last executing test programs: 15m44.87948336s ago: executing program 32 (id=177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000000000000808"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x3, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400040, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xc, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xb0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) 15m28.606987606s ago: executing program 33 (id=363): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 14m7.164677851s ago: executing program 34 (id=1977): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/partitions\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRES16=r2, @ANYRES8=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 9m49.663258973s ago: executing program 35 (id=5732): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0003}]}) getuid() r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x1, 0x4, 0x40, @local, @private2, 0x10, 0x8000, 0x7f, 0xbf}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000500)={@rand_addr=' \x01\x00', @mcast1, @local, 0x3, 0x2, 0x97, 0x500, 0x0, 0x60006, r1}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000940)={0x220, 0x13, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_USERDATA={0x80, 0x8, "7e902f25964947946368204c4ccc73325578e126b8dd403888e9080f1b3385752b38ee7fcbc406bc55d69a107ac450be434676e17094d693d9ddb4c8fb43d65803047cb122d95fc15b4d6c17ed7080c8480021e8bf5d459f61f1f839d3b6e35f8773b6b717bd1377b9cc84c7b606ef417979d032fd67c1d7aa573f1b"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0xe5, 0x8, "2999f54fb969a4a6b88853151fa372dd3ee68268dd8efd3fbc5f245524d036b07720a03e5c6934b931fe2af5d2324135af523e1e59f6a5ebe9beab5235d0fc65ee7c9303219a661c9ceeb241c34fb9dd26262bfbc7c097946609acb50b1b03f0b71ff51a8064d70d2ab23b44880c704e11ef72833b79e02f79ed1d2da81a27a960b3d02bb88bd4d173326dc8a8d6add988eea07c8734e05ab90dff5cc7fb081175d36f700e005c458af442d0017b95175074352708545788f38011c6b729b7bef30adf5bec5bd896a57041b0b5087ed76255f1613a4258ba39bd05a342ef9b4732"}, @NFTA_OBJ_USERDATA={0x76, 0x8, "4812ef9b5c1b26508a736aaa52788ecffaa5f7e69009a831f463e2c90108967f3d4841569c473e53ea95edab770c91ec308559377f21c91945755cbfc040dddcf157a70642d62fa13fa4da683ec896bc6b481af678c4d43ac8dd7090b80cdcd8a8ececd816f7c986785740b36bd168ca2ea5"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x220}}, 0x20000004) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x30, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc804}, 0x4010) 9m39.262266844s ago: executing program 36 (id=5885): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x44081) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pwritev(r4, &(0x7f0000000680)=[{&(0x7f0000000000)="dff9c79ad4b983b1acbfe0b768c0e4f9f4e4ed01e29318be33c139bdb7acad4ded1c064308f98d6f171d842403c1f5a48362dc0864e9b9824944a546b0e18c7f4f5dc5f07871a10534d7889ce2302caa3878c577370c16e57fcf2f7113fc2bb953cd675a1fcc535b97a4173b75b72e6f04", 0x71}, {&(0x7f0000000080)="d4101954619b68e10d42f6792ba13a104efb4a184a1bd4714016b86641d9fb2644531bbf3f76c2f10419a3e41d7de3486fd9f3c1049f0b4ebff864ad203e5a6d511e59dcc887f5ed8d29c08421c4be7b5acc1c64c39e257f0caf7970bd9e5a0c192736d444fcbe92400fc8bfd4e288b69424f1d717340a0019b404c5b63bfc3999ee93d84dc6b2895f41533ad9b9d03bd697b797d0117c829d5294fd28e8376fc6212e94ff", 0xa5}, {&(0x7f0000000140)="ca46090b618da2589b6c7c4d517a8c36fcb468381c77b8bbfe83bba465fc417e4272404302746ca9ae02ae51825ce0714375662a697d7ac03eb5eca712c21308fa88b1dbdcbb5152e7d6b25910787b565d79241000fa0df3274f5160fc23d094bdd144db19d8f68afb20020f9e11eb7cc7de11ac7b96e9ebe0c745493652159f664655bcdfae6d539632cb295dd924ab62c120000fb9201338cc8556300f78d1fe7608c8d09536d0d78866508ab7f7b985848408995fb2d40116", 0xba}, {&(0x7f0000000280)="5ed018a36c052a58634f0527f5ea3cdaaf6b6455dfc5f2a115f62fe0bfa777806820e3b058957608faef0a623f8ea203c96e8c1002669357f0929af6c342963cc3782222375b5989017373e76e2f0c6021b60ce4aa2c9b4fd54a9fa1ca319564eee0ddd56690ac8bbd9f8480ed84708612c93e8478fb41e21dd196191b5876c3a1759924bde6462431174f79c2679867f3797cc8df81a6c0c9bc34e50095e51b4a3633020bc7122d063e16ecb5be697d8147d355b375c83df6e15a74b5a24c5344579b5d545d60", 0xc7}, {&(0x7f0000000380)="615c81cd7921beeff7cf92f18d34a525a55fac174af88c4a37a88d7a74ce761340e08c281cfb474bee882de50c43723b0ae1f0ddc7ecf39804fc7cfdafaad36f01cf4b2e4b8f9bd0112e5cd34703548a935943b42ab29da06f7ef8c4e270845e6609d380ab178bb6e0db1406b6b563684128bb1c562af9b6fbb6d1878758166ced66122805", 0x85}, {&(0x7f0000000440)="d19ca719f7e40e8c9a1d4274091eb3f71cad69007dd78cdfc493a248c96eeef991da2b47e887f7387214c6d136399b287fd8b2d4fab358a72ed0b228883f2412ebb8bb0e2f5ba0de70a856667eb9ad44c2d1eae234632157a1624de65fa88033e76b44e389e5c23d99a85a2465beff894596f6783ca99f8f5d220625a834b59b11c47fc6dd", 0x85}, {&(0x7f0000000500)="174829e03b35c6e97f816ecd4886f70d7b110628c374e3a8b1cc9e7b6fdb6a3a8f31ec2540cbdc08c0cd09ffe43afd362be3ff7bd9d86f60e30e28794593be4fc91495649da43a36588419b3f571a720c6246d1103d64803319ef9d39c909897328e29b1bb905db557e3ddd64cec333fc98e0ca60e21b33c803ad920e70bea6d036786ef64067ae6f1d7c7007c47e93682855a1c23748309d7e19f0a1674076c9e6b0b22b0ea519f5227513442d791597800b6c99ba4c6ac2be66b0ac58c4d4e6a7067efec", 0xc5}, {&(0x7f0000000600)="4a46124510a2ce874c9fb4b78834c691efee6d39b87e02c322d2f7b2d4408556997818cfa12869422a1d18e1362ffc840241d7d8960e40b9aab699c9c71dcdda58f70ba3f7f5d3", 0x47}], 0x8, 0x5, 0xffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000100)="ecb2d5cbde8069324a04ca01b564d6b0dafbcf2fc2fbb11384b275b4b420dd601be6fcccfb2bea1c47a8277ec8f9636facd89adfa62753b700650d5680", &(0x7f0000001d00)=""/4096}, 0x20) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000180)=ANY=[], 0xfd, 0x648, &(0x7f0000002280)="$eJzs3U9v2/Ydx/EPZdlWPCwYtqEIgjT5NVkBB8sUSW4cGNlhHEXZ7CRRIOnBBgYUWWMXQeR0SzJg8aXwZX+A7gnsMvSywx7EgJ133wPYcUCx3QbsooH/bMn661S21/X9EhxS5Jf8fX+kwy9oiaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAsp16pVC01vfb2jhnPqQd+a8L8dG2LupuO3J3armTFPyqVdC2ddO3bJ7Pfiv+5rRvpuxsqxYOSDr/21jcefatYyJefkNCb0FlX+PL14bPH3e7eizkncsEea7jnKsyw4Kbb9kLfa9mbrvFC32ysr1fubzVC0/CabrgbRm7LOIFbiPzArDp3TXVjY8245V1/u71Zt5tuPvHh92qVyrp5fznb/fffL4fOltdseu3NJCaeHcc8NJ/+JA1x7ZYx+0+7e2vTkoyDqrME1aYF1Sq1WrVaq1XXH2w8WFClODDhYaVSrJyioYi5/9LiS2Z+B2/gCyrE9f/vltRUSW1ta0dm5MtRXYF8tfIpxcH5mbz+v3vfndhuf/3Pq/y1k9nXldT/m+m7m+Pq/5hcjUyywKg51pjpb/Z6qdc61DM9Vldd7enFfNZ7a34ZnuOrIG1KRclTKF+eWrK1KVcmm2K0oXWtq6IPtKWGQhk15KkpV6F2FSqSq1ayTwK5shXJVyCjVTm6K6OqNrShNRm5KmtXvrbV1qbqsvXvXq+3r6fJdl+bkKfyoOosQbUJQUPFPJvw00/S31Pq/1ddfvyaJQa4dL3s/P+Mbp1PNgAAAAAA4DxYyV/freSz+7cl9dTwmm7lstMCAAAAAABzlHzyfyMeLMZjb8sac/7fu/jcAAAAAADAfFjJNXaWpJXFbFJ+JdQsXwJYOOf0AAAAAADAHCSf/99cknrJvdduyTrT+T8AAAAAAPgS+E3fPfaL+T12e/nH+gVJYWfZ+vM/lxUsWkedne9YB3Y8xz7IYoa+ARA1rltXsxv1JoMlSck7x120Th4MYCU/pfTN5/vT7vVvBacSWFrI/3wxLYH1YvZOn+qdNOadrN0nhwUlc9JWVhpe0y07fvNRVbZ9tRC5O9Evnj/9pRQc93P/aXev/OHH3SdJLkfxpKODOI9PBtIpTMvlVXK/heSai1E9vqJG3uRv260VK2m3kvd/QfZBob+h2fr/K91OY26vpMOVw3wPJP0vxf2vlpNddtL75O4Q1kkW1dM9H7UjxmRRSrK4k8bcWb2TDvL8siy+uyDVysP7IOjPotafxfRtYf1raFtMySLeFmtxFn+JVzQmi7WzZTG0RwDgsuyfVKHkJubD99g/XXff5Cg3vbr/YLCVV7/vpRccLkjF7LOJia2UFB/RV9OYJSUH1uL1EUf0SlZXShpzRK8MVLe/JWnMWt3itv508gykLO2hLP7T6/UeVZN2f3eqqn4WL/DZ2KoaNmsL8Sa8/+rgZ8kN8GMf7X2097xWW1uvvFepPKhpMelGNqD2AABGmP6MnakR1nvHZ9VP/vFuOjZQ8b55/JWCsj7Ux+rqie7ljxC4NXqtK31fQ7g3fNYax16RTsX+YVH3xp7VJbW0b72149j8wofTZ4AnsWvnvBcAALhYt6fU4Vnq/738vHv1+sjz7sFafvoJwSNivx5Pr17shgAA4CvEDT63VqJfW0HgdT6obmxU7WjLNYHv/MgEXn3TNV47cgNny25vuqYT+JHv+E3TCbTs1d3QhNudjh9EpuEHpuOH3k7y5HeTPfo9dFt2O/KcsNN07dA1jt+ObCcydS90TGf7h00v3HKDZOGw4zpew3PsyPPbJvS3A8ctGxO6bl+gV3fbkdfw4tG26QReyw52zY/95nbLNXU3dAKvE/npCvO2vHbDD1rJasvqnflBhwAA/D96+frw2eNud+/FhJEjTY/JRpZGrfCy+wgAAAZRpQEAAAAAAAAAAAAAAAAAAAAA+N83y/V/ZxpZHHWxoHQ85edXZ1qPpXkndpaRwpsv/tcJMVeOp+Sbvz/maL69KGqG4CymOP9teEWa/bLROYx8fz/domNj4pkjZy0f74vi/P87xCPP/zhmVq/X601efHlwGy5N6uDgSFHSi6UvsAsu53gE4OL8NwAA//9PqEPf") r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x3) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x23, 0x0, &(0x7f0000002640)) 9m8.390053191s ago: executing program 4 (id=6320): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 9m8.352862804s ago: executing program 37 (id=6320): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 9m1.938343582s ago: executing program 38 (id=6390): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) close_range(r0, 0xffffffffffffffff, 0x0) 8m59.209838263s ago: executing program 39 (id=6411): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) 8m56.409170459s ago: executing program 40 (id=6465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7, 0x2a4, 0x8, 0x0, 0x4000000000000005}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x54}}, 0x20000001) 8m51.899518164s ago: executing program 41 (id=6516): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2c0, &(0x7f0000001a80)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) 8m50.623087317s ago: executing program 42 (id=6524): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB="ae0000000000000000000200000000000000000054467c1dd4bb3297bd66324fd7f17e6cdf0d86a8412b0f62d732e9720ef1c487c696f4b24db27d9dbeddf507878f06427f599970cf9b286d0b75c3e62010ec929bc6ec1ad67a514ca928dbcdeda0a30195509661cb68f9c87c828df503503d33d491402e3bfdd3407e4d4916ed1f03901d73e2d26ac1014ede2d14baafbf64bd1a34da53cabdda56544999fed6367d56e571e379cc6d312840dfca0d6ff8afea9c1fc7d66a1215", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}, 0x1, 0x0, 0x0, 0xc0c1}, 0x48400) read(r2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) setfsgid(0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r7) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ff0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80400, 0x2004, 0x7fc}) close(r7) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000007c0)={0x0, 0x1000, "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"}, &(0x7f0000000280)=0x1008) setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r9, 0x4) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r10, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESDEC], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x80) r11 = syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(r11, 0x8, &(0x7f0000000000)={0xc78, 0x9}, &(0x7f0000000080)) 8m48.460083732s ago: executing program 4 (id=6525): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x21c91c, &(0x7f0000000900)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@mblk_io_submit}, {@jqfmt_vfsold}, {@nodelalloc}, {@nomblk_io_submit}, {@usrjquota}, {@minixdf}, {@resgid, 0x32}]}, 0x1e, 0x4ea, &(0x7f00000009c0)="$eJzs3VFrW9cdAPD/la3MSZzZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYR9gMMY22NOe9jLoByiUfIRSCLTvpS0tpU3ah0LbqOhKShxHip1GllLr94MjnXt0r/7nXKGje+49XAXQt05HxJmIeFitVs9FxEijPNNIsVVPtfUe3L89W0tJVKvXPkoiknpZbbXxbe95tLHZUET8/jcRf0qejlve2FyaKRYLa43lfGV5NV/e2Dy/uDyzUFgorExNTV6avjx9cXqiI+0cjogrv3rvn3/736+vvPaTm29f/2D8z0mjPOJxOzqt3vRsui+aBiNibT+C9chg2kIAAL4Jmsf5P4yIczESA+nRHAAAAHCQVH8+HF8kEVUAAADgwMqkc2CTTK4xD2A4Mplcrj6H97txJFMslSs/ni+tr8zV58qORjYzv1gsTDTmCo9GNqktT6b5x8sXdixPRcTxiPjHyOF0OTdbKs71+uQHAAAA9ImjO8b/n47Ux//bfN6zygEAAACdM9rrCgAAAAD7zvgfAAAADj7jfwAAADjQfnv1ai1Vm/9/PXdjY32pdOP8XKG8lFten83NltZWcwul0kJ6z77l3d6vWCqt/jRW1m/lK4VyJV/e2Ly+XFpfqVxffOIvsAEAAIAuOv6Du28lEbH1s8NpqjnU60oBXTH4PCu/u3/1ALpvoNcVAHrmuX7/gQMl2+sKAD2X7PJ628k7r3e+LgAAwP4Y+17r6/8Du54b2Mp0qYrAPnH+D/qX6//Qv1z/h/6VjYEwkIf+ttstQIfajRX2fP2/Wn3uSgEAAB01nKYkk4tIzwMMRyaTy0UcS8cE2WR+sViYiIhvR8SbI9lv1ZYn0y2TXecMAwAAAAAAAAAAAAAAAAAAAAAAAAB11WoSVQAAAOBAi8i8n6R3848YGzk7vPP8wKHks5H0OSJu/ufav27NVCprk7Xyjx+VV/7dKL/QizMYAAAAwE7NcXpzHA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfTg/u3ZZupm3A9/GRGjreIPxlD6PBTZiDjySRKD27ZLImKgA/G37kTEiVbxk1q1YrRRi1bxD/c4/tEOxId+drfW//yi1fcvE6fT59bfv0tpD/Xi2vd/mUf930CL+LWyY3uMcfLeK/m28e9EnBxs3f804ydt+p8ze4z/xz9sbrZ7rfrfiLGWvz/JE7HyleXVfHlj8/zi8sxCYaGwMjU1eWn68vTF6Yn8/GKx0HhsGePv33/14bPaf6RN/NFd2n92j+3/8t6t+9+pZ7OPNk8exx8/0/rzP9Emfqbx+f+oka+9PtbMb9Xz2536/xunntX+uTbt3+3zH99j+8/97q/v7HFVAKALyhubSzPFYmGtrzMvtDdqh0UvRStezkxtv379zYf2tYZ/2V6SdObrUDsyfzn2/ItletotAQAA++DpMTAAAAAAAAAAAAAAAAAAAADQbd24nVh2R8yt9LETd88HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOicrwIAAP///B/QPg==") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="06000c"], 0x8) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0xc, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x10) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r6 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) io_uring_enter(r6, 0x40f9, 0x217, 0xa5, 0x0, 0x97) close_range(r4, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000180)='erofs\x00', 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200200, 0x0) 8m47.888412638s ago: executing program 4 (id=6538): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setfsuid(0x0) 8m47.849797851s ago: executing program 4 (id=6539): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x2, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xdf0a, 0x100, 0x2, 0x26d}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f000000a180)=""/4102, 0x1006}], 0x0, 0x1000000000000075}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2321498, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 8m47.816762174s ago: executing program 4 (id=6540): getresgid(&(0x7f0000000c40), &(0x7f0000000140), &(0x7f0000000240)=0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX=r0, @ANYBLOB="00006b746769643d0092", @ANYRES8, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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") creat(&(0x7f00000000c0)='./file0\x00', 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 8m47.319229364s ago: executing program 43 (id=6545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x21a0, &(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYBLOB="b4c92c206c624d21bf3991e2cb9236a95383b46c92861a63aebd5c0d99816538f40e693cdae1a1ce718d29b0238f1b3d857ead4f2d12742ab4781fc35fd4d6bbbad0067bfe12", @ANYRES64=r1, @ANYRESHEX=r1], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) syz_open_dev$sg(&(0x7f0000000080), 0x9, 0x80200) truncate(&(0x7f0000000040)='./file0\x00', 0x0) getpgid(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x9, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x7, 0x9, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x41015500, &(0x7f0000000500)) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) syz_open_pts(r6, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x100000000000000) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000340)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, '-\xfc\x1dj\x06\x8c\xb7!$=\xa0!\xc2U\x1f3\xed\xcb\xe6\xa5\x01D7l\xd9\x88vc\xb8\xa9\xe3\x1e\xf5E\xbd\x97\xa6EB._\xe6\x910\xd7\x97\x81\xa1\x04\xd3y\x91k=\xe6\x89\x14\xd2v\xf9\r\x88\xf6\xf3\xa0.\xb0\xb20~F0\x04\xefV\xc1\xe8[\x16\rA@\xee6\n\xe7Z\xea\xe1P\xb7\x89\x1dZ\x11\xb6\xbb%\xd7D\xdc\xaf\x83\xf8\xa0d\x1a\xa0\xf5\xda\xbf@\xcf\x94\xb9\x0f$a\x87G\x98\xe5\a\xfdj#cxD!\n\x95`\x9e%\xcd\xad\xd6\x1bI\xc7v\x95S15\xca\xf6C\xb6\xe5\xa4\xe4\xb0\xc4\"\x12\x9c`\xf1\xc5\xe2\x9fY\x11\xe7i\xe9!-q\xad\xe0)\xd3\xd81\xea\xa7\x9c\xd2\x11\x93\xd2\xe5\xce\xd16\x11K\x94I\xf3\xfa\xbe\n\xd0\xad\x13{F\xa7', 0x3a, ')', 0x3a, './file0'}, 0xf2) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="700200000d0a010800000000000000000a0000010900020073790400000000000000010073797a31000000008008000340000000043402"], 0x270}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 8m46.522375009s ago: executing program 4 (id=6549): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pwritev(r0, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 8m46.521204389s ago: executing program 44 (id=6549): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pwritev(r0, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 8m24.517836028s ago: executing program 9 (id=6864): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 8m24.486595991s ago: executing program 9 (id=6865): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2c0, &(0x7f0000001a80)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) 8m24.350233702s ago: executing program 9 (id=6867): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x8, 0x80, 0xb, 0xa, {{0x12, 0x4, 0x1, 0x19, 0x48, 0x68, 0x0, 0x7f, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x34, 0xa8, 0x3, 0x0, [{@broadcast, 0x561}, {@loopback, 0x3ff}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x4}, {@local, 0x8}, {@remote, 0x3}]}]}}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x4, 0x7fe2, 0x1, 0x10200, r1, 0xffffffff, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x0, @void, @value, @value=r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) 8m23.483692322s ago: executing program 9 (id=6878): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x2, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xdf0a, 0x100, 0x2, 0x26d}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f000000a180)=""/4102, 0x1006}], 0x0, 0x1000000000000075}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2321498, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 8m23.440306375s ago: executing program 9 (id=6880): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 8m23.394742489s ago: executing program 9 (id=6882): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000600)='4', 0x1}], 0x1) 8m23.372749651s ago: executing program 45 (id=6882): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000600)='4', 0x1}], 0x1) 8m22.63369451s ago: executing program 7 (id=6896): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x87, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x65, 0x0, @gue={{0x1, 0x0, 0x1, 0x8, 0x0, @void}, "a48f0b1a6ce64ac3edc7137edf44fa5078dc44552b075213169048fc8048d3d534a40f6c458d17241a2f472eb8491f2c720958e666f2c8e4e107f87a0c3c1ba09259131f751cde7ecbe2fbb0e5b8de46fe3eb733cf7c04642e"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r4, 0x20, &(0x7f0000000680)={&(0x7f0000002680)=""/4096, 0x1000, 0x0, &(0x7f0000000640)}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000400)) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f00000001c0)={{0x3, 0xe}, {0x0, 0x3}, 0x6, 0x2, 0xe}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0904000000000000000002000000200004801c0001800b00010072656a65637400000c00029c08000140000000030900010073797a31000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x8804}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0xc4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0xc4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xff802ead3e909fc4, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, r5, 0x8, &(0x7f0000000700)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 8m22.445535576s ago: executing program 8 (id=6897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x4000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffec2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x408400, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xab7399f7a016bc92, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000003c0)={r6, @in6={{0xa, 0x4e24, 0xffffffff, @empty, 0x2f}}, 0x75, 0xad}, &(0x7f0000000080)=0x90) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000380)={r6, 0x1, 0x3, 0x1, 0x9, 0x9}, &(0x7f00000003c0)=0x14) r7 = socket$key(0xf, 0x3, 0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x20000178, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10) r9 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r9, 0x21, &(0x7f0000000580)={0x0, 0x4, 0x10, 0x1, 0x119}, 0x1) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0xa, 0x0, 0x3, 0xf, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x4, 0x59, 0x4, 0xef7c}, @sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_sec_ctx={0x1, 0x18, 0x3, 0x6}]}, 0x78}, 0x1, 0x7}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x7fff, 0x0, 0x38f, 0x8, 0x0, "23f555d9adb42d4408020e90d1beaa07dc1ecf", 0xfffffffc, 0x9}) 8m22.131259561s ago: executing program 8 (id=6901): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=r']) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0xffffffffffffff38) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1ffffffffffffdba, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0xef601d0f781a8d7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r6, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)=@known='security.apparmor\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) shmget(0x3, 0x4000, 0x108, &(0x7f0000ffa000/0x4000)=nil) 8m21.787165309s ago: executing program 8 (id=6906): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)='%pS \x00'}, 0x20) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) io_uring_enter(0xffffffffffffffff, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="000000800000007f"], 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) 8m21.738573103s ago: executing program 7 (id=6907): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES32=r0], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x2, 0x0) 8m21.645223541s ago: executing program 8 (id=6908): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x2, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xdf0a, 0x100, 0x2, 0x26d}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f000000a180)=""/4102, 0x1006}], 0x0, 0x1000000000000075}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2321498, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 8m21.53552854s ago: executing program 8 (id=6909): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 8m21.439175327s ago: executing program 8 (id=6912): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r6, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000080) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@getchain={0x24, 0x66, 0xfff1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xfff1, 0x10}, {0xfff2, 0xfff2}, {0xffff, 0x1ffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) fchdir(r1) r10 = syz_io_uring_setup(0x49a, &(0x7f0000000680)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r10, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r13 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') fchdir(r13) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000000, &(0x7f0000000000)={[{@nobarrier}, {@init_itable_val={'init_itable', 0x3d, 0x2}}]}, 0x1, 0x527, &(0x7f0000000300)="$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") 8m21.420978048s ago: executing program 46 (id=6912): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r6, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000080) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@getchain={0x24, 0x66, 0xfff1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xfff1, 0x10}, {0xfff2, 0xfff2}, {0xffff, 0x1ffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) fchdir(r1) r10 = syz_io_uring_setup(0x49a, &(0x7f0000000680)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r10, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r13 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') fchdir(r13) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000000, &(0x7f0000000000)={[{@nobarrier}, {@init_itable_val={'init_itable', 0x3d, 0x2}}]}, 0x1, 0x527, &(0x7f0000000300)="$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") 8m21.373084333s ago: executing program 7 (id=6916): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=r']) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0xffffffffffffff38) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1ffffffffffffdba, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0xef601d0f781a8d7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r6, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)=@known='security.apparmor\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) shmget(0x3, 0x4000, 0x108, &(0x7f0000ffa000/0x4000)=nil) 8m21.119483563s ago: executing program 7 (id=6920): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x2, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xdf0a, 0x100, 0x2, 0x26d}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f000000a180)=""/4102, 0x1006}], 0x0, 0x1000000000000075}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2321498, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 8m21.057255168s ago: executing program 7 (id=6921): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0)={0x200000, 0x0, 0x1}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = syz_io_uring_setup(0x7b, &(0x7f0000000c00)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r10, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r6, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r9, &(0x7f0000000200)='~', 0x1) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x40000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x34}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendmsg$nl_route(r1, &(0x7f00000006c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0xffffffffffffffff}, 0x4008080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r13 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r13, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x6, 0x100, &(0x7f00000000c0)="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"}) setsockopt$sock_int(r12, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) write$binfmt_script(r12, 0x0, 0x6f4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000600)='4', 0x1}], 0x1) 8m20.568152817s ago: executing program 7 (id=6926): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x21c91c, &(0x7f0000000900)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@mblk_io_submit}, {@jqfmt_vfsold}, {@nodelalloc}, {@nomblk_io_submit}, {@usrjquota}, {@minixdf}, {@resgid, 0x32}]}, 0x1e, 0x4ea, &(0x7f00000009c0)="$eJzs3VFrW9cdAPD/la3MSZzZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYR9gMMY22NOe9jLoByiUfIRSCLTvpS0tpU3ah0LbqOhKShxHip1GllLr94MjnXt0r/7nXKGje+49XAXQt05HxJmIeFitVs9FxEijPNNIsVVPtfUe3L89W0tJVKvXPkoiknpZbbXxbe95tLHZUET8/jcRf0qejlve2FyaKRYLa43lfGV5NV/e2Dy/uDyzUFgorExNTV6avjx9cXqiI+0cjogrv3rvn3/736+vvPaTm29f/2D8z0mjPOJxOzqt3vRsui+aBiNibT+C9chg2kIAAL4Jmsf5P4yIczESA+nRHAAAAHCQVH8+HF8kEVUAAADgwMqkc2CTTK4xD2A4Mplcrj6H97txJFMslSs/ni+tr8zV58qORjYzv1gsTDTmCo9GNqktT6b5x8sXdixPRcTxiPjHyOF0OTdbKs71+uQHAAAA9ImjO8b/n47Ux//bfN6zygEAAACdM9rrCgAAAAD7zvgfAAAADj7jfwAAADjQfnv1ai1Vm/9/PXdjY32pdOP8XKG8lFten83NltZWcwul0kJ6z77l3d6vWCqt/jRW1m/lK4VyJV/e2Ly+XFpfqVxffOIvsAEAAIAuOv6Du28lEbH1s8NpqjnU60oBXTH4PCu/u3/1ALpvoNcVAHrmuX7/gQMl2+sKAD2X7PJ628k7r3e+LgAAwP4Y+17r6/8Du54b2Mp0qYrAPnH+D/qX6//Qv1z/h/6VjYEwkIf+ttstQIfajRX2fP2/Wn3uSgEAAB01nKYkk4tIzwMMRyaTy0UcS8cE2WR+sViYiIhvR8SbI9lv1ZYn0y2TXecMAwAAAAAAAAAAAAAAAAAAAAAAAAB11WoSVQAAAOBAi8i8n6R3848YGzk7vPP8wKHks5H0OSJu/ufav27NVCprk7Xyjx+VV/7dKL/QizMYAAAAwE7NcXpzHA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfTg/u3ZZupm3A9/GRGjreIPxlD6PBTZiDjySRKD27ZLImKgA/G37kTEiVbxk1q1YrRRi1bxD/c4/tEOxId+drfW//yi1fcvE6fT59bfv0tpD/Xi2vd/mUf930CL+LWyY3uMcfLeK/m28e9EnBxs3f804ydt+p8ze4z/xz9sbrZ7rfrfiLGWvz/JE7HyleXVfHlj8/zi8sxCYaGwMjU1eWn68vTF6Yn8/GKx0HhsGePv33/14bPaf6RN/NFd2n92j+3/8t6t+9+pZ7OPNk8exx8/0/rzP9Emfqbx+f+oka+9PtbMb9Xz2536/xunntX+uTbt3+3zH99j+8/97q/v7HFVAKALyhubSzPFYmGtrzMvtDdqh0UvRStezkxtv379zYf2tYZ/2V6SdObrUDsyfzn2/ItletotAQAA++DpMTAAAAAAAAAAAAAAAAAAAADQbd24nVh2R8yt9LETd88HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOicrwIAAP///B/QPg==") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="06000c"], 0x8) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0xc, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r5 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r5, 0x40f9, 0x217, 0xa5, 0x0, 0x97) 8m20.555843908s ago: executing program 47 (id=6926): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x21c91c, &(0x7f0000000900)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@mblk_io_submit}, {@jqfmt_vfsold}, {@nodelalloc}, {@nomblk_io_submit}, {@usrjquota}, {@minixdf}, {@resgid, 0x32}]}, 0x1e, 0x4ea, &(0x7f00000009c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="06000c"], 0x8) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0xc, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r5 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r5, 0x40f9, 0x217, 0xa5, 0x0, 0x97) 8m9.744398073s ago: executing program 5 (id=7085): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2c0, &(0x7f0000001a80)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) 8m9.620761423s ago: executing program 5 (id=7088): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 8m9.477641265s ago: executing program 5 (id=7089): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x2, 0x0) 8m9.227655185s ago: executing program 5 (id=7091): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000056000100000000f70000000007"], 0x38}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) (async) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r2, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) 8m9.080287387s ago: executing program 5 (id=7093): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001e00010000008df2aceb7a6bee000000000000070000001f3826"], 0x1c}}, 0x0) 8m8.835567056s ago: executing program 5 (id=7097): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x5}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/zoneinfo\x00', 0x0, 0x0) readv(r0, &(0x7f00000012c0)=[{&(0x7f00000011c0)=""/175, 0xaf}, {&(0x7f0000000040)=""/14, 0xe}, {&(0x7f0000001280)=""/43, 0x2b}], 0x3) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000110000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) fallocate(r2, 0x0, 0x0, 0x8000c62) r6 = open(&(0x7f0000000240)='./file1\x00', 0x80000, 0x0) sendfile(r6, r6, 0x0, 0x100000800000009) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180040008003950323030"], 0x15) r7 = dup(r1) write$P9_RLERRORu(r7, 0x0, 0x53) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580), 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000000)) 8m8.810984768s ago: executing program 48 (id=7097): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x5}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/zoneinfo\x00', 0x0, 0x0) readv(r0, &(0x7f00000012c0)=[{&(0x7f00000011c0)=""/175, 0xaf}, {&(0x7f0000000040)=""/14, 0xe}, {&(0x7f0000001280)=""/43, 0x2b}], 0x3) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000110000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) fallocate(r2, 0x0, 0x0, 0x8000c62) r6 = open(&(0x7f0000000240)='./file1\x00', 0x80000, 0x0) sendfile(r6, r6, 0x0, 0x100000800000009) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180040008003950323030"], 0x15) r7 = dup(r1) write$P9_RLERRORu(r7, 0x0, 0x53) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580), 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000000)) 3.645223185s ago: executing program 3 (id=13248): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x29, 0x7, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) close(0xffffffffffffffff) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 3.388689176s ago: executing program 0 (id=13256): bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000006380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 3.21840223s ago: executing program 3 (id=13257): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) mount(0x0, 0x0, 0x0, 0xebffffff, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r7 = inotify_init1(0x80800) r8 = inotify_add_watch(r7, &(0x7f0000000080)='./file0\x00', 0x40000012) write$binfmt_elf32(r6, &(0x7f0000000000)=ANY=[@ANYRES64=r8], 0x69) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 3.179684003s ago: executing program 3 (id=13258): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffcc4, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc1d}, 0xce) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x4}}, 0x26) 3.158475344s ago: executing program 3 (id=13259): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x87, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x65, 0x0, @gue={{0x1, 0x0, 0x1, 0x8, 0x0, @void}, "a48f0b1a6ce64ac3edc7137edf44fa5078dc44552b075213169048fc8048d3d534a40f6c458d17241a2f472eb8491f2c720958e666f2c8e4e107f87a0c3c1ba09259131f751cde7ecbe2fbb0e5b8de46fe3eb733cf7c04642e"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r3, 0x20, &(0x7f0000000680)={&(0x7f0000002680)=""/4096, 0x1000, 0x0, &(0x7f0000000640)}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000400)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f00000001c0)={{0x3, 0xe}, {0x0, 0x3}, 0x6, 0x2, 0xe}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0904000000000000000002000000200004801c0001800b00010072656a65637400000c00029c08000140000000030900010073797a31000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x8804}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0xc4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0xc4}}, 0x0) 3.117352788s ago: executing program 0 (id=13260): io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000680)=ANY=[@ANYBLOB="938f131b29b2fa6008a001cc1e3f13e150853930b14267b3670b275c67265133527017c92a41a4585a49191047aedbd52ce79cc164957d1ba3778d94ab1b7a10e8829a9d5697e621200cf9ffbc2cc755ae54d906", @ANYRES16, @ANYRES16=r2, @ANYRES32, @ANYRESDEC], 0x34}, 0x1, 0x0, 0x0, 0x40008081}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES16], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000088, 0x6, 0x4, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000004c0)={0x800100, 0xfffffffd, 0x0, 0x8, 0x9, 0x6}) 3.067058642s ago: executing program 0 (id=13261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 3.066362662s ago: executing program 0 (id=13262): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES8=r0, @ANYRES16=r0], 0xfe, 0x1b1, &(0x7f0000001900)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000b74c3cde00180100002020702500000000002020207b1af8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r1) 2.941156692s ago: executing program 0 (id=13263): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000580)='kfree\x00', r0}, 0x18) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) open(0x0, 0x145142, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) chmod(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xca}, 0x94) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="001800"/17, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x25, r1}, 0x94) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 2.835482021s ago: executing program 0 (id=13264): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000580)='kfree\x00', r0}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) open(0x0, 0x145142, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) chmod(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xca}, 0x94) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2.756224667s ago: executing program 2 (id=13268): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x87, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x65, 0x0, @gue={{0x1, 0x0, 0x1, 0x8, 0x0, @void}, "a48f0b1a6ce64ac3edc7137edf44fa5078dc44552b075213169048fc8048d3d534a40f6c458d17241a2f472eb8491f2c720958e666f2c8e4e107f87a0c3c1ba09259131f751cde7ecbe2fbb0e5b8de46fe3eb733cf7c04642e"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r4, 0x20, &(0x7f0000000680)={&(0x7f0000002680)=""/4096, 0x1000, 0x0, &(0x7f0000000640)}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000400)) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505331, &(0x7f00000001c0)={{0x3, 0xe}, {0x0, 0x3}, 0x6, 0x2, 0xe}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0904000000000000000002000000200004801c0001800b00010072656a65637400000c00029c08000140000000030900010073797a31000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x8804}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0xc4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0xc4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xff802ead3e909fc4, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, r5, 0x8, &(0x7f0000000700)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 2.308078324s ago: executing program 3 (id=13275): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 2.291372055s ago: executing program 3 (id=13276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x21a0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) syz_open_dev$sg(&(0x7f0000000080), 0x9, 0x80200) truncate(&(0x7f0000000040)='./file0\x00', 0x0) getpgid(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x9, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x7, 0x9, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x41015500, &(0x7f0000000500)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r4 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCFLSH(r4, 0x80045440, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000340)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, '-\xfc\x1dj\x06\x8c\xb7!$=\xa0!\xc2U\x1f3\xed\xcb\xe6\xa5\x01D7l\xd9\x88vc\xb8\xa9\xe3\x1e\xf5E\xbd\x97\xa6EB._\xe6\x910\xd7\x97\x81\xa1\x04\xd3y\x91k=\xe6\x89\x14\xd2v\xf9\r\x88\xf6\xf3\xa0.\xb0\xb20~F0\x04\xefV\xc1\xe8[\x16\rA@\xee6\n\xe7Z\xea\xe1P\xb7\x89\x1dZ\x11\xb6\xbb%\xd7D\xdc\xaf\x83\xf8\xa0d\x1a\xa0\xf5\xda\xbf@\xcf\x94\xb9\x0f$a\x87G\x98\xe5\a\xfdj#cxD!\n\x95`\x9e%\xcd\xad\xd6\x1bI\xc7v\x95S15\xca\xf6C\xb6\xe5\xa4\xe4\xb0\xc4\"\x12\x9c`\xf1\xc5\xe2\x9fY\x11\xe7i\xe9!-q\xad\xe0)\xd3\xd81\xea\xa7\x9c\xd2\x11\x93\xd2\xe5\xce\xd16\x11K\x94I\xf3\xfa\xbe\n\xd0\xad\x13{F\xa7', 0x3a, ')', 0x3a, './file0'}, 0xf2) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="700200000d0a010800000000000000000a0000010900020073790400000000000000010073797a31000000008008000340000000"], 0x270}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2.069387563s ago: executing program 6 (id=13280): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x87, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x65, 0x0, @gue={{0x1, 0x0, 0x1, 0x8, 0x0, @void}, "a48f0b1a6ce64ac3edc7137edf44fa5078dc44552b075213169048fc8048d3d534a40f6c458d17241a2f472eb8491f2c720958e666f2c8e4e107f87a0c3c1ba09259131f751cde7ecbe2fbb0e5b8de46fe3eb733cf7c04642e"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r4, 0x20, &(0x7f0000000680)={&(0x7f0000002680)=""/4096, 0x1000, 0x0, &(0x7f0000000640)}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000400)) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505331, &(0x7f00000001c0)={{0x3, 0xe}, {0x0, 0x3}, 0x6, 0x2, 0xe}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0904000000000000000002000000200004801c0001800b00010072656a65637400000c00029c08000140000000030900010073797a31000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x8804}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0xc4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0xc4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xff802ead3e909fc4, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, r5, 0x8, &(0x7f0000000700)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1.905195906s ago: executing program 2 (id=13281): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x8, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) getxattr(0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddb, 0x10100, 0x1, 0x92}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r4, 0xd81, 0x0, 0x0, 0x0, 0x0) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r11, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 1.763789907s ago: executing program 1 (id=13282): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) 1.753446858s ago: executing program 1 (id=13283): io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000680)=ANY=[@ANYBLOB="938f131b29b2fa6008a001cc1e3f13e150853930b14267b3670b275c67265133527017c92a41a4585a49191047aedbd52ce79cc164957d1ba3778d94ab1b7a10e8829a9d5697e621200cf9ffbc2cc755ae54d906", @ANYRES16, @ANYRES16=r2, @ANYRES32, @ANYRESDEC], 0x34}, 0x1, 0x0, 0x0, 0x40008081}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES16], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000088, 0x6, 0x4, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000004c0)={0x800100, 0xfffffffd, 0x0, 0x8, 0x9, 0x6}) 1.695498893s ago: executing program 1 (id=13284): chdir(&(0x7f0000000480)='./cgroup\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xf5, 0x1219, &(0x7f0000003340)="$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") r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000300)=0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x20}}, 0x4000000) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000}]) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000440)}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRESOCT=r6], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r8, @ANYRES16=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) 1.594312131s ago: executing program 1 (id=13285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a"], 0xfc}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x271b, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x50, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000000002"], 0x40c4}}, 0x0) 1.221575711s ago: executing program 6 (id=13286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 1.206509952s ago: executing program 6 (id=13287): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 1.188176094s ago: executing program 6 (id=13288): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000002300000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r4, 0x0, 0xcf, &(0x7f0000000180)=0x2, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4ee, &(0x7f0000000880)="$eJzs3cFuG1sZAOB/Jja3SXNxLrC4XInbihYlFdRJGtpGLApICFaVgLIvIXGjKE5cJU7bRBWk4gGQEAIkNrBig8QDIKE+AkKqBHsECFRBCwsWhUG2xyFN7SSljg3x90mnc8547P/8tXw8Z2biCWBonY+IqYjIsiy7FBGlfH2al9htlcZ2z589XGyUJLLs1l+SSPJ17dd6K1+ezZ92JiK++qWIbySvxt3c3lldqFYrG3l7ur6WvMiyncsrawvLleXK+tzc7LX56/NX52d6kudERNz4wh+//52ffvHGLz91/3e3/zz1zVaCLfvz6KVW6sXm/0VbISI2TiLYgBSaGbZcHXBfAAA4XGN//0MR8fGIuBSlGGnuzQEAAACnSfbZ8XiRtM7/AQAAAKdTGhHjkaTl/Hrf8UjTcrl1De9HYiyt1jbrn8xKe8cLJqKY3lmpVmbyawcmopg02rP5Nbbt9pUD7bmIeCcivlcabbbLi7Xq0kCPfAAAAMDwOHtg/v/3Umv+DwAAAJwyE4PuAAAAAHDizP8BAADg9DP/BwAAgFPtyzdvNkrWvv/10r3trdXavctLlc3V8trWYnmxtnG3vFyrLTd/s2/tqNer1mp3Px3rWw+m65XN+vTm9s7ttdrWev32yku3wAYAAAD66J1zj3+bRMTuZ0bTiMiSfY8VI7KR/RsX+t8/4OSkr7PxH06uH0D/jQy6A8DA2KWH4VUcdAeAgTtqHOh68c6vet8XAADgZEx+dO/8f7MAw+Px0+YiSQbdEaDvnP+H4eX8Hwyv4mF7ACYFcOqlh3zU238Q9Obn/7Ps9XsGAAD00nizJGk5nweMR5qWyxFvN28LUEzurFQrMxHxwYj4Tan4VqM923xm4vAAAAAAAAAAAAAAAAAAAAAAAAAAABxTliWRdTG6tw0AAADw/ywi/VOS3/9rsnRx/ODxgQ8k/yg1lxFx/0e3fvBgoV7fmG2s/+ve+voP8/VX+n30AgAAAOikPU9vz+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJeeP3u42C79jPv08xEx0Sl+Ic40l2eiGBFjf0uisO95SUSM9CD+7lhEvNspftLoVkzkvTgYP42I0V7Ef/Tfxz/bg/gwzB43xp/Pdfr8pXG+uez8+Svk5U11H//SvfFvpMv493anF0xfXfXek59Pd43/KOK9Qufxpx0/6RL/wjFz/PrXdna6PZb9JGKy4/dP8lKs6aRwd3pze+fyytrCcmW5sj43N3tt/vr81fmZ6Tsr1Ur+b8cY3/3YL/51WP5jXeJPHJH/xWPm/88nD559uFUtHnioGD/OsqkLnd//d7vEb3/3fSJ/uxvtyXZ9t1Xf7/2f/fr9c4fkv9Ql/6Pe/6lj5n/pK9/+/TE3BQD6YHN7Z3WhWq1sqKicWGU0+hh0IQ7bpr0T24f+fCsP9T/xFrx2ZYCDEgAAcCL+s9M/6J4AAAAAAAAAAAAAAAAAAADA8DrqZ8CiBz8ndjDm7mBSBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA41L8DAAD//y7szXE=") open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21481e, &(0x7f0000000080), 0x1, 0x503, &(0x7f0000000fc0)="$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") r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="00000200000000000b95000000000000030000000700000000000000000000004166c57e7208e8ee566926fd8b49"]) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x800, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2c020400) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9, 0x0, 0x3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 1.032577616s ago: executing program 2 (id=13289): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) unshare(0x2c020400) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.004654739s ago: executing program 2 (id=13290): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffcc4, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc1d}, 0xce) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x4}}, 0x26) 984.852851ms ago: executing program 6 (id=13291): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x87, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x65, 0x0, @gue={{0x1, 0x0, 0x1, 0x8, 0x0, @void}, "a48f0b1a6ce64ac3edc7137edf44fa5078dc44552b075213169048fc8048d3d534a40f6c458d17241a2f472eb8491f2c720958e666f2c8e4e107f87a0c3c1ba09259131f751cde7ecbe2fbb0e5b8de46fe3eb733cf7c04642e"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r4, 0x20, &(0x7f0000000680)={&(0x7f0000002680)=""/4096, 0x1000, 0x0, &(0x7f0000000640)}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000400)) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505331, &(0x7f00000001c0)={{0x3, 0xe}, {0x0, 0x3}, 0x6, 0x2, 0xe}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0904000000000000000002000000200004801c0001800b00010072656a65637400000c00029c08000140000000030900010073797a31000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x8804}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0xc4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0xc4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xff802ead3e909fc4, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, r5, 0x8, &(0x7f0000000700)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 984.008011ms ago: executing program 2 (id=13292): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xffee, 0x3180, 0x0, 0x40024e}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r4, 0x0, 0xcf, &(0x7f0000000180)=0x2, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4ee, &(0x7f0000000880)="$eJzs3cFuG1sZAOB/Jja3SXNxLrC4XInbihYlFdRJGtpGLApICFaVgLIvIXGjKE5cJU7bRBWk4gGQEAIkNrBig8QDIKE+AkKqBHsECFRBCwsWhUG2xyFN7SSljg3x90mnc8547P/8tXw8Z2biCWBonY+IqYjIsiy7FBGlfH2al9htlcZ2z589XGyUJLLs1l+SSPJ17dd6K1+ezZ92JiK++qWIbySvxt3c3lldqFYrG3l7ur6WvMiyncsrawvLleXK+tzc7LX56/NX52d6kudERNz4wh+//52ffvHGLz91/3e3/zz1zVaCLfvz6KVW6sXm/0VbISI2TiLYgBSaGbZcHXBfAAA4XGN//0MR8fGIuBSlGGnuzQEAAACnSfbZ8XiRtM7/AQAAAKdTGhHjkaTl/Hrf8UjTcrl1De9HYiyt1jbrn8xKe8cLJqKY3lmpVmbyawcmopg02rP5Nbbt9pUD7bmIeCcivlcabbbLi7Xq0kCPfAAAAMDwOHtg/v/3Umv+DwAAAJwyE4PuAAAAAHDizP8BAADg9DP/BwAAgFPtyzdvNkrWvv/10r3trdXavctLlc3V8trWYnmxtnG3vFyrLTd/s2/tqNer1mp3Px3rWw+m65XN+vTm9s7ttdrWev32yku3wAYAAAD66J1zj3+bRMTuZ0bTiMiSfY8VI7KR/RsX+t8/4OSkr7PxH06uH0D/jQy6A8DA2KWH4VUcdAeAgTtqHOh68c6vet8XAADgZEx+dO/8f7MAw+Px0+YiSQbdEaDvnP+H4eX8Hwyv4mF7ACYFcOqlh3zU238Q9Obn/7Ps9XsGAAD00nizJGk5nweMR5qWyxFvN28LUEzurFQrMxHxwYj4Tan4VqM923xm4vAAAAAAAAAAAAAAAAAAAAAAAAAAABxTliWRdTG6tw0AAADw/ywi/VOS3/9rsnRx/ODxgQ8k/yg1lxFx/0e3fvBgoV7fmG2s/+ve+voP8/VX+n30AgAAAOikPU9vz+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJeeP3u42C79jPv08xEx0Sl+Ic40l2eiGBFjf0uisO95SUSM9CD+7lhEvNspftLoVkzkvTgYP42I0V7Ef/Tfxz/bg/gwzB43xp/Pdfr8pXG+uez8+Svk5U11H//SvfFvpMv493anF0xfXfXek59Pd43/KOK9Qufxpx0/6RL/wjFz/PrXdna6PZb9JGKy4/dP8lKs6aRwd3pze+fyytrCcmW5sj43N3tt/vr81fmZ6Tsr1Ur+b8cY3/3YL/51WP5jXeJPHJH/xWPm/88nD559uFUtHnioGD/OsqkLnd//d7vEb3/3fSJ/uxvtyXZ9t1Xf7/2f/fr9c4fkv9Ql/6Pe/6lj5n/pK9/+/TE3BQD6YHN7Z3WhWq1sqKicWGU0+hh0IQ7bpr0T24f+fCsP9T/xFrx2ZYCDEgAAcCL+s9M/6J4AAAAAAAAAAAAAAAAAAADA8DrqZ8CiBz8ndjDm7mBSBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA41L8DAAD//y7szXE=") open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21481e, &(0x7f0000000080), 0x1, 0x503, &(0x7f0000000fc0)="$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") r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="00000200000000000b95000000000000030000000700000000000000000000004166c57e7208e8ee566926fd8b49"]) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x800, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2c020400) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9, 0x0, 0x3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 743.65504ms ago: executing program 1 (id=13293): bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @rand_addr=0x64010100, {[@ssrr={0x89, 0x3, 0xcc}]}}, {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x3}}}}}}, 0x0) 721.738562ms ago: executing program 1 (id=13294): setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 121.96832ms ago: executing program 6 (id=13295): chdir(&(0x7f0000000480)='./cgroup\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xf5, 0x1219, &(0x7f0000003340)="$eJzs3E9rHGUcB/Bf1o1JU/NHrdX2oA948TQ0OXgSJEgKkgWlNkIrCFOz0SVjNmRCYEWsnrz2dXj2JvgOcvE1eMvFYw/iSGYam223VMHdFfv5HDI/nuf55pln2F2YZZ49eefel7s7ZbaTH0ZrZiZa+xHpfooUrTjz+mZzvHV7c73T2biR0vX1m6tvp5SW3vj5k6/nIuLixz8u/TQXxyufnvy29uvx5eMrJ3/c/KJXpl6ZVvqHKU93+v3D/E7RTdu9cjdL6cOim5fd1NsruwdD/TtFf39/kPK97cWF/YNuWaZ8b5B27+UR/XR4MEj553lvL2VZlhYXgieaffqQrR/uV1UVUVWz8XxUVVVdiIW4GC/EYizFtxHxYrwUL8eleCUux6vxWlypR03i9AEAAAAAAAAAAAAAAAAAAODZcX7/f0QM7f9fjhX7/wEAAAAAAAAAAAAAAAAAAGACPrp1e3O909m4kdJ8RPH90dbRVnNs+td3ohdFdONaLMfvUe/+bzT19fc7G9dSbSW+K+4+yN892nquyZ/+Oc2v1j8n8CDfrvvO8qtNPg3n52Lh/PxrsRyXRs+/NjI/H2+9eS6fxXL88ln0o4jteu6H+W9WU3rvg84j+av1OAAAAPg/yNJfRt6/Z9mT+pv83/5+oB2P3F+342p7umsnohx8tZu3iu5BXRRnxfxjLWMrZiNiUnONq5gbbmmNaa7WUy7UzLgW2P6PXGfF48Xpu/jf+D8XYrhl2p9MTMLDl8G0zwQAAAAAAAAAAIB/YszPJ7ZjxJNl705nqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//I6LAUA==") r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000300)=0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x20}}, 0x4000000) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000}]) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000440)}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRESOCT=r6], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r8, @ANYRES16=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) 0s ago: executing program 2 (id=13296): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x8, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x50) r3 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddb, 0x10100, 0x1, 0x92}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r3, 0xd81, 0x0, 0x0, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r8, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r7) kernel console output (not intermixed with test programs): _version option [ 960.211249][T12794] EXT4-fs (loop1): 1 orphan inode deleted [ 960.217515][T12794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 960.223483][T12801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12773'. [ 960.252847][T12802] vlan2: entered promiscuous mode [ 960.257964][T12802] veth1: entered promiscuous mode [ 960.279514][T12384] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.355140][T12811] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12777'. [ 960.364796][T12810] tipc: Enabled bearer , priority 0 [ 960.374228][T12810] tipc: Disabling bearer [ 960.461560][T12818] loop1: detected capacity change from 0 to 512 [ 960.475718][T12818] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 960.490661][T12818] EXT4-fs (loop1): orphan cleanup on readonly fs [ 960.502407][T12818] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.12779: Failed to acquire dquot type 1 [ 960.502563][T12823] tipc: Enabled bearer , priority 0 [ 960.522580][T12818] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.12779: bg 0: block 40: padding at end of block bitmap is not set [ 960.550122][T12818] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 960.561141][T12823] tipc: Disabling bearer [ 960.568277][T12818] EXT4-fs (loop1): 1 truncate cleaned up [ 960.574462][T12818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 960.595176][T12818] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.12779: iget: bad i_size value: 360287970189639690 [ 961.182409][T12830] loop2: detected capacity change from 0 to 1024 [ 961.197611][T12830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 961.288185][T12384] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.037698][T10551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.057851][T12838] loop2: detected capacity change from 0 to 512 [ 962.064429][T12838] EXT4-fs: Ignoring removed nomblk_io_submit option [ 962.071337][T12838] EXT4-fs: Ignoring removed i_version option [ 962.080528][T12838] EXT4-fs (loop2): 1 orphan inode deleted [ 962.087286][T12838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 962.110511][T10551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.166820][T12848] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12790'. [ 962.206703][T12849] loop2: detected capacity change from 0 to 512 [ 962.260033][T12849] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 962.281691][T12849] EXT4-fs (loop2): orphan cleanup on readonly fs [ 962.313584][T12849] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.12789: Failed to acquire dquot type 1 [ 962.338897][T12849] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.12789: bg 0: block 40: padding at end of block bitmap is not set [ 962.372253][T12849] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 962.391706][T12849] EXT4-fs (loop2): 1 truncate cleaned up [ 962.403296][T12849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 962.426623][T12849] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.12789: iget: bad i_size value: 360287970189639690 [ 963.175356][T12867] loop1: detected capacity change from 0 to 512 [ 963.236741][T12867] loop1: detected capacity change from 0 to 512 [ 963.346247][T12867] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 963.412216][T12867] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.12794: invalid indirect mapped block 4294967295 (level 0) [ 963.427139][T12867] EXT4-fs (loop1): Remounting filesystem read-only [ 963.433802][T12867] EXT4-fs (loop1): 1 orphan inode deleted [ 963.439784][T12867] EXT4-fs (loop1): 1 truncate cleaned up [ 963.496243][T12867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 963.575660][T10551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.587551][T12878] netlink: 68 bytes leftover after parsing attributes in process `syz.3.12798'. [ 963.696934][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 963.696952][ T29] audit: type=1326 audit(1756719754.818:155942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12885 comm="syz.0.12802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f84ee725ba7 code=0x7ffc0000 [ 963.727091][ T29] audit: type=1326 audit(1756719754.818:155943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12885 comm="syz.0.12802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f84ee6cadb9 code=0x7ffc0000 [ 963.750862][ T29] audit: type=1326 audit(1756719754.818:155944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12885 comm="syz.0.12802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 963.774735][ T29] audit: type=1326 audit(1756719754.818:155945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12885 comm="syz.0.12802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f84ee725ba7 code=0x7ffc0000 [ 963.798574][ T29] audit: type=1326 audit(1756719754.818:155946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12885 comm="syz.0.12802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f84ee6cadb9 code=0x7ffc0000 [ 963.822436][ T29] audit: type=1326 audit(1756719754.818:155947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12885 comm="syz.0.12802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f84ee725ba7 code=0x7ffc0000 [ 963.846310][ T29] audit: type=1326 audit(1756719754.818:155948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12885 comm="syz.0.12802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f84ee6cadb9 code=0x7ffc0000 [ 963.870157][ T29] audit: type=1326 audit(1756719754.818:155949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12885 comm="syz.0.12802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f84ee725ba7 code=0x7ffc0000 [ 963.894038][ T29] audit: type=1326 audit(1756719754.818:155950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12885 comm="syz.0.12802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f84ee6cadb9 code=0x7ffc0000 [ 963.919991][ T29] audit: type=1326 audit(1756719754.818:155951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12885 comm="syz.0.12802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f84ee725ba7 code=0x7ffc0000 [ 963.924040][T12384] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.034341][T12895] netlink: 22 bytes leftover after parsing attributes in process `syz.1.12803'. [ 964.068378][T12895] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12803'. [ 964.190210][T12901] loop1: detected capacity change from 0 to 512 [ 964.236208][T12901] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 964.245467][T12901] EXT4-fs (loop1): orphan cleanup on readonly fs [ 964.267987][T12911] netlink: 68 bytes leftover after parsing attributes in process `syz.0.12810'. [ 964.319910][T12901] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.12807: corrupted inode contents [ 964.370201][T12901] EXT4-fs (loop1): Remounting filesystem read-only [ 964.379743][T12901] EXT4-fs (loop1): 1 truncate cleaned up [ 964.389242][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 964.399873][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 964.429081][ T31] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 964.462644][T12901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 964.502831][T12901] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.449047][T12944] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12822'. [ 965.540358][T12949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12823'. [ 965.617154][T12957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12827'. [ 965.645147][T12957] netlink: 'syz.0.12827': attribute type 1 has an invalid length. [ 965.657635][T12957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12957 comm=syz.0.12827 [ 965.727408][T12968] tipc: Enabled bearer , priority 0 [ 965.737877][T12968] tipc: Disabling bearer [ 965.829893][T12973] loop2: detected capacity change from 0 to 1024 [ 965.856880][T12973] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 965.868271][T12973] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 965.881646][T12973] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 965.903703][T12979] netlink: 68 bytes leftover after parsing attributes in process `syz.3.12836'. [ 965.913861][T12973] EXT4-fs (loop2): invalid journal inode [ 965.921893][T12973] EXT4-fs (loop2): can't get journal size [ 965.930275][T12973] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #3: comm syz.2.12834: blocks 2-2 from inode overlap system zone [ 965.965220][T12973] EXT4-fs (loop2): failed to initialize system zone (-117) [ 965.976946][T12973] EXT4-fs (loop2): mount failed [ 965.996112][T12984] FAULT_INJECTION: forcing a failure. [ 965.996112][T12984] name failslab, interval 1, probability 0, space 0, times 0 [ 966.008835][T12984] CPU: 0 UID: 0 PID: 12984 Comm: syz.6.12838 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 966.008877][T12984] Tainted: [W]=WARN [ 966.008886][T12984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 966.008903][T12984] Call Trace: [ 966.008911][T12984] [ 966.008926][T12984] __dump_stack+0x1d/0x30 [ 966.008984][T12984] dump_stack_lvl+0xe8/0x140 [ 966.009003][T12984] dump_stack+0x15/0x1b [ 966.009019][T12984] should_fail_ex+0x265/0x280 [ 966.009043][T12984] should_failslab+0x8c/0xb0 [ 966.009141][T12984] __kmalloc_noprof+0xa5/0x3e0 [ 966.009178][T12984] ? unregister_netdevice_many_notify+0x4c9/0x15d0 [ 966.009336][T12984] ? unlist_netdevice+0x2cc/0x320 [ 966.009364][T12984] unregister_netdevice_many_notify+0x4c9/0x15d0 [ 966.009399][T12984] ? __queue_delayed_work+0x165/0x1e0 [ 966.009428][T12984] ? queue_delayed_work_on+0x106/0x170 [ 966.009460][T12984] unregister_netdevice_queue+0x1f5/0x220 [ 966.009500][T12984] __tun_detach+0x7db/0xad0 [ 966.009528][T12984] ? __pfx_tun_chr_close+0x10/0x10 [ 966.009568][T12984] tun_chr_close+0x5a/0x100 [ 966.009669][T12984] __fput+0x298/0x650 [ 966.009710][T12984] ____fput+0x1c/0x30 [ 966.009748][T12984] task_work_run+0x131/0x1a0 [ 966.009779][T12984] exit_to_user_mode_loop+0xe4/0x100 [ 966.009864][T12984] do_syscall_64+0x1d6/0x200 [ 966.009901][T12984] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 966.009937][T12984] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 966.010024][T12984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.010051][T12984] RIP: 0033:0x7f0e255cebe9 [ 966.010067][T12984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 966.010084][T12984] RSP: 002b:00007f0e24037038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 966.010108][T12984] RAX: 0000000000000000 RBX: 00007f0e25805fa0 RCX: 00007f0e255cebe9 [ 966.010125][T12984] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 966.010212][T12984] RBP: 00007f0e24037090 R08: 0000000000000000 R09: 0000000000000000 [ 966.010229][T12984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.010342][T12984] R13: 00007f0e25806038 R14: 00007f0e25805fa0 R15: 00007fffd0e89a48 [ 966.010432][T12984] [ 966.717706][T13015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12847'. [ 966.735697][T13015] loop2: detected capacity change from 0 to 1024 [ 966.743388][T13015] EXT4-fs: Ignoring removed nomblk_io_submit option [ 966.753871][T13018] netlink: 68 bytes leftover after parsing attributes in process `syz.0.12848'. [ 966.803659][T13015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 966.981707][T10551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.998472][T13035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12855'. [ 967.416831][T13047] netlink: 'syz.2.12858': attribute type 39 has an invalid length. [ 967.528119][T13052] FAULT_INJECTION: forcing a failure. [ 967.528119][T13052] name failslab, interval 1, probability 0, space 0, times 0 [ 967.540905][T13052] CPU: 1 UID: 0 PID: 13052 Comm: syz.2.12858 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 967.541016][T13052] Tainted: [W]=WARN [ 967.541023][T13052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 967.541036][T13052] Call Trace: [ 967.541041][T13052] [ 967.541049][T13052] __dump_stack+0x1d/0x30 [ 967.541074][T13052] dump_stack_lvl+0xe8/0x140 [ 967.541098][T13052] dump_stack+0x15/0x1b [ 967.541120][T13052] should_fail_ex+0x265/0x280 [ 967.541147][T13052] should_failslab+0x8c/0xb0 [ 967.541172][T13052] kmem_cache_alloc_noprof+0x50/0x310 [ 967.541224][T13052] ? alloc_empty_file+0x76/0x200 [ 967.541264][T13052] alloc_empty_file+0x76/0x200 [ 967.541301][T13052] alloc_file_pseudo+0xc6/0x160 [ 967.541336][T13052] __shmem_file_setup+0x1de/0x210 [ 967.541426][T13052] shmem_file_setup+0x3b/0x50 [ 967.541515][T13052] __se_sys_memfd_create+0x2c3/0x590 [ 967.541570][T13052] __x64_sys_memfd_create+0x31/0x40 [ 967.541590][T13052] x64_sys_call+0x2abe/0x2ff0 [ 967.541611][T13052] do_syscall_64+0xd2/0x200 [ 967.541656][T13052] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 967.541797][T13052] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 967.541896][T13052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.541922][T13052] RIP: 0033:0x7f36192febe9 [ 967.541937][T13052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 967.541994][T13052] RSP: 002b:00007f3617d3dd68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 967.542065][T13052] RAX: ffffffffffffffda RBX: 000000000000059d RCX: 00007f36192febe9 [ 967.542081][T13052] RDX: 00007f3617d3ddec RSI: 0000000000000000 RDI: 00007f36193827e8 [ 967.542097][T13052] RBP: 0000200000000000 R08: 00007f3617d3db07 R09: 0000000000000000 [ 967.542113][T13052] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 967.542154][T13052] R13: 00007f3617d3ddec R14: 00007f3617d3ddf0 R15: 00007ffd29f435c8 [ 967.542175][T13052] [ 967.802954][T13054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12860'. [ 967.971098][T13063] netlink: 68 bytes leftover after parsing attributes in process `syz.3.12864'. [ 968.173853][T13066] can: request_module (can-proto-0) failed. [ 968.208685][T13071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12868'. [ 968.458039][T13094] loop1: detected capacity change from 0 to 512 [ 968.501161][T13094] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 968.520995][T13094] EXT4-fs (loop1): orphan cleanup on readonly fs [ 968.560309][T13094] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.12874: corrupted inode contents [ 968.579124][T13094] EXT4-fs (loop1): Remounting filesystem read-only [ 968.588518][T13094] EXT4-fs (loop1): 1 truncate cleaned up [ 968.595688][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 968.606360][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 968.618605][ T31] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 968.649240][T13094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 968.676478][T13094] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.714530][T13105] tipc: Enabled bearer , priority 0 [ 968.724165][T13105] tipc: Disabling bearer [ 968.749031][T13109] FAULT_INJECTION: forcing a failure. [ 968.749031][T13109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 968.762187][T13109] CPU: 0 UID: 0 PID: 13109 Comm: syz.1.12879 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 968.762296][T13109] Tainted: [W]=WARN [ 968.762303][T13109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 968.762314][T13109] Call Trace: [ 968.762320][T13109] [ 968.762327][T13109] __dump_stack+0x1d/0x30 [ 968.762345][T13109] dump_stack_lvl+0xe8/0x140 [ 968.762362][T13109] dump_stack+0x15/0x1b [ 968.762437][T13109] should_fail_ex+0x265/0x280 [ 968.762457][T13109] should_fail+0xb/0x20 [ 968.762476][T13109] should_fail_usercopy+0x1a/0x20 [ 968.762506][T13109] _copy_to_user+0x20/0xa0 [ 968.762533][T13109] simple_read_from_buffer+0xb5/0x130 [ 968.762554][T13109] proc_fail_nth_read+0x10e/0x150 [ 968.762594][T13109] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 968.762616][T13109] vfs_read+0x1a8/0x770 [ 968.762704][T13109] ? __rcu_read_unlock+0x4f/0x70 [ 968.762723][T13109] ? __fget_files+0x184/0x1c0 [ 968.762748][T13109] ksys_read+0xda/0x1a0 [ 968.762780][T13109] __x64_sys_read+0x40/0x50 [ 968.762799][T13109] x64_sys_call+0x27bc/0x2ff0 [ 968.762818][T13109] do_syscall_64+0xd2/0x200 [ 968.762844][T13109] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 968.762956][T13109] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 968.762981][T13109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.763000][T13109] RIP: 0033:0x7f7a9c65d5fc [ 968.763059][T13109] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 968.763110][T13109] RSP: 002b:00007f7a9b0c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 968.763152][T13109] RAX: ffffffffffffffda RBX: 00007f7a9c895fa0 RCX: 00007f7a9c65d5fc [ 968.763164][T13109] RDX: 000000000000000f RSI: 00007f7a9b0c70a0 RDI: 0000000000000006 [ 968.763175][T13109] RBP: 00007f7a9b0c7090 R08: 0000000000000000 R09: 0000000000000000 [ 968.763186][T13109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 968.763196][T13109] R13: 00007f7a9c896038 R14: 00007f7a9c895fa0 R15: 00007ffe96a29c38 [ 968.763230][T13109] [ 969.026467][ T29] kauditd_printk_skb: 1022 callbacks suppressed [ 969.026524][ T29] audit: type=1326 audit(1756719760.148:156962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13117 comm="syz.0.12883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f84ee725ba7 code=0x7ffc0000 [ 969.056505][ T29] audit: type=1326 audit(1756719760.148:156963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13117 comm="syz.0.12883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f84ee6cadb9 code=0x7ffc0000 [ 969.078741][T13126] audit: audit_backlog=65 > audit_backlog_limit=64 [ 969.080990][ T29] audit: type=1326 audit(1756719760.148:156964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13117 comm="syz.0.12883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f84ee725ba7 code=0x7ffc0000 [ 969.086847][T13126] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64 [ 969.110718][ T29] audit: type=1326 audit(1756719760.148:156965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13117 comm="syz.0.12883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f84ee6cadb9 code=0x7ffc0000 [ 969.118203][T13126] audit: backlog limit exceeded [ 969.141835][ T29] audit: type=1326 audit(1756719760.148:156966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13117 comm="syz.0.12883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f84ee725ba7 code=0x7ffc0000 [ 969.170526][ T29] audit: type=1326 audit(1756719760.148:156967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13117 comm="syz.0.12883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f84ee6cadb9 code=0x7ffc0000 [ 969.194245][ T29] audit: type=1326 audit(1756719760.148:156968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13117 comm="syz.0.12883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f84ee725ba7 code=0x7ffc0000 [ 969.270288][T13134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.280222][T13134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.349623][T13142] tipc: Enabled bearer , priority 0 [ 969.358241][T13142] tipc: Disabling bearer [ 969.447318][T13145] infiniband syz!: set down [ 969.451858][T13145] infiniband syz!: added team_slave_0 [ 969.465240][T13145] RDS/IB: syz!: added [ 969.470959][T13145] smc: adding ib device syz! with port count 1 [ 969.477266][T13145] smc: ib device syz! port 1 has pnetid [ 969.834674][T13164] loop1: detected capacity change from 0 to 512 [ 969.844295][T13164] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 969.853090][T13164] System zones: 1-12 [ 969.859761][T13164] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.12902: error while reading EA inode 32 err=-116 [ 969.872413][T13164] EXT4-fs (loop1): Remounting filesystem read-only [ 969.879145][T13164] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 969.889521][T13164] EXT4-fs (loop1): 1 orphan inode deleted [ 969.896515][T13164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 969.924006][T12384] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.068395][T13177] loop1: detected capacity change from 0 to 8192 [ 970.076430][T13177] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 970.088467][T13179] FAULT_INJECTION: forcing a failure. [ 970.088467][T13179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.101665][T13179] CPU: 1 UID: 0 PID: 13179 Comm: syz.3.12908 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 970.101708][T13179] Tainted: [W]=WARN [ 970.101718][T13179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 970.101735][T13179] Call Trace: [ 970.101743][T13179] [ 970.101752][T13179] __dump_stack+0x1d/0x30 [ 970.101780][T13179] dump_stack_lvl+0xe8/0x140 [ 970.101861][T13179] dump_stack+0x15/0x1b [ 970.101883][T13179] should_fail_ex+0x265/0x280 [ 970.101910][T13179] should_fail+0xb/0x20 [ 970.101933][T13179] should_fail_usercopy+0x1a/0x20 [ 970.102007][T13179] _copy_to_user+0x20/0xa0 [ 970.102046][T13179] simple_read_from_buffer+0xb5/0x130 [ 970.102094][T13179] proc_fail_nth_read+0x10e/0x150 [ 970.102130][T13179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 970.102190][T13179] vfs_read+0x1a8/0x770 [ 970.102263][T13179] ? __rcu_read_unlock+0x4f/0x70 [ 970.102288][T13179] ? __fget_files+0x184/0x1c0 [ 970.102323][T13179] ksys_read+0xda/0x1a0 [ 970.102422][T13179] __x64_sys_read+0x40/0x50 [ 970.102527][T13179] x64_sys_call+0x27bc/0x2ff0 [ 970.102556][T13179] do_syscall_64+0xd2/0x200 [ 970.102593][T13179] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 970.102675][T13179] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 970.102706][T13179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.102774][T13179] RIP: 0033:0x7f7b3c1bd5fc [ 970.102793][T13179] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 970.102815][T13179] RSP: 002b:00007f7b3ac1f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 970.102885][T13179] RAX: ffffffffffffffda RBX: 00007f7b3c3f5fa0 RCX: 00007f7b3c1bd5fc [ 970.102902][T13179] RDX: 000000000000000f RSI: 00007f7b3ac1f0a0 RDI: 0000000000000003 [ 970.102918][T13179] RBP: 00007f7b3ac1f090 R08: 0000000000000000 R09: 0000000000000000 [ 970.102934][T13179] R10: 0000000000000046 R11: 0000000000000246 R12: 0000000000000001 [ 970.102950][T13179] R13: 00007f7b3c3f6038 R14: 00007f7b3c3f5fa0 R15: 00007ffc238d4f88 [ 970.102974][T13179] [ 970.413978][T13189] FAULT_INJECTION: forcing a failure. [ 970.413978][T13189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.427234][T13189] CPU: 1 UID: 0 PID: 13189 Comm: syz.6.12913 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 970.427276][T13189] Tainted: [W]=WARN [ 970.427285][T13189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 970.427330][T13189] Call Trace: [ 970.427338][T13189] [ 970.427347][T13189] __dump_stack+0x1d/0x30 [ 970.427369][T13189] dump_stack_lvl+0xe8/0x140 [ 970.427388][T13189] dump_stack+0x15/0x1b [ 970.427403][T13189] should_fail_ex+0x265/0x280 [ 970.427491][T13189] should_fail+0xb/0x20 [ 970.427513][T13189] should_fail_usercopy+0x1a/0x20 [ 970.427539][T13189] _copy_to_user+0x20/0xa0 [ 970.427597][T13189] simple_read_from_buffer+0xb5/0x130 [ 970.427626][T13189] proc_fail_nth_read+0x10e/0x150 [ 970.427659][T13189] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 970.427769][T13189] vfs_read+0x1a8/0x770 [ 970.427790][T13189] ? __rcu_read_unlock+0x4f/0x70 [ 970.427822][T13189] ? __fget_files+0x184/0x1c0 [ 970.427849][T13189] ksys_read+0xda/0x1a0 [ 970.427877][T13189] __x64_sys_read+0x40/0x50 [ 970.427938][T13189] x64_sys_call+0x27bc/0x2ff0 [ 970.427964][T13189] do_syscall_64+0xd2/0x200 [ 970.428017][T13189] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 970.428047][T13189] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 970.428102][T13189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.428275][T13189] RIP: 0033:0x7f0e255cd5fc [ 970.428295][T13189] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 970.428369][T13189] RSP: 002b:00007f0e24037030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 970.428393][T13189] RAX: ffffffffffffffda RBX: 00007f0e25805fa0 RCX: 00007f0e255cd5fc [ 970.428407][T13189] RDX: 000000000000000f RSI: 00007f0e240370a0 RDI: 0000000000000005 [ 970.428421][T13189] RBP: 00007f0e24037090 R08: 0000000000000000 R09: 0000000000000000 [ 970.428462][T13189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.428526][T13189] R13: 00007f0e25806038 R14: 00007f0e25805fa0 R15: 00007fffd0e89a48 [ 970.428549][T13189] [ 970.675869][T13190] loop1: detected capacity change from 8192 to 0 [ 970.682541][ C1] I/O error, dev loop1, sector 33 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 970.682795][ C0] I/O error, dev loop1, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 970.692116][ C1] buffer_io_error: 2 callbacks suppressed [ 970.692135][ C1] Buffer I/O error on dev loop1, logical block 33, lost sync page write [ 970.711779][T13193] FAT-fs (loop1): Directory bread(block 65) failed [ 970.725880][ C0] I/O error, dev loop1, sector 1 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 970.735160][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 970.744329][ C0] I/O error, dev loop1, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 970.753637][T13177] FAT-fs (loop1): unable to read inode block for updating (i_pos 1050) [ 970.774000][ C0] I/O error, dev loop1, sector 66 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 970.783433][T13193] FAT-fs (loop1): Directory bread(block 66) failed [ 970.798095][ C0] I/O error, dev loop1, sector 67 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 970.807405][T13193] FAT-fs (loop1): Directory bread(block 67) failed [ 970.814363][ C0] I/O error, dev loop1, sector 68 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 970.823710][T13193] FAT-fs (loop1): Directory bread(block 68) failed [ 970.825837][ C0] I/O error, dev loop1, sector 85 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 970.839762][ C0] Buffer I/O error on dev loop1, logical block 85, lost async page write [ 970.848276][ C0] I/O error, dev loop1, sector 97 op 0x1:(WRITE) flags 0x800 phys_seg 7 prio class 2 [ 970.857814][ C0] Buffer I/O error on dev loop1, logical block 97, lost async page write [ 970.866357][ C0] Buffer I/O error on dev loop1, logical block 98, lost async page write [ 970.874822][ C0] Buffer I/O error on dev loop1, logical block 99, lost async page write [ 970.883352][ C0] Buffer I/O error on dev loop1, logical block 100, lost async page write [ 970.891984][ C0] Buffer I/O error on dev loop1, logical block 101, lost async page write [ 970.900588][ C0] Buffer I/O error on dev loop1, logical block 102, lost async page write [ 970.907469][ C1] I/O error, dev loop1, sector 69 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 970.909291][ C0] Buffer I/O error on dev loop1, logical block 103, lost async page write [ 970.919906][T13193] FAT-fs (loop1): Directory bread(block 69) failed [ 971.000031][T13212] FAULT_INJECTION: forcing a failure. [ 971.000031][T13212] name failslab, interval 1, probability 0, space 0, times 0 [ 971.001733][T13193] FAT-fs (loop1): Directory bread(block 70) failed [ 971.012860][T13212] CPU: 1 UID: 0 PID: 13212 Comm: syz.3.12921 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 971.012981][T13212] Tainted: [W]=WARN [ 971.012991][T13212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 971.013010][T13212] Call Trace: [ 971.013020][T13212] [ 971.013033][T13212] __dump_stack+0x1d/0x30 [ 971.013064][T13212] dump_stack_lvl+0xe8/0x140 [ 971.013112][T13212] dump_stack+0x15/0x1b [ 971.013136][T13212] should_fail_ex+0x265/0x280 [ 971.013165][T13212] should_failslab+0x8c/0xb0 [ 971.013200][T13212] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 971.013271][T13212] ? sidtab_sid2str_get+0xa0/0x130 [ 971.013304][T13212] kmemdup_noprof+0x2b/0x70 [ 971.013350][T13212] sidtab_sid2str_get+0xa0/0x130 [ 971.013447][T13212] security_sid_to_context_core+0x1eb/0x2e0 [ 971.013533][T13212] security_sid_to_context+0x27/0x40 [ 971.013604][T13212] selinux_lsmprop_to_secctx+0x67/0xf0 [ 971.013637][T13212] security_lsmprop_to_secctx+0x43/0x80 [ 971.013676][T13212] audit_log_task_context+0x77/0x190 [ 971.013744][T13212] audit_log_task+0xf4/0x250 [ 971.013859][T13212] audit_seccomp+0x61/0x100 [ 971.013971][T13212] ? __seccomp_filter+0x68c/0x10d0 [ 971.014024][T13212] __seccomp_filter+0x69d/0x10d0 [ 971.014054][T13212] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 971.014092][T13212] ? vfs_write+0x7e8/0x960 [ 971.014123][T13212] ? __rcu_read_unlock+0x4f/0x70 [ 971.014203][T13212] ? __fget_files+0x184/0x1c0 [ 971.014241][T13212] __secure_computing+0x82/0x150 [ 971.014272][T13212] syscall_trace_enter+0xcf/0x1e0 [ 971.014307][T13212] do_syscall_64+0xac/0x200 [ 971.014380][T13212] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 971.014414][T13212] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 971.014505][T13212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.014586][T13212] RIP: 0033:0x7f7b3c1bebe9 [ 971.014608][T13212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.014634][T13212] RSP: 002b:00007f7b3ac1f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fc [ 971.014658][T13212] RAX: ffffffffffffffda RBX: 00007f7b3c3f5fa0 RCX: 00007f7b3c1bebe9 [ 971.014676][T13212] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 971.014718][T13212] RBP: 00007f7b3ac1f090 R08: 0000000000000000 R09: 0000000000000000 [ 971.014800][T13212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.014818][T13212] R13: 00007f7b3c3f6038 R14: 00007f7b3c3f5fa0 R15: 00007ffc238d4f88 [ 971.014845][T13212] [ 971.273585][T13224] __nla_validate_parse: 9 callbacks suppressed [ 971.273626][T13224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12924'. [ 971.318522][T13193] FAT-fs (loop1): Directory bread(block 71) failed [ 971.363330][T13232] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12928'. [ 971.373855][T13234] loop2: detected capacity change from 0 to 512 [ 971.396636][T13234] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 971.409080][T13234] System zones: 1-12 [ 971.439685][T13234] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.12929: error while reading EA inode 32 err=-116 [ 971.454232][T13234] EXT4-fs (loop2): Remounting filesystem read-only [ 971.460887][T13234] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 971.471057][T13234] EXT4-fs (loop2): 1 orphan inode deleted [ 971.480092][T13234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 971.486351][T13241] tipc: Enabled bearer , priority 0 [ 971.504409][T13241] tipc: Disabling bearer [ 971.521521][T10551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.608278][T13254] loop2: detected capacity change from 0 to 512 [ 972.710769][T13254] loop2: detected capacity change from 0 to 512 [ 972.717632][T13254] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 972.775384][T13254] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.12933: invalid indirect mapped block 4294967295 (level 0) [ 972.789695][T13254] EXT4-fs (loop2): Remounting filesystem read-only [ 972.796615][T13254] EXT4-fs (loop2): 1 orphan inode deleted [ 972.802393][T13254] EXT4-fs (loop2): 1 truncate cleaned up [ 972.808548][T13254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 972.845624][T13279] FAULT_INJECTION: forcing a failure. [ 972.845624][T13279] name failslab, interval 1, probability 0, space 0, times 0 [ 972.858425][T13279] CPU: 0 UID: 0 PID: 13279 Comm: syz.3.12947 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 972.858537][T13279] Tainted: [W]=WARN [ 972.858545][T13279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 972.858559][T13279] Call Trace: [ 972.858567][T13279] [ 972.858575][T13279] __dump_stack+0x1d/0x30 [ 972.858599][T13279] dump_stack_lvl+0xe8/0x140 [ 972.858621][T13279] dump_stack+0x15/0x1b [ 972.858639][T13279] should_fail_ex+0x265/0x280 [ 972.858662][T13279] should_failslab+0x8c/0xb0 [ 972.858756][T13279] kmem_cache_alloc_node_noprof+0x57/0x320 [ 972.858788][T13279] ? __alloc_skb+0x101/0x320 [ 972.858809][T13279] __alloc_skb+0x101/0x320 [ 972.858828][T13279] ? audit_log_start+0x365/0x6c0 [ 972.858942][T13279] audit_log_start+0x380/0x6c0 [ 972.859084][T13279] audit_seccomp+0x48/0x100 [ 972.859186][T13279] ? __seccomp_filter+0x68c/0x10d0 [ 972.859212][T13279] __seccomp_filter+0x69d/0x10d0 [ 972.859277][T13279] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 972.859328][T13279] ? vfs_write+0x7e8/0x960 [ 972.859351][T13279] ? __rcu_read_unlock+0x4f/0x70 [ 972.859375][T13279] ? __fget_files+0x184/0x1c0 [ 972.859473][T13279] __secure_computing+0x82/0x150 [ 972.859547][T13279] syscall_trace_enter+0xcf/0x1e0 [ 972.859575][T13279] do_syscall_64+0xac/0x200 [ 972.859622][T13279] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 972.859647][T13279] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 972.859676][T13279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.859699][T13279] RIP: 0033:0x7f7b3c1bebe9 [ 972.859747][T13279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 972.859768][T13279] RSP: 002b:00007f7b3ac1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 972.859789][T13279] RAX: ffffffffffffffda RBX: 00007f7b3c3f5fa0 RCX: 00007f7b3c1bebe9 [ 972.859863][T13279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 972.859877][T13279] RBP: 00007f7b3ac1f090 R08: 0000000000000000 R09: 0000000000000000 [ 972.859891][T13279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.859904][T13279] R13: 00007f7b3c3f6038 R14: 00007f7b3c3f5fa0 R15: 00007ffc238d4f88 [ 972.859924][T13279] [ 973.093974][T13281] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.12948'. [ 973.120595][T10551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.338256][T13303] FAULT_INJECTION: forcing a failure. [ 973.338256][T13303] name failslab, interval 1, probability 0, space 0, times 0 [ 973.351230][T13303] CPU: 0 UID: 0 PID: 13303 Comm: syz.1.12957 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 973.351268][T13303] Tainted: [W]=WARN [ 973.351277][T13303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 973.351342][T13303] Call Trace: [ 973.351349][T13303] [ 973.351356][T13303] __dump_stack+0x1d/0x30 [ 973.351397][T13303] dump_stack_lvl+0xe8/0x140 [ 973.351421][T13303] dump_stack+0x15/0x1b [ 973.351442][T13303] should_fail_ex+0x265/0x280 [ 973.351470][T13303] should_failslab+0x8c/0xb0 [ 973.351499][T13303] kmem_cache_alloc_node_noprof+0x57/0x320 [ 973.351666][T13303] ? __alloc_skb+0x101/0x320 [ 973.351691][T13303] __alloc_skb+0x101/0x320 [ 973.351708][T13303] ? audit_log_start+0x365/0x6c0 [ 973.351743][T13303] audit_log_start+0x380/0x6c0 [ 973.351850][T13303] audit_seccomp+0x48/0x100 [ 973.351884][T13303] ? __seccomp_filter+0x68c/0x10d0 [ 973.351926][T13303] __seccomp_filter+0x69d/0x10d0 [ 973.351955][T13303] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 973.351997][T13303] ? vfs_write+0x7e8/0x960 [ 973.352020][T13303] ? __rcu_read_unlock+0x4f/0x70 [ 973.352047][T13303] ? __fget_files+0x184/0x1c0 [ 973.352083][T13303] __secure_computing+0x82/0x150 [ 973.352137][T13303] syscall_trace_enter+0xcf/0x1e0 [ 973.352164][T13303] do_syscall_64+0xac/0x200 [ 973.352265][T13303] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 973.352295][T13303] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 973.352336][T13303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.352363][T13303] RIP: 0033:0x7f7a9c65ebe9 [ 973.352389][T13303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 973.352413][T13303] RSP: 002b:00007f7a9b0c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000026 [ 973.352437][T13303] RAX: ffffffffffffffda RBX: 00007f7a9c895fa0 RCX: 00007f7a9c65ebe9 [ 973.352453][T13303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 973.352531][T13303] RBP: 00007f7a9b0c7090 R08: 0000000000000000 R09: 0000000000000000 [ 973.352544][T13303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.352563][T13303] R13: 00007f7a9c896038 R14: 00007f7a9c895fa0 R15: 00007ffe96a29c38 [ 973.352593][T13303] [ 973.663996][T13309] FAULT_INJECTION: forcing a failure. [ 973.663996][T13309] name failslab, interval 1, probability 0, space 0, times 0 [ 973.676740][T13309] CPU: 1 UID: 0 PID: 13309 Comm: syz.1.12960 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 973.676776][T13309] Tainted: [W]=WARN [ 973.676784][T13309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 973.676801][T13309] Call Trace: [ 973.676874][T13309] [ 973.676883][T13309] __dump_stack+0x1d/0x30 [ 973.676909][T13309] dump_stack_lvl+0xe8/0x140 [ 973.676995][T13309] dump_stack+0x15/0x1b [ 973.677016][T13309] should_fail_ex+0x265/0x280 [ 973.677044][T13309] should_failslab+0x8c/0xb0 [ 973.677116][T13309] kmem_cache_alloc_node_noprof+0x57/0x320 [ 973.677155][T13309] ? __alloc_skb+0x101/0x320 [ 973.677179][T13309] __alloc_skb+0x101/0x320 [ 973.677200][T13309] netlink_alloc_large_skb+0xba/0xf0 [ 973.677246][T13309] netlink_sendmsg+0x3cf/0x6b0 [ 973.677275][T13309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 973.677356][T13309] __sock_sendmsg+0x145/0x180 [ 973.677394][T13309] ____sys_sendmsg+0x31e/0x4e0 [ 973.677440][T13309] ___sys_sendmsg+0x17b/0x1d0 [ 973.677478][T13309] __x64_sys_sendmsg+0xd4/0x160 [ 973.677545][T13309] x64_sys_call+0x191e/0x2ff0 [ 973.677572][T13309] do_syscall_64+0xd2/0x200 [ 973.677622][T13309] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 973.677654][T13309] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 973.677731][T13309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.677804][T13309] RIP: 0033:0x7f7a9c65ebe9 [ 973.677821][T13309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 973.677844][T13309] RSP: 002b:00007f7a9b0c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 973.677867][T13309] RAX: ffffffffffffffda RBX: 00007f7a9c895fa0 RCX: 00007f7a9c65ebe9 [ 973.677884][T13309] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 973.677899][T13309] RBP: 00007f7a9b0c7090 R08: 0000000000000000 R09: 0000000000000000 [ 973.677915][T13309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.677959][T13309] R13: 00007f7a9c896038 R14: 00007f7a9c895fa0 R15: 00007ffe96a29c38 [ 973.677979][T13309] [ 974.102830][ T29] kauditd_printk_skb: 1761 callbacks suppressed [ 974.102847][ T29] audit: type=1326 audit(1756719765.218:158725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13333 comm="syz.6.12970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e255cebe9 code=0x7ffc0000 [ 974.175807][ T29] audit: type=1326 audit(1756719765.248:158726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13333 comm="syz.6.12970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e255cebe9 code=0x7ffc0000 [ 974.199740][ T29] audit: type=1326 audit(1756719765.248:158727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13333 comm="syz.6.12970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e255cebe9 code=0x7ffc0000 [ 974.223528][ T29] audit: type=1326 audit(1756719765.258:158728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13333 comm="syz.6.12970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e255cebe9 code=0x7ffc0000 [ 974.247448][ T29] audit: type=1326 audit(1756719765.258:158729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13333 comm="syz.6.12970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e255cebe9 code=0x7ffc0000 [ 974.271269][ T29] audit: type=1326 audit(1756719765.258:158730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13333 comm="syz.6.12970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e255cebe9 code=0x7ffc0000 [ 974.295105][ T29] audit: type=1326 audit(1756719765.258:158731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13333 comm="syz.6.12970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e255cebe9 code=0x7ffc0000 [ 974.318935][ T29] audit: type=1326 audit(1756719765.268:158732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13333 comm="syz.6.12970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e255cebe9 code=0x7ffc0000 [ 974.342708][ T29] audit: type=1326 audit(1756719765.268:158733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13333 comm="syz.6.12970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e255cebe9 code=0x7ffc0000 [ 974.366533][ T29] audit: type=1326 audit(1756719765.268:158734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13333 comm="syz.6.12970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f0e255cebe9 code=0x7ffc0000 [ 974.610280][T13356] netlink: 68 bytes leftover after parsing attributes in process `syz.0.12977'. [ 974.775195][T13375] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12984'. [ 974.848360][T13382] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12987'. [ 975.015337][T23264] IPVS: starting estimator thread 0... [ 975.031608][T13392] IPv6: sit1: Disabled Multicast RS [ 975.038019][T13392] sit1: entered allmulticast mode [ 975.116757][T13393] IPVS: using max 2448 ests per chain, 122400 per kthread [ 975.333791][T11290] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.402285][T11290] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.459777][T11290] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.526720][T11290] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.639570][T13445] FAULT_INJECTION: forcing a failure. [ 975.639570][T13445] name failslab, interval 1, probability 0, space 0, times 0 [ 975.652265][T13445] CPU: 1 UID: 0 PID: 13445 Comm: syz.1.12997 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 975.652299][T13445] Tainted: [W]=WARN [ 975.652305][T13445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 975.652318][T13445] Call Trace: [ 975.652324][T13445] [ 975.652333][T13445] __dump_stack+0x1d/0x30 [ 975.652358][T13445] dump_stack_lvl+0xe8/0x140 [ 975.652380][T13445] dump_stack+0x15/0x1b [ 975.652400][T13445] should_fail_ex+0x265/0x280 [ 975.652421][T13445] should_failslab+0x8c/0xb0 [ 975.652445][T13445] kmem_cache_alloc_noprof+0x50/0x310 [ 975.652478][T13445] ? vm_area_dup+0x33/0x2c0 [ 975.652518][T13445] vm_area_dup+0x33/0x2c0 [ 975.652548][T13445] __split_vma+0xe9/0x650 [ 975.652573][T13445] ? path_openat+0x1bf8/0x2170 [ 975.652595][T13445] vma_modify+0x21e/0xc80 [ 975.652622][T13445] ? _parse_integer+0x27/0x40 [ 975.652648][T13445] vma_modify_policy+0x101/0x130 [ 975.652676][T13445] mbind_range+0x1b8/0x440 [ 975.652698][T13445] __se_sys_set_mempolicy_home_node+0x351/0x530 [ 975.652736][T13445] __x64_sys_set_mempolicy_home_node+0x55/0x70 [ 975.652766][T13445] x64_sys_call+0x2261/0x2ff0 [ 975.652792][T13445] do_syscall_64+0xd2/0x200 [ 975.652824][T13445] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 975.652854][T13445] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 975.652890][T13445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.652918][T13445] RIP: 0033:0x7f7a9c65ebe9 [ 975.652937][T13445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 975.652960][T13445] RSP: 002b:00007f7a9b0c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c2 [ 975.652979][T13445] RAX: ffffffffffffffda RBX: 00007f7a9c895fa0 RCX: 00007f7a9c65ebe9 [ 975.652991][T13445] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000146000 [ 975.653003][T13445] RBP: 00007f7a9b0c7090 R08: 0000000000000000 R09: 0000000000000000 [ 975.653014][T13445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 975.653026][T13445] R13: 00007f7a9c896038 R14: 00007f7a9c895fa0 R15: 00007ffe96a29c38 [ 975.653048][T13445] [ 975.868613][T11290] bridge_slave_1: left allmulticast mode [ 975.874299][T11290] bridge_slave_1: left promiscuous mode [ 975.880166][T11290] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.909424][T11290] bridge_slave_0: left allmulticast mode [ 975.909446][T11290] bridge_slave_0: left promiscuous mode [ 975.909613][T11290] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.057833][T13475] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13002'. [ 976.069390][T11290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 976.079396][T11290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 976.100283][T11290] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 976.110180][T11290] bond0 (unregistering): Released all slaves [ 976.135614][T13394] chnl_net:caif_netlink_parms(): no params data found [ 976.145028][T13478] syzkaller1: entered promiscuous mode [ 976.150665][T13478] syzkaller1: entered allmulticast mode [ 976.203471][T11290] tipc: Left network mode [ 976.203512][T13486] netlink: 132 bytes leftover after parsing attributes in process `syz.6.13005'. [ 976.343208][T11290] hsr_slave_0: left promiscuous mode [ 976.361174][T11290] hsr_slave_1: left promiscuous mode [ 976.395866][T11290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 976.403466][T11290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 976.438614][T11290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 976.446111][T11290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 976.468693][T11290] veth1_macvtap: left promiscuous mode [ 976.479384][T11290] veth0_macvtap: left promiscuous mode [ 976.496237][T11290] veth1_vlan: left promiscuous mode [ 976.501624][T11290] veth0_vlan: left promiscuous mode [ 976.629386][ T781] smc: removing ib device syz! [ 976.646910][T13575] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 976.656339][T13575] netlink: 64859 bytes leftover after parsing attributes in process `syz.6.13012'. [ 976.669894][T13394] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.677102][T13394] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.684332][T13394] bridge_slave_0: entered allmulticast mode [ 976.691722][T13394] bridge_slave_0: entered promiscuous mode [ 976.707093][T13394] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.714262][T13394] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.721523][T13394] bridge_slave_1: entered allmulticast mode [ 976.729622][T13394] bridge_slave_1: entered promiscuous mode [ 976.862674][T13394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.896034][T13394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 976.965584][T13593] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13014'. [ 976.979757][T13394] team0: Port device team_slave_0 added [ 976.995096][T13394] team0: Port device team_slave_1 added [ 977.132193][T13394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.139350][T13394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.165428][T13394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.450620][T13394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 977.457696][T13394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.483750][T13394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 977.601521][T13608] netlink: 68 bytes leftover after parsing attributes in process `syz.6.13018'. [ 977.760038][T13394] hsr_slave_0: entered promiscuous mode [ 977.769639][T13394] hsr_slave_1: entered promiscuous mode [ 977.780531][T13394] debugfs: 'hsr0' already exists in 'hsr' [ 977.786434][T13394] Cannot create hsr debugfs directory [ 978.232134][T13394] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 978.241192][T13394] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 978.250071][T13394] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 978.259402][T13394] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 978.294653][T13394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.307624][T13394] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.317295][ T781] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.324512][ T781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.335577][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.342716][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 978.459323][T13634] loop2: detected capacity change from 0 to 8192 [ 978.468352][T13634] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 978.554588][T13394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.590225][T13638] loop2: detected capacity change from 8192 to 0 [ 978.627326][ C0] blk_print_req_error: 11 callbacks suppressed [ 978.627343][ C0] I/O error, dev loop2, sector 1 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 978.642795][ C0] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 978.655254][ C0] I/O error, dev loop2, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 978.664959][T13638] FAT-fs (loop2): Directory bread(block 65) failed [ 978.675837][ C0] I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 978.685306][T13634] FAT-fs (loop2): FAT read failed (blocknr 1) [ 978.693524][ C0] I/O error, dev loop2, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 978.702818][ C0] I/O error, dev loop2, sector 66 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 978.710420][T13634] FAT-fs (loop2): unable to read inode block for updating (i_pos 1050) [ 978.719631][T13638] FAT-fs (loop2): Directory bread(block 66) failed [ 978.723245][ C1] I/O error, dev loop2, sector 85 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 978.736439][ C1] Buffer I/O error on dev loop2, logical block 85, lost async page write [ 978.744883][ C1] I/O error, dev loop2, sector 97 op 0x1:(WRITE) flags 0x800 phys_seg 7 prio class 2 [ 978.754375][ C1] Buffer I/O error on dev loop2, logical block 97, lost async page write [ 978.762822][ C1] Buffer I/O error on dev loop2, logical block 98, lost async page write [ 978.771278][ C1] Buffer I/O error on dev loop2, logical block 99, lost async page write [ 978.779747][ C1] Buffer I/O error on dev loop2, logical block 100, lost async page write [ 978.788295][ C1] Buffer I/O error on dev loop2, logical block 101, lost async page write [ 978.796846][ C1] Buffer I/O error on dev loop2, logical block 102, lost async page write [ 978.805375][ C1] Buffer I/O error on dev loop2, logical block 103, lost async page write [ 978.813951][ C1] I/O error, dev loop2, sector 112 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 978.823534][ C1] I/O error, dev loop2, sector 128 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 978.856469][T13394] veth0_vlan: entered promiscuous mode [ 978.869219][T13394] veth1_vlan: entered promiscuous mode [ 978.886708][T13394] veth0_macvtap: entered promiscuous mode [ 978.895289][T13394] veth1_macvtap: entered promiscuous mode [ 978.909053][T13394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.923372][T13394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.937376][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.953400][ C1] I/O error, dev loop2, sector 67 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 978.965389][T13638] FAT-fs (loop2): Directory bread(block 67) failed [ 978.972250][T13638] FAT-fs (loop2): Directory bread(block 68) failed [ 978.980758][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.986278][T13638] FAT-fs (loop2): Directory bread(block 69) failed [ 978.991057][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.005533][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.015624][T13638] FAT-fs (loop2): Directory bread(block 70) failed [ 979.026528][T13654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13027'. [ 979.054884][T13638] FAT-fs (loop2): Directory bread(block 71) failed [ 979.065670][T13656] smc: net device bond0 applied user defined pnetid SYZ0 [ 979.075441][T13656] smc: net device bond0 erased user defined pnetid SYZ0 [ 979.100190][T13660] loop3: detected capacity change from 0 to 512 [ 979.118352][T13660] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 979.127425][ T29] kauditd_printk_skb: 1592 callbacks suppressed [ 979.127443][ T29] audit: type=1326 audit(1756719770.248:160327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13661 comm="syz.0.13030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 979.127877][T13660] System zones: 1-12 [ 979.158076][ T29] audit: type=1326 audit(1756719770.258:160328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13661 comm="syz.0.13030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 979.185536][ T29] audit: type=1326 audit(1756719770.258:160329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13661 comm="syz.0.13030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 979.209593][ T29] audit: type=1326 audit(1756719770.258:160330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13661 comm="syz.0.13030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 979.233550][ T29] audit: type=1326 audit(1756719770.258:160331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13661 comm="syz.0.13030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 979.257457][ T29] audit: type=1326 audit(1756719770.258:160332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13661 comm="syz.0.13030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 979.281238][ T29] audit: type=1326 audit(1756719770.258:160333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13661 comm="syz.0.13030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 979.305039][ T29] audit: type=1326 audit(1756719770.258:160334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13661 comm="syz.0.13030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 979.329002][ T29] audit: type=1326 audit(1756719770.258:160335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13661 comm="syz.0.13030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 979.352921][ T29] audit: type=1326 audit(1756719770.258:160336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13661 comm="syz.0.13030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 979.378717][T13660] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.12989: error while reading EA inode 32 err=-116 [ 979.394346][T13660] EXT4-fs (loop3): Remounting filesystem read-only [ 979.394643][T13668] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13032'. [ 979.401235][T13660] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 979.437151][T13660] EXT4-fs (loop3): 1 orphan inode deleted [ 979.443523][T13660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 979.470320][T13394] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.373576][T13723] loop3: detected capacity change from 0 to 128 [ 980.382180][T13723] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 980.394562][T13723] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 980.407547][T13723] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13039'. [ 980.424339][T13732] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13038'. [ 980.482319][T13394] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 981.019704][T13819] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13045'. [ 981.429128][T13847] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13050'. [ 981.790018][T13861] tipc: Enabled bearer , priority 0 [ 981.799360][T13861] tipc: Disabling bearer [ 981.832820][T13866] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13059'. [ 981.873471][T13872] FAULT_INJECTION: forcing a failure. [ 981.873471][T13872] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 981.886862][T13872] CPU: 0 UID: 0 PID: 13872 Comm: syz.6.13062 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 981.886921][T13872] Tainted: [W]=WARN [ 981.886930][T13872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 981.886947][T13872] Call Trace: [ 981.886954][T13872] [ 981.886963][T13872] __dump_stack+0x1d/0x30 [ 981.886988][T13872] dump_stack_lvl+0xe8/0x140 [ 981.887011][T13872] dump_stack+0x15/0x1b [ 981.887073][T13872] should_fail_ex+0x265/0x280 [ 981.887100][T13872] should_fail_alloc_page+0xf2/0x100 [ 981.887135][T13872] __alloc_frozen_pages_noprof+0xff/0x360 [ 981.887230][T13872] alloc_pages_mpol+0xb3/0x250 [ 981.887273][T13872] vma_alloc_folio_noprof+0x1aa/0x300 [ 981.887353][T13872] handle_mm_fault+0xec2/0x2c20 [ 981.887385][T13872] ? __rcu_read_lock+0x37/0x50 [ 981.887410][T13872] ? __pte_offset_map_lock+0x1d4/0x230 [ 981.887489][T13872] __get_user_pages+0x102e/0x1fa0 [ 981.887530][T13872] __gup_longterm_locked+0x2fb/0xe60 [ 981.887569][T13872] ? ___pte_offset_map+0xea/0x150 [ 981.887679][T13872] gup_fast_fallback+0x1f5/0x1420 [ 981.887712][T13872] ? alloc_pages_mpol+0x201/0x250 [ 981.887763][T13872] pin_user_pages_fast+0x5f/0x90 [ 981.887797][T13872] io_pin_pages+0xb5/0x170 [ 981.887887][T13872] io_sqe_buffer_register+0x184/0x1430 [ 981.887921][T13872] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 981.887969][T13872] ? __kvmalloc_node_noprof+0x398/0x4e0 [ 981.888041][T13872] io_sqe_buffers_register+0x2ac/0x530 [ 981.888156][T13872] __se_sys_io_uring_register+0xa9f/0xeb0 [ 981.888189][T13872] ? fput+0x8f/0xc0 [ 981.888255][T13872] ? ksys_write+0x192/0x1a0 [ 981.888286][T13872] __x64_sys_io_uring_register+0x55/0x70 [ 981.888416][T13872] x64_sys_call+0x18a3/0x2ff0 [ 981.888443][T13872] do_syscall_64+0xd2/0x200 [ 981.888488][T13872] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 981.888524][T13872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.888616][T13872] RIP: 0033:0x7f0e255cebe9 [ 981.888657][T13872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 981.888679][T13872] RSP: 002b:00007f0e24037038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 981.888703][T13872] RAX: ffffffffffffffda RBX: 00007f0e25805fa0 RCX: 00007f0e255cebe9 [ 981.888719][T13872] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000006 [ 981.888736][T13872] RBP: 00007f0e24037090 R08: 0000000000000000 R09: 0000000000000000 [ 981.888748][T13872] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 981.888764][T13872] R13: 00007f0e25806038 R14: 00007f0e25805fa0 R15: 00007fffd0e89a48 [ 981.888799][T13872] [ 982.230672][T13888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13065'. [ 982.278115][T13893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13066'. [ 982.288411][T13893] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 982.303444][T13896] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 982.334712][T13896] FAULT_INJECTION: forcing a failure. [ 982.334712][T13896] name failslab, interval 1, probability 0, space 0, times 0 [ 982.347570][T13896] CPU: 1 UID: 0 PID: 13896 Comm: syz.2.13067 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 982.347659][T13896] Tainted: [W]=WARN [ 982.347668][T13896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 982.347685][T13896] Call Trace: [ 982.347694][T13896] [ 982.347704][T13896] __dump_stack+0x1d/0x30 [ 982.347732][T13896] dump_stack_lvl+0xe8/0x140 [ 982.347757][T13896] dump_stack+0x15/0x1b [ 982.347779][T13896] should_fail_ex+0x265/0x280 [ 982.347853][T13896] should_failslab+0x8c/0xb0 [ 982.347930][T13896] __kmalloc_node_noprof+0xa9/0x410 [ 982.347961][T13896] ? vprintk_emit+0x635/0x650 [ 982.348041][T13896] ? qdisc_alloc+0x65/0x440 [ 982.348068][T13896] qdisc_alloc+0x65/0x440 [ 982.348091][T13896] ? vprintk_default+0x26/0x30 [ 982.348116][T13896] ? vprintk+0x1d/0x30 [ 982.348221][T13896] qdisc_create_dflt+0x7f/0x2d0 [ 982.348248][T13896] fifo_create_dflt+0x4a/0x1a0 [ 982.348337][T13896] tbf_change+0x636/0xcd0 [ 982.348362][T13896] ? __list_add_valid_or_report+0x38/0xe0 [ 982.348402][T13896] ? rtnetlink_rcv+0x1c/0x30 [ 982.348435][T13896] ? netlink_unicast+0x5bd/0x690 [ 982.348515][T13896] ? netlink_sendmsg+0x58b/0x6b0 [ 982.348545][T13896] ? __sock_sendmsg+0x145/0x180 [ 982.348587][T13896] ? read_tsc+0x9/0x20 [ 982.348609][T13896] ? __pfx_tbf_init+0x10/0x10 [ 982.348632][T13896] tbf_init+0x72/0x90 [ 982.348685][T13896] qdisc_create+0x58e/0x9e0 [ 982.348725][T13896] tc_modify_qdisc+0xf2e/0x1420 [ 982.348772][T13896] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 982.348883][T13896] rtnetlink_rcv_msg+0x65a/0x6d0 [ 982.348924][T13896] netlink_rcv_skb+0x123/0x220 [ 982.348952][T13896] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 982.349008][T13896] rtnetlink_rcv+0x1c/0x30 [ 982.349041][T13896] netlink_unicast+0x5bd/0x690 [ 982.349069][T13896] netlink_sendmsg+0x58b/0x6b0 [ 982.349159][T13896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 982.349191][T13896] __sock_sendmsg+0x145/0x180 [ 982.349229][T13896] ____sys_sendmsg+0x31e/0x4e0 [ 982.349264][T13896] ___sys_sendmsg+0x17b/0x1d0 [ 982.349309][T13896] __x64_sys_sendmsg+0xd4/0x160 [ 982.349377][T13896] x64_sys_call+0x191e/0x2ff0 [ 982.349399][T13896] do_syscall_64+0xd2/0x200 [ 982.349434][T13896] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 982.349474][T13896] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 982.349514][T13896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.349543][T13896] RIP: 0033:0x7f36192febe9 [ 982.349562][T13896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 982.349586][T13896] RSP: 002b:00007f3617d5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 982.349612][T13896] RAX: ffffffffffffffda RBX: 00007f3619535fa0 RCX: 00007f36192febe9 [ 982.349631][T13896] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000005 [ 982.349647][T13896] RBP: 00007f3617d5f090 R08: 0000000000000000 R09: 0000000000000000 [ 982.349664][T13896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 982.349680][T13896] R13: 00007f3619536038 R14: 00007f3619535fa0 R15: 00007ffd29f435c8 [ 982.349705][T13896] [ 982.754839][T13911] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13071'. [ 982.896749][T13936] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13075'. [ 983.435207][T14007] FAULT_INJECTION: forcing a failure. [ 983.435207][T14007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 983.448480][T14007] CPU: 1 UID: 0 PID: 14007 Comm: syz.0.13081 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 983.448522][T14007] Tainted: [W]=WARN [ 983.448531][T14007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 983.448548][T14007] Call Trace: [ 983.448583][T14007] [ 983.448590][T14007] __dump_stack+0x1d/0x30 [ 983.448671][T14007] dump_stack_lvl+0xe8/0x140 [ 983.448690][T14007] dump_stack+0x15/0x1b [ 983.448706][T14007] should_fail_ex+0x265/0x280 [ 983.448726][T14007] should_fail+0xb/0x20 [ 983.448767][T14007] should_fail_usercopy+0x1a/0x20 [ 983.448795][T14007] _copy_from_user+0x1c/0xb0 [ 983.448895][T14007] wants_mount_setattr+0x128/0x640 [ 983.448928][T14007] __se_sys_mount_setattr+0x10f/0x240 [ 983.449013][T14007] __x64_sys_mount_setattr+0x67/0x80 [ 983.449064][T14007] x64_sys_call+0x19ab/0x2ff0 [ 983.449102][T14007] do_syscall_64+0xd2/0x200 [ 983.449137][T14007] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 983.449169][T14007] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 983.449217][T14007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.449237][T14007] RIP: 0033:0x7f84ee72ebe9 [ 983.449252][T14007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 983.449333][T14007] RSP: 002b:00007f84ed18f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 983.449360][T14007] RAX: ffffffffffffffda RBX: 00007f84ee965fa0 RCX: 00007f84ee72ebe9 [ 983.449372][T14007] RDX: 0000000000000000 RSI: 0000200000001d80 RDI: 0000000000000006 [ 983.449384][T14007] RBP: 00007f84ed18f090 R08: 0000000000000020 R09: 0000000000000000 [ 983.449396][T14007] R10: 0000200000001dc0 R11: 0000000000000246 R12: 0000000000000001 [ 983.449450][T14007] R13: 00007f84ee966038 R14: 00007f84ee965fa0 R15: 00007ffd162d8528 [ 983.449469][T14007] [ 983.691230][T14015] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13083'. [ 984.162801][ T29] kauditd_printk_skb: 491 callbacks suppressed [ 984.162815][ T29] audit: type=1326 audit(1756719775.278:160828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.0.13092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 984.208312][ T29] audit: type=1326 audit(1756719775.308:160829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.0.13092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 984.232297][ T29] audit: type=1326 audit(1756719775.308:160830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.0.13092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 984.256356][ T29] audit: type=1326 audit(1756719775.308:160831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.0.13092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 984.280134][ T29] audit: type=1326 audit(1756719775.308:160832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.0.13092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 984.303918][ T29] audit: type=1326 audit(1756719775.308:160833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.0.13092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 984.327880][ T29] audit: type=1326 audit(1756719775.308:160834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.0.13092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 984.331550][T14087] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13094'. [ 984.351795][ T29] audit: type=1326 audit(1756719775.308:160835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.0.13092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 984.384730][ T29] audit: type=1326 audit(1756719775.308:160836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.0.13092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 984.408579][ T29] audit: type=1326 audit(1756719775.308:160837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.0.13092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 984.563840][T14099] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13099'. [ 984.733090][T14107] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.740381][T14107] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.795426][T14107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.805210][T14107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 984.841034][T14113] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13104'. [ 984.861986][ T37] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.870994][ T37] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.880180][ T37] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.888662][ T37] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.021143][T14126] loop3: detected capacity change from 0 to 1024 [ 985.063735][T14126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 985.082681][T14136] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13111'. [ 985.140183][T14149] FAULT_INJECTION: forcing a failure. [ 985.140183][T14149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 985.153434][T14149] CPU: 1 UID: 0 PID: 14149 Comm: syz.1.13115 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 985.153473][T14149] Tainted: [W]=WARN [ 985.153519][T14149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 985.153536][T14149] Call Trace: [ 985.153545][T14149] [ 985.153554][T14149] __dump_stack+0x1d/0x30 [ 985.153575][T14149] dump_stack_lvl+0xe8/0x140 [ 985.153594][T14149] dump_stack+0x15/0x1b [ 985.153677][T14149] should_fail_ex+0x265/0x280 [ 985.153698][T14149] should_fail+0xb/0x20 [ 985.153715][T14149] should_fail_usercopy+0x1a/0x20 [ 985.153820][T14149] _copy_to_user+0x20/0xa0 [ 985.153848][T14149] simple_read_from_buffer+0xb5/0x130 [ 985.153876][T14149] proc_fail_nth_read+0x10e/0x150 [ 985.153957][T14149] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 985.153990][T14149] vfs_read+0x1a8/0x770 [ 985.154010][T14149] ? __rcu_read_unlock+0x4f/0x70 [ 985.154043][T14149] ? __fget_files+0x184/0x1c0 [ 985.154127][T14149] ksys_read+0xda/0x1a0 [ 985.154163][T14149] __x64_sys_read+0x40/0x50 [ 985.154191][T14149] x64_sys_call+0x27bc/0x2ff0 [ 985.154226][T14149] do_syscall_64+0xd2/0x200 [ 985.154263][T14149] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 985.154291][T14149] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 985.154323][T14149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.154344][T14149] RIP: 0033:0x7f7a9c65d5fc [ 985.154363][T14149] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 985.154390][T14149] RSP: 002b:00007f7a9b0c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 985.154411][T14149] RAX: ffffffffffffffda RBX: 00007f7a9c895fa0 RCX: 00007f7a9c65d5fc [ 985.154424][T14149] RDX: 000000000000000f RSI: 00007f7a9b0c70a0 RDI: 0000000000000007 [ 985.154436][T14149] RBP: 00007f7a9b0c7090 R08: 0000000000000000 R09: 0000000000000000 [ 985.154448][T14149] R10: 0000000000000d37 R11: 0000000000000246 R12: 0000000000000001 [ 985.154460][T14149] R13: 00007f7a9c896038 R14: 00007f7a9c895fa0 R15: 00007ffe96a29c38 [ 985.154483][T14149] [ 985.452041][T14160] bridge_slave_0: left allmulticast mode [ 985.458035][T14160] bridge_slave_0: left promiscuous mode [ 985.463913][T14160] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.469034][T14168] FAULT_INJECTION: forcing a failure. [ 985.469034][T14168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 985.484132][T14168] CPU: 1 UID: 0 PID: 14168 Comm: syz.2.13119 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 985.484253][T14168] Tainted: [W]=WARN [ 985.484260][T14168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 985.484275][T14168] Call Trace: [ 985.484284][T14168] [ 985.484293][T14168] __dump_stack+0x1d/0x30 [ 985.484376][T14168] dump_stack_lvl+0xe8/0x140 [ 985.484400][T14168] dump_stack+0x15/0x1b [ 985.484421][T14168] should_fail_ex+0x265/0x280 [ 985.484446][T14168] should_fail+0xb/0x20 [ 985.484469][T14168] should_fail_usercopy+0x1a/0x20 [ 985.484628][T14168] strncpy_from_user+0x25/0x230 [ 985.484666][T14168] ? kmem_cache_alloc_noprof+0x186/0x310 [ 985.484741][T14168] ? getname_flags+0x80/0x3b0 [ 985.484811][T14168] getname_flags+0xae/0x3b0 [ 985.484845][T14168] user_path_at+0x28/0x130 [ 985.484876][T14168] __se_sys_mount+0x25b/0x2e0 [ 985.484901][T14168] ? fput+0x8f/0xc0 [ 985.484937][T14168] __x64_sys_mount+0x67/0x80 [ 985.484965][T14168] x64_sys_call+0x2b4d/0x2ff0 [ 985.484993][T14168] do_syscall_64+0xd2/0x200 [ 985.485090][T14168] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 985.485153][T14168] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 985.485188][T14168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.485210][T14168] RIP: 0033:0x7f36192febe9 [ 985.485226][T14168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 985.485249][T14168] RSP: 002b:00007f3617d5f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 985.485301][T14168] RAX: ffffffffffffffda RBX: 00007f3619535fa0 RCX: 00007f36192febe9 [ 985.485327][T14168] RDX: 0000200000000100 RSI: 0000200000000500 RDI: 0000000000000000 [ 985.485343][T14168] RBP: 00007f3617d5f090 R08: 0000200000000a40 R09: 0000000000000000 [ 985.485384][T14168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 985.485471][T14168] R13: 00007f3619536038 R14: 00007f3619535fa0 R15: 00007ffd29f435c8 [ 985.485489][T14168] [ 985.691137][T14160] bridge_slave_1: left allmulticast mode [ 985.696975][T14160] bridge_slave_1: left promiscuous mode [ 985.702759][T14160] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.752773][T14160] bond0: (slave bond_slave_0): Releasing backup interface [ 985.776218][T14160] bond0: (slave bond_slave_1): Releasing backup interface [ 985.790367][T14160] team0: Port device team_slave_0 removed [ 985.801242][T14160] team0: Port device team_slave_1 removed [ 985.809705][T14160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 985.817214][T14160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.836951][T14160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 985.844477][T14160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.855422][T13394] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.892754][T14272] loop3: detected capacity change from 0 to 8192 [ 986.911245][T14272] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 987.026045][T14289] loop3: detected capacity change from 8192 to 0 [ 987.032582][ C1] blk_print_req_error: 4 callbacks suppressed [ 987.032602][ C1] I/O error, dev loop3, sector 1 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 987.047982][ C1] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 987.056614][ C1] I/O error, dev loop3, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.066405][T14289] FAT-fs (loop3): Directory bread(block 65) failed [ 987.067254][ C1] I/O error, dev loop3, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.082122][T14272] FAT-fs (loop3): FAT read failed (blocknr 1) [ 987.083660][ C1] I/O error, dev loop3, sector 66 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.114976][T14289] FAT-fs (loop3): Directory bread(block 66) failed [ 987.115770][ C1] I/O error, dev loop3, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.136014][T14272] FAT-fs (loop3): unable to read inode block for updating (i_pos 1050) [ 987.163016][ C1] I/O error, dev loop3, sector 67 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.172473][T14289] FAT-fs (loop3): Directory bread(block 67) failed [ 987.172526][ C1] I/O error, dev loop3, sector 85 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 987.186438][ C0] I/O error, dev loop3, sector 68 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.188500][ C1] Buffer I/O error on dev loop3, logical block 85, lost async page write [ 987.198008][T14289] FAT-fs (loop3): Directory bread(block 68) failed [ 987.206140][ C1] I/O error, dev loop3, sector 97 op 0x1:(WRITE) flags 0x800 phys_seg 7 prio class 2 [ 987.206180][ C1] Buffer I/O error on dev loop3, logical block 97, lost async page write [ 987.218678][ C0] I/O error, dev loop3, sector 69 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.222172][ C1] Buffer I/O error on dev loop3, logical block 98, lost async page write [ 987.230743][T14289] FAT-fs (loop3): Directory bread(block 69) failed [ 987.239813][ C1] Buffer I/O error on dev loop3, logical block 99, lost async page write [ 987.239838][ C1] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 987.239856][ C1] Buffer I/O error on dev loop3, logical block 101, lost async page write [ 987.239874][ C1] Buffer I/O error on dev loop3, logical block 102, lost async page write [ 987.239888][ C1] Buffer I/O error on dev loop3, logical block 103, lost async page write [ 987.302089][T14289] FAT-fs (loop3): Directory bread(block 70) failed [ 987.349207][T14289] FAT-fs (loop3): Directory bread(block 71) failed [ 987.430151][T14318] random: crng reseeded on system resumption [ 987.461811][T14317] bridge: RTM_NEWNEIGH with invalid ether address [ 987.469526][T14307] loop8: detected capacity change from 16384 to 16383 [ 987.556540][T14331] FAULT_INJECTION: forcing a failure. [ 987.556540][T14331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 987.569739][T14331] CPU: 0 UID: 0 PID: 14331 Comm: syz.2.13143 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 987.569820][T14331] Tainted: [W]=WARN [ 987.569829][T14331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 987.569846][T14331] Call Trace: [ 987.569855][T14331] [ 987.569865][T14331] __dump_stack+0x1d/0x30 [ 987.569891][T14331] dump_stack_lvl+0xe8/0x140 [ 987.569954][T14331] dump_stack+0x15/0x1b [ 987.569975][T14331] should_fail_ex+0x265/0x280 [ 987.570071][T14331] should_fail+0xb/0x20 [ 987.570093][T14331] should_fail_usercopy+0x1a/0x20 [ 987.570123][T14331] _copy_from_user+0x1c/0xb0 [ 987.570160][T14331] ___sys_sendmsg+0xc1/0x1d0 [ 987.570206][T14331] __x64_sys_sendmsg+0xd4/0x160 [ 987.570290][T14331] x64_sys_call+0x191e/0x2ff0 [ 987.570374][T14331] do_syscall_64+0xd2/0x200 [ 987.570433][T14331] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 987.570474][T14331] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 987.570507][T14331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.570533][T14331] RIP: 0033:0x7f36192febe9 [ 987.570550][T14331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 987.570643][T14331] RSP: 002b:00007f3617d5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 987.570662][T14331] RAX: ffffffffffffffda RBX: 00007f3619535fa0 RCX: 00007f36192febe9 [ 987.570674][T14331] RDX: 0000000000040810 RSI: 0000200000000580 RDI: 0000000000000003 [ 987.570758][T14331] RBP: 00007f3617d5f090 R08: 0000000000000000 R09: 0000000000000000 [ 987.570775][T14331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.570790][T14331] R13: 00007f3619536038 R14: 00007f3619535fa0 R15: 00007ffd29f435c8 [ 987.570809][T14331] [ 988.339598][T14384] syz.0.13154: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 988.354458][T14384] CPU: 0 UID: 0 PID: 14384 Comm: syz.0.13154 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 988.354540][T14384] Tainted: [W]=WARN [ 988.354550][T14384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 988.354566][T14384] Call Trace: [ 988.354575][T14384] [ 988.354586][T14384] __dump_stack+0x1d/0x30 [ 988.354614][T14384] dump_stack_lvl+0xe8/0x140 [ 988.354698][T14384] dump_stack+0x15/0x1b [ 988.354714][T14384] warn_alloc+0x12b/0x1a0 [ 988.354747][T14384] ? audit_log_end+0x1d7/0x1f0 [ 988.354789][T14384] ? audit_log_end+0x1d7/0x1f0 [ 988.354843][T14384] __vmalloc_node_range_noprof+0x9c/0xe00 [ 988.354880][T14384] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 988.354907][T14384] ? slow_avc_audit+0x104/0x140 [ 988.355004][T14384] ? should_fail_ex+0x30/0x280 [ 988.355106][T14384] ? xskq_create+0x36/0xe0 [ 988.355148][T14384] vmalloc_user_noprof+0x7d/0xb0 [ 988.355188][T14384] ? xskq_create+0x80/0xe0 [ 988.355225][T14384] xskq_create+0x80/0xe0 [ 988.355256][T14384] xsk_init_queue+0x95/0xf0 [ 988.355322][T14384] xsk_setsockopt+0x477/0x640 [ 988.355368][T14384] ? __pfx_xsk_setsockopt+0x10/0x10 [ 988.355408][T14384] __sys_setsockopt+0x184/0x200 [ 988.355437][T14384] __x64_sys_setsockopt+0x64/0x80 [ 988.355536][T14384] x64_sys_call+0x20ec/0x2ff0 [ 988.355559][T14384] do_syscall_64+0xd2/0x200 [ 988.355618][T14384] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 988.355712][T14384] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 988.355742][T14384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.355769][T14384] RIP: 0033:0x7f84ee72ebe9 [ 988.355787][T14384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 988.355810][T14384] RSP: 002b:00007f84ed18f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 988.355842][T14384] RAX: ffffffffffffffda RBX: 00007f84ee965fa0 RCX: 00007f84ee72ebe9 [ 988.355899][T14384] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 988.355912][T14384] RBP: 00007f84ee7b1e19 R08: 0000000000000004 R09: 0000000000000000 [ 988.355924][T14384] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 988.355939][T14384] R13: 00007f84ee966038 R14: 00007f84ee965fa0 R15: 00007ffd162d8528 [ 988.355964][T14384] [ 988.585483][T14384] Mem-Info: [ 988.589990][T14384] active_anon:10849 inactive_anon:4 isolated_anon:0 [ 988.589990][T14384] active_file:28679 inactive_file:3167 isolated_file:0 [ 988.589990][T14384] unevictable:1 dirty:488 writeback:32 [ 988.589990][T14384] slab_reclaimable:3830 slab_unreclaimable:18369 [ 988.589990][T14384] mapped:35366 shmem:7350 pagetables:1015 [ 988.589990][T14384] sec_pagetables:0 bounce:0 [ 988.589990][T14384] kernel_misc_reclaimable:0 [ 988.589990][T14384] free:1842657 free_pcp:7201 free_cma:0 [ 988.635545][T14384] Node 0 active_anon:43280kB inactive_anon:16kB active_file:114716kB inactive_file:12668kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:141464kB dirty:1952kB writeback:128kB shmem:29400kB kernel_stack:3520kB pagetables:4176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 988.663425][T14384] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 988.692259][T14384] lowmem_reserve[]: 0 2883 7862 7862 [ 988.697783][T14384] Node 0 DMA32 free:2949196kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952828kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 988.728132][T14384] lowmem_reserve[]: 0 0 4978 4978 [ 988.733404][T14384] Node 0 Normal free:4406072kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43280kB inactive_anon:16kB active_file:114716kB inactive_file:12668kB unevictable:4kB writepending:2080kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:24836kB local_pcp:11320kB free_cma:0kB [ 988.766008][T14384] lowmem_reserve[]: 0 0 0 0 [ 988.770579][T14384] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 988.783467][T14384] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949196kB [ 988.799827][T14384] Node 0 Normal: 2098*4kB (UME) 721*8kB (UM) 228*16kB (UM) 358*32kB (UME) 154*64kB (UME) 111*128kB (UME) 117*256kB (UME) 59*512kB (UM) 44*1024kB (UME) 16*2048kB (UME) 1029*4096kB (M) = 4406096kB [ 988.819452][T14384] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 988.828799][T14384] 38952 total pagecache pages [ 988.833562][T14384] 12 pages in swap cache [ 988.837927][T14384] Free swap = 124948kB [ 988.842246][T14384] Total swap = 124996kB [ 988.846547][T14384] 2097051 pages RAM [ 988.850374][T14384] 0 pages HighMem/MovableOnly [ 988.855262][T14384] 80444 pages reserved [ 988.913030][T14407] random: crng reseeded on system resumption [ 988.938955][T14407] Unrecognized hibernate image header format! [ 988.945110][T14407] PM: hibernation: Image mismatch: architecture specific data [ 988.961464][ T3403] hid-generic 0008:0006:80000007.0001: unknown main item tag 0x0 [ 988.969640][ T3403] hid-generic 0008:0006:80000007.0001: unknown main item tag 0x0 [ 988.977027][T14414] __nla_validate_parse: 2 callbacks suppressed [ 988.977046][T14414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13162'. [ 988.977462][ T3403] hid-generic 0008:0006:80000007.0001: unknown main item tag 0x0 [ 989.000473][ T3403] hid-generic 0008:0006:80000007.0001: unknown main item tag 0x0 [ 989.008310][ T3403] hid-generic 0008:0006:80000007.0001: unknown main item tag 0x0 [ 989.016115][ T3403] hid-generic 0008:0006:80000007.0001: unknown main item tag 0x0 [ 989.023897][ T3403] hid-generic 0008:0006:80000007.0001: unknown main item tag 0x0 [ 989.031707][ T3403] hid-generic 0008:0006:80000007.0001: unknown main item tag 0x0 [ 989.039541][ T3403] hid-generic 0008:0006:80000007.0001: unknown main item tag 0x0 [ 989.047351][ T3403] hid-generic 0008:0006:80000007.0001: unknown main item tag 0x0 [ 989.057045][ T3403] hid-generic 0008:0006:80000007.0001: hidraw0: HID v0.0b Device [syz1] on syz1 [ 989.068191][T14407] netlink: 'syz.2.13163': attribute type 3 has an invalid length. [ 989.076167][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13163'. [ 989.164953][T14426] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13166'. [ 989.225929][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 989.225947][ T29] audit: type=1400 audit(1756719780.338:161179): avc: denied { read write } for pid=14429 comm="syz.1.13169" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 989.255992][ T29] audit: type=1400 audit(1756719780.348:161180): avc: denied { open } for pid=14429 comm="syz.1.13169" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 989.281655][ T29] audit: type=1400 audit(1756719780.398:161181): avc: denied { create } for pid=14427 comm="syz.6.13168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 989.319616][ T29] audit: type=1400 audit(1756719780.398:161182): avc: denied { ioctl } for pid=14429 comm="syz.1.13169" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 989.344754][ T29] audit: type=1400 audit(1756719780.398:161183): avc: denied { write } for pid=14427 comm="syz.6.13168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 989.364621][ T29] audit: type=1400 audit(1756719780.438:161184): avc: denied { remount } for pid=14429 comm="syz.1.13169" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 989.450575][T14451] random: crng reseeded on system resumption [ 989.458396][T14451] Unrecognized hibernate image header format! [ 989.464546][T14451] PM: hibernation: Image mismatch: architecture specific data [ 989.476191][T14430] ref_ctr_offset mismatch. inode: 0x24e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 989.498206][ T3402] hid-generic 0008:0006:80000007.0002: hidraw0: HID v0.0b Device [syz1] on syz1 [ 989.531901][ T29] audit: type=1326 audit(1756719780.648:161185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14460 comm="syz.0.13171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 989.571834][ T29] audit: type=1326 audit(1756719780.678:161186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14460 comm="syz.0.13171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 989.578792][T14465] FAULT_INJECTION: forcing a failure. [ 989.578792][T14465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 989.595903][ T29] audit: type=1326 audit(1756719780.678:161187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14460 comm="syz.0.13171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 989.608888][T14465] CPU: 0 UID: 0 PID: 14465 Comm: syz.0.13172 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 989.608999][T14465] Tainted: [W]=WARN [ 989.609011][T14465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 989.609043][T14465] Call Trace: [ 989.609055][T14465] [ 989.609119][T14465] __dump_stack+0x1d/0x30 [ 989.609159][T14465] dump_stack_lvl+0xe8/0x140 [ 989.609186][T14465] dump_stack+0x15/0x1b [ 989.609210][T14465] should_fail_ex+0x265/0x280 [ 989.609239][T14465] should_fail+0xb/0x20 [ 989.609337][T14465] should_fail_usercopy+0x1a/0x20 [ 989.609367][T14465] _copy_from_user+0x1c/0xb0 [ 989.609408][T14465] memdup_user+0x5e/0xd0 [ 989.609457][T14465] bpf_prog_test_run_raw_tp+0x22d/0x400 [ 989.609490][T14465] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 989.609520][T14465] bpf_prog_test_run+0x227/0x390 [ 989.609564][T14465] __sys_bpf+0x4b9/0x7b0 [ 989.609686][T14465] __x64_sys_bpf+0x41/0x50 [ 989.609728][T14465] x64_sys_call+0x2aea/0x2ff0 [ 989.609759][T14465] do_syscall_64+0xd2/0x200 [ 989.609819][T14465] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 989.609852][T14465] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 989.609933][T14465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.610028][T14465] RIP: 0033:0x7f84ee72ebe9 [ 989.610049][T14465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 989.610075][T14465] RSP: 002b:00007f84ed18f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 989.610101][T14465] RAX: ffffffffffffffda RBX: 00007f84ee965fa0 RCX: 00007f84ee72ebe9 [ 989.610119][T14465] RDX: 0000000000000031 RSI: 0000200000000600 RDI: 000000000000000a [ 989.610143][T14465] RBP: 00007f84ed18f090 R08: 0000000000000000 R09: 0000000000000000 [ 989.610161][T14465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 989.610178][T14465] R13: 00007f84ee966038 R14: 00007f84ee965fa0 R15: 00007ffd162d8528 [ 989.610204][T14465] [ 989.828498][ T29] audit: type=1326 audit(1756719780.678:161188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14460 comm="syz.0.13171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ee72ebe9 code=0x7ffc0000 [ 989.876112][T14499] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 989.898876][T14503] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13175'. [ 990.045698][ T2364] FAT-fs (loop0): unable to read inode block for updating (i_pos 1050) [ 990.062139][ T2364] FAT-fs (loop0): unable to read inode block for updating (i_pos 1050) [ 990.070564][ T2364] FAT-fs (loop0): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 990.259816][ T31] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.299986][ T31] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.358325][ T31] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.380711][T14528] chnl_net:caif_netlink_parms(): no params data found [ 990.428374][ T31] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.455440][T14528] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.462724][T14528] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.471586][T14528] bridge_slave_0: entered allmulticast mode [ 990.478131][T14528] bridge_slave_0: entered promiscuous mode [ 990.485132][T14528] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.492291][T14528] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.499876][T14528] bridge_slave_1: entered allmulticast mode [ 990.506529][T14528] bridge_slave_1: entered promiscuous mode [ 990.534106][T14528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 990.552972][T14528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 990.602030][ T31] bridge_slave_1: left allmulticast mode [ 990.608244][ T31] bridge_slave_1: left promiscuous mode [ 990.614006][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.622824][ T31] bridge_slave_0: left allmulticast mode [ 990.628598][ T31] bridge_slave_0: left promiscuous mode [ 990.634291][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.778068][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 990.788761][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.798434][ T31] bond0 (unregistering): Released all slaves [ 990.807084][ T31] bond1 (unregistering): Released all slaves [ 990.816209][T14528] team0: Port device team_slave_0 added [ 990.825862][T14528] team0: Port device team_slave_1 added [ 990.843248][T14528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 990.850399][T14528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 990.876404][T14528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 990.887964][T14528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 990.895058][T14528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 990.896852][T14620] FAULT_INJECTION: forcing a failure. [ 990.896852][T14620] name failslab, interval 1, probability 0, space 0, times 0 [ 990.921141][T14528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 990.933672][T14620] CPU: 1 UID: 0 PID: 14620 Comm: syz.3.13189 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 990.933714][T14620] Tainted: [W]=WARN [ 990.933723][T14620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 990.933742][T14620] Call Trace: [ 990.933814][T14620] [ 990.933825][T14620] __dump_stack+0x1d/0x30 [ 990.933855][T14620] dump_stack_lvl+0xe8/0x140 [ 990.933882][T14620] dump_stack+0x15/0x1b [ 990.933964][T14620] should_fail_ex+0x265/0x280 [ 990.933994][T14620] should_failslab+0x8c/0xb0 [ 990.934029][T14620] __kmalloc_noprof+0xa5/0x3e0 [ 990.934066][T14620] ? bpf_test_init+0xa9/0x160 [ 990.934121][T14620] bpf_test_init+0xa9/0x160 [ 990.934149][T14620] bpf_prog_test_run_xdp+0x274/0x910 [ 990.934179][T14620] ? kstrtouint+0x76/0xc0 [ 990.934229][T14620] ? __rcu_read_unlock+0x4f/0x70 [ 990.934266][T14620] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 990.934333][T14620] bpf_prog_test_run+0x227/0x390 [ 990.934412][T14620] __sys_bpf+0x4b9/0x7b0 [ 990.934458][T14620] __x64_sys_bpf+0x41/0x50 [ 990.934492][T14620] x64_sys_call+0x2aea/0x2ff0 [ 990.934570][T14620] do_syscall_64+0xd2/0x200 [ 990.934608][T14620] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 990.934642][T14620] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 990.934684][T14620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.934744][T14620] RIP: 0033:0x7f96d7d6ebe9 [ 990.934765][T14620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 990.934801][T14620] RSP: 002b:00007f96d67d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 990.934827][T14620] RAX: ffffffffffffffda RBX: 00007f96d7fa5fa0 RCX: 00007f96d7d6ebe9 [ 990.934845][T14620] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 990.934862][T14620] RBP: 00007f96d67d7090 R08: 0000000000000000 R09: 0000000000000000 [ 990.934879][T14620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.934896][T14620] R13: 00007f96d7fa6038 R14: 00007f96d7fa5fa0 R15: 00007ffc32ce7048 [ 990.934948][T14620] [ 991.153627][ T31] tipc: Left network mode [ 991.171456][ T31] hsr_slave_0: left promiscuous mode [ 991.179026][ T31] hsr_slave_1: left promiscuous mode [ 991.184967][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 991.192550][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.215376][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 991.222927][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.238676][ T31] veth1_macvtap: left promiscuous mode [ 991.254444][ T31] veth0_macvtap: left promiscuous mode [ 991.265913][ T31] veth1_vlan: left promiscuous mode [ 991.271398][ T31] veth0_vlan: left promiscuous mode [ 991.386172][ T31] team0 (unregistering): Port device team_slave_1 removed [ 991.400621][ T31] team0 (unregistering): Port device team_slave_0 removed [ 991.460031][ T31] team0 (unregistering): Port device dummy0 removed [ 991.592379][T14528] hsr_slave_0: entered promiscuous mode [ 991.598505][T14528] hsr_slave_1: entered promiscuous mode [ 991.604587][T14528] debugfs: 'hsr0' already exists in 'hsr' [ 991.610438][T14528] Cannot create hsr debugfs directory [ 991.700160][T14651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.709131][T14651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.721091][T14651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13202'. [ 991.772378][ T31] IPVS: stop unused estimator thread 0... [ 991.971627][T14528] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 991.980391][T14528] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 991.989382][T14528] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 991.999624][T14528] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 992.035201][T14528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.048057][T14528] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.057240][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.064348][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.075531][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.082750][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 992.146818][T14528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.229192][T14528] veth0_vlan: entered promiscuous mode [ 992.237283][T14528] veth1_vlan: entered promiscuous mode [ 992.254482][T14528] veth0_macvtap: entered promiscuous mode [ 992.263758][T14528] veth1_macvtap: entered promiscuous mode [ 992.275379][T14528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 992.290429][T14528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.302579][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.315338][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.327984][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.346722][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.394360][T14684] FAULT_INJECTION: forcing a failure. [ 992.394360][T14684] name failslab, interval 1, probability 0, space 0, times 0 [ 992.407220][T14684] CPU: 0 UID: 0 PID: 14684 Comm: syz.0.13178 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 992.407272][T14684] Tainted: [W]=WARN [ 992.407281][T14684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 992.407367][T14684] Call Trace: [ 992.407375][T14684] [ 992.407384][T14684] __dump_stack+0x1d/0x30 [ 992.407449][T14684] dump_stack_lvl+0xe8/0x140 [ 992.407540][T14684] dump_stack+0x15/0x1b [ 992.407555][T14684] should_fail_ex+0x265/0x280 [ 992.407576][T14684] should_failslab+0x8c/0xb0 [ 992.407638][T14684] kmem_cache_alloc_noprof+0x50/0x310 [ 992.407703][T14684] ? skb_clone+0x151/0x1f0 [ 992.407735][T14684] skb_clone+0x151/0x1f0 [ 992.407764][T14684] __netlink_deliver_tap+0x2c9/0x500 [ 992.407792][T14684] netlink_unicast+0x66b/0x690 [ 992.407825][T14684] netlink_sendmsg+0x58b/0x6b0 [ 992.407930][T14684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 992.407959][T14684] __sock_sendmsg+0x145/0x180 [ 992.407993][T14684] ____sys_sendmsg+0x31e/0x4e0 [ 992.408035][T14684] ___sys_sendmsg+0x17b/0x1d0 [ 992.408082][T14684] __x64_sys_sendmsg+0xd4/0x160 [ 992.408110][T14684] x64_sys_call+0x191e/0x2ff0 [ 992.408205][T14684] do_syscall_64+0xd2/0x200 [ 992.408278][T14684] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 992.408304][T14684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.408329][T14684] RIP: 0033:0x7f18b4cdebe9 [ 992.408346][T14684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 992.408366][T14684] RSP: 002b:00007f18b3747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 992.408387][T14684] RAX: ffffffffffffffda RBX: 00007f18b4f15fa0 RCX: 00007f18b4cdebe9 [ 992.408403][T14684] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 992.408420][T14684] RBP: 00007f18b3747090 R08: 0000000000000000 R09: 0000000000000000 [ 992.408436][T14684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 992.408530][T14684] R13: 00007f18b4f16038 R14: 00007f18b4f15fa0 R15: 00007ffc92d377e8 [ 992.408550][T14684] [ 992.631738][T14684] bridge_slave_0: left allmulticast mode [ 992.637471][T14684] bridge_slave_0: left promiscuous mode [ 992.643273][T14684] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.662270][T14684] bridge_slave_1: left allmulticast mode [ 992.668218][T14684] bridge_slave_1: left promiscuous mode [ 992.674276][T14684] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.688008][T14684] bond0: (slave bond_slave_0): Releasing backup interface [ 992.711521][T14684] bond0: (slave bond_slave_1): Releasing backup interface [ 992.732221][ C0] blk_print_req_error: 5 callbacks suppressed [ 992.732251][ C0] I/O error, dev loop6, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 992.748028][ T1369] FAT-fs (loop6): unable to read inode block for updating (i_pos 1050) [ 992.756980][ C0] I/O error, dev loop6, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 992.768035][T14684] team0: Port device team_slave_0 removed [ 992.769470][ T1369] FAT-fs (loop6): unable to read inode block for updating (i_pos 1050) [ 992.782259][ T1369] FAT-fs (loop6): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 992.798785][T14684] team0: Port device team_slave_1 removed [ 992.805579][T14684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 992.813151][T14684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.821942][T14684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 992.829395][T14684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 993.081377][T14690] chnl_net:caif_netlink_parms(): no params data found [ 993.157375][T14715] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13213'. [ 993.169651][T14690] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.176850][T14690] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.196101][T14690] bridge_slave_0: entered allmulticast mode [ 993.202749][T14690] bridge_slave_0: entered promiscuous mode [ 993.216895][T14690] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.223978][T14690] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.231754][T14690] bridge_slave_1: entered allmulticast mode [ 993.238720][T14690] bridge_slave_1: entered promiscuous mode [ 993.269119][T14690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.279860][T14690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.340481][T14690] team0: Port device team_slave_0 added [ 993.354077][ T51] bridge_slave_1: left allmulticast mode [ 993.359861][ T51] bridge_slave_1: left promiscuous mode [ 993.365582][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.398242][ T51] bridge_slave_0: left allmulticast mode [ 993.404033][ T51] bridge_slave_0: left promiscuous mode [ 993.409768][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.537894][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 993.538613][T14723] FAULT_INJECTION: forcing a failure. [ 993.538613][T14723] name failslab, interval 1, probability 0, space 0, times 0 [ 993.559177][T14723] CPU: 1 UID: 0 PID: 14723 Comm: syz.0.13216 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 993.559299][T14723] Tainted: [W]=WARN [ 993.559343][T14723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 993.559356][T14723] Call Trace: [ 993.559363][T14723] [ 993.559370][T14723] __dump_stack+0x1d/0x30 [ 993.559393][T14723] dump_stack_lvl+0xe8/0x140 [ 993.559445][T14723] dump_stack+0x15/0x1b [ 993.559467][T14723] should_fail_ex+0x265/0x280 [ 993.559537][T14723] should_failslab+0x8c/0xb0 [ 993.559601][T14723] kmem_cache_alloc_noprof+0x50/0x310 [ 993.559636][T14723] ? posix_lock_inode+0x218/0x2380 [ 993.559666][T14723] posix_lock_inode+0x218/0x2380 [ 993.559694][T14723] ? file_has_perm+0x324/0x370 [ 993.559765][T14723] fcntl_setlk+0x61f/0x950 [ 993.559797][T14723] do_fcntl+0x5dd/0xdf0 [ 993.559898][T14723] ? selinux_file_fcntl+0x1cb/0x1e0 [ 993.559929][T14723] __se_sys_fcntl+0xb1/0x120 [ 993.559969][T14723] __x64_sys_fcntl+0x43/0x50 [ 993.560073][T14723] x64_sys_call+0x29a0/0x2ff0 [ 993.560093][T14723] do_syscall_64+0xd2/0x200 [ 993.560122][T14723] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 993.560146][T14723] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 993.560208][T14723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.560229][T14723] RIP: 0033:0x7f18b4cdebe9 [ 993.560277][T14723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 993.560306][T14723] RSP: 002b:00007f18b3747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 993.560330][T14723] RAX: ffffffffffffffda RBX: 00007f18b4f15fa0 RCX: 00007f18b4cdebe9 [ 993.560346][T14723] RDX: 0000200000002000 RSI: 0000000000000006 RDI: 0000000000000004 [ 993.560357][T14723] RBP: 00007f18b3747090 R08: 0000000000000000 R09: 0000000000000000 [ 993.560369][T14723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.560380][T14723] R13: 00007f18b4f16038 R14: 00007f18b4f15fa0 R15: 00007ffc92d377e8 [ 993.560398][T14723] [ 993.562608][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 993.773417][ T51] bond0 (unregistering): Released all slaves [ 993.784203][T14690] team0: Port device team_slave_1 added [ 993.810317][T14690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.817391][T14690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 993.843486][T14690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.864784][ T51] tipc: Left network mode [ 993.869704][T14729] loop0: detected capacity change from 0 to 512 [ 993.871722][T14690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.883156][T14690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 993.909232][T14690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 993.924706][T14729] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 993.934881][ T51] hsr_slave_0: left promiscuous mode [ 993.941440][ T51] hsr_slave_1: left promiscuous mode [ 993.947480][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 993.957111][T14729] EXT4-fs (loop0): orphan cleanup on readonly fs [ 993.965102][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 993.977627][T14729] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.13218: Failed to acquire dquot type 1 [ 994.000149][T14729] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.13218: bg 0: block 40: padding at end of block bitmap is not set [ 994.014903][T14729] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 994.046275][T14729] EXT4-fs (loop0): 1 truncate cleaned up [ 994.060921][ T51] team0 (unregistering): Port device team_slave_1 removed [ 994.073596][T14729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 994.105926][ T51] team0 (unregistering): Port device team_slave_0 removed [ 994.143785][T14729] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.13218: iget: bad i_size value: 360287970189639690 [ 994.314765][T14690] hsr_slave_0: entered promiscuous mode [ 994.320788][T14690] hsr_slave_1: entered promiscuous mode [ 994.326790][T14690] debugfs: 'hsr0' already exists in 'hsr' [ 994.332587][T14690] Cannot create hsr debugfs directory [ 994.365280][ T29] kauditd_printk_skb: 569 callbacks suppressed [ 994.365298][ T29] audit: type=1400 audit(1756719785.478:161756): avc: denied { write } for pid=14745 comm="syz.3.13223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 994.397497][ C1] I/O error, dev loop3, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 994.406853][ C1] I/O error, dev loop1, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 994.415786][T11290] FAT-fs (loop3): unable to read inode block for updating (i_pos 1050) [ 994.416118][ C1] I/O error, dev loop2, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 994.437082][ T1393] FAT-fs (loop2): unable to read inode block for updating (i_pos 1050) [ 994.440984][ T781] FAT-fs (loop1): unable to read inode block for updating (i_pos 1050) [ 994.652698][T14528] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.674179][T14753] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13225'. [ 994.751509][T14690] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 994.762089][T14690] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 994.772393][T14690] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 994.783979][T14690] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 994.855921][T14690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.884447][T14769] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13228'. [ 994.904576][T14690] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.914519][ T1393] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.915732][ T29] audit: type=1400 audit(1756719786.028:161757): avc: denied { write } for pid=14771 comm="syz.2.13230" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 994.921709][ T1393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.968836][T14690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 994.979410][T14690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 994.980590][ T29] audit: type=1326 audit(1756719786.068:161758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14771 comm="syz.2.13230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36192febe9 code=0x7ffc0000 [ 995.013686][ T29] audit: type=1326 audit(1756719786.068:161759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14771 comm="syz.2.13230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36192febe9 code=0x7ffc0000 [ 995.037554][ T29] audit: type=1326 audit(1756719786.068:161760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14771 comm="syz.2.13230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36192febe9 code=0x7ffc0000 [ 995.061426][ T29] audit: type=1326 audit(1756719786.068:161761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14771 comm="syz.2.13230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36192febe9 code=0x7ffc0000 [ 995.085235][ T29] audit: type=1326 audit(1756719786.068:161762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14771 comm="syz.2.13230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36192febe9 code=0x7ffc0000 [ 995.109022][ T29] audit: type=1326 audit(1756719786.068:161763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14771 comm="syz.2.13230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36192febe9 code=0x7ffc0000 [ 995.132866][ T29] audit: type=1326 audit(1756719786.068:161764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14771 comm="syz.2.13230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36192febe9 code=0x7ffc0000 [ 995.156780][ T29] audit: type=1326 audit(1756719786.068:161765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14771 comm="syz.2.13230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36192febe9 code=0x7ffc0000 [ 995.194054][ T1393] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.201199][ T1393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.304983][T14690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 995.449451][T14690] veth0_vlan: entered promiscuous mode [ 995.458451][T14690] veth1_vlan: entered promiscuous mode [ 995.479919][T14690] veth0_macvtap: entered promiscuous mode [ 995.490699][T14690] veth1_macvtap: entered promiscuous mode [ 995.504770][T14690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.519839][T14690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.533608][T11290] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.554104][T11290] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.573721][ T1393] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.589762][ T1393] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.643201][T14801] netlink: 132 bytes leftover after parsing attributes in process `syz.6.13233'. [ 995.749859][T14806] loop0: detected capacity change from 0 to 512 [ 995.762542][T14806] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 995.770938][T14806] EXT4-fs (loop0): orphan cleanup on readonly fs [ 995.778631][T14806] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.13235: Failed to acquire dquot type 1 [ 995.791650][T14806] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.13235: bg 0: block 40: padding at end of block bitmap is not set [ 995.807585][T14806] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 995.816843][T14806] EXT4-fs (loop0): 1 truncate cleaned up [ 995.823165][T14806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 995.902906][T14806] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.13235: iget: bad i_size value: 360287970189639690 [ 996.278622][T14836] loop6: detected capacity change from 0 to 512 [ 996.285651][T14836] EXT4-fs: Ignoring removed nomblk_io_submit option [ 996.293097][T14836] EXT4-fs: Ignoring removed i_version option [ 996.304956][T14836] EXT4-fs (loop6): 1 orphan inode deleted [ 996.311660][T14836] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 996.335656][T14836] netlink: 'syz.6.13246': attribute type 10 has an invalid length. [ 996.349077][T14836] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 996.382783][T14690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.551847][T14528] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.576703][T14857] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13253'. [ 996.930367][T14877] loop0: detected capacity change from 0 to 128 [ 996.938435][T14877] vfat: Unknown parameter 'E^¼½õ7|´jâ:\Ü®®„ÍÒ£IÿCx¶|ú2U®Ö“¹À‹J» ÈäO' [ 996.959440][T14877] tipc: Started in network mode [ 996.964355][T14877] tipc: Node identity 1ef16fdce82e, cluster identity 4711 [ 996.971914][T14877] tipc: Enabled bearer , priority 0 [ 996.994887][T14877] tipc: Disabling bearer [ 997.771465][T14918] loop6: detected capacity change from 0 to 128 [ 997.790198][T14918] vfat: Unknown parameter 'E^¼½õ7|´jâ:\Ü®®„ÍÒ£IÿCx¶|ú2U®Ö“¹À‹J» ÈäO' [ 997.817579][T14918] tipc: Started in network mode [ 997.822491][T14918] tipc: Node identity de10c25b6d9a, cluster identity 4711 [ 997.829751][T14918] tipc: Enabled bearer , priority 0 [ 997.839683][T14918] tipc: Disabling bearer [ 998.216414][T14927] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13282'. [ 998.453188][T14935] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13285'. [ 998.810686][T14942] loop6: detected capacity change from 0 to 512 [ 998.818913][T14942] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 998.827175][T14942] EXT4-fs (loop6): orphan cleanup on readonly fs [ 998.833986][T14942] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.13288: Failed to acquire dquot type 1 [ 998.846267][T14942] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.13288: bg 0: block 40: padding at end of block bitmap is not set [ 998.860840][T14942] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 998.870072][T14942] EXT4-fs (loop6): 1 truncate cleaned up [ 998.876282][T14942] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 998.894129][T14942] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.13288: iget: bad i_size value: 360287970189639690 [ 998.989744][T14690] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.911406][T14961] loop6: detected capacity change from 0 to 8192 [ 999.920326][T14961] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 999.986329][T14964] ================================================================== [ 999.994479][T14964] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 1000.002238][T14964] [ 1000.004584][T14964] read-write to 0xffff888237d26f50 of 8 bytes by task 14961 on cpu 1: [ 1000.012761][T14964] find_get_block_common+0x4f0/0x960 [ 1000.018079][T14964] bdev_getblk+0x83/0x3b0 [ 1000.022440][T14964] __bread_gfp+0x51/0x250 [ 1000.026801][T14964] fat_ent_bread+0xc9/0x1a0 [ 1000.031340][T14964] fat_ent_read+0x3b0/0x5c0 [ 1000.035883][T14964] fat_truncate_blocks+0x302/0x550 [ 1000.041015][T14964] fat_write_end+0xba/0x160 [ 1000.045541][T14964] generic_perform_write+0x30f/0x490 [ 1000.050852][T14964] __generic_file_write_iter+0x9e/0x120 [ 1000.056429][T14964] generic_file_write_iter+0x8d/0x2f0 [ 1000.061823][T14964] aio_write+0x2e2/0x410 [ 1000.066102][T14964] io_submit_one+0xacd/0x11d0 [ 1000.070815][T14964] __se_sys_io_submit+0xfb/0x280 [ 1000.075777][T14964] __x64_sys_io_submit+0x43/0x50 [ 1000.080751][T14964] x64_sys_call+0x2d5d/0x2ff0 [ 1000.085454][T14964] do_syscall_64+0xd2/0x200 [ 1000.089990][T14964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.095908][T14964] [ 1000.098237][T14964] read to 0xffff888237d26f50 of 8 bytes by task 14964 on cpu 0: [ 1000.105874][T14964] has_bh_in_lru+0x35/0x1f0 [ 1000.110415][T14964] __lru_add_drain_all+0x234/0x3f0 [ 1000.115556][T14964] lru_add_drain_all+0x10/0x20 [ 1000.120344][T14964] invalidate_bdev+0x47/0x70 [ 1000.124945][T14964] loop_set_status+0x133/0x6a0 [ 1000.129731][T14964] lo_ioctl+0x671/0x12b0 [ 1000.134012][T14964] blkdev_ioctl+0x34f/0x440 [ 1000.138547][T14964] __se_sys_ioctl+0xcb/0x140 [ 1000.143161][T14964] __x64_sys_ioctl+0x43/0x50 [ 1000.147781][T14964] x64_sys_call+0x1816/0x2ff0 [ 1000.152499][T14964] do_syscall_64+0xd2/0x200 [ 1000.157043][T14964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.162967][T14964] [ 1000.165311][T14964] value changed: 0x0000000000000000 -> 0xffff888119c28478 [ 1000.172436][T14964] [ 1000.174771][T14964] Reported by Kernel Concurrency Sanitizer on: [ 1000.180946][T14964] CPU: 0 UID: 0 PID: 14964 Comm: syz.6.13295 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1000.192434][T14964] Tainted: [W]=WARN [ 1000.196245][T14964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1000.206326][T14964] ================================================================== [ 1000.265837][T14964] loop6: detected capacity change from 8192 to 0 [ 1000.266049][ C1] I/O error, dev loop6, sector 3 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1000.275172][ C0] I/O error, dev loop6, sector 73 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1000.281496][ C1] Buffer I/O error on dev loop6, logical block 3, lost sync page write [ 1000.290904][T14964] FAT-fs (loop6): Directory bread(block 73) failed [ 1000.301322][ C1] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1000.305526][T14964] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1000.305548][T14964] FAT-fs (loop6): Filesystem has been set read-only [ 1000.315018][T14961] FAT-fs (loop6): FAT read failed (blocknr 3) [ 1000.335542][ C0] I/O error, dev loop6, sector 1 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1000.335561][ C1] I/O error, dev loop6, sector 65 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1000.335589][ C1] Buffer I/O error on dev loop6, logical block 65, lost sync page write [ 1000.344856][ C0] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 1000.355662][ C1] I/O error, dev loop6, sector 85 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1000.380359][ C1] Buffer I/O error on dev loop6, logical block 85, lost async page write [ 1000.388809][ C1] I/O error, dev loop6, sector 97 op 0x1:(WRITE) flags 0x800 phys_seg 7 prio class 2 [ 1000.398287][ C1] Buffer I/O error on dev loop6, logical block 97, lost async page write [ 1000.406756][ C1] Buffer I/O error on dev loop6, logical block 98, lost async page write [ 1000.415171][ C1] Buffer I/O error on dev loop6, logical block 99, lost async page write [ 1000.423721][ C1] Buffer I/O error on dev loop6, logical block 100, lost async page write [ 1000.432263][ C1] Buffer I/O error on dev loop6, logical block 101, lost async page write [ 1000.440797][ C1] Buffer I/O error on dev loop6, logical block 102, lost async page write [ 1000.449337][ C1] I/O error, dev loop6, sector 112 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1000.458970][ C1] I/O error, dev loop6, sector 128 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1000.468623][ C1] I/O error, dev loop6, sector 160 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2