4be10c7a7912485a7f405d1527efef1a8f4cf1a4f7f5e5905916259ffb7080615486969943c2a9dfd7df61fb840c2fd872b96a02ca8d3f3a631ac1259b283294be9f041050f014b185e13520c1c7f59489b98233c9ce3f7248cb14f3d9035a82180ca61d18e0f70b7a8375477e4da5d278d1e168c099610b28482761eeec2cd3d77e2c1559c30142ae74b0a270c84564bff", @ANYRES16=r2, @ANYBLOB="000000180576191868f3b40056ee884285000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) faccessat(0xffffffffffffffff, 0x0, 0x5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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") signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4]}, 0x8, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000001640)={0xfc, {"fce3ad0eed0d07f91b50091887f70706d038e7ff7fc6e5539b0d3c0a8b089b3f383163030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b3107200773090acd3b78130daa61d8e8040040005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a91e0dad47f36fd9f73c152a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e1c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df11847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e30400f7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddba02635478d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f79400000000ddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df04b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e785419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd502ac8044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88e4facfd4c735a20307c737afa2d60399473296b831dbd933d93990f00064279b10ea0c5833f41f157ea2302993dbe97fb1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea10c00a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeee964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e42df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed62480ec43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e069160f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df076f0ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f87296ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef869c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1066) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffeb9}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3a56735ae5cec9c4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x0, 0xfffffffffffffdae, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405}, 0x4e4a9eaac70c947b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') linkat(r5, &(0x7f0000000440)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x1400) socket$nl_netfilter(0x10, 0x3, 0xc) modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x1000, 0x2000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="4500000005"], 0x50) 1m9.282343037s ago: executing program 3 (id=3296): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000740)=""/243, 0x27, 0xf3, 0x8, 0x80000000}, 0x28) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xdc, &(0x7f0000000200), 0x1, 0x46f, &(0x7f00000008c0)="$eJzs3M1vVFUbAPDnTlt4gRdbDH7woVTRSDS2tKCycAFGExeamOgCl7UtBCnU0JoIIVKNwaUh0ejOuDTxL3ClG6OuTNzq3pAQwwZk4zV35l5mOsxHhw5My/x+yc2cc++ZnvP03tM5557eCaBvjUbEJxHx/4j4IyKGI+LfNL2wrMBo5eX61fPT/1w9P51Emr75dxJJRFy7en66KJrkr1uKzFIlv6tBvQtnz52cmpubPZPnxxdPvTe+cPbcsydOTR2fPT57evLQoYMHJl54fvK5FUQx0LZE1qZrOz+c373j1bcvvT599NI7v3yX5OFFXRxdMtrq4JNdrqzXttakk8EeNoSOZD0nO11D5f4/HANRPXnD8crHPW0ccEelaZpubH54KQXuYUmsuOSdbQhwlxUf9Nn8t9ju0tBjTbhypDIByuK+nm+VI4NRyssM1c1vuymbbR1duvF1tsWduQ8BALDMD0cqr7eO/0rxYE25w/na0EhEbKtZ3NgeEQ9ElMs+FBEPd1h//SLJreOf0uUOf2RHsvHfi/na1vLxXzH6i5GBPLe1HP9QcuzE3Oz+iLgvIvbF0MYsP9Gijh9f/v2zZsdGa8Z/2ZbVX4wF83ZcHqy7QTcztTi1mphrXfkoYudgo/iTmysBSUTsiIide2reuGHldZx4+tvdzY61j7+FLqwzpd9EPFU5/0tRF38hab0+Of6/mJvdP15cFbf69beLbzSrv9P4t31VnbN1Q3b+Nze8/m/GP5IO1KzXLnRex8U/P206p7nd639D8lY5XVyGH0wtLp6ZiNiQvJbvP1zdP1l9b5Evymfx79vbuP/fH9XfxK6IyC7iRyLi0YjYk7f9sYh4PCL2toj/55eeeHfZjhvVyfeqrv8uyOKfaXP+k9r1+ttIDJz86ftllY5Ukys7/wfLqX35nvLfvy9bx7XSBq7+NwgAAABrX6n8v/9JaexmulQaG6v8v/z22Fyam19YfObY/PunZyrPCIzEUKm40zVccz90Ip/WF/nJuvyB/L7x5wObyvmx6fm5mV4HD31uS5P+n/mr/WM1wHrneS3oX/o/9C/9H/qX/g99q9Hz/5valUndHIR7QqPP/ws9aAdw9xn/Q//qtP9XJgctvjYMWDd8/kP/0v+hL63muf5VJoqvH2xYplh/6EXD2ibStF2ZwVZvv9A45HWWiNKaaEaXEl+sjWasoURv/y4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0y38BAAD//zSD9JA=") ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 1m9.257702938s ago: executing program 2 (id=3297): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES8=r0], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x1300) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1b, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, 0x0, &(0x7f0000000280)=@udp}, 0x20) futimesat(0xffffffffffffffff, &(0x7f00000001c0)='./control\x00', 0x0) 1m9.236133958s ago: executing program 3 (id=3298): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_bp={0x0, 0x224ef61b12363fa4}, 0x0, 0x4, 0x5, 0xffffffffffffffff, 0x8, 0x3, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) socket$netlink(0x10, 0x3, 0x14) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) inotify_init1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r0}, 0x9) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1m9.184313509s ago: executing program 0 (id=3299): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x10, 0x0, 0x3, 0x0, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xdfe6, 0x5}, 0x100100, 0xc8, 0x2, 0x7, 0x0, 0x10003, 0xa, 0x0, 0x3}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) fstatfs(0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) kexec_load(0x0, 0x0, 0x0, 0x0) acct(0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000540), 0x0) socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket(0x200000000000011, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='percpu_alloc_percpu\x00', r1, 0x0, 0xfffffffffffffffa}, 0x18) kexec_load(0x100, 0x5, &(0x7f0000000d80)=[{&(0x7f0000000540)="dc4d032246f1a4d3f13a3bf53ad2d311824549e8fffcb23531f20895e76e015cc1030d323bf7f31d68759d11e28773f955c6a641fa6c3199195c3d7e1dc9c9d435fc1ed8559c5c2a713d3367c367a8ac420de951d2aeb0ba6bda723c461cab084aed8bd78dd5e552bdecaf8f7da0309dd2726dabb4dc6c1c2c8623be5c437b75b075ceed327f87ec4b6c7f0cff3bd5f3f8c33276e56eb35c964afdac8628047132fccb70254f2b2927096ea9a3a04a2dff366c94f8a0bcadb576d95068eb2995baf5c331e4c56937eb3d0f6fefd8d84f2d2cdfd68698a2cf97a4e4c4e4c0008fad2177dc3d", 0xe5, 0x1, 0x7fffffff}, {&(0x7f00000007c0)="5bb055336db7d77ac66cb756447c31d9871d8a22e913271936bb980cb472ef796a5955a074788315441983bdc11f076dc8f5123c1f30372c6f14003621a47d6450b9d19b4c716af67b61faed03e861460d79706c1669c2ca80659679d5c85b64965b0762c7361dc46cf35b45809ac06245d4d86bd7348671c494070e007532b17fc5ee819c93e8bebbd38c6346a117bb4af08f4113cf4534f93f803d65d4248812400753659e55f1fe0e829caae327a4b97469197930bfd5edcd67655d001e365ecb2867aa79905c", 0xc8, 0x0, 0x3}, {&(0x7f0000000c80)="149695c0cc532b7e4ab80972a0cc94a4754110e993db420869e92eb2987465c51e056f52b9a3605e979c33de007a4ba7e3f2280447d86cc063154c8885bd529ad6e786e40ac6faf15ce609712f1bf9036246f6dac77a127a3d6d7e1232b76420f42805707f163066db49f52177c6c19de4645d72540fcf2c1e19cefa6aa989688226e001d77eb4484cfa183c6d75b132e0022bc873c501a09f5eb1165e86dd4cab36b87159b9a7c52e5703e0094a44d18aa108268e06ab02086ac27840e3bbbde29f050885cf9e5a005d9c67befc455cc0da2d2b83b2160849129bd1436167dc637ed6db8959c1762b48ecf011f58b221ad3e50b321233ea12", 0xf9, 0x6, 0x81}, {&(0x7f0000000100), 0x0, 0x7, 0x2}, {&(0x7f0000000300)="31c21ce48baf6efac0697f408eff132b628c7d69a0db7dde5ce1f1e40f5ad4787a9bba4f662a896308ce30aa71a09ad30d193273f07c0d0a901582f519b5f256849dfdbd5a2fe51af1a0ff3560ffbf6d9a3234e93669ea538c9babf1083efdc3c3bfa95543", 0x65, 0x3, 0x7ff}], 0x1) io_uring_setup(0x1694, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 1m9.133502371s ago: executing program 4 (id=3300): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000003000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020008000000000000000013040000000000"], 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2, 0x0, 0xb}, 0x18) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x6, 0xff, 0x5e, 0x54, 0x0, 0x7, 0xc9008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0xfffd, 0xfffffffffffffdf5}, 0x1a, 0x81, 0x800, 0x6, 0x8, 0x4002, 0x101, 0x0, 0x2800000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r7, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r7, &(0x7f0000000080), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2400c0c4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r8, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_alloc\x00', r10}, 0x18) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r0, 0x0) r11 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r11, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r11, {0x6}}, './file0\x00'}) write$binfmt_format(r11, &(0x7f0000000800)='-1\x00', 0x3) 1m8.995413263s ago: executing program 3 (id=3301): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_get_self_attr(0x68, &(0x7f0000000200)={0x0, 0x0, 0xc7, 0xa7, ""/167}, &(0x7f0000000080)=0xc7, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x7800, 0x20, 0x6, 0x1, {{0x13, 0x4, 0x3, 0x22, 0x4c, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x20, 0xba, 0x0, 0x6, [0x1, 0x4, 0x0, 0x8, 0xffffff80, 0x8, 0x3]}, @noop, @ssrr={0x89, 0xf, 0x91, [@multicast2, @multicast2, @empty]}, @timestamp={0x44, 0x8, 0x83, 0x0, 0xa, [0x8]}]}}}}}) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000640)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) fsetxattr$security_capability(r5, &(0x7f0000000040), &(0x7f0000000200)=@v3={0x3000000, [{0xffffff80, 0x2d}, {0x8, 0x4}]}, 0x18, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x1a, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3e}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r7}, 0x10) iopl(0x8) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000780), 0x15000002) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000000), &(0x7f0000000200)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000600)='ata_eh_link_autopsy\x00', r7, 0x0, 0x80000001}, 0x18) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000f80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x400c800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) lsm_get_self_attr(0x66, &(0x7f0000000380)={0x0, 0x0, 0xa4, 0x84, ""/132}, &(0x7f00000004c0)=0xa4, 0x0) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) 1m8.923807285s ago: executing program 33 (id=3301): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_get_self_attr(0x68, &(0x7f0000000200)={0x0, 0x0, 0xc7, 0xa7, ""/167}, &(0x7f0000000080)=0xc7, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x7800, 0x20, 0x6, 0x1, {{0x13, 0x4, 0x3, 0x22, 0x4c, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x20, 0xba, 0x0, 0x6, [0x1, 0x4, 0x0, 0x8, 0xffffff80, 0x8, 0x3]}, @noop, @ssrr={0x89, 0xf, 0x91, [@multicast2, @multicast2, @empty]}, @timestamp={0x44, 0x8, 0x83, 0x0, 0xa, [0x8]}]}}}}}) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000640)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) fsetxattr$security_capability(r5, &(0x7f0000000040), &(0x7f0000000200)=@v3={0x3000000, [{0xffffff80, 0x2d}, {0x8, 0x4}]}, 0x18, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x1a, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3e}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r7}, 0x10) iopl(0x8) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000780), 0x15000002) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000000), &(0x7f0000000200)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000600)='ata_eh_link_autopsy\x00', r7, 0x0, 0x80000001}, 0x18) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000f80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x400c800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) lsm_get_self_attr(0x66, &(0x7f0000000380)={0x0, 0x0, 0xa4, 0x84, ""/132}, &(0x7f00000004c0)=0xa4, 0x0) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) 1m8.880312895s ago: executing program 4 (id=3303): mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) 1m8.880109365s ago: executing program 34 (id=3303): mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) 1m8.880012996s ago: executing program 0 (id=3304): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e40), r0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x48010) (fail_nth: 1) 1m8.875237115s ago: executing program 35 (id=3304): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e40), r0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x48010) (fail_nth: 1) 1m7.304224836s ago: executing program 2 (id=3316): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1m7.260787677s ago: executing program 36 (id=3316): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 44.857702484s ago: executing program 8 (id=3616): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r1 = syz_io_uring_setup(0x4172, &(0x7f00000002c0)={0x0, 0x2, 0x10100, 0x0, 0x4}, &(0x7f0000000100)=0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4, 0x0, 0x1}, 0x18) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/19, 0x13}], 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 44.704284297s ago: executing program 8 (id=3619): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@nobarrier}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8441, 0x141) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 44.345544734s ago: executing program 8 (id=3626): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x240008c4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0, 0x0, 0x8}, 0x18) madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x80000000, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') renameat(r10, &(0x7f0000000080)='./mnt\x00', r10, &(0x7f0000000100)='./cgroup\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 44.131196258s ago: executing program 8 (id=3631): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x40) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x19a) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x70000, 0x181) rmdir(&(0x7f0000000000)='./file0\x00') r8 = open_tree(r7, &(0x7f0000000280)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r4}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r9, 0x0, 0x2}, 0x18) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r10, &(0x7f0000000080)=""/34, 0x22) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[]) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 43.906789903s ago: executing program 8 (id=3638): socket(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) (async, rerun: 64) r0 = getpid() (async) sched_setaffinity(0x0, 0x0, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r1, 0x0}]) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) (async, rerun: 32) r3 = getpid() syz_pidfd_open(r3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (rerun: 64) socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_open_dev$sg(0x0, 0x0, 0x48802) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) (rerun: 32) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) move_mount(0xffffffffffffffff, &(0x7f0000003900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x44) (async) connect$inet6(r7, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "313c09de00fd6d007400", "62266bd8", "1e00040000000100"}, 0x28) (async) write$binfmt_script(r7, &(0x7f0000000500)={'#! ', './file0'}, 0xb) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 43.496658261s ago: executing program 8 (id=3645): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x0, 0x0}) r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0xf}, 0x8) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, 0x0) 43.478003781s ago: executing program 37 (id=3645): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x0, 0x0}) r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0xf}, 0x8) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, 0x0) 1.792972515s ago: executing program 1 (id=4380): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000677c5c9ae9d58381b7900fcf6cba3486862cf892fa5a67bc6b3bf0c853f92a6375fe14b9de9d944b964ab752f7bd7de09cce21422b56598bcc311707bfa15a8f201d60c3f1ef823e81aa8ef78b7cc332b1aee9191dbc78a50881d6cc4db2122df260dd1c9d1d2fe5a1daf5111989d157e86bad33865892198dfb447772781784b78317e48736d078cb41909ff7734b48"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="414601a1"], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00'}, 0x18) 1.513822961s ago: executing program 7 (id=4388): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x10000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x81}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000200)={0x1, 0x2}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474203, 0x408}, 0x18) 1.51360082s ago: executing program 7 (id=4389): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRES32, @ANYBLOB="00c02201d15f60e700000000d7ba20a8"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_clone(0x20000000, &(0x7f0000001040)="625a0f0ea9dc395ac6df9c31ff506da806552732c5c1bd1c9be8eb487a0df1f724d0f1b11ce89579fb8a4d89d0eb96264a240dfff3a9d270b15951a34c9f758707948248e7b5a734c6394b0ae5b38eb8e17d2506568c169fe1a9e7203658e053fe6ca3ea13cd3bffd5f2ed01764521e5d38f07ef5c56052687b92437578b234da8285da241d172d67d289e342d6d2043ea996d3176d58ccac9da50d5fb817f7a4509f904d3288af01a6934114b244e573490fbebb2eebc3426544ed442927d022d1834b421e523a4c0c9baa032c416fc77dd7fef3b222286188dbc78208e538fb7457fe75d2b02b31dc529bf295ba665f0c8d928eade399175f6259b12da19b733ef4a16f6566c6034f67043efe001911f362dbb31e1916fa775c2a689428e8031c2d490c9c7915fb0ae97f0fd46f9296f90fc375fdf160aec804f1e47b0036adc2743aa81a6cf096a43ad06b885ad65baefec685f56e2750038a7b37b1bc00ac8b40643ebaa49eedd6437175cdf95ce1057e4d6389459cfa117bebc1b31e086218824fa440bbeb65c8137849f58ed0517f037a7d895dd6e50e75c40ddb3096514613de7ce724a86faf4180582ae3dcaa83942d2b2011465790869379e4d2219a1594506a9adc6ee34c5ea8e38dbe55431758fa0c72e97265e7080ce61b8648473d56f11fcccc2d4b4e3da3e57c8ee7794b2281f44c5eb44f2936a20b503e0ab9ed33d7eed7ffab8004f1ab33df23d31cb52e2b61194c3fce92677407c84dc7d7df827d22a902d57013a1f4c1b9ef730eed6b7cea9518ea048cc03613270f582171e2804e2d5756fba293d5b923b19ed83cffd6de88cad2ca34f5e5e5b262a10c0cafe954599b1a9559c6aa703e8c3c660f0e6cc05a8c6e4d6c9acb1244dd7b99e010901bece0d555aeea08ea8b1582aab2e8717a3177c6f10ae24832414e0f59999381f5d7fcaa4a89bf142f36b6bebe33a689474e4122c30e2144e5e63023b374c23569fed00e9586609e07dc032f6a9a949a25dafd44ea859fd411a5c298d7d8e18d1723904144ffda5ad3c81fb4f1ee006e6e788968caf04b8d6c0d64333808db7fc48cfb605ad26a5b545035b143b9abef06da9b3210d4e235c45baf56b4a0007049b353883c5a3c7aa049381535afce862f54c1745e5beb23fdb6e2eae766dbd15faac04ac65718b2dbdd9d6e54af04712e31c66ea66dfc45035abf34cddcee5f4c355ede22214934d3f5cb74a46ed853076d609581f1743f3e99169f5893480b093960777926ebaaaf81d76474a9b3969e0d5d8f9d5a90de73fac1b3452efd909be7320e6b2bdb4dd09d2799be5860298763ff4cadd504f6d5eb476349fe97d533ebdd2ef9067f9712ef33112931b225beaf9bca101172324115d47547ecda38dae1b6531cfdfdd9c9a0761417db535f16650a854fbab3d826045e710b05bc8d559320f9181c70a3b84fea0eb6dc35f6afd5c352f0d175d4303671dfd6d80a1689e3398e8e6f7dd5b382b0e27e1d9a0ce32325c97f4457128626918f429ca0ee42eb821cb28bffc0a07cae6c2619e8d02dbe5f0f640d09240319d8474b8886f3591ddd5673a8092024372dcbf9fc084f7888651d6089a5410d21bda35426dbfb0c0a32e0a933e645e91e1c157cb41032a0222364f4396d0ec1aed9f8e66729f1c3e5544932313049f2358999f04505cc1956c9fc436111c100333e23965e31b473127e8496647f75256217bd62485b582fb05a1a9b93d191dbe06acd0149d1ce12af84e1690a1a5cbd66988f28206e547a42a8b76e0f36301b07bfcfbdab6d4937031f450f0edee31eecb30ca4b18ef3db96b5e3f739616689e8739d738901aff57fd468d9617f7da03355dc6a6b723fe1873814041e339f7b761b88bb5f9aa12083647ab9499f2adaa5eb836d530b0f66dc545d1d0e196bde04afe674f199bd6d191eb9d1de586d7448cb1c00e7779dcdf45fee2b55ddcd8bc38dd27bfa6c4202cc10a1779d04459a4536f34322ad0b5fdd7e913c8467d3fccc09037c58956fdd606ce9cc1cec38dc6f0d3ea7eae848338a540ab73e863394a17a5776ee9442017834ec1d9ca5e5b6dbb7d2927eb14921e3a800861a93be1e4c017040ba5364919027c341873e7113b354df66b4d06fdb602f124c09e89e478f19edae15c0fa4bac5113e3395d16cd42a16e181dd4f4bd265fbd1a03f5b4ce665ffd0b3c86c2efa8c5beea76d07445cd099cdf35aec04f8149f48a4ba3b08384a89dc944a44d11a7ea4501f1f80d3fe19a23640ebea1162b08b4257d21c53f3916e69929d050a287c57c699db1c1bbb81366b2aaf83983306c1f9b47a288a3e62891f41afe01710772de5da92b91503cb5fbe016075f7538858fe5debf8a6c3bd4898fe400efe6e1fa311d3c5508509b282f1d6538b31e3c7fd0e6d530ff42a4b658c73eee316600d0d7a2b05eaa6ac27d64437f2e0cda7685a575b2edb317747f0c096e79bd5364c451346c608cdc2a617e3460ecf386b5052c0cae86002fedbc3b3690b6a4553fb961437c53dad3d1191a22a3e1da511598a474f50a5d4a0b6647cc59d258072bbaf62199892b26e613c2456694b67339c36142cc08ac64b09a1ae6a103c16fc462b2fe94a861272c03d0ce27a91e9fba5f485448221304efb147ded157e5b4257017c3045040b1e245bb98181dbbe7586bccb5caf44bba2f5596efc45afdb967a945810ac552cbf9c2930d664aef88a92b86ec9138a7077bc5615b8ab737d2e9a34ed975099a2047bf31dc8af377bc4b3f073f3698330d00819d20b71295dc3ce651bf3f42a5481db0b7404edcbc25b5ff0c2d808dea6df894f96ebfc130d8eb180d327a0887f85e67b23ea679c98ac1f600e59c405d48d53dedd", 0x800, &(0x7f0000002040), &(0x7f0000000080), &(0x7f00000001c0)="57156587095867f239687b952a8906492ea8f6be83a79fe1e88ade49356be93fc9e1f868197990609f3872c647e26faec0dcbee9f789") unshare(0x2040400) r2 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002080)='net/igmp6\x00') pread64(r3, &(0x7f0000000000)=""/25, 0x19, 0x80) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000500)="7c15b6bce0568bdbef75e4667376c6507c51094765fcc21aa8810d5a760327a50bc67e6f84d20215ae0b84a847e4a948b5258b28626336e159ad54d4c00f287cdf1bade52605c3e691", 0x49}], 0x1, 0x0) 1.512903841s ago: executing program 1 (id=4390): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@nobarrier}]}, 0xff, 0x257, &(0x7f0000000500)="$eJzs3U9oFFccB/DfzO42TbKUtL0USv9AKaUNhPRW6CW9tBAoIZRSaAsppfSiJEJM8JZ48uJBj6KSk5cg3oweJZfgRRE8Rc0hXgQNHgweVFjZnQTyTxOzmx1xPh+YzEzy5v3eMPN9ExaGDaCweiJiICJKEdEbEZWISDY2+DJbetZ2ZzoXRiJqtd8eJ4122X5m/bjuiJiOiB8iYj5N4lA5YnLur+Wni798c3Ki8vWFuT8723qSa1aWl35dPT904vLg95M3bz8cSmIgqpvOq/WSHX5XTiI+Oohib4mknPcI2IvhY5fu1HP/cUR81ch/JdLILt6p8ffmK/HduVcde/rRrU/bOVag9Wq1Sv0ZOF0DCieNiGokaV9EZNtp2teX/Q9/t9SVHh4bP9r7/9jE6H95z1RAq1Qjln6+2nGle0v+H5Sy/APvqOxDqaXfh2fv1TdWS3kPCGiLz7JV/fnf+8/UtyH/UDjyD8Ul/1Bc8g/FJf9QXPIPxSX/UFzyD8Ul/1Bc+87/mRcHNyigLTbmHwAollrHvt4abv2LyEDb5T3/AAAAAAAAAAAAAAAAAAAA2810LoysL63psbxri+tnI1Z+yppur19qfB9xxPuNn11Pkk09Jnuq8Hp/f9FkB026mPPb1x/cz7f+jc/zrT81GjF9PCL6y+Xt91+ydv/t34e7/L3yb5MF3lCyZf/HP9pbf6vns/nWH1yMuFaff/p3mn/S+KSx3nn+qdavX5P1jzxrsgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa5mUAAAD//7FLbdg=") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8441, 0x141) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 1.425021892s ago: executing program 1 (id=4392): bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0xc, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x22}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@discard}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@discard}]}, 0x1, 0x609, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvzCZ5kzbvm/bl5cUWxYCHFqTbpBarXmzrwR4KFuxBxENDk9TQ7Q+aFGwtNAUPCgoiXkV68R/wLr17E0G9eRaqSEVBS1dmd7bdbHbTNc3uppnPByY7zzOz+zzfnX12npnJsxNAYU1mf9KIXRH3TiURE03LxqO+cDJf786v105nUxLV6uu/JJHkeY31k/xxe54YjYhvjkb8t7S63MUrV8/OVKp11yP2L527uH/xytV9C+dmzsydmTs/feCFg4emXpw+OL0hcW7PH48df+3Jj957+/n5byv7kjgcJ4ffnY2WODbKZEzGvTzE5vyhiDiUzbR5Xx43WyCEQivln8fhiPh/TESplqqbiIUPB1o5oKeqpYgqUFCJ9g8F1egHNI7tuzsOPtnjXkn/3D5SPwBaHf9Q/dxIjNaOjbbdSZqOjOrnNnZsQPlZGXev7f4sm2LFeYg/7m+doQ0op5PlGxHxRLv4k1rddtQizeJPV9QjiYipiBjJ6/fKI9QhaZrvxXmYtaw3/jQiDuePWf7RdZY/2ZLud/wAFNOtI/mOfDlLPdj/ZX2PRv8n2vR/xtvsu9Zj0Pu/zv2/xv5+tHaOPG3ph2V9lhPtX3K4NePHD4590qn85v5fNmXlN/qC/XD7RsTulvjfz4LN+z9Z/Emb7Z+tcupwd2W8+t3PxzotG3T81ZsRe9oe/zzolWZza1yf3D+/UJmbqv9tW8ZXX7/1Rafym+IfHdT239Yh/qbtn7Y+L3tPLnZZxpcnbp7rtCz7Hrlbvb7G9k9/Gknqx5sjec47M0tLl6YjRpLj+SpN+QfWrktjncZrZPHvfaZ9+1/x+b+x8nXGGl+ZXbj4xtk7nZat5/PfdDH5XrXLOnSSxT/78O2/qv1neR93Wcbvb15+qtOyteIfe5TAAAAAAAAAoIDS2jXYJC3fn0/Tcrk+XvZ/sS2tXFhcenb+wuXzsxF7a/8POZw2rnRP1NNJlp7O/x+2kT7Qkn4uInZGxKelsVq6fPpCZXbQwQMAAAAAAAAAAAAAAAAAAMAmsT0f/9+4T/Vvpfr4f6AgenmDOWBz67r9l3pbD6D/au1/1S2egCLQ/4fi0v6huLR/KC7tH4pL+4fi0v6huLR/KC7tHwAAAAC2pJ1P3/ohiYjll8ZqU2YkX2ZEEGxtw4OuADAwRvRDcd2/9K+zD4XTVf//z/zHAXtfHWAAknaZtc5Bde3Gf6vtMwEAAAAAAAAAAACAHtizq/P4f2ODYWsz7A+K6xHG//vpAHjM+el/KC7H+MDDRvGPdlpg/D8AAAAAAAAAAAAA9M14bUrScj4WeDzStFyO+HdE7IjhZH6hMjcVEf+JiO9Lw//K0tODrjQAAAAAAAAAAAAAAAAAAABsMYtXrp6dqVTmLjXP/LUqZ2vPNO6C2oeyXo5/+KxI+v+2jEXEwDdKz2aGmnKSiOVsy2+Kil1ajM1RjdrMgL+YAAAAAAAAAAAAAAAAAACggJrGHre3+/M+1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u/B/f97NzPoGAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAx9PfAQAA//+BdkCC") ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000300)={0x14, 0x23, 0x7, 0x6, "2127230ade56dfc1a39a1e91385fd67f3309cd02000300"}) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 1.346108724s ago: executing program 1 (id=4393): bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe99) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x18) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd3, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x14ce3, 0x100004, 0x0, 0x2, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000cc0)='net/ipv6_route\x00') ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000d00)=0x1) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r1, 0x0) r3 = syz_io_uring_setup(0x684f, &(0x7f00000000c0)={0x0, 0x79af, 0x400, 0x8008000, 0x182}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xff7, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8088e3ad132bc192, 0x4002011, r1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r6, &(0x7f0000000940)=[{{&(0x7f0000000380)=@rc={0x1f, @none, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000500)="19c95347721ad94103b5f06d9a095e8d25c54d0ec1c4429709a4781cb06aa2fb7fc2cfef6f5e74c9445d209c3cfe45b61e3b65553e567df01abeda715ee2de37a8be0f9db2b4c45c8d5066d6cf15453be1d70762f1a846c76121721a4a4b1e6aa9b98a1f498fae573c9efdef7314b36cf1cac6bad2ac01fed782599d6ca7466ed466037635ce654b190b3f0d68706e81ffc3173a4924d1958956aa71", 0x9c}], 0x1, &(0x7f00000005c0)=[{0x90, 0x84, 0x3, "faaff674734dbd1d527771e56eaa2a65d826bd18eeb95ebbbcc72c9ab44f89e60a80e4fc5fa004a09b9e172f0df29b62a65d8dd4e2d9945657437b0395080241d51f6539c2ef3e46852471a820b6c650deaafc91eedfea1aad8b3fb9af3ce0650e89c2cfcba5ce236da4f77f1de9f03cd68bfde53e33840b8f28"}], 0x90}}, {{&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000300)="4d7efe983b585d0f2dc535ba9d6bb638c5fd1f72ae36c5d75d1da41413e258d539", 0x21}, {&(0x7f0000000680)="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", 0xfc}], 0x2, &(0x7f00000007c0)=[{0x50, 0x6, 0x7, "d82f6696fd565906d582dacdf177220613ef4af9c72271c57a7951503d97535ce9aee2dc5713f54556f7aa57ca766afec231e4996ee1f58d0e"}], 0x50}}], 0x2, 0x8044) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48081) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c80)={&(0x7f00000009c0)="9a2e935c6fc14e90a1f10e113cc74269f6f1ef8f7fc0503a8571e84c7f1ba924ecdb496eec2a232e4c181b789e84d6dcc7fcc31aa00bca57871c8894161330ac494b283293c95a8aaf48ab31d0a5e4c6bb606f3ece75a542320c2c453930876fe441a707eafe164ca5fa106915211907ebd1172258e0482ebaa242d10323a7d2aefb2b14c64ca58d19a60ff363bb6207dae4a88fbeb6b598dba930590faee3d6fc9e25483d77e7e895a64f50a59cfd25", &(0x7f0000000840)=""/11, &(0x7f0000000a80)="c8c69c4cf02419b09a003dc901908d0e3ce8c3e03fee3ec3d0dcef6a608f67c409669f0bcbdf35bd97eb46280afb61dbf04e4da36525708c8513d6b5faf6e1b9e18f2c52e5e1e6ecf2bd77c4297a41fa4f018c4b34ddd3573757d0f5b9fc0a16426ae956054e63d805f0b2848ff02584ebe957be69d1e4b372ad4634c3038a8629e04c3f90e4ddf60f521591436ca45c37c13a6b02ee7c5d04a5b4867259d1cc2ead9bd1115dbfcdaa0bef900e838d0a2494d1e220a0a7ee49fdb4dbf903c5cd322229103023d1", &(0x7f0000000c00)="b2ca29fe1b1ade0e0cdc3fdbf66bcb727e920ff310fb81f3885303418a6c5871ffa7cdae89d683ea9e63ca72271fd769b6d7ef700e0036d7781abf11c9a8e7339eff6add0d101fc4abe07a31f157073de8d6", 0xfffffff8, r8, 0x4}, 0x38) socket$inet6_sctp(0xa, 0x1, 0x84) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1\x00'}) 1.292621595s ago: executing program 5 (id=4394): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000800250000000005000000", 0x29}], 0x1) pipe2$9p(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x24000080}, 0x240000c4) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfa, {0x0, 0x0, 0x0, r4, {0xf}, {0xb}, {0x7, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x24040084) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000840)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f00000008c0)={0x7, 0x8, 0xfa00, {r8, 0x6}}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x80044940, &(0x7f0000001b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000700)=ANY=[@ANYRES16=r10, @ANYRESDEC=r11, @ANYRESHEX=r12, @ANYRESDEC, @ANYBLOB="b1f1563f8cf9b3df43707e277e3870d9bbeca08c7c9e5ebdd62801631c9f6ff697c8ea4da0047f1529a0c7", @ANYRES8=r9, @ANYRES64=r9, @ANYRES8=0x0, @ANYRES64, @ANYRES8=r12], 0x0, 0x0, &(0x7f0000000080)) r13 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r13, 0x80044940, &(0x7f0000001fc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f00000021c0)=ANY=[@ANYRESHEX=r1, @ANYRES64=r17, @ANYRES16=r16, @ANYRES16=r19, @ANYRESDEC=r18, @ANYRES16=r15, @ANYRES16, @ANYBLOB="9a7f40ad4c7145903a868b9020e1e8899ed5747db23004fc9d248900abcaa6b065cf0800930a71dcd8b8955d93c78b9d4e5e06d8d5c9ac9b75d177754d6eba23e6d2be546c0dfecdf61baf732950a5729c01fbdc11e36cb411be200a9135657acd97d21ee46aac313ebdddd9265af16558dd3e5ba4836659a6abfe08aad84276acf949bdaa34bdf7f7b2dfb2fe8b9d6d225dcecebeb6e15f649994728842bd99fc94897d24315ac2d17bf6c2acfbfa8464d80f36304f88b906b78ab359be3479db5b0e7555f04416807c2202d6551f2425440be741dbe053e0bfeb845623e722a9293843f1cf0a71119dcadf7e353af4da52aed3086d6e5a095774248be9a1b1418dec1c03a2cb0ece0840ebeaaf7b67867da45943b700e2d6dad775ae6f33e55aa86ca84c336c91e3b7d7224f7a9a10d5b45a6ce0769d875415bea136b5508e5e0a88290792da3b11b2284a3d757c301cec78b55d3fcfa073615ccb089f66c5b9a5c84f6c1bb78c3370c4687eab260711fa05525687c7709e15cddea061f70798cbf940ad929eb80f33ad8bb4fcd322dd0558f111d7d01351147976b425a27e573402490055054cf3d80bebde6a89f3086170633740f08780aac3a73f17eaeda8deb642c2887962596b4d78c0ffffb28d0e64073b0641f89cf83a69afaaea03ba6070838fdbdaccb81630a6fdaa77fc10146013b9fd79e965a320daf81c1a51f032a3f462f2740e579eb116cad80b4e233326bf94fea52184517accf608b1fbfb395942869841b9ca0f314beff6b2dc0a74d7599012274b24775f0382e72907c1f0c571b994f048c0266feb775d893fec84e5733cd66a96cd45b60f63743b17b05d99c427a2d00a27fef17cadf128059a2e227b80701755b0bc706f32255c8cd619fa995cc7649f28337361a62cff46669fa4cf095a2d148987a9fafa6e1fb9f59b5ac5ff10a4c62e0187a3c75a983f7f5211142c6c09170a13e29c2044e5568bda8055cee4722e445e83ea01307c42cbe63a5bc529e1200e5874f7500275abacd6cc0e3bf8fd38ab7bab39f54d180d60892e2e3a713a3e654c89b8e9ba4474909991844514c04b655c66ccd6f2a17e29ff69d343ebac7ac5e1510ad4ff52e6a932a97bb0d814259da6545022152dd63f06219a1d66ec2278b694876ed6195b0543b8c9289b8438e8ee57dd38bcdb045a6fc4cede28effaa0354afbd4190fcbccd9a0e91508e4399e0e30a0bfdedcc19454b6dd7c2785a6e4fe74a0ece1d683ad07d76eafec02fb0d88debfeacd3531413185da0ffa4fb9b5e6d5a916f7bb5d51efc8ab61e4953fc6b2d1e670769f3ca56d51b804ceb118278acc90422e1f51e448a27d2fe4f93c88cf7c6148474bf650902dd6dd96541044113d244cf938150ec426e7ed63e1f153bbe328f4232552b104c8dee60b0c4e4c25f2605e97cc6f4263d32e8340be2d167137682373ae4cd501fdc9c5359b40f52803a5e4c0e04a5de0412c5cbd4d05e6135a1209d4b2dff50d39e481f1d1b01ed71004fb0c18e736af8ab176f833a439a85c9132e6d2296f665771c6a284eadc08c94ffa520dcc37fd6426c152364699514b15d4df6732fff39834e8ba29688b19db27a970d9d7fbee973c76bee04fb6164963969ebde0f785606781d63726736d8b60a713d5f72207a23f6f00420fdf24d14c069f36a7e236620481cc7a63857cc1355bac8d4f9a3f32785ad4d9d81719077a816b33b98006c322ee473aa9f8f83fae86a4d421104b298a9e42357c44b773e3504b3f9eb5b29330411b776b78fdb6dd9713dd1aee0cc9c7ee8bd23a50d4c8babaf6d74bc25377009a8c57c941f80e58ac08c93a275656cbad3864df9e791305d66103ab30983b07553ede5b5d5b0aab157f805eb6c11c75dd7f297c2cc9110551131a797164dec422b13799f1c261464c765a62c201eb9c8686eee94642d59f429cd137cba0d1a8126dcdfc28ea5c201526c61164a86f480dfde0c60fdf6afd3cd64719de1d89b5a362e058054a9db73aaffac324b04e8903060e1f14ca4ac31c82183066e6d581685efbe3452a20a665166b03808220770d66051971b61d8114376e22a4511cae9fdf7bbed68bb9f45b57eee1c15775730ef1434731d7b82a7cbcd6155396263984edfcea62196189da0ba9908d7d5ef514d75a3e1d4ae42654365083873fc4ce969fa4fac51d640be8d948bb9464d1a7e494c8df98bd5a569ff7fe1aca542c34610148a8f1dc9d60ff0f761270577f286a362f32164184ffce3ad132637e9f0381e9ce76a11f296f9d1e835cdc44926104e1df4d0a282a84b9fbc23064bfcab0d221c6e3124ae8ba6022e62f170dcc2d655f73b40f83fd65f5c705bc1f9e8df13adeadff9e1fe4660a55be7dc969cfffaed607190162dcd09d0cd86a297b22142b88f0eb28dd1a45152a4f4f2dca0d96d39fa594349040f486cd486af619b7083236cf90324cddc6f1ed0f6a103c8d936d7f2f31d420ef50931838e66721bff7494617b6b4bc385f3e51b3f81cf5d6953ac7fddc0f3466682911b38bc7f082e0c18e3ae0badf7f3fd3e186ebc2bab71fa26f77bb14cd97e6761c93c8c25887c0ef1f3dc1d8d86ce0fb73190f66f4deca77977e8d6064bfeeac3fad2bc50488c144e2a1a82fcc1e1c12ac54bf3e2d468e8f53241e4a6ad9e466746a45b053452ded5caa20461881d78d8235e986ba8b77e83601655d2650bf1b64ce17c75314216b43bbd1101a2e12e57525bb7d3b136a70635bdac8af24367a24ce2fe2a72ef2b0e56ff8dc62a82946f86f9b6b1418a89b1971372dfe7d5ce2e6611befff721f04a19bce7f90b1551a4cdead136662c50513fdde6f9d4a199c3907ed8799f231f54dd8347c71d829ff8ddc5d96b5aac2fe58652c81ff7f54e2568119dff2763ef435aa420630dacc7e9414340ee8688f46c7a8ab96d860937641042b3cdf6857ff1d2d4e47cec1f23e65fe541f38cb96b132666f999002e89cd1896ca58c2e63b87382e1a6c1ee9afa56cf3ba923fa9c989e20bff313f37252632fdcff03fbdd2d334ee93baf75c1bdae30feaa81fb2ac1b63c42dda06f20ce8c9d003eb3efed7931def342fb874fce92763f6f477c7f589b75d2129419fc4cb7a8893a1d3f94533ed9fdf9f21fc254fd80aa74750833d390327a2107e761240928d35a36c5eaca61fd848116b8dd7ec8157928bc2dd87f7756aa517cf6a61d2009fd4ba0579ca3b3129cfd5403546f5ab6d0575799a008fc67da9658427636d8f806d9b8cad64aee438d0a9b45957f31a5afe3ed894add9acadfd347246099c6ff0b4ec6f19ac61557daf8739e528185ab1468ca72d6d72e4f026e371e540b774b6576df3014dcc9e91b2cd1f0403a4fcaa6627b22682bb54f92150c2917acaee1972b2b03bc2bd37fdb9e7352c654d94ef196b7229e4da5ee62b7d395ecdd5177f2563242ea49ff78151a4a816a94e89b03f41c7e6684f8be3e5802e9338e7cbd3b43f708c062f944a59f31b02ca9a177e6b681accee8785d2467d2d78636be4330febaa3f6907db07992a2de74e459f3ae8ee6adae20cbc75aabd2d5d3424de0ddcc3ddd981c3a4966c57f8fdb1c42db87395f0bc800ff8ddb4c228a7d793d8a997885494a8578f5433d3f82886ea573641bf16065efbc25718c88f7277ce04c94af560d8deb7968496f849d3fad78741272b08bf7aec3f3c777428d3b8b897333ae5afb6823af63cb7347601ee2e8d4e21b21a12e6d42f66a1aac26d296bc68a998d8ba179ed5f756c2efd8a7acc0e3f08093bb4a83d37f15b4fe07c90858058ad1ff0e21bb7bf4363079c5d452dba5972b21c8f41daf6f11a51d321d3c1d544190238036d907d965ff469ce4895eb7675f3e94a15f83b837b892a40390d87d76e9b15eda02366299d3dd93943466bceeb2f9e465adccc08e1a02c3ac01815931627ed327e0ffbe09563221a365b88c4f2449bd3634920d5bfbde7cdc92c4cb16a579f35f07dafc87ce6ce4de7bf9e8ff0e80b81cdab8f2164a25a0a6929679ce9ae0dc2ac7ed41a787446676f091597551dc2e8c054224bac6652bba5fb675c0b2c94d2faac160f11b7b96fc96415aca8a47fa03658b8afa24b6bd97f7dbeead9ae5f7ec1cb0d000055f41a5043c6c4c97212398b168b5cb9ee650726eabcc31b6712e815fdaae77885350884fb36d6d5444d5e5500a7d636d4eced14b9d411c765b36a4be06ca9be2965d6d6c06c3b6bcb38babeb2999ee71295d48926bf6e39363fabf74de5e57aa0b59f9dddeca142d0c50ab7ff198196c69c971e6ab591220f4e42d6525e2dbd99b6c57949c854e4ee0e4581f9e3e160b3f66b01f23f4d0472c0a1f307837ac8dac0a257d09ab82975148dcd764fe6359a5f21b9cbe2ae7b9b277489a8b3285b8289a84ff854508b4488ffcf68f47ec7a5c18a8c3d06e26b32f754ac74ea8e93a554147fd3b3daf1fbe924e2e389cac13a5f80f3a21dbd250d3917f7b5acfc739a63f2b3d6b3f099efb4be7a842215c89fc87bd8550d11ba2a4af0f111ab124503b26feeae3be3ee24168dd4553a226b9168edb11c3e61bc850adf995b4d6f1aace6db0b91f805c3d1789a3e6b470e5470968f429d5b05c8f76ca2981e37f5bde4ad00a09755c76774ead7d93f3f41255b1d56152e3699b133b2e0b277427c992323d1b4d8c438434e9e901ddd43788f80cb9a975e9dd1671ce16be5ff8033d5da824f00fd78b540edbcd69a2e9aff03e31af9afefb809434f52b4a1239fdd241ed3a268258addde19d1724155a1a4c877bd59b0659b7a786886f6ffcb5999d1f9c007d615020926f7165a9ddd4aaa3c7b631d30cc951e328131d99282ac06a18f88373092320ea5308f06c376e711aecda4cd1c2b639d9ea7a2613d4e9eaa9a0ef72774fdec622f7d131b45135d577897bf686b460a371083070139ea544bda15012251d6c8e7163c25412841faefba76765648ca7cd1b423403a654b6b5754588ae6c309621477db20f7c9236af1e422ebd3fb6d6a712e7a6d00d58416b7d65a53a2514bf51bedfe9207f16a4d79418600389b98ea8b9e06b8da708a86f191e567925af39a09ac9fd7902e8f8e77567baf1b75c05ba1eb7089b424801405afc982a8d79c80fada184a1ab3bab526a3b0a5e20d2dc6bcdd2c5cb7c49f735f3e8f4d36a388ca805876ae08f0e3acca5dd864c1fa1552068bf799095221480374fd2dcaeddb74be93470eff4fe278e190f0a131f32340ada9cca518af769f42943875f4c5707beee2179771da21cd66405b9973648bd047a516d1cf902fa1f0fcdcbc3f4c1f20fc22f9a7e9f4c3a52576399604c46f83ede44f542d06d54e6e8a1e693a2cfcbb16c178d1bace976133e72cc4533bd02b1c4ec2cc22097435aff5a682ca7227414895450831560fa682493f4814ce8fbdb190f8ce2b533ed9582638511bda93aeae5d0690f745b788db622864ba3fb60952f119427fbe66754c5c038c5fb2cb87c326d65862e353c14950bd1fa7c70e36323e9cf90c81f6275e59c7926acac1560a0b6bbc7a850817f2effa19d485315a219d49e293f871278294d02765cf72caa2f438de3337ed205bf68ff6ddaaa5e4b80de5fba022dfcf9cf074a319678df11eb77b3ef66e512b67ba5182265a60eaf457691e973d23cbaf6000537f886695074ebb616f9cdad9de7c6fe9ecfbd13d537d64c34a7c90ca56b50e60d6a7067e391e63561793edf6ed3c2eeb8555909a59ce73da1f096d41fb42de44494128324a9", @ANYRESHEX=0x0, @ANYRES32=r14], 0x5, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000001f8ff09140000001100010000000000000000000000000a5e68547aaa93f19888e0468dc7560672707eb9914ddc"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"9fa6cefc4745c25f294c4c8283362cc4", r11, r19, {0xc9, 0x200}, {0xffffffffffffffff, 0x1}, 0x0, [0x8, 0x6, 0x1, 0x3, 0x4, 0xfffffffffffffffc, 0x2, 0x4, 0x8000000000000001, 0xffffffff80000001, 0x4a, 0xca, 0x80, 0x4, 0x9, 0x7fffffffffffffff]}) eventfd2(0x0, 0x800) r20 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) r21 = fspick(r20, &(0x7f0000000780)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r21, 0x0, &(0x7f00000007c0)='sync\x00', 0x0, 0x0) r22 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r22, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r22, 0x107, 0x1, &(0x7f0000000100)={r23, 0x1, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x10) 1.220892376s ago: executing program 5 (id=4395): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1000000000000}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0x3}}, 0x10, 0x0}, 0x0) 1.220253076s ago: executing program 5 (id=4396): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000780)={[{@dax}, {@acl}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x39, 0x34, 0x62, 0x34, 0x30, 0x32, 0x33], 0x2d, [0x63, 0x32, 0x36, 0x63], 0x2d, [0x37, 0x62, 0x61, 0x37], 0x2d, [0x34, 0x35, 0x34, 0x36], 0x2d, [0x61, 0x30, 0x62, 0x33, 0x66, 0x32, 0x0, 0x65]}}}, {@appraise}]}, 0xff, 0x257, &(0x7f0000000500)="$eJzs3U9oFFccB/DfzO42TbKUtL0USv9AKaUNhPRW6CW9tBAoIZRSaAsppfSiJEJM8JZ48uJBj6KSk5cg3oweJZfgRRE8Rc0hXgQNHgweVFjZnQTyTxOzmx1xPh+YzEzy5v3eMPN9ExaGDaCweiJiICJKEdEbEZWISDY2+DJbetZ2ZzoXRiJqtd8eJ4122X5m/bjuiJiOiB8iYj5N4lA5YnLur+Wni798c3Ki8vWFuT8723qSa1aWl35dPT904vLg95M3bz8cSmIgqpvOq/WSHX5XTiI+Oohib4mknPcI2IvhY5fu1HP/cUR81ch/JdLILt6p8ffmK/HduVcde/rRrU/bOVag9Wq1Sv0ZOF0DCieNiGokaV9EZNtp2teX/Q9/t9SVHh4bP9r7/9jE6H95z1RAq1Qjln6+2nGle0v+H5Sy/APvqOxDqaXfh2fv1TdWS3kPCGiLz7JV/fnf+8/UtyH/UDjyD8Ul/1Bc8g/FJf9QXPIPxSX/UFzyD8Ul/1Bc+87/mRcHNyigLTbmHwAollrHvt4abv2LyEDb5T3/AAAAAAAAAAAAAAAAAAAA2810LoysL63psbxri+tnI1Z+yppur19qfB9xxPuNn11Pkk09Jnuq8Hp/f9FkB026mPPb1x/cz7f+jc/zrT81GjF9PCL6y+Xt91+ydv/t34e7/L3yb5MF3lCyZf/HP9pbf6vns/nWH1yMuFaff/p3mn/S+KSx3nn+qdavX5P1jzxrsgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa5mUAAAD//7FLbdg=") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x4bc}, 0x1, 0x0, 0x0, 0x2404c880}, 0xc804) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xa048e, &(0x7f0000001480)={[{@noload}, {@noacl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@usrquota}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@dont_hash}, {@smackfshat={'smackfshat', 0x3d, '%'}}]}, 0x3, 0x443, &(0x7f0000000940)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000240)}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f00000004c0), &(0x7f0000001c40)=r3}, 0x20) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x1044, 0x200000010000, 0x0, 0x4, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x10, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0xc, 0xb, 0xfffd}, 0x8, 0x3, 0x8, 0x0, 0x2, 0x20000, 0x0}) socket$tipc(0x1e, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff00000085"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) socket$kcm(0x21, 0x2, 0x2) 1.063742459s ago: executing program 1 (id=4397): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x25, 0x800000000004}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc0000000300000006"], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0x1e, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@can={0xc, {{0x2}, 0x2, 0x1, 0x0, 0x0, "49ec225b04dd1917"}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', r3, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000700)={0x2, 0x4e23, @local}, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') close(0x3) preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000640)=""/147, 0x93}], 0x1, 0x0, 0xfff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', r3, 0x7800, 0x7, 0x1, 0x5, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x3, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@noop, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdf0, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) sendto$inet(r4, &(0x7f0000000580)="17", 0xfffffd61, 0x10008895, 0x0, 0x0) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x9) fchdir(r9) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000540)={0x1f, 0x15, 0xffff, 0x7, 0x6, 0x6, &(0x7f00000004c0)="b69a43c0233acf5641cc62460a8909b7d92bac1146dfb20dcfedc9cdc4da9bb6d051e993"}) 1.031196s ago: executing program 5 (id=4398): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x88000, &(0x7f0000000440)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@ignoreqv}, {@access_user}, {@ignoreqv}, {@access_user}, {@loose}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@cache_fscache}, {@ignoreqv}, {@afid={'afid', 0x3d, 0x9}}], [{@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@subj_user={'subj_user', 0x3d, 'GPL\x00'}}, {@obj_type={'obj_type', 0x3d, 'GPL\x00'}}]}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400001a", @ANYRES16=r7, @ANYBLOB="01002cbd7000fcdbdf25010000000000000001410000001800170000000b000000057564703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000055"], 0x48) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003a00), 0x2, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000740)="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", 0x37}], 0x1, 0x0, 0x25}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TCXONC(r9, 0x540a, 0x2) 826.237184ms ago: executing program 9 (id=4399): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) sendfile(0xffffffffffffffff, r0, &(0x7f0000000400)=0x7, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='writeback_bdi_register\x00', r3}, 0x18) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff0000094cc2dcd0c199dc5a816490a9ef44960d3df77b86b97180a66c890ea8aa9a68b5ab5708e145ea479a35a0203301f2e30cf50bc29bad6d7f930fdf1ea5159f4e8a3854ef0175cb93534f8cbfe045a200820653742e1c9a991b5edac7270f6b187642daf6", @ANYRES32=0x0, @ANYBLOB="0042000000000000140012800a000100767863616e000000e8fe028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={r8, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f0000000180)=0x84) r9 = fsopen(0x0, 0x0) fsmount(r9, 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x14, r11, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000043}, 0x24000844) tkill(0x0, 0x13) waitid(0x0, 0x0, 0x0, 0x2100000a, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) capget(0x0, 0x0) 825.842494ms ago: executing program 5 (id=4400): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000010c0), 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000001100)={{0xc3, 0x6}, {0xff, 0x7}, 0x6, 0x2, 0xe4}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000840)={'\x00', 0x859, 0x9, 0x2, 0x4, 0x9, 0xffffffffffffffff}) tkill(r1, 0x3) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r3 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000800)="59fdd4", 0xfdef}], 0x1, 0x8, 0x365) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000306010400000000000000000700000005000100070000000275ee1876f76c5f9d783940a0e8401b52abd5fda0a84e4a2627c78fe7cd2105e55e80fb02e4f023d192c63b1b7e9bcae909c34ceb32b1290c88acce0e730f33d3cc9ba2d603144bf9532e872dcb6058031f664f8d68edc4dad612042482138c8c377a55dc07e5da7b51a403a2ef99571957c2cb06e0b5923da22f1488a6db87278c014608796b929fb459d878f4785d4edf6f3fed873e45d39030984afa75264d8f091c18ed7340ee7d75018fa8faee8d6ae31ea116d5f63c6ea7204bde6f860753f5e7e41e693be7cdca98e50cf6ce1ae92d4c75c5384dc361f9"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) memfd_secret(0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000004000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="00000000d4a211557dc4d4b61b000000b700004c0173b3009500100013004000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf8}}, 0x0) open(0x0, 0x0, 0x1) sigaltstack(0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) lchown(&(0x7f00000003c0)='./file1\x00', 0x0, 0xee01) 825.657344ms ago: executing program 1 (id=4401): r0 = syz_clone(0x0, &(0x7f0000000200)="ca012bf2f9fdda2d566c47e57c0e421bf961ce78c2317054fc680fb0662f5f734c6daccbdc8949986217bdbe2ebde4c20a3916ad0e57c1b3ca1cd260b316074fc49fe54a0d51317707b6886c20114117ed7eb684a44341a4c65ac2e7c6bfe7704976734b76c5d34cd488339e6c2109fa98d0e1c81fd0a3d143e58a14d06b5d6c0408488b282366bb68352114b07bb50140315cefb6e8c2cf902bb397358b09083b6faa0192a5d9b0936d0f87a100b7115ee003ebf4a63a470b29c6a494deb8fe97be96be4cce4cf21448bae42f35", 0xce, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000180)="a4aff1aa857306da436baa66256f19d25b68f29d867e80c6d0b1a347499a082cedb352b5aab66c33017d8ae98173d0") r1 = syz_open_procfs(r0, &(0x7f0000000300)='net/ip_mr_cache\x00') creat(&(0x7f0000000000)='./file1\x00', 0x14c) lchown(&(0x7f0000000080)='./file1\x00', 0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x9, &(0x7f0000000000)={0x2, 0x8, 0xc186}) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) clock_gettime(0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) lseek(r1, 0x2004, 0x300000000000000) 732.568866ms ago: executing program 6 (id=4402): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@nobarrier}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8441, 0x141) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 732.389866ms ago: executing program 9 (id=4403): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="060000000400000008000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffc43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 727.271486ms ago: executing program 7 (id=4404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x6) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) 591.618029ms ago: executing program 5 (id=4405): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) syz_emit_ethernet(0x4a, &(0x7f000001f8c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff92644500003c0036002100069078e0000900000000262e7d000000000000000000000000040080000000000100"/74], 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f00000005c0)='\x00]', 0x2}], 0x1}, 0x64) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="37b6cd1a3eb35331fbadbbfeb35fadeff576af09bb38"], &(0x7f0000000080)='GPL\x00', 0xcd, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[r0, r0, r0, r0], &(0x7f0000000100)=[{0x2, 0x2, 0xa, 0xa}, {0x5, 0x5, 0x4, 0x5}], 0x10, 0x6}, 0x94) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000240)=r3, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYRESHEX=r4], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r4, r5}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xeaa}], 0x2, 0x40002000, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r8}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r8}) 590.309398ms ago: executing program 9 (id=4406): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, 0x0, 0x20040844) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000580)='./file0\x00', 0x1040, &(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x4, 0x25f, &(0x7f0000000140)="$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") inotify_add_watch(0xffffffffffffffff, 0x0, 0x24) chown(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1f1) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], &(0x7f0000000740)=""/235, 0x27, 0xeb, 0x8, 0x80000000}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES8=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r3, &(0x7f0000000000)="c539625e0c01a20bdd1e23d18f57d5892ef6fc5c1f7c4a081202335153c4bdbb040edebe669892c3", &(0x7f0000000300)=""/188, 0x4}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) getgroups(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)={'#! ', '', [{0x20, 'memo\xfe\v\x12\xacry.e\xffentsg'}]}, 0x17) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r2) 551.502329ms ago: executing program 7 (id=4407): bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe99) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x18) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd3, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x14ce3, 0x100004, 0x0, 0x2, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000cc0)='net/ipv6_route\x00') ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000d00)=0x1) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r1, 0x0) r3 = syz_io_uring_setup(0x684f, &(0x7f00000000c0)={0x0, 0x79af, 0x400, 0x8008000, 0x182}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xff7, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8088e3ad132bc192, 0x4002011, r1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r6, &(0x7f0000000940)=[{{&(0x7f0000000380)=@rc={0x1f, @none, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000500)="19c95347721ad94103b5f06d9a095e8d25c54d0ec1c4429709a4781cb06aa2fb7fc2cfef6f5e74c9445d209c3cfe45b61e3b65553e567df01abeda715ee2de37a8be0f9db2b4c45c8d5066d6cf15453be1d70762f1a846c76121721a4a4b1e6aa9b98a1f498fae573c9efdef7314b36cf1cac6bad2ac01fed782599d6ca7466ed466037635ce654b190b3f0d68706e81ffc3173a4924d1958956aa71", 0x9c}], 0x1, &(0x7f00000005c0)=[{0x90, 0x84, 0x3, "faaff674734dbd1d527771e56eaa2a65d826bd18eeb95ebbbcc72c9ab44f89e60a80e4fc5fa004a09b9e172f0df29b62a65d8dd4e2d9945657437b0395080241d51f6539c2ef3e46852471a820b6c650deaafc91eedfea1aad8b3fb9af3ce0650e89c2cfcba5ce236da4f77f1de9f03cd68bfde53e33840b8f28"}], 0x90}}, {{&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000300)="4d7efe983b585d0f2dc535ba9d6bb638c5fd1f72ae36c5d75d1da41413e258d539", 0x21}, {&(0x7f0000000680)="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", 0xfc}], 0x2, &(0x7f00000007c0)=[{0x50, 0x6, 0x7, "d82f6696fd565906d582dacdf177220613ef4af9c72271c57a7951503d97535ce9aee2dc5713f54556f7aa57ca766afec231e4996ee1f58d0e"}], 0x50}}], 0x2, 0x8044) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48081) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c80)={&(0x7f00000009c0)="9a2e935c6fc14e90a1f10e113cc74269f6f1ef8f7fc0503a8571e84c7f1ba924ecdb496eec2a232e4c181b789e84d6dcc7fcc31aa00bca57871c8894161330ac494b283293c95a8aaf48ab31d0a5e4c6bb606f3ece75a542320c2c453930876fe441a707eafe164ca5fa106915211907ebd1172258e0482ebaa242d10323a7d2aefb2b14c64ca58d19a60ff363bb6207dae4a88fbeb6b598dba930590faee3d6fc9e25483d77e7e895a64f50a59cfd25", &(0x7f0000000840)=""/11, &(0x7f0000000a80)="c8c69c4cf02419b09a003dc901908d0e3ce8c3e03fee3ec3d0dcef6a608f67c409669f0bcbdf35bd97eb46280afb61dbf04e4da36525708c8513d6b5faf6e1b9e18f2c52e5e1e6ecf2bd77c4297a41fa4f018c4b34ddd3573757d0f5b9fc0a16426ae956054e63d805f0b2848ff02584ebe957be69d1e4b372ad4634c3038a8629e04c3f90e4ddf60f521591436ca45c37c13a6b02ee7c5d04a5b4867259d1cc2ead9bd1115dbfcdaa0bef900e838d0a2494d1e220a0a7ee49fdb4dbf903c5cd322229103023d1", &(0x7f0000000c00)="b2ca29fe1b1ade0e0cdc3fdbf66bcb727e920ff310fb81f3885303418a6c5871ffa7cdae89d683ea9e63ca72271fd769b6d7ef700e0036d7781abf11c9a8e7339eff6add0d101fc4abe07a31f157073de8d6", 0xfffffff8, r8, 0x4}, 0x38) socket$inet6_sctp(0xa, 0x1, 0x84) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1\x00'}) 531.12968ms ago: executing program 6 (id=4408): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0xfffffffffffffffe, 0xc0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESDEC=r0, @ANYRESOCT, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES64=r1, @ANYRESDEC=r0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000e80)="0c5c5e6141056ff616aeea2fbbb352d3250f7a4ccf5080d9e6a5743c0c814702590c467940a99841bccdc43d011ab29cc8fa3588895865423b5c641079922c2d9fcb175f3797932e8ae8000e5808a41db3cce8e670a91a933c17cf697c176b5bf36245a9505e1f9f5c451c4ff1a61ee9d9343e695425b523e7bc61b2e59f2ca0e3", 0x3, r2, 0x4}, 0x38) socket$key(0xf, 0x3, 0x2) close(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000020c0)=ANY=[@ANYRES64], &(0x7f0000000080)='GPL\x00', 0x0, 0xfffffffffffffe9c, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='ext4_ext_convert_to_initialized_fastpath\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0x208e24b) lseek(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='rcu_utilization\x00', r3}, 0x18) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") write$selinux_access(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x56) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="a108ac2493345c4f7cc0880a24355148791f93d1add9ee51ac6d41785e682e9ebcdf40bbecaaffa15e2c37d4ca88c346b49a126d0960962995cacf67802580b394dddf25"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r5, @ANYRES32=r5, @ANYRES16], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000d00)=ANY=[@ANYBLOB="d00000005304010027bd7000fbdbdf2565fceba4cbe778413962fb6beef02a21a439fa29b0bf586cc0b26d9cde2742b55ff049b3d25d322988181f4cd24cbee5d865935239a25b9ae2baa158b143874cb0dac1e62217abc9c12886e3a78faecd75cdabad79978f0d51a5bfc93a86b927cd58f9b78688cbd3c6e5ed77382f3cda89ca2885249362e818c1aebd644ccca111c4406a3a71bbff88561b37403a6202bbe32a9ddd12acb4c3bac4f70e2442ae44e6c92988cfa0216d8fbadbed4272e7d594e7d5d12d11f3aa4ae7c4e700000896c4008a9ef8f2852de25069aa43ff3dfc5c964efff096c1054f184fb2f279375f3d176e465949c2794ae1c2c71e3770f077c8941dc006bd3e1322776a7024b85c6bf948f48158107f00b55aae6e00d74e318c361acd5aa6ad2c2d3e1424c5ee7fbc60093d243d1232f00a123dd6ac8d04d97b1d8626a508cbd8905fd8ec907591fa4108a2799a82debf2b397bd52c22eedb"], 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) creat(&(0x7f00000001c0)='./file1\x00', 0x2) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f0000001080)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) 380.578873ms ago: executing program 6 (id=4409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fchmod(r2, 0x1) 380.335913ms ago: executing program 9 (id=4410): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000000}, 0x48) 380.126323ms ago: executing program 9 (id=4411): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)) 369.467163ms ago: executing program 6 (id=4412): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fchmod(r2, 0x1) 359.286263ms ago: executing program 9 (id=4413): quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bind$packet(r1, &(0x7f0000000100)={0x11, 0x8, r0, 0x1, 0x5a, 0x6, @remote}, 0x14) r2 = gettid() socket$kcm(0x29, 0xfdce18d5ece50714, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x8) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x48081}, 0x4048015) ioctl$TCSBRKP(r1, 0x5425, 0x4c068729) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000280)={{0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, {0xa, 0x4e21, 0xfffffffb, @local, 0xdc8}, 0x1, {[0xa, 0x4a1d, 0x0, 0x7, 0x800, 0x10001, 0x32a, 0x1f6]}}, 0x5c) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000340)={0x7, &(0x7f0000000300)=[{0x2, 0xa, 0x8, 0xfffff4d1}, {0x2, 0x31, 0xb, 0x9}, {0x6800, 0x4, 0x1, 0x10001}, {0x4, 0x0, 0x8, 0x7}, {0x5, 0xa9, 0x4, 0x8}, {0xf, 0x1, 0x3, 0x200}, {0x87a, 0x7, 0x4d, 0x7}]}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000400)={0xa, &(0x7f0000000380)=[{0x6f, 0x9, 0x25, 0x8}, {0x1ff, 0xa, 0x1, 0xf42a}, {0xda, 0x0, 0x80, 0x141}, {0x5, 0xfb, 0x1, 0xfffffff1}, {0x81, 0xb0, 0x3, 0x4}, {0x200, 0x15, 0x6, 0x6b2}, {0x40, 0xf4, 0x7, 0x1000}, {0x8000, 0xc0, 0x6, 0x7}, {0x3, 0x5, 0x8, 0xf}, {0x3, 0xfe, 0x0, 0x3}]}, 0x10) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x94, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1a}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x28a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x1, 0xab, 0xc, 0x5, 0x0, 0x3, 0x20, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffff8, 0x2, @perf_bp={&(0x7f00000005c0), 0x2}, 0x1, 0xffffffff, 0x4, 0x2, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, r2, 0x5, 0xffffffffffffffff, 0x0) r3 = openat$incfs(r1, &(0x7f0000000680)='.log\x00', 0x8640, 0x8) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r4, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x24004000) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000840)={0x7, &(0x7f0000000800)=[{0xa644, 0x7, 0x8}, {0xa, 0x5, 0x10, 0xf5c}, {0x1, 0x1, 0x4, 0x1}, {0x1ff, 0x8, 0xf, 0x4}, {0x7, 0x5, 0xf, 0x1}, {0x2, 0x7, 0x3, 0x6}, {0x7, 0x6, 0x1, 0xfc}]}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000b40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1ec, r5, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="01f922cf9111120c86ae90db262046ea"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c9190b2b48f5dcbf"}]}, @NL80211_ATTR_REKEY_DATA={0xd4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9309573fec817eb2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="dbbe4a844776febed4991ed5e568a6282e22e03f7a81884e"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="31e9f315f80e6cbff50d45fc531b30598cf012ad1789b81908173642c0be248c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cd8b5312a821204a"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7dacf5b50a99c7c58b511324dcf32e0e810a67371bf92773662a9fc1cc89d8b5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="df59b28eaf74e2dc8ee885c14c8e687c"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d80e34c6dde95bd4d4252804625330553676bc6df2a2971e210bc4009d0813c8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf717}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="bef38ccf3b797fa91ed08a2acca194fc"}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac368426712a9e9b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ff766df44cc46a98"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="85a78287e75f33ffd4cf49b5188e4eeb"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xc6}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xb4a5}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d08459495588127aa53234cfe104475d"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a9b3171d160ba220"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b05a933b7a0e55815835fb1c74289a93"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e38ccbb54097d582"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1162d59945ce0d34"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6078a51bfae0a654dbc41eb4279a8ddc"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "32d57cb1f8aa4ff0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r3) bind$packet(r1, &(0x7f0000000bc0)={0x11, 0xf8, r0, 0x1, 0x2d, 0x6, @random="e458b74c9c50"}, 0x14) openat$vsock(0xffffffffffffff9c, &(0x7f0000000c00), 0x480000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000c80)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000d80)=0xe8) lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = geteuid() lstat(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000f40)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) fsetxattr$system_posix_acl(r3, &(0x7f0000000c40)='system.posix_acl_access\x00', &(0x7f0000000f80)={{}, {0x1, 0x2}, [{0x2, 0x7, r6}, {0x2, 0x5, r7}, {0x2, 0x1, 0xee00}, {0x2, 0x2, r8}], {}, [{0x8, 0x2, 0xee01}, {0x8, 0x0, r9}, {0x8, 0x0, r10}], {0x10, 0x1}, {0x20, 0x2}}, 0x5c, 0x0) eventfd2(0x7, 0x800) 344.543793ms ago: executing program 6 (id=4414): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0x44000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (fail_nth: 9) 60.527129ms ago: executing program 6 (id=4415): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000002f0380540000e200000071124300000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES32=r0, @ANYBLOB="64bb87920ac4168786637723ae48dea73ba15ecb77d8d288726ee98a9d13a6f7773de38a5f661a7e179fa6dcaff34516f5f4a0b30594d70d9f7ebf665f8ffc0a4f5db8386660960a3b48e0c76ea6b442ce62a66ede7c12573fd08cac7434ac60945ca76cf5456bf9a8b1896f386c86dbf373ae0d571c89f53060903eb0c0b2bf01227839b8003367a415abe031342181e13e55bd1b1795e8aaccd4fadb77cb2b5233f1cf010066481c8d475a6655e35e64b3bcbd710765be4139e88bdd3f46e6f3077f8f917cb74a"], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000018000000"], 0x0, 0x34, 0x0, 0xa}, 0x28) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x12000000, 0x0, 0x0) close(0xffffffffffffffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x10424}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000002c0)='!~Uf\t>|\t\t') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) 16.8686ms ago: executing program 7 (id=4416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x1c, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x1c0}}, {@cache_mmap}, {@cache_none}, {@version_u}, {@nodevmap}, {@nodevmap}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@obj_type={'obj_type', 0x3d, '*'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '+-,)+[@{)'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x34, 0x39, 0x30, 0x35, 0x62, 0x38, 0x37], 0x2d, [0x33, 0x33, 0x64, 0x61], 0x2d, [0x64, 0x2eb0f69b12ebf261, 0x35, 0x65], 0x2d, [0x36, 0x39, 0x61, 0x63], 0x2d, [0x63, 0x39, 0x31, 0x37, 0x32, 0x33, 0x30]}}}]}}) 0s ago: executing program 7 (id=4417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x6) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) kernel console output (not intermixed with test programs): cd: invalid port number 96 [ 241.823177][T15166] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 241.886842][T15179] loop1: detected capacity change from 0 to 1024 [ 241.919181][T15179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.943544][T15194] IPv4: Oversized IP packet from 127.202.26.0 [ 242.002620][T15179] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.086175][T15179] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3753'. [ 242.230598][T15214] IPv4: Oversized IP packet from 127.202.26.0 [ 242.279414][T11965] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:27: bg 0: block 393: padding at end of block bitmap is not set [ 242.382448][T15217] loop5: detected capacity change from 0 to 1024 [ 242.416670][T11965] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 242.429790][T11965] EXT4-fs (loop1): This should not happen!! Data will be lost [ 242.429790][T11965] [ 242.553496][T15217] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.605099][T14742] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.704881][T15217] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.740119][T15216] loop9: detected capacity change from 0 to 8192 [ 242.812267][T15216] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 243.019625][T11960] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 243.084916][T11960] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 243.098597][T11960] EXT4-fs (loop5): This should not happen!! Data will be lost [ 243.098597][T11960] [ 243.108671][T11960] EXT4-fs (loop5): Total free blocks count 0 [ 243.114967][T11960] EXT4-fs (loop5): Free/Dirty block details [ 243.121756][T11960] EXT4-fs (loop5): free_blocks=4293918720 [ 243.128346][T11960] EXT4-fs (loop5): dirty_blocks=16 [ 243.133863][T11960] EXT4-fs (loop5): Block reservation details [ 243.140116][T11960] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 243.207232][T15248] netlink: 'syz.7.3763': attribute type 22 has an invalid length. [ 243.215347][T15248] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3763'. [ 243.265922][T11965] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.276445][T11965] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.311081][T11965] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.322013][T12118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.355104][T15252] netlink: 332 bytes leftover after parsing attributes in process `syz.7.3764'. [ 243.367555][T11965] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.441349][T15267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15267 comm=+}[@ [ 244.558068][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3771'. [ 244.777107][T15304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15304 comm=+}[@ [ 244.824042][T15315] SELinux: policydb magic number 0xa656469 does not match expected magic number 0xf97cff8c [ 244.862986][T15315] SELinux: failed to load policy [ 245.067256][T15325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15325 comm=syz.9.3780 [ 245.302499][T15342] loop5: detected capacity change from 0 to 512 [ 245.380251][T15342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.400601][T15342] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 245.433063][T15347] FAULT_INJECTION: forcing a failure. [ 245.433063][T15347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.446386][T15347] CPU: 1 UID: 0 PID: 15347 Comm: syz.7.3786 Not tainted syzkaller #0 PREEMPT(voluntary) [ 245.446418][T15347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 245.446504][T15347] Call Trace: [ 245.446511][T15347] [ 245.446522][T15347] __dump_stack+0x1d/0x30 [ 245.446549][T15347] dump_stack_lvl+0xe8/0x140 [ 245.446576][T15347] dump_stack+0x15/0x1b [ 245.446604][T15347] should_fail_ex+0x265/0x280 [ 245.446636][T15347] should_fail+0xb/0x20 [ 245.446660][T15347] should_fail_usercopy+0x1a/0x20 [ 245.446693][T15347] _copy_from_iter+0xd2/0xe80 [ 245.446779][T15347] ? __build_skb_around+0x1a0/0x200 [ 245.446885][T15347] ? __alloc_skb+0x223/0x320 [ 245.446916][T15347] netlink_sendmsg+0x471/0x6b0 [ 245.447029][T15347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.447123][T15347] __sock_sendmsg+0x145/0x180 [ 245.447164][T15347] ____sys_sendmsg+0x31e/0x4e0 [ 245.447203][T15347] ___sys_sendmsg+0x17b/0x1d0 [ 245.447297][T15347] __x64_sys_sendmsg+0xd4/0x160 [ 245.447345][T15347] x64_sys_call+0x191e/0x2ff0 [ 245.447370][T15347] do_syscall_64+0xd2/0x200 [ 245.447413][T15347] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 245.447445][T15347] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 245.447520][T15347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.447548][T15347] RIP: 0033:0x7ff3a226eba9 [ 245.447568][T15347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.447623][T15347] RSP: 002b:00007ff3a0cd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.447648][T15347] RAX: ffffffffffffffda RBX: 00007ff3a24b5fa0 RCX: 00007ff3a226eba9 [ 245.447664][T15347] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 245.447680][T15347] RBP: 00007ff3a0cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 245.447696][T15347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.447711][T15347] R13: 00007ff3a24b6038 R14: 00007ff3a24b5fa0 R15: 00007fffeb444f28 [ 245.447753][T15347] [ 245.450783][T15342] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.3784: corrupted inode contents [ 245.674884][T15353] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3784'. [ 245.690954][T15342] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.3784: mark_inode_dirty error [ 245.724841][T15342] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.3784: corrupted inode contents [ 245.739561][T15342] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.3784: mark_inode_dirty error [ 245.791364][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 245.791382][ T29] audit: type=1326 audit(1757726045.653:12192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.1.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afb1eba9 code=0x7ffc0000 [ 245.823856][ T29] audit: type=1326 audit(1757726045.653:12193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.1.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afb1eba9 code=0x7ffc0000 [ 245.848236][ T29] audit: type=1326 audit(1757726045.653:12194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.1.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01afb1eba9 code=0x7ffc0000 [ 245.873989][ T29] audit: type=1326 audit(1757726045.653:12195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.1.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afb1eba9 code=0x7ffc0000 [ 245.897867][ T29] audit: type=1326 audit(1757726045.653:12196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.1.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f01afb1eba9 code=0x7ffc0000 [ 245.922020][ T29] audit: type=1326 audit(1757726045.653:12197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.1.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afb1eba9 code=0x7ffc0000 [ 245.937043][T15371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15371 comm=syz.1.3792 [ 245.946515][ T29] audit: type=1326 audit(1757726045.653:12198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.1.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f01afb1eba9 code=0x7ffc0000 [ 245.946565][ T29] audit: type=1326 audit(1757726045.653:12199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.1.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afb1eba9 code=0x7ffc0000 [ 245.946601][ T29] audit: type=1326 audit(1757726045.653:12200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.1.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f01afb1eba9 code=0x7ffc0000 [ 245.946707][ T29] audit: type=1326 audit(1757726045.653:12201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.1.3788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afb1eba9 code=0x7ffc0000 [ 246.063936][T15370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3792'. [ 246.138271][T15371] netlink: 'syz.1.3792': attribute type 21 has an invalid length. [ 246.147984][T15371] netlink: 'syz.1.3792': attribute type 1 has an invalid length. [ 246.156021][T15371] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3792'. [ 246.256231][T15384] loop5: detected capacity change from 0 to 1024 [ 246.298124][T15385] team0: Port device dummy0 removed [ 246.332056][T15385] bridge_slave_0: left allmulticast mode [ 246.338108][T15385] bridge_slave_0: left promiscuous mode [ 246.338317][T15385] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.359868][T15374] loop9: detected capacity change from 0 to 2048 [ 246.385734][T15385] bridge_slave_1: left allmulticast mode [ 246.385789][T15385] bridge_slave_1: left promiscuous mode [ 246.385959][T15385] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.395113][T15385] bond0: (slave bond_slave_0): Releasing backup interface [ 246.398593][T15385] bond0: (slave bond_slave_1): Releasing backup interface [ 246.410355][T15385] team0: Port device team_slave_0 removed [ 246.415404][T15385] team0: Port device team_slave_1 removed [ 246.416896][T15385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.416916][T15385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.427832][T15385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.427855][T15385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.712495][T15403] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3800'. [ 246.732878][T15403] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3800'. [ 247.042391][T15422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15422 comm=+}[@ [ 247.291280][T15434] netlink: 332 bytes leftover after parsing attributes in process `syz.6.3811'. [ 247.579601][T15443] ------------[ cut here ]------------ [ 247.585451][T15443] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000)(1) [ 247.606677][T15443] WARNING: CPU: 1 PID: 15443 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 247.617644][T15443] Modules linked in: [ 247.621659][T15443] CPU: 1 UID: 0 PID: 15443 Comm: syz.7.3815 Not tainted syzkaller #0 PREEMPT(voluntary) [ 247.631699][T15443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.642372][T15443] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 247.648830][T15443] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 22 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 247.668791][T15443] RSP: 0018:ffffc90011dcb440 EFLAGS: 00010292 [ 247.674995][T15443] RAX: 883fdc6e0a51d000 RBX: ffff888111ef3040 RCX: 0000000000080000 [ 247.683659][T15443] RDX: ffffc9000b02c000 RSI: 000000000001b0da RDI: 000000000001b0db [ 247.692137][T15443] RBP: 0000000000000000 R08: 0001c90011dcb27f R09: 0000000000000000 [ 247.700767][T15443] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888111ef3000 [ 247.709708][T15443] R13: ffff88811c7b8000 R14: ffff88811c7b8000 R15: ffff888111ef3038 [ 247.718229][T15443] FS: 00007ff3a0cd76c0(0000) GS:ffff8882aef41000(0000) knlGS:0000000000000000 [ 247.727687][T15443] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.734448][T15443] CR2: 00002000000054c0 CR3: 000000011ad4a000 CR4: 00000000003506f0 [ 247.742867][T15443] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 247.751309][T15443] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 247.759786][T15443] Call Trace: [ 247.763114][T15443] [ 247.766091][T15443] reg_set_min_max+0x1eb/0x260 [ 247.771625][T15443] check_cond_jmp_op+0x1080/0x16e0 [ 247.776852][T15443] do_check+0x332a/0x7a10 [ 247.781271][T15443] do_check_common+0xc3a/0x12a0 [ 247.786275][T15443] bpf_check+0x942b/0xd9e0 [ 247.790987][T15443] ? __rcu_read_unlock+0x4f/0x70 [ 247.796367][T15443] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 247.802563][T15443] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 247.808279][T15443] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 247.808569][T15450] block device autoloading is deprecated and will be removed. [ 247.814539][T15443] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 247.828312][T15443] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 247.834736][T15443] ? pcpu_alloc_area+0x59c/0x5c0 [ 247.839903][T15443] ? obj_cgroup_uncharge+0x16/0x20 [ 247.845903][T15443] ? pcpu_memcg_post_alloc_hook+0x127/0x150 [ 247.852051][T15443] ? selinux_bpf_prog_load+0x36/0xf0 [ 247.857410][T15443] ? __kmalloc_cache_noprof+0x299/0x320 [ 247.863453][T15443] ? selinux_bpf_prog_load+0xbf/0xf0 [ 247.868922][T15443] ? security_bpf_prog_load+0x2c/0xa0 [ 247.874692][T15443] bpf_prog_load+0xedd/0x1070 [ 247.879538][T15443] ? security_bpf+0x2b/0x90 [ 247.884274][T15443] __sys_bpf+0x462/0x7b0 [ 247.888591][T15443] __x64_sys_bpf+0x41/0x50 [ 247.893906][T15443] x64_sys_call+0x2aea/0x2ff0 [ 247.898832][T15443] do_syscall_64+0xd2/0x200 [ 247.903594][T15443] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 247.910318][T15443] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 247.916643][T15443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.923013][T15443] RIP: 0033:0x7ff3a226eba9 [ 247.927597][T15443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.948755][T15443] RSP: 002b:00007ff3a0cd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.957546][T15443] RAX: ffffffffffffffda RBX: 00007ff3a24b5fa0 RCX: 00007ff3a226eba9 [ 247.965664][T15443] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 247.974310][T15443] RBP: 00007ff3a22f1e19 R08: 0000000000000000 R09: 0000000000000000 [ 247.982409][T15443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.991067][T15443] R13: 00007ff3a24b6038 R14: 00007ff3a24b5fa0 R15: 00007fffeb444f28 [ 248.000323][T15443] [ 248.003512][T15443] ---[ end trace 0000000000000000 ]--- [ 248.083803][T15457] loop9: detected capacity change from 0 to 128 [ 248.112661][T15457] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.146302][T15465] netlink: 332 bytes leftover after parsing attributes in process `syz.7.3822'. [ 248.161158][T15467] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3820'. [ 248.171188][T15467] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3820'. [ 248.213674][T15459] hub 6-0:1.0: USB hub found [ 248.218967][T15459] hub 6-0:1.0: 8 ports detected [ 248.281320][T15478] syz.9.3828 (15478): attempted to duplicate a private mapping with mremap. This is not supported. [ 248.384360][T15475] loop7: detected capacity change from 0 to 8192 [ 248.402159][T15475] /dev/loop7: Can't open blockdev [ 248.428461][T15490] vlan2: entered allmulticast mode [ 248.475394][T15494] loop9: detected capacity change from 0 to 256 [ 248.518408][T15499] pim6reg1: entered promiscuous mode [ 248.523867][T15499] pim6reg1: entered allmulticast mode [ 248.647029][T15507] bridge_slave_0: left promiscuous mode [ 248.653027][T15507] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.665379][T15507] bridge_slave_1: left allmulticast mode [ 248.671722][T15507] bridge_slave_1: left promiscuous mode [ 248.677813][T15507] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.714726][T15507] bond0: (slave bond_slave_0): Releasing backup interface [ 248.753124][T15507] bond0: (slave bond_slave_1): Releasing backup interface [ 248.784946][T15507] team0: Port device team_slave_0 removed [ 248.826381][T15507] team0: Port device team_slave_1 removed [ 248.844651][T15507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.852256][T15507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.882700][T15507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.890259][T15507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.938650][T15505] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 249.098053][T15534] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 249.113319][T15535] serio: Serial port ptm0 [ 249.212876][T15537] bond1: entered promiscuous mode [ 249.218289][T15537] bond1: entered allmulticast mode [ 249.237536][T15537] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.262421][T15537] bond1 (unregistering): Released all slaves [ 249.534574][T15557] geneve2: entered promiscuous mode [ 249.540464][T15557] geneve2: entered allmulticast mode [ 249.639256][T15561] loop5: detected capacity change from 0 to 8192 [ 249.654105][T15572] FAULT_INJECTION: forcing a failure. [ 249.654105][T15572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.661436][T15561] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 249.669382][T15572] CPU: 1 UID: 0 PID: 15572 Comm: syz.1.3864 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 249.669447][T15572] Tainted: [W]=WARN [ 249.669457][T15572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 249.669552][T15572] Call Trace: [ 249.669635][T15572] [ 249.669649][T15572] __dump_stack+0x1d/0x30 [ 249.669681][T15572] dump_stack_lvl+0xe8/0x140 [ 249.669710][T15572] dump_stack+0x15/0x1b [ 249.669735][T15572] should_fail_ex+0x265/0x280 [ 249.669772][T15572] should_fail+0xb/0x20 [ 249.669819][T15572] should_fail_usercopy+0x1a/0x20 [ 249.669858][T15572] _copy_from_iter+0xd2/0xe80 [ 249.669901][T15572] ? alloc_pages_mpol+0x201/0x250 [ 249.670033][T15572] copy_page_from_iter+0x178/0x2a0 [ 249.670092][T15572] tun_get_user+0x679/0x2680 [ 249.670201][T15572] ? ref_tracker_alloc+0x1f2/0x2f0 [ 249.670235][T15572] tun_chr_write_iter+0x15e/0x210 [ 249.670321][T15572] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 249.670354][T15572] vfs_write+0x52a/0x960 [ 249.670398][T15572] ksys_write+0xda/0x1a0 [ 249.670433][T15572] __x64_sys_write+0x40/0x50 [ 249.670479][T15572] x64_sys_call+0x27fe/0x2ff0 [ 249.670568][T15572] do_syscall_64+0xd2/0x200 [ 249.670622][T15572] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 249.670707][T15572] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 249.670754][T15572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.670850][T15572] RIP: 0033:0x7f01afb1d65f [ 249.670875][T15572] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 249.670948][T15572] RSP: 002b:00007f01ae57f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 249.670979][T15572] RAX: ffffffffffffffda RBX: 00007f01afd65fa0 RCX: 00007f01afb1d65f [ 249.670998][T15572] RDX: 0000000000000066 RSI: 00002000000068c0 RDI: 00000000000000c8 [ 249.671046][T15572] RBP: 00007f01ae57f090 R08: 0000000000000000 R09: 0000000000000000 [ 249.671064][T15572] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000001 [ 249.671083][T15572] R13: 00007f01afd66038 R14: 00007f01afd65fa0 R15: 00007fff9607f8d8 [ 249.671113][T15572] [ 249.684343][T15569] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15569 comm=syz.9.3865 [ 249.848148][T15579] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15579 comm=syz.9.3865 [ 250.011857][T15592] loop9: detected capacity change from 0 to 128 [ 250.030563][T15596] __nla_validate_parse: 4 callbacks suppressed [ 250.030581][T15596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3872'. [ 250.050576][T15596] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3872'. [ 250.062980][T15592] bio_check_eod: 29 callbacks suppressed [ 250.062999][T15592] syz.9.3873: attempt to access beyond end of device [ 250.062999][T15592] loop9: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 250.110045][T15592] syz.9.3873: attempt to access beyond end of device [ 250.110045][T15592] loop9: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 250.153209][T15592] syz.9.3873: attempt to access beyond end of device [ 250.153209][T15592] loop9: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 250.168059][T15592] Buffer I/O error on dev loop9, logical block 72, lost async page write [ 250.206576][T15592] syz.9.3873: attempt to access beyond end of device [ 250.206576][T15592] loop9: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 250.220755][T15592] Buffer I/O error on dev loop9, logical block 72, lost async page write [ 250.254424][T15592] syz.9.3873: attempt to access beyond end of device [ 250.254424][T15592] loop9: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 250.318417][T15612] netlink: 'syz.7.3881': attribute type 10 has an invalid length. [ 250.331204][T15612] team0: Port device dummy0 added [ 250.411232][T15618] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3884'. [ 250.533248][T15627] bpf: Bad value for 'uid' [ 250.632740][T15643] lo: entered promiscuous mode [ 250.649342][T15643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.691188][T15647] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3893'. [ 250.725130][T15651] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15651 comm=syz.6.3895 [ 250.759919][T15651] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15651 comm=syz.6.3895 [ 250.834635][ T29] kauditd_printk_skb: 740 callbacks suppressed [ 250.834719][ T29] audit: type=1400 audit(1757726050.714:12942): avc: denied { watch } for pid=15648 comm="syz.9.3894" path="/118/file0" dev="tmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 250.872946][ T29] audit: type=1326 audit(1757726050.754:12943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15662 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afb1eba9 code=0x7ffc0000 [ 250.897437][ T29] audit: type=1326 audit(1757726050.754:12944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15662 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f01afb1eba9 code=0x7ffc0000 [ 250.976505][ T29] audit: type=1326 audit(1757726050.804:12945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15662 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afb1eba9 code=0x7ffc0000 [ 250.985199][T15665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15665 comm=syz.6.3899 [ 251.002194][ T29] audit: type=1326 audit(1757726050.804:12946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15662 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afb1eba9 code=0x7ffc0000 [ 251.002237][ T29] audit: type=1326 audit(1757726050.804:12947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15662 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f01afb1eba9 code=0x7ffc0000 [ 251.002273][ T29] audit: type=1326 audit(1757726050.804:12948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15662 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afb1eba9 code=0x7ffc0000 [ 251.002321][ T29] audit: type=1326 audit(1757726050.804:12949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15662 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f01afb1eba9 code=0x7ffc0000 [ 251.002356][ T29] audit: type=1326 audit(1757726050.804:12950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15662 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afb1eba9 code=0x7ffc0000 [ 251.002418][ T29] audit: type=1326 audit(1757726050.804:12951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15662 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f01afb1eba9 code=0x7ffc0000 [ 251.270770][T15680] pim6reg1: entered promiscuous mode [ 251.276258][T15680] pim6reg1: entered allmulticast mode [ 251.297708][T15682] usb usb1: usbfs: process 15682 (syz.1.3904) did not claim interface 4 before use [ 251.377331][T15690] loop5: detected capacity change from 0 to 1024 [ 251.385492][T15690] EXT4-fs: Ignoring removed bh option [ 251.394003][T15690] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 251.426942][T15692] pim6reg1: entered promiscuous mode [ 251.432510][T15692] pim6reg1: entered allmulticast mode [ 251.467287][T15690] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 251.481189][T15690] System zones: 0-1, 3-12 [ 251.500919][T15698] FAULT_INJECTION: forcing a failure. [ 251.500919][T15698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.515736][T15698] CPU: 1 UID: 0 PID: 15698 Comm: syz.1.3910 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 251.515778][T15698] Tainted: [W]=WARN [ 251.515788][T15698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 251.515800][T15698] Call Trace: [ 251.515807][T15698] [ 251.515815][T15698] __dump_stack+0x1d/0x30 [ 251.515908][T15698] dump_stack_lvl+0xe8/0x140 [ 251.515969][T15698] dump_stack+0x15/0x1b [ 251.516000][T15698] should_fail_ex+0x265/0x280 [ 251.516072][T15698] should_fail+0xb/0x20 [ 251.516103][T15698] should_fail_usercopy+0x1a/0x20 [ 251.516129][T15698] strncpy_from_user+0x25/0x230 [ 251.516166][T15698] ? __fget_files+0x184/0x1c0 [ 251.516263][T15698] __se_sys_add_key+0x86/0x350 [ 251.516359][T15698] __x64_sys_add_key+0x67/0x80 [ 251.516390][T15698] x64_sys_call+0x28c4/0x2ff0 [ 251.516411][T15698] do_syscall_64+0xd2/0x200 [ 251.516454][T15698] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 251.516483][T15698] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 251.516750][T15698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.516850][T15698] RIP: 0033:0x7f01afb1eba9 [ 251.516865][T15698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.516884][T15698] RSP: 002b:00007f01ae57f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 251.516928][T15698] RAX: ffffffffffffffda RBX: 00007f01afd65fa0 RCX: 00007f01afb1eba9 [ 251.516943][T15698] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000080 [ 251.516959][T15698] RBP: 00007f01ae57f090 R08: ffffffffffffffff R09: 0000000000000000 [ 251.516974][T15698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.517012][T15698] R13: 00007f01afd66038 R14: 00007f01afd65fa0 R15: 00007fff9607f8d8 [ 251.517038][T15698] [ 251.724539][T15690] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.3906: lblock 1 mapped to illegal pblock 1 (length 1) [ 251.787078][T15690] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.3906: Failed to acquire dquot type 0 [ 251.795432][T15708] loop9: detected capacity change from 0 to 128 [ 251.837001][T15708] EXT4-fs mount: 7 callbacks suppressed [ 251.837028][T15708] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 251.852418][T15708] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.874257][T15703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15703 comm=+}[@ [ 251.895568][T15690] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.3906: Freeing blocks not in datazone - block = 0, count = 4096 [ 251.960846][T15690] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.3906: Invalid inode bitmap blk 0 in block_group 0 [ 251.976004][T11992] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:53: lblock 1 mapped to illegal pblock 1 (length 1) [ 252.016635][T11992] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:53: Failed to release dquot type 0 [ 252.038319][T15690] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 252.059820][T15722] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3919'. [ 252.060282][T13642] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 252.072370][T15690] EXT4-fs (loop5): 1 orphan inode deleted [ 252.094060][T15690] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.145297][T15725] loop9: detected capacity change from 0 to 512 [ 252.174915][T15725] EXT4-fs (loop9): orphan cleanup on readonly fs [ 252.195763][T15725] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.3918: bad orphan inode 13 [ 252.215124][T15690] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 252.233382][T15725] ext4_test_bit(bit=12, block=18) = 1 [ 252.239192][T15725] is_bad_inode(inode)=0 [ 252.243765][T15725] NEXT_ORPHAN(inode)=2130706432 [ 252.248851][T15725] max_ino=32 [ 252.252569][T15725] i_nlink=1 [ 252.256592][T15725] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.293183][T15725] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 252.308033][T12118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.324513][T15725] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3918: bg 0: block 248: padding at end of block bitmap is not set [ 252.352636][T15725] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.3918: Failed to acquire dquot type 1 [ 252.375567][T15725] EXT4-fs warning (device loop9): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 252.427506][T13642] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.463293][T15728] dummy0: entered allmulticast mode [ 252.494158][T15737] loop9: detected capacity change from 0 to 1024 [ 252.525590][T15735] dummy0: left allmulticast mode [ 252.538166][T15740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3923'. [ 252.554078][T15737] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.579754][T15740] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3923'. [ 252.786203][T13642] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.856325][T15754] loop9: detected capacity change from 0 to 512 [ 252.944519][T15754] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.971342][T15754] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.109645][T13642] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.182890][T15775] SELinux: Context is not valid (left unmapped). [ 253.201384][T15776] pim6reg1: entered promiscuous mode [ 253.207246][T15776] pim6reg1: entered allmulticast mode [ 253.216065][T15775] 9pnet_fd: Insufficient options for proto=fd [ 253.255525][T15752] netlink: 'syz.5.3926': attribute type 13 has an invalid length. [ 253.361079][T15781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3935'. [ 253.385809][T15752] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.393696][T15752] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.433126][T15787] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3937'. [ 253.543441][T15782] lo speed is unknown, defaulting to 1000 [ 253.551316][T15782] lo speed is unknown, defaulting to 1000 [ 253.557942][T15782] lo speed is unknown, defaulting to 1000 [ 253.594927][T15782] infiniband sz1: set active [ 253.600708][T15782] infiniband sz1: added lo [ 253.613551][T15782] RDS/IB: sz1: added [ 253.618529][T15782] smc: adding ib device sz1 with port count 1 [ 253.624762][T15782] smc: ib device sz1 port 1 has pnetid [ 253.631575][T15782] lo speed is unknown, defaulting to 1000 [ 253.671264][T15782] lo speed is unknown, defaulting to 1000 [ 253.710753][T15782] lo speed is unknown, defaulting to 1000 [ 253.750372][T15782] lo speed is unknown, defaulting to 1000 [ 253.789279][T15782] lo speed is unknown, defaulting to 1000 [ 253.829360][T15782] lo speed is unknown, defaulting to 1000 [ 253.860719][T15815] SELinux: failed to load policy [ 253.868362][T15782] lo speed is unknown, defaulting to 1000 [ 253.875768][T15818] loop5: detected capacity change from 0 to 512 [ 253.893778][T15818] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 253.908892][ T10] lo speed is unknown, defaulting to 1000 [ 253.923822][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.933933][ T10] lo speed is unknown, defaulting to 1000 [ 253.945552][T15818] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 253.967327][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.979067][T15821] pim6reg1: entered promiscuous mode [ 253.984525][T15821] pim6reg1: entered allmulticast mode [ 253.984969][T15818] EXT4-fs (loop5): orphan cleanup on readonly fs [ 253.992583][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.046131][T15818] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3945: Invalid block bitmap block 0 in block_group 0 [ 254.072721][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.137231][T15818] EXT4-fs (loop5): Remounting filesystem read-only [ 254.148103][T15818] EXT4-fs (loop5): 1 orphan inode deleted [ 254.173786][T15818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.187636][T15831] loop9: detected capacity change from 0 to 1024 [ 254.234097][T15831] EXT4-fs: Ignoring removed bh option [ 254.281855][T15831] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 254.295937][T12118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.318472][T15831] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 254.347040][T15831] System zones: 0-1, 3-12 [ 254.407866][T15831] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #3: block 1: comm syz.9.3949: lblock 1 mapped to illegal pblock 1 (length 1) [ 254.439934][T15836] loop5: detected capacity change from 0 to 4096 [ 254.461553][T15831] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.3949: Failed to acquire dquot type 0 [ 254.480492][T15836] EXT4-fs: dax option not supported [ 254.493812][T15831] EXT4-fs error (device loop9): ext4_free_blocks:6696: comm syz.9.3949: Freeing blocks not in datazone - block = 0, count = 4096 [ 254.516748][T15838] FAULT_INJECTION: forcing a failure. [ 254.516748][T15838] name failslab, interval 1, probability 0, space 0, times 0 [ 254.529927][T15838] CPU: 1 UID: 0 PID: 15838 Comm: syz.6.3951 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 254.529970][T15838] Tainted: [W]=WARN [ 254.529980][T15838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.530065][T15838] Call Trace: [ 254.530073][T15838] [ 254.530081][T15838] __dump_stack+0x1d/0x30 [ 254.530104][T15838] dump_stack_lvl+0xe8/0x140 [ 254.530125][T15838] dump_stack+0x15/0x1b [ 254.530148][T15838] should_fail_ex+0x265/0x280 [ 254.530239][T15838] should_failslab+0x8c/0xb0 [ 254.530266][T15838] kmem_cache_alloc_noprof+0x50/0x310 [ 254.530322][T15838] ? skb_clone+0x151/0x1f0 [ 254.530354][T15838] skb_clone+0x151/0x1f0 [ 254.530443][T15838] __netlink_deliver_tap+0x2c9/0x500 [ 254.530485][T15838] ? netlink_attachskb+0x2d0/0x610 [ 254.530508][T15838] netlink_sendskb+0x126/0x150 [ 254.530530][T15838] netlink_unicast+0x2a2/0x690 [ 254.530590][T15838] netlink_ack+0x4c8/0x500 [ 254.530624][T15838] netlink_rcv_skb+0x192/0x220 [ 254.530720][T15838] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 254.530760][T15838] rtnetlink_rcv+0x1c/0x30 [ 254.530799][T15838] netlink_unicast+0x5bd/0x690 [ 254.530878][T15838] netlink_sendmsg+0x58b/0x6b0 [ 254.530915][T15838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.530949][T15838] __sock_sendmsg+0x145/0x180 [ 254.530985][T15838] ____sys_sendmsg+0x345/0x4e0 [ 254.531101][T15838] ___sys_sendmsg+0x17b/0x1d0 [ 254.531154][T15838] __sys_sendmmsg+0x178/0x300 [ 254.531263][T15838] __x64_sys_sendmmsg+0x57/0x70 [ 254.531292][T15838] x64_sys_call+0x1c4a/0x2ff0 [ 254.531322][T15838] do_syscall_64+0xd2/0x200 [ 254.531393][T15838] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 254.531418][T15838] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 254.531455][T15838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.531485][T15838] RIP: 0033:0x7efc6344eba9 [ 254.531506][T15838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.531530][T15838] RSP: 002b:00007efc61eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 254.531550][T15838] RAX: ffffffffffffffda RBX: 00007efc63695fa0 RCX: 00007efc6344eba9 [ 254.531563][T15838] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 254.531617][T15838] RBP: 00007efc61eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 254.531646][T15838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.531663][T15838] R13: 00007efc63696038 R14: 00007efc63695fa0 R15: 00007fff38eaec68 [ 254.531687][T15838] [ 254.540269][T15831] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.3949: Invalid inode bitmap blk 0 in block_group 0 [ 254.574866][T15836] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 254.632089][ T12] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 254.644226][T15838] netlink: 'syz.6.3951': attribute type 30 has an invalid length. [ 254.649414][ T12] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0 [ 254.659013][T15831] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 254.861661][T15831] EXT4-fs (loop9): 1 orphan inode deleted [ 254.868072][T15831] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.007967][T15840] FAULT_INJECTION: forcing a failure. [ 255.007967][T15840] name failslab, interval 1, probability 0, space 0, times 0 [ 255.021096][T15840] CPU: 0 UID: 0 PID: 15840 Comm: syz.1.3952 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 255.021140][T15840] Tainted: [W]=WARN [ 255.021150][T15840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 255.021167][T15840] Call Trace: [ 255.021175][T15840] [ 255.021261][T15840] __dump_stack+0x1d/0x30 [ 255.021288][T15840] dump_stack_lvl+0xe8/0x140 [ 255.021312][T15840] dump_stack+0x15/0x1b [ 255.021329][T15840] should_fail_ex+0x265/0x280 [ 255.021355][T15840] should_failslab+0x8c/0xb0 [ 255.021419][T15840] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 255.021460][T15840] ? cls_bpf_prog_from_ops+0xe5/0x1c0 [ 255.021498][T15840] kmemdup_noprof+0x2b/0x70 [ 255.021588][T15840] cls_bpf_prog_from_ops+0xe5/0x1c0 [ 255.021630][T15840] cls_bpf_change+0x430/0x7a0 [ 255.021672][T15840] ? __pfx_cls_bpf_change+0x10/0x10 [ 255.021789][T15840] tc_new_tfilter+0xde1/0x10a0 [ 255.021831][T15840] ? __rcu_read_unlock+0x4f/0x70 [ 255.021874][T15840] ? ns_capable+0x7d/0xb0 [ 255.021898][T15840] ? __pfx_tc_new_tfilter+0x10/0x10 [ 255.021950][T15840] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 255.022002][T15840] netlink_rcv_skb+0x123/0x220 [ 255.022042][T15840] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 255.022104][T15840] rtnetlink_rcv+0x1c/0x30 [ 255.022134][T15840] netlink_unicast+0x5bd/0x690 [ 255.022159][T15840] netlink_sendmsg+0x58b/0x6b0 [ 255.022244][T15840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.022278][T15840] __sock_sendmsg+0x145/0x180 [ 255.022322][T15840] ____sys_sendmsg+0x31e/0x4e0 [ 255.022367][T15840] ___sys_sendmsg+0x17b/0x1d0 [ 255.022417][T15840] __x64_sys_sendmsg+0xd4/0x160 [ 255.022452][T15840] x64_sys_call+0x191e/0x2ff0 [ 255.022476][T15840] do_syscall_64+0xd2/0x200 [ 255.022531][T15840] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 255.022563][T15840] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 255.022671][T15840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.022699][T15840] RIP: 0033:0x7f01afb1eba9 [ 255.022719][T15840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.022752][T15840] RSP: 002b:00007f01ae57f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.022777][T15840] RAX: ffffffffffffffda RBX: 00007f01afd65fa0 RCX: 00007f01afb1eba9 [ 255.022794][T15840] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000008 [ 255.022811][T15840] RBP: 00007f01ae57f090 R08: 0000000000000000 R09: 0000000000000000 [ 255.022828][T15840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.022843][T15840] R13: 00007f01afd66038 R14: 00007f01afd65fa0 R15: 00007fff9607f8d8 [ 255.022870][T15840] [ 255.301891][T15843] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 255.337405][T13642] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.464489][T15860] __nla_validate_parse: 2 callbacks suppressed [ 255.464507][T15860] netlink: 332 bytes leftover after parsing attributes in process `syz.9.3959'. [ 255.519827][T15864] pim6reg1: entered promiscuous mode [ 255.525566][T15864] pim6reg1: entered allmulticast mode [ 255.818823][T15888] FAULT_INJECTION: forcing a failure. [ 255.818823][T15888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.825289][ T3418] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.832668][T15888] CPU: 1 UID: 0 PID: 15888 Comm: syz.6.3971 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 255.832776][T15888] Tainted: [W]=WARN [ 255.832786][T15888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 255.832844][T15888] Call Trace: [ 255.832912][T15888] [ 255.832925][T15888] __dump_stack+0x1d/0x30 [ 255.832961][T15888] dump_stack_lvl+0xe8/0x140 [ 255.832990][T15888] dump_stack+0x15/0x1b [ 255.833040][T15888] should_fail_ex+0x265/0x280 [ 255.833076][T15888] should_fail+0xb/0x20 [ 255.833107][T15888] should_fail_usercopy+0x1a/0x20 [ 255.833145][T15888] _copy_to_user+0x20/0xa0 [ 255.833271][T15888] simple_read_from_buffer+0xb5/0x130 [ 255.833306][T15888] proc_fail_nth_read+0x10e/0x150 [ 255.833349][T15888] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.833387][T15888] vfs_read+0x1a8/0x770 [ 255.833418][T15888] ? __rcu_read_unlock+0x4f/0x70 [ 255.833456][T15888] ? __fget_files+0x184/0x1c0 [ 255.833508][T15888] ksys_read+0xda/0x1a0 [ 255.833543][T15888] __x64_sys_read+0x40/0x50 [ 255.833576][T15888] x64_sys_call+0x27bc/0x2ff0 [ 255.833607][T15888] do_syscall_64+0xd2/0x200 [ 255.833654][T15888] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 255.833688][T15888] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 255.833804][T15888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.833836][T15888] RIP: 0033:0x7efc6344d5bc [ 255.833868][T15888] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 255.833958][T15888] RSP: 002b:00007efc61eb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 255.833986][T15888] RAX: ffffffffffffffda RBX: 00007efc63695fa0 RCX: 00007efc6344d5bc [ 255.834005][T15888] RDX: 000000000000000f RSI: 00007efc61eb70a0 RDI: 000000000000000e [ 255.834025][T15888] RBP: 00007efc61eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 255.834043][T15888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.834061][T15888] R13: 00007efc63696038 R14: 00007efc63695fa0 R15: 00007fff38eaec68 [ 255.834128][T15888] [ 255.926435][T15898] tipc: Started in network mode [ 255.928011][ T3418] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.928558][ T3418] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.933043][T15898] tipc: Node identity 92f11f0d7f59, cluster identity 4711 [ 255.937907][ T3418] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.942675][T15898] tipc: Enabled bearer , priority 0 [ 255.945792][T15898] syzkaller0: entered promiscuous mode [ 255.948060][ T3418] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 255.953471][T15898] syzkaller0: entered allmulticast mode [ 256.124514][ T3418] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 256.124550][ T3418] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 256.124638][ T3418] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 256.124665][ T3418] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 256.124691][ T3418] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 256.127725][ T3418] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 256.181475][T15902] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3976'. [ 256.191789][T15896] tipc: Resetting bearer [ 256.209512][T15896] tipc: Disabling bearer [ 256.259260][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 256.259280][ T29] audit: type=1326 audit(1757726056.134:13282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.7.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a226eba9 code=0x7ffc0000 [ 256.259457][ T29] audit: type=1326 audit(1757726056.134:13283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.7.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a226eba9 code=0x7ffc0000 [ 256.260029][ T29] audit: type=1326 audit(1757726056.134:13284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.7.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff3a226eba9 code=0x7ffc0000 [ 256.341179][ T29] audit: type=1326 audit(1757726056.154:13285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.7.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a226eba9 code=0x7ffc0000 [ 256.341277][ T29] audit: type=1326 audit(1757726056.154:13286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.7.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a226eba9 code=0x7ffc0000 [ 256.341313][ T29] audit: type=1326 audit(1757726056.154:13287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.7.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7ff3a226eba9 code=0x7ffc0000 [ 256.341418][ T29] audit: type=1326 audit(1757726056.154:13288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.7.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a226eba9 code=0x7ffc0000 [ 256.341452][ T29] audit: type=1326 audit(1757726056.174:13289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15911 comm="syz.9.3980" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd06f30eba9 code=0x0 [ 256.508450][T15915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15915 comm=syz.7.3981 [ 256.567976][ T29] audit: type=1400 audit(1757726056.434:13290): avc: denied { ioctl } for pid=15923 comm="syz.1.3986" path="socket:[50693]" dev="sockfs" ino=50693 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 256.600780][ T29] audit: type=1400 audit(1757726056.444:13291): avc: denied { write } for pid=15925 comm="syz.7.3985" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 256.643217][T15932] netlink: 'syz.6.3987': attribute type 10 has an invalid length. [ 256.649377][T15927] lo speed is unknown, defaulting to 1000 [ 256.654150][T15932] FAULT_INJECTION: forcing a failure. [ 256.654150][T15932] name failslab, interval 1, probability 0, space 0, times 0 [ 256.670137][T15932] CPU: 1 UID: 0 PID: 15932 Comm: syz.6.3987 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 256.670202][T15932] Tainted: [W]=WARN [ 256.670209][T15932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 256.670222][T15932] Call Trace: [ 256.670229][T15932] [ 256.670239][T15932] __dump_stack+0x1d/0x30 [ 256.670265][T15932] dump_stack_lvl+0xe8/0x140 [ 256.670287][T15932] dump_stack+0x15/0x1b [ 256.670303][T15932] should_fail_ex+0x265/0x280 [ 256.670390][T15932] should_failslab+0x8c/0xb0 [ 256.670418][T15932] kmem_cache_alloc_node_noprof+0x57/0x320 [ 256.670451][T15932] ? __alloc_skb+0x101/0x320 [ 256.670498][T15932] __alloc_skb+0x101/0x320 [ 256.670523][T15932] inet6_rt_notify+0x8b/0x1d0 [ 256.670553][T15932] fib6_del+0x783/0x8b0 [ 256.670579][T15932] ? fib6_ifdown+0x205/0x330 [ 256.670606][T15932] fib6_clean_node+0x167/0x280 [ 256.670700][T15932] fib6_walk_continue+0x39f/0x440 [ 256.670727][T15932] fib6_walk+0xc5/0x180 [ 256.670765][T15932] ? __pfx_fib6_ifdown+0x10/0x10 [ 256.670790][T15932] fib6_clean_all+0xca/0x140 [ 256.670814][T15932] ? __pfx_fib6_clean_node+0x10/0x10 [ 256.670854][T15932] ? __pfx_fib6_ifdown+0x10/0x10 [ 256.670961][T15932] rt6_disable_ip+0xa6/0x580 [ 256.670986][T15932] ? _raw_spin_unlock+0x26/0x50 [ 256.671010][T15932] ? finish_task_switch+0xad/0x2b0 [ 256.671034][T15932] addrconf_ifdown+0xa6/0xf30 [ 256.671058][T15932] ? tls_dev_event+0x3d7/0x910 [ 256.671145][T15932] addrconf_notify+0x222/0x930 [ 256.671172][T15932] ? __pfx_addrconf_notify+0x10/0x10 [ 256.671199][T15932] raw_notifier_call_chain+0x6f/0x1b0 [ 256.671230][T15932] ? call_netdevice_notifiers_info+0x9c/0x100 [ 256.671325][T15932] call_netdevice_notifiers_info+0xae/0x100 [ 256.671362][T15932] __dev_notify_flags+0xff/0x1a0 [ 256.671387][T15932] netif_change_flags+0xac/0xd0 [ 256.671411][T15932] do_setlink+0x9d2/0x2810 [ 256.671527][T15932] ? save_fpregs_to_fpstate+0x100/0x160 [ 256.671567][T15932] ? _raw_spin_unlock+0x26/0x50 [ 256.671594][T15932] ? finish_task_switch+0xad/0x2b0 [ 256.671621][T15932] ? __schedule+0x6b9/0xb30 [ 256.671721][T15932] rtnl_newlink+0xe75/0x12d0 [ 256.671768][T15932] ? xas_load+0x413/0x430 [ 256.671807][T15932] ? xas_load+0x413/0x430 [ 256.671860][T15932] ? __memcg_slab_free_hook+0x135/0x230 [ 256.671913][T15932] ? __rcu_read_unlock+0x4f/0x70 [ 256.671936][T15932] ? avc_has_perm_noaudit+0x1b1/0x200 [ 256.672030][T15932] ? cred_has_capability+0x210/0x280 [ 256.672064][T15932] ? selinux_capable+0x31/0x40 [ 256.672175][T15932] ? security_capable+0x83/0x90 [ 256.672201][T15932] ? ns_capable+0x7d/0xb0 [ 256.672223][T15932] ? __pfx_rtnl_newlink+0x10/0x10 [ 256.672298][T15932] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 256.672337][T15932] netlink_rcv_skb+0x123/0x220 [ 256.672363][T15932] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 256.672482][T15932] rtnetlink_rcv+0x1c/0x30 [ 256.672549][T15932] netlink_unicast+0x5bd/0x690 [ 256.672644][T15932] netlink_sendmsg+0x58b/0x6b0 [ 256.672675][T15932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.672703][T15932] __sock_sendmsg+0x145/0x180 [ 256.672739][T15932] ____sys_sendmsg+0x31e/0x4e0 [ 256.672886][T15932] ___sys_sendmsg+0x17b/0x1d0 [ 256.672931][T15932] __x64_sys_sendmsg+0xd4/0x160 [ 256.672964][T15932] x64_sys_call+0x191e/0x2ff0 [ 256.672988][T15932] do_syscall_64+0xd2/0x200 [ 256.673067][T15932] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 256.673093][T15932] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 256.673125][T15932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.673159][T15932] RIP: 0033:0x7efc6344eba9 [ 256.673175][T15932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.673195][T15932] RSP: 002b:00007efc61e96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.673216][T15932] RAX: ffffffffffffffda RBX: 00007efc63696090 RCX: 00007efc6344eba9 [ 256.673230][T15932] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 256.673243][T15932] RBP: 00007efc61e96090 R08: 0000000000000000 R09: 0000000000000000 [ 256.673257][T15932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.673270][T15932] R13: 00007efc63696128 R14: 00007efc63696090 R15: 00007fff38eaec68 [ 256.673347][T15932] [ 257.132263][T15939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3989'. [ 257.139972][T15932] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 257.321207][T15961] loop5: detected capacity change from 0 to 128 [ 257.352147][T15961] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 257.368064][T15961] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 257.376399][T15965] netlink: 'syz.1.3999': attribute type 10 has an invalid length. [ 257.398506][ T12] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 257.486371][T15983] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4006'. [ 257.495167][T15965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3999'. [ 257.512260][T15983] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4006'. [ 257.532424][T15977] netlink: 208 bytes leftover after parsing attributes in process `syz.5.4003'. [ 257.549338][T15977] loop5: detected capacity change from 0 to 764 [ 257.567119][T15977] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 257.644883][T15993] loop5: detected capacity change from 0 to 1024 [ 257.678184][T15993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.715630][T15998] loop9: detected capacity change from 0 to 2048 [ 257.734657][T15998] EXT4-fs: quotafile must be on filesystem root [ 257.737868][T15993] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 257.843773][T16005] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4013'. [ 257.854133][T12118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.878543][T16007] IPv6: NLM_F_CREATE should be specified when creating new route [ 258.046607][T16032] FAULT_INJECTION: forcing a failure. [ 258.046607][T16032] name failslab, interval 1, probability 0, space 0, times 0 [ 258.059466][T16032] CPU: 0 UID: 0 PID: 16032 Comm: syz.5.4023 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 258.059577][T16032] Tainted: [W]=WARN [ 258.059586][T16032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.059601][T16032] Call Trace: [ 258.059609][T16032] [ 258.059617][T16032] __dump_stack+0x1d/0x30 [ 258.059686][T16032] dump_stack_lvl+0xe8/0x140 [ 258.059759][T16032] dump_stack+0x15/0x1b [ 258.059779][T16032] should_fail_ex+0x265/0x280 [ 258.059809][T16032] ? genl_start+0x117/0x390 [ 258.059916][T16032] should_failslab+0x8c/0xb0 [ 258.059947][T16032] __kmalloc_cache_noprof+0x4c/0x320 [ 258.059987][T16032] genl_start+0x117/0x390 [ 258.060027][T16032] __netlink_dump_start+0x334/0x520 [ 258.060110][T16032] genl_family_rcv_msg_dumpit+0x115/0x180 [ 258.060151][T16032] ? __pfx_genl_start+0x10/0x10 [ 258.060242][T16032] ? __pfx_genl_dumpit+0x10/0x10 [ 258.060336][T16032] ? __pfx_genl_done+0x10/0x10 [ 258.060380][T16032] genl_rcv_msg+0x3f0/0x460 [ 258.060485][T16032] ? __pfx_ethnl_default_start+0x10/0x10 [ 258.060517][T16032] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 258.060553][T16032] ? __pfx_ethnl_default_done+0x10/0x10 [ 258.060629][T16032] netlink_rcv_skb+0x123/0x220 [ 258.060653][T16032] ? __pfx_genl_rcv_msg+0x10/0x10 [ 258.060695][T16032] genl_rcv+0x28/0x40 [ 258.060728][T16032] netlink_unicast+0x5bd/0x690 [ 258.060798][T16032] netlink_sendmsg+0x58b/0x6b0 [ 258.060833][T16032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.060869][T16032] __sock_sendmsg+0x145/0x180 [ 258.060909][T16032] ____sys_sendmsg+0x31e/0x4e0 [ 258.061012][T16032] ___sys_sendmsg+0x17b/0x1d0 [ 258.061065][T16032] __x64_sys_sendmsg+0xd4/0x160 [ 258.061105][T16032] x64_sys_call+0x191e/0x2ff0 [ 258.061131][T16032] do_syscall_64+0xd2/0x200 [ 258.061220][T16032] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 258.061248][T16032] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 258.061355][T16032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.061381][T16032] RIP: 0033:0x7f0d81ebeba9 [ 258.061399][T16032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.061423][T16032] RSP: 002b:00007f0d80927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.061515][T16032] RAX: ffffffffffffffda RBX: 00007f0d82105fa0 RCX: 00007f0d81ebeba9 [ 258.061530][T16032] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 258.061546][T16032] RBP: 00007f0d80927090 R08: 0000000000000000 R09: 0000000000000000 [ 258.061562][T16032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.061577][T16032] R13: 00007f0d82106038 R14: 00007f0d82105fa0 R15: 00007ffcf2e45fe8 [ 258.061603][T16032] [ 258.063523][T16035] ip6tnl1: entered allmulticast mode [ 258.356532][T16050] FAULT_INJECTION: forcing a failure. [ 258.356532][T16050] name failslab, interval 1, probability 0, space 0, times 0 [ 258.370009][T16050] CPU: 0 UID: 0 PID: 16050 Comm: syz.9.4027 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 258.370122][T16050] Tainted: [W]=WARN [ 258.370128][T16050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.370145][T16050] Call Trace: [ 258.370153][T16050] [ 258.370162][T16050] __dump_stack+0x1d/0x30 [ 258.370188][T16050] dump_stack_lvl+0xe8/0x140 [ 258.370213][T16050] dump_stack+0x15/0x1b [ 258.370297][T16050] should_fail_ex+0x265/0x280 [ 258.370325][T16050] should_failslab+0x8c/0xb0 [ 258.370358][T16050] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 258.370420][T16050] ? strncmp+0x34/0x70 [ 258.370437][T16050] ? match_strdup+0x37/0x40 [ 258.370470][T16050] ? strcmp+0x22/0x50 [ 258.370528][T16050] kmemdup_nul+0x36/0xc0 [ 258.370635][T16050] match_strdup+0x37/0x40 [ 258.370720][T16050] p9_client_create+0x2c9/0xbc0 [ 258.370771][T16050] v9fs_session_init+0xf7/0xde0 [ 258.370867][T16050] ? avc_has_perm_noaudit+0x1b1/0x200 [ 258.370898][T16050] ? v9fs_mount+0x51/0x5c0 [ 258.370976][T16050] ? __kmalloc_cache_noprof+0x299/0x320 [ 258.371009][T16050] v9fs_mount+0x67/0x5c0 [ 258.371086][T16050] ? selinux_capable+0x31/0x40 [ 258.371121][T16050] ? __pfx_v9fs_mount+0x10/0x10 [ 258.371149][T16050] legacy_get_tree+0x75/0xd0 [ 258.371178][T16050] vfs_get_tree+0x54/0x1d0 [ 258.371208][T16050] do_new_mount+0x207/0x5e0 [ 258.371276][T16050] ? security_capable+0x83/0x90 [ 258.371302][T16050] path_mount+0x4a4/0xb20 [ 258.371330][T16050] ? user_path_at+0x109/0x130 [ 258.371372][T16050] __se_sys_mount+0x28f/0x2e0 [ 258.371441][T16050] ? fput+0x8f/0xc0 [ 258.371474][T16050] __x64_sys_mount+0x67/0x80 [ 258.371503][T16050] x64_sys_call+0x2b4d/0x2ff0 [ 258.371592][T16050] do_syscall_64+0xd2/0x200 [ 258.371624][T16050] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 258.371683][T16050] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 258.371714][T16050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.371748][T16050] RIP: 0033:0x7fd06f30eba9 [ 258.371768][T16050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.371860][T16050] RSP: 002b:00007fd06dd77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 258.371881][T16050] RAX: ffffffffffffffda RBX: 00007fd06f555fa0 RCX: 00007fd06f30eba9 [ 258.371893][T16050] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 258.371914][T16050] RBP: 00007fd06dd77090 R08: 0000200000000ac0 R09: 0000000000000000 [ 258.371930][T16050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.371946][T16050] R13: 00007fd06f556038 R14: 00007fd06f555fa0 R15: 00007fff120ea478 [ 258.371968][T16050] [ 258.768308][T16060] loop5: detected capacity change from 0 to 512 [ 258.778007][T16060] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 258.801850][T16060] EXT4-fs (loop5): orphan cleanup on readonly fs [ 258.809516][T16060] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.4034: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 258.832210][T16060] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz.5.4034: Bad quota inode: 3, type: 0 [ 258.851335][T16060] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 258.866776][T16060] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 258.874762][T16060] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 258.894198][T16077] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4039'. [ 258.995562][T16079] loop9: detected capacity change from 0 to 2048 [ 259.109405][T16079] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.193090][T12118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.483890][T16111] loop5: detected capacity change from 0 to 512 [ 259.491478][T16111] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 259.496663][T16112] pim6reg1: entered promiscuous mode [ 259.504784][T16111] EXT4-fs (loop5): 1 truncate cleaned up [ 259.507489][T16112] pim6reg1: entered allmulticast mode [ 259.514305][T16111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.643359][T13642] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.710128][T16131] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4059'. [ 259.969427][T16170] FAULT_INJECTION: forcing a failure. [ 259.969427][T16170] name failslab, interval 1, probability 0, space 0, times 0 [ 259.983080][T16170] CPU: 0 UID: 0 PID: 16170 Comm: syz.9.4074 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 259.983167][T16170] Tainted: [W]=WARN [ 259.983176][T16170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 259.983192][T16170] Call Trace: [ 259.983200][T16170] [ 259.983210][T16170] __dump_stack+0x1d/0x30 [ 259.983265][T16170] dump_stack_lvl+0xe8/0x140 [ 259.983362][T16170] dump_stack+0x15/0x1b [ 259.983383][T16170] should_fail_ex+0x265/0x280 [ 259.983415][T16170] should_failslab+0x8c/0xb0 [ 259.983489][T16170] kmem_cache_alloc_node_noprof+0x57/0x320 [ 259.983527][T16170] ? __alloc_skb+0x101/0x320 [ 259.983554][T16170] __alloc_skb+0x101/0x320 [ 259.983650][T16170] tc_ctl_action+0x64b/0x830 [ 259.983715][T16170] ? __pfx_tc_ctl_action+0x10/0x10 [ 259.983760][T16170] rtnetlink_rcv_msg+0x657/0x6d0 [ 259.983853][T16170] netlink_rcv_skb+0x123/0x220 [ 259.983880][T16170] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 259.983930][T16170] rtnetlink_rcv+0x1c/0x30 [ 259.984033][T16170] netlink_unicast+0x5bd/0x690 [ 259.984064][T16170] netlink_sendmsg+0x58b/0x6b0 [ 259.984093][T16170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.984207][T16170] __sock_sendmsg+0x145/0x180 [ 259.984264][T16170] ____sys_sendmsg+0x31e/0x4e0 [ 259.984303][T16170] ___sys_sendmsg+0x17b/0x1d0 [ 259.984399][T16170] __x64_sys_sendmsg+0xd4/0x160 [ 259.984496][T16170] x64_sys_call+0x191e/0x2ff0 [ 259.984526][T16170] do_syscall_64+0xd2/0x200 [ 259.984567][T16170] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 259.984604][T16170] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 259.984678][T16170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.984706][T16170] RIP: 0033:0x7fd06f30eba9 [ 259.984724][T16170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.984742][T16170] RSP: 002b:00007fd06dd77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.984799][T16170] RAX: ffffffffffffffda RBX: 00007fd06f555fa0 RCX: 00007fd06f30eba9 [ 259.984815][T16170] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000003 [ 259.984847][T16170] RBP: 00007fd06dd77090 R08: 0000000000000000 R09: 0000000000000000 [ 259.984892][T16170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.984904][T16170] R13: 00007fd06f556038 R14: 00007fd06f555fa0 R15: 00007fff120ea478 [ 259.985000][T16170] [ 260.267088][T16175] /dev/loop6: Can't lookup blockdev [ 260.273541][T16175] netlink: 'syz.6.4077': attribute type 1 has an invalid length. [ 260.363589][T12118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.477405][T16202] pim6reg1: entered promiscuous mode [ 260.483519][T16202] pim6reg1: entered allmulticast mode [ 260.582102][T16215] __nla_validate_parse: 6 callbacks suppressed [ 260.582119][T16215] netlink: 332 bytes leftover after parsing attributes in process `syz.1.4091'. [ 260.602034][T16209] lo speed is unknown, defaulting to 1000 [ 260.668019][T16220] netlink: 172 bytes leftover after parsing attributes in process `syz.6.4093'. [ 260.793701][T16237] FAULT_INJECTION: forcing a failure. [ 260.793701][T16237] name failslab, interval 1, probability 0, space 0, times 0 [ 260.806589][T16237] CPU: 1 UID: 0 PID: 16237 Comm: syz.1.4098 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 260.806671][T16237] Tainted: [W]=WARN [ 260.806680][T16237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 260.806695][T16237] Call Trace: [ 260.806703][T16237] [ 260.806712][T16237] __dump_stack+0x1d/0x30 [ 260.806754][T16237] dump_stack_lvl+0xe8/0x140 [ 260.806779][T16237] dump_stack+0x15/0x1b [ 260.806801][T16237] should_fail_ex+0x265/0x280 [ 260.806902][T16237] ? legacy_init_fs_context+0x31/0x80 [ 260.807009][T16237] should_failslab+0x8c/0xb0 [ 260.807092][T16237] __kmalloc_cache_noprof+0x4c/0x320 [ 260.807131][T16237] ? __kmalloc_cache_noprof+0x299/0x320 [ 260.807172][T16237] legacy_init_fs_context+0x31/0x80 [ 260.807271][T16237] alloc_fs_context+0x3ef/0x4e0 [ 260.807300][T16237] fs_context_for_mount+0x22/0x30 [ 260.807325][T16237] do_new_mount+0xe9/0x5e0 [ 260.807352][T16237] ? security_capable+0x83/0x90 [ 260.807386][T16237] path_mount+0x4a4/0xb20 [ 260.807461][T16237] ? user_path_at+0x109/0x130 [ 260.807507][T16237] __se_sys_mount+0x28f/0x2e0 [ 260.807547][T16237] ? fput+0x8f/0xc0 [ 260.807591][T16237] __x64_sys_mount+0x67/0x80 [ 260.807658][T16237] x64_sys_call+0x2b4d/0x2ff0 [ 260.807687][T16237] do_syscall_64+0xd2/0x200 [ 260.807730][T16237] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 260.807763][T16237] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 260.807839][T16237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.807909][T16237] RIP: 0033:0x7f01afb1eba9 [ 260.807928][T16237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.807957][T16237] RSP: 002b:00007f01ae57f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 260.807982][T16237] RAX: ffffffffffffffda RBX: 00007f01afd65fa0 RCX: 00007f01afb1eba9 [ 260.808066][T16237] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 260.808133][T16237] RBP: 00007f01ae57f090 R08: 0000200000000600 R09: 0000000000000000 [ 260.808149][T16237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.808237][T16237] R13: 00007f01afd66038 R14: 00007f01afd65fa0 R15: 00007fff9607f8d8 [ 260.808263][T16237] [ 261.195265][T16247] netlink: 'syz.7.4104': attribute type 4 has an invalid length. [ 261.303737][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 261.303754][ T29] audit: type=1326 audit(1757726061.185:13494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16260 comm="syz.9.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06f30eba9 code=0x7ffc0000 [ 261.400083][ T29] audit: type=1326 audit(1757726061.215:13495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16260 comm="syz.9.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fd06f30eba9 code=0x7ffc0000 [ 261.424178][ T29] audit: type=1326 audit(1757726061.215:13496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16260 comm="syz.9.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06f30eba9 code=0x7ffc0000 [ 261.447804][ T29] audit: type=1326 audit(1757726061.215:13497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16260 comm="syz.9.4109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06f30eba9 code=0x7ffc0000 [ 261.471584][ T29] audit: type=1326 audit(1757726061.265:13498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.9.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06f30eba9 code=0x7ffc0000 [ 261.495534][ T29] audit: type=1326 audit(1757726061.265:13499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.9.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06f30eba9 code=0x7ffc0000 [ 261.519459][ T29] audit: type=1326 audit(1757726061.275:13500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.9.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fd06f30eba9 code=0x7ffc0000 [ 261.544176][ T29] audit: type=1326 audit(1757726061.275:13501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.9.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06f30eba9 code=0x7ffc0000 [ 261.569293][ T29] audit: type=1326 audit(1757726061.275:13502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.9.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06f30eba9 code=0x7ffc0000 [ 261.593648][ T29] audit: type=1326 audit(1757726061.275:13503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.9.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd06f30eba9 code=0x7ffc0000 [ 261.614954][T16258] lo speed is unknown, defaulting to 1000 [ 261.696910][T16267] loop9: detected capacity change from 0 to 8192 [ 261.719541][T16259] lo speed is unknown, defaulting to 1000 [ 261.773818][T16267] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 262.211138][T16283] loop8: detected capacity change from 512 to 511 [ 262.375987][T16299] loop5: detected capacity change from 0 to 128 [ 262.779710][T16311] loop9: detected capacity change from 0 to 512 [ 262.841050][T16311] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.891614][T16311] ext4 filesystem being mounted at /169/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.068333][T13642] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.183743][T16330] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4136'. [ 263.202949][T16336] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4139'. [ 263.293098][T16344] loop9: detected capacity change from 0 to 1024 [ 263.304112][T16346] 9pnet_fd: Insufficient options for proto=fd [ 263.310663][T16344] EXT4-fs: Ignoring removed bh option [ 263.334653][T16344] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 263.356937][T16344] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 263.371584][T16344] System zones: 0-1, 3-12 [ 263.389422][T16344] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #3: block 1: comm syz.9.4142: lblock 1 mapped to illegal pblock 1 (length 1) [ 263.416787][T16355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.440104][T16344] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.4142: Failed to acquire dquot type 0 [ 263.457452][T16355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.481485][T16344] EXT4-fs error (device loop9): ext4_free_blocks:6696: comm syz.9.4142: Freeing blocks not in datazone - block = 0, count = 4096 [ 263.502949][ T6464] hid_parser_main: 17 callbacks suppressed [ 263.502972][ T6464] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 263.532233][T16344] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.4142: Invalid inode bitmap blk 0 in block_group 0 [ 263.551591][ T6464] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 263.569777][ T12] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 263.600915][T16344] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 263.617571][ T12] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0 [ 263.628316][T16362] pim6reg1: entered promiscuous mode [ 263.629687][T16344] EXT4-fs (loop9): 1 orphan inode deleted [ 263.635730][T16362] pim6reg1: entered allmulticast mode [ 263.652711][T16344] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.690546][T16344] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 263.737823][T13642] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.781081][T16367] netlink: 260 bytes leftover after parsing attributes in process `syz.9.4151'. [ 263.802704][T16367] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4151'. [ 263.829747][T16369] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4152'. [ 263.878533][T16379] bridge_slave_0: left allmulticast mode [ 263.885079][T16379] bridge_slave_0: left promiscuous mode [ 263.891186][T16379] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.947620][T16379] bridge_slave_1: left allmulticast mode [ 263.953371][T16379] bridge_slave_1: left promiscuous mode [ 263.959179][T16379] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.988979][T16379] bond0: (slave bond_slave_0): Releasing backup interface [ 263.999526][T16379] bond0: (slave bond_slave_1): Releasing backup interface [ 264.017135][T16379] team0: Port device team_slave_0 removed [ 264.038078][T16379] team0: Port device team_slave_1 removed [ 264.133595][T16398] loop5: detected capacity change from 0 to 2048 [ 264.208829][T16398] loop5: unable to read partition table [ 264.217038][T16398] loop5: partition table beyond EOD, truncated [ 264.224960][T16398] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 264.271053][T16408] loop5: detected capacity change from 0 to 512 [ 264.278514][T16408] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 264.290287][T16408] EXT4-fs (loop5): 1 truncate cleaned up [ 264.297047][T16408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.354998][T16408] lo speed is unknown, defaulting to 1000 [ 264.386045][T16410] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4165'. [ 264.395255][T16410] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4165'. [ 264.404333][T16410] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4165'. [ 264.517939][T12118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.923494][T16427] loop5: detected capacity change from 0 to 1024 [ 264.944417][T16427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.956908][T16429] loop9: detected capacity change from 0 to 1024 [ 265.122677][T12118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.266286][T16454] usb usb9: usbfs: process 16454 (syz.6.4181) did not claim interface 52 before use [ 265.301406][T16459] loop5: detected capacity change from 0 to 512 [ 265.323619][T16459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.325560][T16465] FAULT_INJECTION: forcing a failure. [ 265.325560][T16465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.349341][T16465] CPU: 1 UID: 0 PID: 16465 Comm: syz.6.4185 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 265.349387][T16465] Tainted: [W]=WARN [ 265.349394][T16465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 265.349407][T16465] Call Trace: [ 265.349414][T16465] [ 265.349422][T16465] __dump_stack+0x1d/0x30 [ 265.349445][T16465] dump_stack_lvl+0xe8/0x140 [ 265.349525][T16465] dump_stack+0x15/0x1b [ 265.349544][T16465] should_fail_ex+0x265/0x280 [ 265.349606][T16465] should_fail+0xb/0x20 [ 265.349630][T16465] should_fail_usercopy+0x1a/0x20 [ 265.349695][T16465] _copy_from_user+0x1c/0xb0 [ 265.349764][T16465] memdup_user+0x5e/0xd0 [ 265.349792][T16465] autofs_dev_ioctl+0x167/0x6a0 [ 265.349823][T16465] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 265.349858][T16465] __se_sys_ioctl+0xce/0x140 [ 265.349914][T16465] __x64_sys_ioctl+0x43/0x50 [ 265.349944][T16465] x64_sys_call+0x1816/0x2ff0 [ 265.349968][T16465] do_syscall_64+0xd2/0x200 [ 265.350002][T16465] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 265.350098][T16465] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 265.350186][T16465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.350214][T16465] RIP: 0033:0x7efc6344eba9 [ 265.350235][T16465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.350394][T16465] RSP: 002b:00007efc61eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.350430][T16465] RAX: ffffffffffffffda RBX: 00007efc63695fa0 RCX: 00007efc6344eba9 [ 265.350444][T16465] RDX: 0000200000000040 RSI: 00000000c0189374 RDI: 0000000000000003 [ 265.350465][T16465] RBP: 00007efc61eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 265.350481][T16465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.350497][T16465] R13: 00007efc63696038 R14: 00007efc63695fa0 R15: 00007fff38eaec68 [ 265.350522][T16465] [ 265.350981][T16459] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.582349][T16479] FAULT_INJECTION: forcing a failure. [ 265.582349][T16479] name failslab, interval 1, probability 0, space 0, times 0 [ 265.595130][T16479] CPU: 0 UID: 0 PID: 16479 Comm: syz.6.4187 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 265.595326][T16479] Tainted: [W]=WARN [ 265.595335][T16479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 265.595352][T16479] Call Trace: [ 265.595362][T16479] [ 265.595373][T16479] __dump_stack+0x1d/0x30 [ 265.595400][T16479] dump_stack_lvl+0xe8/0x140 [ 265.595426][T16479] dump_stack+0x15/0x1b [ 265.595448][T16479] should_fail_ex+0x265/0x280 [ 265.595546][T16479] should_failslab+0x8c/0xb0 [ 265.595580][T16479] kmem_cache_alloc_node_noprof+0x57/0x320 [ 265.595620][T16479] ? __alloc_skb+0x101/0x320 [ 265.595708][T16479] __alloc_skb+0x101/0x320 [ 265.595734][T16479] ? audit_log_start+0x365/0x6c0 [ 265.595805][T16479] audit_log_start+0x380/0x6c0 [ 265.595903][T16479] audit_seccomp+0x48/0x100 [ 265.595937][T16479] ? __seccomp_filter+0x68c/0x10d0 [ 265.596042][T16479] __seccomp_filter+0x69d/0x10d0 [ 265.596073][T16479] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 265.596117][T16479] ? vfs_write+0x7e8/0x960 [ 265.596163][T16479] __secure_computing+0x82/0x150 [ 265.596190][T16479] syscall_trace_enter+0xcf/0x1e0 [ 265.596279][T16479] do_syscall_64+0xac/0x200 [ 265.596366][T16479] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 265.596396][T16479] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 265.596426][T16479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.596453][T16479] RIP: 0033:0x7efc6344eba9 [ 265.596547][T16479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.596569][T16479] RSP: 002b:00007efc61eb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 265.596593][T16479] RAX: ffffffffffffffda RBX: 00007efc63695fa0 RCX: 00007efc6344eba9 [ 265.596606][T16479] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040 [ 265.596618][T16479] RBP: 00007efc61eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 265.596630][T16479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.596642][T16479] R13: 00007efc63696038 R14: 00007efc63695fa0 R15: 00007fff38eaec68 [ 265.596720][T16479] [ 265.834026][T12118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.870984][T16487] __nla_validate_parse: 2 callbacks suppressed [ 265.871002][T16487] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4194'. [ 266.159337][T16504] netlink: 65536 bytes leftover after parsing attributes in process `syz.7.4200'. [ 266.187802][T16504] netlink: 10312 bytes leftover after parsing attributes in process `syz.7.4200'. [ 266.364908][T16516] netlink: 256 bytes leftover after parsing attributes in process `syz.9.4205'. [ 266.773777][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 266.773835][ T29] audit: type=1326 audit(1757726066.655:13735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16530 comm="syz.6.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6344eba9 code=0x7ffc0000 [ 266.804793][ T29] audit: type=1326 audit(1757726066.655:13736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16530 comm="syz.6.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6344eba9 code=0x7ffc0000 [ 266.846401][T16532] sctp: [Deprecated]: syz.7.4210 (pid 16532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.846401][T16532] Use struct sctp_sack_info instead [ 266.865562][ T29] audit: type=1326 audit(1757726066.705:13737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16530 comm="syz.6.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efc6344eba9 code=0x7ffc0000 [ 266.890057][ T29] audit: type=1326 audit(1757726066.705:13738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16530 comm="syz.6.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6344eba9 code=0x7ffc0000 [ 266.915113][ T29] audit: type=1326 audit(1757726066.705:13739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16530 comm="syz.6.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6344eba9 code=0x7ffc0000 [ 266.938954][ T29] audit: type=1326 audit(1757726066.725:13740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16529 comm="syz.7.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a226eba9 code=0x7ffc0000 [ 266.963319][ T29] audit: type=1326 audit(1757726066.725:13741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16529 comm="syz.7.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a226eba9 code=0x7ffc0000 [ 266.987005][ T29] audit: type=1326 audit(1757726066.725:13742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16529 comm="syz.7.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7ff3a226eba9 code=0x7ffc0000 [ 267.011468][ T29] audit: type=1326 audit(1757726066.725:13743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16529 comm="syz.7.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a226eba9 code=0x7ffc0000 [ 267.035210][ T29] audit: type=1326 audit(1757726066.725:13744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16529 comm="syz.7.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a226eba9 code=0x7ffc0000 [ 267.411783][T16553] pim6reg1: entered promiscuous mode [ 267.452203][T16555] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4219'. [ 267.500963][T16555] hsr_slave_0: left promiscuous mode [ 267.521420][T16555] hsr_slave_1: left promiscuous mode [ 267.743447][T16569] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4227'. [ 267.910049][T16582] netlink: 332 bytes leftover after parsing attributes in process `syz.7.4230'. [ 267.925558][T16584] FAULT_INJECTION: forcing a failure. [ 267.925558][T16584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.938773][T16584] CPU: 1 UID: 0 PID: 16584 Comm: syz.6.4231 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 267.938815][T16584] Tainted: [W]=WARN [ 267.938823][T16584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.938838][T16584] Call Trace: [ 267.938847][T16584] [ 267.938856][T16584] __dump_stack+0x1d/0x30 [ 267.938930][T16584] dump_stack_lvl+0xe8/0x140 [ 267.938955][T16584] dump_stack+0x15/0x1b [ 267.938977][T16584] should_fail_ex+0x265/0x280 [ 267.939008][T16584] should_fail+0xb/0x20 [ 267.939029][T16584] should_fail_usercopy+0x1a/0x20 [ 267.939133][T16584] _copy_from_user+0x1c/0xb0 [ 267.939219][T16584] sel_write_load+0x192/0x380 [ 267.939245][T16584] ? __pfx_sel_write_load+0x10/0x10 [ 267.939327][T16584] vfs_write+0x269/0x960 [ 267.939430][T16584] ? __rcu_read_unlock+0x4f/0x70 [ 267.939454][T16584] ? __fget_files+0x184/0x1c0 [ 267.939490][T16584] ksys_write+0xda/0x1a0 [ 267.939517][T16584] __x64_sys_write+0x40/0x50 [ 267.939539][T16584] x64_sys_call+0x27fe/0x2ff0 [ 267.939602][T16584] do_syscall_64+0xd2/0x200 [ 267.939642][T16584] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 267.939713][T16584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.939736][T16584] RIP: 0033:0x7efc6344eba9 [ 267.939752][T16584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.939775][T16584] RSP: 002b:00007efc61eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 267.939815][T16584] RAX: ffffffffffffffda RBX: 00007efc63695fa0 RCX: 00007efc6344eba9 [ 267.939828][T16584] RDX: 00000000000044f0 RSI: 0000200000000000 RDI: 0000000000000005 [ 267.939840][T16584] RBP: 00007efc61eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 267.939926][T16584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.939938][T16584] R13: 00007efc63696038 R14: 00007efc63695fa0 R15: 00007fff38eaec68 [ 267.939957][T16584] [ 268.234947][T16579] lo speed is unknown, defaulting to 1000 [ 268.528612][T16583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4229'. [ 268.789516][T16609] loop5: detected capacity change from 0 to 512 [ 268.800467][T16613] netlink: 332 bytes leftover after parsing attributes in process `syz.1.4243'. [ 268.821683][T16609] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 268.868287][T16609] EXT4-fs (loop5): 1 truncate cleaned up [ 268.888979][T16620] IPv6: addrconf: prefix option has invalid lifetime [ 268.901976][T16609] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.966371][T16609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.974977][T16620] IPv6: addrconf: prefix option has invalid lifetime [ 269.007438][T16609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.077732][T16623] netlink: 'syz.6.4246': attribute type 1 has an invalid length. [ 269.085639][T16623] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4246'. [ 269.107530][T16609] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 269.345404][T16631] smc: net device bond0 applied user defined pnetid SYZ0 [ 269.364086][T16631] smc: net device bond0 erased user defined pnetid SYZ0 [ 269.399327][T16631] loop9: detected capacity change from 0 to 2048 [ 269.586126][T16644] FAULT_INJECTION: forcing a failure. [ 269.586126][T16644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.599570][T16644] CPU: 0 UID: 0 PID: 16644 Comm: syz.9.4254 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 269.599604][T16644] Tainted: [W]=WARN [ 269.599617][T16644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.599633][T16644] Call Trace: [ 269.599640][T16644] [ 269.599651][T16644] __dump_stack+0x1d/0x30 [ 269.599717][T16644] dump_stack_lvl+0xe8/0x140 [ 269.599739][T16644] dump_stack+0x15/0x1b [ 269.599762][T16644] should_fail_ex+0x265/0x280 [ 269.599823][T16644] should_fail+0xb/0x20 [ 269.599843][T16644] should_fail_usercopy+0x1a/0x20 [ 269.599892][T16644] _copy_to_user+0x20/0xa0 [ 269.599934][T16644] pagemap_read+0x379/0x5e0 [ 269.600032][T16644] ? __pfx_pagemap_read+0x10/0x10 [ 269.600070][T16644] vfs_read+0x1a8/0x770 [ 269.600094][T16644] ? __fget_files+0x184/0x1c0 [ 269.600123][T16644] ? __rcu_read_unlock+0x4f/0x70 [ 269.600150][T16644] ? __fget_files+0x184/0x1c0 [ 269.600212][T16644] __x64_sys_pread64+0xfd/0x150 [ 269.600246][T16644] x64_sys_call+0x29e2/0x2ff0 [ 269.600302][T16644] do_syscall_64+0xd2/0x200 [ 269.600390][T16644] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 269.600423][T16644] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 269.600462][T16644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.600490][T16644] RIP: 0033:0x7fd06f30eba9 [ 269.600511][T16644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.600618][T16644] RSP: 002b:00007fd06dd77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 269.600640][T16644] RAX: ffffffffffffffda RBX: 00007fd06f555fa0 RCX: 00007fd06f30eba9 [ 269.600653][T16644] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000005 [ 269.600665][T16644] RBP: 00007fd06dd77090 R08: 0000000000000000 R09: 0000000000000000 [ 269.600684][T16644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.600697][T16644] R13: 00007fd06f556038 R14: 00007fd06f555fa0 R15: 00007fff120ea478 [ 269.600797][T16644] [ 269.912225][T16654] 9pnet_fd: Insufficient options for proto=fd [ 269.931389][T16652] block device autoloading is deprecated and will be removed. [ 269.968968][T12118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.131222][T16652] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 270.146176][T16652] SELinux: failed to load policy [ 270.237348][T16673] netlink: 'syz.6.4265': attribute type 17 has an invalid length. [ 270.277149][T16675] FAULT_INJECTION: forcing a failure. [ 270.277149][T16675] name failslab, interval 1, probability 0, space 0, times 0 [ 270.290135][T16675] CPU: 1 UID: 0 PID: 16675 Comm: syz.7.4266 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 270.290173][T16675] Tainted: [W]=WARN [ 270.290180][T16675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.290197][T16675] Call Trace: [ 270.290207][T16675] [ 270.290247][T16675] __dump_stack+0x1d/0x30 [ 270.290311][T16675] dump_stack_lvl+0xe8/0x140 [ 270.290334][T16675] dump_stack+0x15/0x1b [ 270.290353][T16675] should_fail_ex+0x265/0x280 [ 270.290385][T16675] should_failslab+0x8c/0xb0 [ 270.290491][T16675] kmem_cache_alloc_noprof+0x50/0x310 [ 270.290526][T16675] ? security_file_alloc+0x32/0x100 [ 270.290572][T16675] security_file_alloc+0x32/0x100 [ 270.290770][T16675] init_file+0x5c/0x1d0 [ 270.290807][T16675] alloc_empty_file+0x8b/0x200 [ 270.290841][T16675] path_openat+0x68/0x2170 [ 270.290863][T16675] ? mntput+0x4b/0x80 [ 270.290934][T16675] ? terminate_walk+0x27f/0x2a0 [ 270.291010][T16675] ? path_openat+0x1bf8/0x2170 [ 270.291031][T16675] ? _parse_integer_limit+0x170/0x190 [ 270.291063][T16675] do_filp_open+0x109/0x230 [ 270.291094][T16675] do_open_execat+0xd8/0x260 [ 270.291163][T16675] alloc_bprm+0x25/0x350 [ 270.291188][T16675] do_execveat_common+0x12e/0x750 [ 270.291215][T16675] ? getname_flags+0x154/0x3b0 [ 270.291296][T16675] __x64_sys_execveat+0x73/0x90 [ 270.291322][T16675] x64_sys_call+0x1fec/0x2ff0 [ 270.291348][T16675] do_syscall_64+0xd2/0x200 [ 270.291449][T16675] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 270.291550][T16675] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 270.291584][T16675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.291608][T16675] RIP: 0033:0x7ff3a226eba9 [ 270.291625][T16675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.291645][T16675] RSP: 002b:00007ff3a0cd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 270.291690][T16675] RAX: ffffffffffffffda RBX: 00007ff3a24b5fa0 RCX: 00007ff3a226eba9 [ 270.291782][T16675] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 270.291795][T16675] RBP: 00007ff3a0cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 270.291809][T16675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.291822][T16675] R13: 00007ff3a24b6038 R14: 00007ff3a24b5fa0 R15: 00007fffeb444f28 [ 270.291843][T16675] [ 270.573552][T16679] pim6reg1: entered promiscuous mode [ 270.578943][T16679] pim6reg1: entered allmulticast mode [ 270.743095][T16695] loop5: detected capacity change from 0 to 764 [ 270.754184][T16697] loop9: detected capacity change from 0 to 512 [ 270.767187][T16695] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 270.778229][T16695] Symlink component flag not implemented [ 270.784532][T16695] Symlink component flag not implemented (7) [ 270.841243][T16697] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.864121][T16697] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.951929][T16717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16717 comm=syz.9.4275 [ 271.016250][T16719] __nla_validate_parse: 4 callbacks suppressed [ 271.016267][T16719] netlink: 360 bytes leftover after parsing attributes in process `wg1'. [ 271.049330][T13642] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.078719][T16719] vhci_hcd: invalid port number 23 [ 271.297067][T16733] pim6reg1: entered promiscuous mode [ 271.303195][T16733] pim6reg1: entered allmulticast mode [ 271.311801][T16735] FAULT_INJECTION: forcing a failure. [ 271.311801][T16735] name failslab, interval 1, probability 0, space 0, times 0 [ 271.324640][T16735] CPU: 1 UID: 0 PID: 16735 Comm: syz.9.4286 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 271.324675][T16735] Tainted: [W]=WARN [ 271.324681][T16735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 271.324695][T16735] Call Trace: [ 271.324703][T16735] [ 271.324764][T16735] __dump_stack+0x1d/0x30 [ 271.324791][T16735] dump_stack_lvl+0xe8/0x140 [ 271.324813][T16735] dump_stack+0x15/0x1b [ 271.324833][T16735] should_fail_ex+0x265/0x280 [ 271.324876][T16735] should_failslab+0x8c/0xb0 [ 271.324971][T16735] __kmalloc_cache_node_noprof+0x54/0x320 [ 271.325061][T16735] ? __get_vm_area_node+0x106/0x1d0 [ 271.325108][T16735] __get_vm_area_node+0x106/0x1d0 [ 271.325146][T16735] __vmalloc_node_range_noprof+0x273/0xe00 [ 271.325190][T16735] ? sel_write_load+0x158/0x380 [ 271.325300][T16735] ? __rcu_read_unlock+0x4f/0x70 [ 271.325325][T16735] ? sel_write_load+0x158/0x380 [ 271.325362][T16735] vmalloc_noprof+0x82/0xc0 [ 271.325418][T16735] ? sel_write_load+0x158/0x380 [ 271.325447][T16735] sel_write_load+0x158/0x380 [ 271.325472][T16735] ? __pfx_sel_write_load+0x10/0x10 [ 271.325498][T16735] vfs_write+0x269/0x960 [ 271.325546][T16735] ? __rcu_read_unlock+0x4f/0x70 [ 271.325573][T16735] ? __fget_files+0x184/0x1c0 [ 271.325611][T16735] ksys_write+0xda/0x1a0 [ 271.325643][T16735] __x64_sys_write+0x40/0x50 [ 271.325727][T16735] x64_sys_call+0x27fe/0x2ff0 [ 271.325755][T16735] do_syscall_64+0xd2/0x200 [ 271.325795][T16735] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 271.325853][T16735] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 271.325892][T16735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.325919][T16735] RIP: 0033:0x7fd06f30eba9 [ 271.325963][T16735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.325986][T16735] RSP: 002b:00007fd06dd77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 271.326010][T16735] RAX: ffffffffffffffda RBX: 00007fd06f555fa0 RCX: 00007fd06f30eba9 [ 271.326024][T16735] RDX: 000000000000606c RSI: 0000200000000000 RDI: 0000000000000005 [ 271.326065][T16735] RBP: 00007fd06dd77090 R08: 0000000000000000 R09: 0000000000000000 [ 271.326077][T16735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.326091][T16735] R13: 00007fd06f556038 R14: 00007fd06f555fa0 R15: 00007fff120ea478 [ 271.326116][T16735] [ 271.326127][T16735] syz.9.4286: vmalloc error: size 24684, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 271.577442][T16735] CPU: 1 UID: 0 PID: 16735 Comm: syz.9.4286 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 271.577483][T16735] Tainted: [W]=WARN [ 271.577492][T16735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 271.577508][T16735] Call Trace: [ 271.577515][T16735] [ 271.577524][T16735] __dump_stack+0x1d/0x30 [ 271.577553][T16735] dump_stack_lvl+0xe8/0x140 [ 271.577607][T16735] dump_stack+0x15/0x1b [ 271.577624][T16735] warn_alloc+0x12b/0x1a0 [ 271.577666][T16735] __vmalloc_node_range_noprof+0x297/0xe00 [ 271.577723][T16735] ? __rcu_read_unlock+0x4f/0x70 [ 271.577752][T16735] ? sel_write_load+0x158/0x380 [ 271.577787][T16735] vmalloc_noprof+0x82/0xc0 [ 271.577831][T16735] ? sel_write_load+0x158/0x380 [ 271.577857][T16735] sel_write_load+0x158/0x380 [ 271.577882][T16735] ? __pfx_sel_write_load+0x10/0x10 [ 271.577913][T16735] vfs_write+0x269/0x960 [ 271.577940][T16735] ? __rcu_read_unlock+0x4f/0x70 [ 271.578038][T16735] ? __fget_files+0x184/0x1c0 [ 271.578068][T16735] ksys_write+0xda/0x1a0 [ 271.578092][T16735] __x64_sys_write+0x40/0x50 [ 271.578116][T16735] x64_sys_call+0x27fe/0x2ff0 [ 271.578205][T16735] do_syscall_64+0xd2/0x200 [ 271.578247][T16735] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 271.578278][T16735] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 271.578424][T16735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.578446][T16735] RIP: 0033:0x7fd06f30eba9 [ 271.578465][T16735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.578483][T16735] RSP: 002b:00007fd06dd77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 271.578567][T16735] RAX: ffffffffffffffda RBX: 00007fd06f555fa0 RCX: 00007fd06f30eba9 [ 271.578583][T16735] RDX: 000000000000606c RSI: 0000200000000000 RDI: 0000000000000005 [ 271.578605][T16735] RBP: 00007fd06dd77090 R08: 0000000000000000 R09: 0000000000000000 [ 271.578617][T16735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.578630][T16735] R13: 00007fd06f556038 R14: 00007fd06f555fa0 R15: 00007fff120ea478 [ 271.578653][T16735] [ 271.578671][T16735] Mem-Info: [ 271.792962][T16735] active_anon:33062 inactive_anon:15 isolated_anon:0 [ 271.792962][T16735] active_file:14422 inactive_file:13145 isolated_file:0 [ 271.792962][T16735] unevictable:0 dirty:451 writeback:0 [ 271.792962][T16735] slab_reclaimable:3897 slab_unreclaimable:38924 [ 271.792962][T16735] mapped:33987 shmem:25118 pagetables:1358 [ 271.792962][T16735] sec_pagetables:0 bounce:0 [ 271.792962][T16735] kernel_misc_reclaimable:0 [ 271.792962][T16735] free:1770958 free_pcp:58084 free_cma:0 [ 271.838839][T16735] Node 0 active_anon:132364kB inactive_anon:60kB active_file:57688kB inactive_file:52580kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:135948kB dirty:1804kB writeback:0kB shmem:100472kB kernel_stack:4992kB pagetables:5548kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 271.867469][T16735] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 271.896554][T16735] lowmem_reserve[]: 0 2883 7862 7862 [ 271.902054][T16735] Node 0 DMA32 free:2949192kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952824kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 271.932391][T16735] lowmem_reserve[]: 0 0 4978 4978 [ 271.937517][T16735] Node 0 Normal free:4119280kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:132364kB inactive_anon:60kB active_file:57688kB inactive_file:52580kB unevictable:0kB writepending:1804kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:228512kB local_pcp:117884kB free_cma:0kB [ 271.970065][T16735] lowmem_reserve[]: 0 0 0 0 [ 271.974631][T16735] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 271.987377][T16735] Node 0 DMA32: 4*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949192kB [ 272.003583][T16735] Node 0 Normal: 287*4kB (UME) 400*8kB (UM) 311*16kB (UM) 134*32kB (UM) 114*64kB (UME) 33*128kB (UM) 135*256kB (UME) 163*512kB (UE) 157*1024kB (UME) 55*2048kB (UME) 904*4096kB (UM) = 4119340kB [ 272.023482][T16735] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 272.033319][T16735] 52696 total pagecache pages [ 272.038092][T16735] 30 pages in swap cache [ 272.042489][T16735] Free swap = 124876kB [ 272.046826][T16735] Total swap = 124996kB [ 272.051264][T16735] 2097051 pages RAM [ 272.055267][T16735] 0 pages HighMem/MovableOnly [ 272.060077][T16735] 80445 pages reserved [ 272.149398][T16752] loop9: detected capacity change from 0 to 764 [ 272.156958][T16752] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 272.167345][T16752] Symlink component flag not implemented [ 272.182041][T16752] Symlink component flag not implemented (7) [ 272.202038][ T29] kauditd_printk_skb: 450 callbacks suppressed [ 272.202058][ T29] audit: type=1400 audit(1757726072.076:14195): avc: denied { create } for pid=16754 comm="syz.5.4294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 272.241217][T16759] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4295'. [ 272.301100][ T29] audit: type=1400 audit(1757726072.076:14196): avc: denied { write } for pid=16754 comm="syz.5.4294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 272.320956][ T29] audit: type=1326 audit(1757726072.106:14197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="syz.5.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d81ebeba9 code=0x7ffc0000 [ 272.344655][ T29] audit: type=1326 audit(1757726072.106:14198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="syz.5.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d81ebeba9 code=0x7ffc0000 [ 272.368436][ T29] audit: type=1326 audit(1757726072.116:14199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="syz.5.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0d81ebeba9 code=0x7ffc0000 [ 272.392404][ T29] audit: type=1326 audit(1757726072.116:14200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="syz.5.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d81ebeba9 code=0x7ffc0000 [ 272.416152][ T29] audit: type=1326 audit(1757726072.116:14201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="syz.5.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d81ebeba9 code=0x7ffc0000 [ 272.439930][ T29] audit: type=1326 audit(1757726072.116:14202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="syz.5.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d81ebeba9 code=0x7ffc0000 [ 272.463978][ T29] audit: type=1326 audit(1757726072.116:14203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="syz.5.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d81ebeba9 code=0x7ffc0000 [ 272.488277][ T29] audit: type=1326 audit(1757726072.116:14204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="syz.5.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d81ebeba9 code=0x7ffc0000 [ 272.632131][ T6463] Process accounting resumed [ 272.853386][T16784] pim6reg1: entered promiscuous mode [ 272.859092][T16784] pim6reg1: entered allmulticast mode [ 273.141262][T16793] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4306'. [ 273.150876][T16793] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4306'. [ 273.173994][T16795] loop5: detected capacity change from 0 to 764 [ 273.194280][T16795] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 273.227735][T16795] Symlink component flag not implemented [ 273.261388][T16795] Symlink component flag not implemented (7) [ 273.532177][T16810] pim6reg1: entered promiscuous mode [ 273.537573][T16810] pim6reg1: entered allmulticast mode [ 273.602484][T16813] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4315'. [ 273.718209][T16819] loop5: detected capacity change from 0 to 512 [ 273.756665][T16819] EXT4-fs (loop5): orphan cleanup on readonly fs [ 273.778807][T16819] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4317: iget: bad extended attribute block 1 [ 273.845492][T16819] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4317: couldn't read orphan inode 15 (err -117) [ 273.877532][T16825] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4319'. [ 273.900041][T16819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 273.981741][T12118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.119197][T16843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.139790][T16843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.165721][T16851] loop9: detected capacity change from 0 to 128 [ 274.184986][T16847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.200308][T16851] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 274.209384][T16847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.375362][T16867] FAULT_INJECTION: forcing a failure. [ 274.375362][T16867] name failslab, interval 1, probability 0, space 0, times 0 [ 274.375408][T16867] CPU: 1 UID: 0 PID: 16867 Comm: syz.9.4330 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 274.375444][T16867] Tainted: [W]=WARN [ 274.375452][T16867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 274.375538][T16867] Call Trace: [ 274.375547][T16867] [ 274.375557][T16867] __dump_stack+0x1d/0x30 [ 274.375582][T16867] dump_stack_lvl+0xe8/0x140 [ 274.375605][T16867] dump_stack+0x15/0x1b [ 274.375623][T16867] should_fail_ex+0x265/0x280 [ 274.375653][T16867] should_failslab+0x8c/0xb0 [ 274.375759][T16867] __kmalloc_node_noprof+0xa9/0x410 [ 274.375862][T16867] ? __vmalloc_node_range_noprof+0x3f9/0xe00 [ 274.376002][T16867] __vmalloc_node_range_noprof+0x3f9/0xe00 [ 274.376078][T16867] ? handle_mm_fault+0x22a3/0x2c20 [ 274.376141][T16867] ? vc_do_resize+0x273/0xd70 [ 274.376253][T16867] vzalloc_noprof+0x82/0xc0 [ 274.376345][T16867] ? vc_do_resize+0x273/0xd70 [ 274.376395][T16867] vc_do_resize+0x273/0xd70 [ 274.376483][T16867] ? save_fpregs_to_fpstate+0x100/0x160 [ 274.376522][T16867] ? __schedule+0x6b9/0xb30 [ 274.376547][T16867] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 274.376572][T16867] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 274.376633][T16867] ? vgacon_set_cursor_size+0x2b3/0x310 [ 274.376671][T16867] __vc_resize+0x3c/0x50 [ 274.376706][T16867] vgacon_adjust_height+0x3cb/0x450 [ 274.376775][T16867] vgacon_font_set+0x191/0x1b0 [ 274.376806][T16867] ? __pfx_vgacon_font_set+0x10/0x10 [ 274.376851][T16867] con_font_op+0x8b9/0x930 [ 274.376905][T16867] ? selinux_capable+0x31/0x40 [ 274.376942][T16867] vt_ioctl+0x153c/0x1880 [ 274.376981][T16867] tty_ioctl+0x7db/0xb80 [ 274.377003][T16867] ? __pfx_tty_ioctl+0x10/0x10 [ 274.377035][T16867] __se_sys_ioctl+0xce/0x140 [ 274.377057][T16867] __x64_sys_ioctl+0x43/0x50 [ 274.377153][T16867] x64_sys_call+0x1816/0x2ff0 [ 274.377178][T16867] do_syscall_64+0xd2/0x200 [ 274.377293][T16867] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 274.377321][T16867] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 274.377386][T16867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.377411][T16867] RIP: 0033:0x7fd06f30eba9 [ 274.377471][T16867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.377493][T16867] RSP: 002b:00007fd06dd56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.377515][T16867] RAX: ffffffffffffffda RBX: 00007fd06f556090 RCX: 00007fd06f30eba9 [ 274.377530][T16867] RDX: 0000200000000080 RSI: 0000000000004b72 RDI: 0000000000000005 [ 274.377544][T16867] RBP: 00007fd06dd56090 R08: 0000000000000000 R09: 0000000000000000 [ 274.377559][T16867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.377572][T16867] R13: 00007fd06f556128 R14: 00007fd06f556090 R15: 00007fff120ea478 [ 274.377675][T16867] [ 274.492413][T16872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.729814][T16872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.769594][T16875] pim6reg1: entered promiscuous mode [ 274.774973][T16875] pim6reg1: entered allmulticast mode [ 274.880672][T16898] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 274.945359][T16903] random: crng reseeded on system resumption [ 274.966130][T16909] pim6reg1: entered promiscuous mode [ 274.972052][T16909] pim6reg1: entered allmulticast mode [ 275.033322][T16924] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16924 comm=syz.1.4347 [ 275.048204][T16924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.057491][T16924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.135749][T16933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.150424][T16933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.172614][T16933] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4350'. [ 275.195348][T16933] veth0: entered promiscuous mode [ 275.203786][T16933] macsec1: entered allmulticast mode [ 275.209134][T16933] veth0: entered allmulticast mode [ 275.217448][T16942] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4352'. [ 275.227159][T16933] veth0: left allmulticast mode [ 275.232233][T16933] veth0: left promiscuous mode [ 275.349693][T16961] loop5: detected capacity change from 0 to 1024 [ 275.357257][T16961] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.361622][T16959] FAULT_INJECTION: forcing a failure. [ 275.361622][T16959] name failslab, interval 1, probability 0, space 0, times 0 [ 275.376679][T16959] CPU: 0 UID: 0 PID: 16959 Comm: syz.7.4356 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 275.376798][T16959] Tainted: [W]=WARN [ 275.376807][T16959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 275.376824][T16959] Call Trace: [ 275.376833][T16959] [ 275.376843][T16959] __dump_stack+0x1d/0x30 [ 275.376870][T16959] dump_stack_lvl+0xe8/0x140 [ 275.376909][T16959] dump_stack+0x15/0x1b [ 275.376931][T16959] should_fail_ex+0x265/0x280 [ 275.377035][T16959] ? legacy_init_fs_context+0x31/0x80 [ 275.377065][T16959] should_failslab+0x8c/0xb0 [ 275.377091][T16959] __kmalloc_cache_noprof+0x4c/0x320 [ 275.377135][T16959] ? __kmalloc_cache_noprof+0x299/0x320 [ 275.377166][T16959] legacy_init_fs_context+0x31/0x80 [ 275.377267][T16959] alloc_fs_context+0x3ef/0x4e0 [ 275.377296][T16959] fs_context_for_mount+0x22/0x30 [ 275.377317][T16959] do_new_mount+0xe9/0x5e0 [ 275.377339][T16959] ? security_capable+0x83/0x90 [ 275.377390][T16959] path_mount+0x4a4/0xb20 [ 275.377419][T16959] ? user_path_at+0x109/0x130 [ 275.377462][T16959] __se_sys_mount+0x28f/0x2e0 [ 275.377540][T16959] ? fput+0x8f/0xc0 [ 275.377582][T16959] __x64_sys_mount+0x67/0x80 [ 275.377612][T16959] x64_sys_call+0x2b4d/0x2ff0 [ 275.377641][T16959] do_syscall_64+0xd2/0x200 [ 275.377770][T16959] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 275.377801][T16959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.377836][T16959] RIP: 0033:0x7ff3a226eba9 [ 275.377856][T16959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.377879][T16959] RSP: 002b:00007ff3a0cd7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 275.377903][T16959] RAX: ffffffffffffffda RBX: 00007ff3a24b5fa0 RCX: 00007ff3a226eba9 [ 275.377919][T16959] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 275.377935][T16959] RBP: 00007ff3a0cd7090 R08: 0000200000000600 R09: 0000000000000000 [ 275.377948][T16959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.378004][T16959] R13: 00007ff3a24b6038 R14: 00007ff3a24b5fa0 R15: 00007fffeb444f28 [ 275.378054][T16959] [ 275.379009][T16961] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 275.609238][T16961] System zones: 0-1, 3-36 [ 275.616785][T16961] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.669507][T16961] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.4357: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 275.693377][T16969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4360'. [ 275.752312][T12118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.975187][T16992] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 276.086767][T17004] loop5: detected capacity change from 0 to 128 [ 276.215643][T17001] lo speed is unknown, defaulting to 1000 [ 276.240736][T12118] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fff0000) [ 276.248629][T12118] FAT-fs (loop5): Filesystem has been set read-only [ 276.269443][T17011] sg_write: data in/out 124/107 bytes for SCSI command 0x0-- guessing data in; [ 276.269443][T17011] program syz.7.4372 not setting count and/or reply_len properly [ 276.340949][T17019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.371559][T17019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.421212][T17047] loop9: detected capacity change from 0 to 764 [ 276.457191][T17047] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 276.477110][T17047] Symlink component flag not implemented [ 276.489279][T17047] Symlink component flag not implemented (7) [ 276.675545][T17065] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4385'. [ 277.084628][T17132] netlink: 'syz.5.4394': attribute type 8 has an invalid length. [ 277.160903][T17138] loop5: detected capacity change from 0 to 128 [ 277.168444][T17138] EXT4-fs: dax option not supported [ 277.176320][T17138] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4396'. [ 277.190347][T17138] loop5: detected capacity change from 0 to 512 [ 277.203211][T17138] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 277.211431][ T29] kauditd_printk_skb: 562 callbacks suppressed [ 277.211449][ T29] audit: type=1326 audit(1757726077.097:14767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.7.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff3a2265b67 code=0x7ffc0000 [ 277.211569][T17138] vhci_hcd: invalid port number 253 [ 277.217831][ T29] audit: type=1326 audit(1757726077.097:14768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.7.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3a220ada9 code=0x7ffc0000 [ 277.242357][T17138] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 277.246705][ T29] audit: type=1326 audit(1757726077.097:14769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.7.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7ff3a226eba9 code=0x7ffc0000 [ 277.311301][T17146] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4397'. [ 277.316200][ T29] audit: type=1326 audit(1757726077.157:14770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.7.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff3a2265b67 code=0x7ffc0000 [ 277.343979][ T29] audit: type=1326 audit(1757726077.157:14771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.7.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3a220ada9 code=0x7ffc0000 [ 277.367606][ T29] audit: type=1326 audit(1757726077.157:14772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.7.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7ff3a226eba9 code=0x7ffc0000 [ 277.391370][ T29] audit: type=1326 audit(1757726077.157:14773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17137 comm="syz.5.4396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d81ebeba9 code=0x7ffc0000 [ 277.415556][ T29] audit: type=1326 audit(1757726077.157:14774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17137 comm="syz.5.4396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d81ebeba9 code=0x7ffc0000 [ 277.439655][ T29] audit: type=1326 audit(1757726077.157:14775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.7.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff3a2265b67 code=0x7ffc0000 [ 277.463409][ T29] audit: type=1326 audit(1757726077.157:14776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17116 comm="syz.7.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3a220ada9 code=0x7ffc0000 [ 277.550263][T17154] netlink: 'syz.9.4399': attribute type 1 has an invalid length. [ 277.553851][T17159] loop5: detected capacity change from 0 to 4096 [ 277.558445][T17154] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4399'. [ 277.611584][T17167] pim6reg1: entered promiscuous mode [ 277.616983][T17167] pim6reg1: entered allmulticast mode [ 277.623971][T17159] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.784917][T12118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.825274][T17183] loop9: detected capacity change from 0 to 512 [ 278.034015][T17210] FAULT_INJECTION: forcing a failure. [ 278.034015][T17210] name failslab, interval 1, probability 0, space 0, times 0 [ 278.046870][T17210] CPU: 1 UID: 0 PID: 17210 Comm: syz.6.4414 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 278.046990][T17210] Tainted: [W]=WARN [ 278.046998][T17210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.047053][T17210] Call Trace: [ 278.047069][T17210] [ 278.047080][T17210] __dump_stack+0x1d/0x30 [ 278.047105][T17210] dump_stack_lvl+0xe8/0x140 [ 278.047133][T17210] dump_stack+0x15/0x1b [ 278.047154][T17210] should_fail_ex+0x265/0x280 [ 278.047190][T17210] should_failslab+0x8c/0xb0 [ 278.047223][T17210] kmem_cache_alloc_noprof+0x50/0x310 [ 278.047261][T17210] ? alloc_vfsmnt+0x2d/0x300 [ 278.047302][T17210] alloc_vfsmnt+0x2d/0x300 [ 278.047373][T17210] clone_mnt+0x46/0x630 [ 278.047409][T17210] copy_tree+0xb9/0x8c0 [ 278.047434][T17210] ? alloc_mnt_ns+0x72/0x270 [ 278.047527][T17210] ? __kmalloc_cache_noprof+0x299/0x320 [ 278.047565][T17210] __do_loopback+0x108/0x280 [ 278.047683][T17210] vfs_open_tree+0x2c9/0x540 [ 278.047714][T17210] __x64_sys_open_tree+0x45/0xc0 [ 278.047818][T17210] x64_sys_call+0x2a87/0x2ff0 [ 278.047921][T17210] do_syscall_64+0xd2/0x200 [ 278.047954][T17210] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 278.047985][T17210] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 278.048015][T17210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.048066][T17210] RIP: 0033:0x7efc6344eba9 [ 278.048086][T17210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.048110][T17210] RSP: 002b:00007efc61eb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 278.048189][T17210] RAX: ffffffffffffffda RBX: 00007efc63695fa0 RCX: 00007efc6344eba9 [ 278.048205][T17210] RDX: 0000000000089901 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 278.048221][T17210] RBP: 00007efc61eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 278.048238][T17210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.048254][T17210] R13: 00007efc63696038 R14: 00007efc63695fa0 R15: 00007fff38eaec68 [ 278.048285][T17210] [ 278.402886][T14742] ================================================================== [ 278.411472][T14742] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 278.419280][T14742] [ 278.421616][T14742] read-write to 0xffff88811a2b2ca0 of 8 bytes by task 17162 on cpu 0: [ 278.429821][T14742] inode_add_bytes+0x47/0xe0 [ 278.434468][T14742] __dquot_alloc_space+0x180/0x8a0 [ 278.439625][T14742] shmem_inode_acct_blocks+0x129/0x240 [ 278.445123][T14742] shmem_get_folio_gfp+0x5a7/0xd60 [ 278.450265][T14742] shmem_write_begin+0xa8/0x190 [ 278.455222][T14742] generic_perform_write+0x181/0x490 [ 278.460548][T14742] shmem_file_write_iter+0xc5/0xf0 [ 278.465868][T14742] __kernel_write_iter+0x2d3/0x540 [ 278.471086][T14742] dump_user_range+0x61e/0x8f0 [ 278.475868][T14742] elf_core_dump+0x1e00/0x1f90 [ 278.480664][T14742] coredump_write+0xb0d/0xe30 [ 278.485370][T14742] vfs_coredump+0x142f/0x20c0 [ 278.490077][T14742] get_signal+0xd85/0xf70 [ 278.494426][T14742] arch_do_signal_or_restart+0x96/0x480 [ 278.499995][T14742] irqentry_exit_to_user_mode+0x5e/0xa0 [ 278.505584][T14742] irqentry_exit+0x12/0x50 [ 278.510025][T14742] exc_general_protection+0x15b/0x1f0 [ 278.515454][T14742] asm_exc_general_protection+0x26/0x30 [ 278.521010][T14742] [ 278.523345][T14742] read to 0xffff88811a2b2ca0 of 8 bytes by task 14742 on cpu 1: [ 278.530981][T14742] generic_fillattr+0x27d/0x340 [ 278.535888][T14742] shmem_getattr+0x181/0x200 [ 278.540520][T14742] vfs_getattr_nosec+0x143/0x1e0 [ 278.545479][T14742] vfs_statx+0x113/0x390 [ 278.549829][T14742] vfs_fstatat+0x115/0x170 [ 278.554264][T14742] __se_sys_newfstatat+0x55/0x260 [ 278.559327][T14742] __x64_sys_newfstatat+0x55/0x70 [ 278.564395][T14742] x64_sys_call+0x135a/0x2ff0 [ 278.569193][T14742] do_syscall_64+0xd2/0x200 [ 278.573723][T14742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.579629][T14742] [ 278.581955][T14742] value changed: 0x000000000000e8f8 -> 0x000000000000e900 [ 278.589071][T14742] [ 278.591411][T14742] Reported by Kernel Concurrency Sanitizer on: [ 278.597587][T14742] CPU: 1 UID: 0 PID: 14742 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 278.609157][T14742] Tainted: [W]=WARN [ 278.613057][T14742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.623134][T14742] ==================================================================