last executing test programs: 7m9.245434825s ago: executing program 0 (id=234): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000140000001000000", @ANYRES32, @ANYRES32, @ANYRESDEC], 0x50) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x97a3}, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040884) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") 7m9.040696494s ago: executing program 0 (id=236): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x42, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0, 0x0, 0xfffffffffffffffd}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0xe6c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0x81, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x1, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x80000007}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0x3, 0xfffffffc}, {0x0, 0x80000000, 0x80000000, 0xce4, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x1, 0xc, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0xffffffff, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x5}, {0x8, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x1, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0x9, 0xfffffff9, 0x1}, {0x162, 0x0, 0x4b3, 0xcb5, 0x5, 0x7fffffdf}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x3}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x200, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x400001, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x4, 0xdd9f, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x5, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x100006, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x7, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x1000003, 0x3, 0xff36}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0xe65a, 0x74, 0xd32, 0xd4, 0x100, 0x1d}, {0x0, 0xb, 0xec36, 0x52, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x2}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1d, 0x40, 0x472, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x401, 0x6, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x6, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x6, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x9e7, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x2}, {0x2da, 0x0, 0x9, 0xa748, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x3000000, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x3, 0x3, 0x1, 0x8, 0x600, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffffb}, {0x3eb, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x8, 0x2}, {0x10000000, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0xfffffffd, 0x7, 0x8, 0xfffffffb}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x40}, {0x73d, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffc, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xe, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x5}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0x3, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x8, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x8, 0x1}, {0x5}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x2}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe6c}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000900000018240000", @ANYRES32, @ANYBLOB="0000000000100000046c0000ffff00009500000000000000d59a0000fcffffff18230000", @ANYRES32, @ANYBLOB="000000000600000023b706000466e9778ed19100f721000000183600000200000000000000000000ebaafd8db046f325f84d9c9f78706fc33c5d2d5e711fb61833f845270e6a721e065fd55caca90b2a5b141b192075cc801b8ddbd963010d79d7d8e6113cc389a7392e9e3a3290e516840c13320d1d9ba1da007fb463f9195056a20f4d7d80f84e6772683bb9c8c502209baa896cf59fcab6429706e95e556d1fefb2a99d76448149ae2cfb02af7e72f4074dcb64c76d5292d83a8d90577f386df606535c569b80516121306b1810017ace65fed4ea54e645d8a8884f5bebfa648d4bab12d3daa755bb58d8ace4b07aab64bfcd1c6e7700"/259], &(0x7f0000000600)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0x4, 0x6, 0xd}, 0x10, 0x12d13, r0, 0x0, &(0x7f0000000940)=[0xffffffffffffffff], 0x0, 0x10, 0xb}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r4, 0x0, 0x2d, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x8, 0x0, &(0x7f0000000500)=[0x5, 0x9, 0x3, 0x6, 0x8, 0x8, 0xffff, 0x7], 0x9}}, 0x30) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0019000c000000050000000400000000000000000000000000000004"], 0x0, 0x29, 0x0, 0x1}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x3, 0x519, &(0x7f0000001cc0)="$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") r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r6, &(0x7f0000000380)=[{&(0x7f0000000400)="8df5863a27", 0x5}, {&(0x7f00000001c0)="1d8e28081b26bb15a292b2", 0xb}], 0x2, 0x7a00, 0x0, 0x17) 7m8.773677545s ago: executing program 0 (id=241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000800000007b8af00000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300"/76, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fffffc, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kfree\x00', r4, 0x0, 0x4804}, 0x18) ioctl$int_out(r2, 0x5462, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0x1}, 0x48) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x1) 7m8.372786801s ago: executing program 0 (id=250): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@jqfmt_vfsold}, {@nodelalloc}, {@errors_remount}, {@nomblk_io_submit}, {@usrjquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@resgid, 0x32}]}, 0x1e, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLVlYyxbxpKT2ITWoX9AoZS20Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXcuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVAzzoREScj4l61Wj0dEYON8kwjxXo91da7e+fGVC0lUa1e/iqJSOpltdVGNr3nocZm+yPiv/+KeC55NG55dW1+slgsLDeW85WFpXx5de3M3MLkbGG2sDg+PnZ+4sLEuYnRtrRzICIu/uOzV196658X3/vTtY+vfDHyfNIoj3jQjnarNz2bfhYb+iNieTeCdUl/2kIAAH4O9jWO838fEadjMPrSozkAAABgL6n+dSB+SCKqAAAAwJ6VSefAJplcYx7AQGQyuVx9Du+v42CmWCpX/jhTWlmcrs+VHYpsZmauWBhtzBUeimxSWx5L8w+Wz25ZHo+IIxHxyuCBdDk3VSpOd/vkBwAAAPSIQ1vG/98O1sf/m3zftcoBAAAA7TPU7QoAAAAAu874HwAAAPY+438AAADY0/596VItVTf+/3r66urKfOnqmelCeT63sDKVmyotL+VmS6XZ9J59C9u9X7FUWvpzLK5cz1cK5Uq+vLp2ZaG0sli5MvfQX2ADAAAAHXTkd7c+SiJi/S8H0lSzr9uVAjqi/0lW/nT36gF0Xl+3KwB0zRP9/gN7SrbbFQC6Ltnm9ZaTd95vf10AAIDdMfyb5tf/+7Y9N7Ce6VAVgV3i/B/0Ltf/oXe5/g+9Kxt9YSAPvW27W4A+/fX/avWJKgQAALTdQJqSTC4iPQ8wEJlMLhdxOB0TZJOZuWJhNCJ+GREfDmZ/UVseS7dMtp0zDAAAAAAAAAAAAAAAAAAAAAAAAADUVatJVAEAAIA9LSLzeZLezT9iePDUwNbzA/uS7wbT54i49sbl165PVirLY7Xyr++XV15vlJ/txhkMAAAAYKuNcfrGOB4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2ununRtTG6mTcb/8e0QMNYvfH/vT5/2RjYiD3yTRv2m7JCL62hB//WZEHG0WP6lVK4YatWgW/0CX4x9qQ3zoZbdq/c/fmn3/MnEifW7+/Tuf9lBPr3X/l7nf//U1iV8rO7zDGMduv5NvGf9mxLH+5v3PRvykRf9zcofx//+/tbVWr1XfjBhu+vuTPBQrX1lYypdX187MLUzOFmYLi+PjY+cnLkycmxjNz8wVC43HpjFe/u279x7X/oMt4g9t0/5TO2z/j7ev3/lVPZu9v3nyIP7Iyeb7/2iL+JnG/v9DI197fXgjv17Pb3b87Q+OP6790y3av93+H9lh+0//58VPdrgqANAB5dW1+clisbDc05mn+jRqh0XPRCuezUztc30GqtE088IuvHPtyLzb7WpHpqvdEgAAsAseHQMDAAAAAAAAAAAAAAAAAAAAndaJ24llt8RcTx/bcfd8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID2+SkAAP//u2zSUQ==") r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000880)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000002c0)={0x2c, 0x4, r5, 0x30, r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x1b, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000100000000072be933aab1384a870f3c0", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001846000000000000000000000000000085000000090000001865000009000000000000000100000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000185200000a0000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x5, 0x4d, &(0x7f0000000380)=""/77, 0x40f00, 0x0, '\x00', r5, 0x0, r0, 0x8, &(0x7f0000000300)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x6, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000440)='4', 0x1}], 0x1) r7 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) r9 = syz_open_procfs(r7, &(0x7f0000000180)='map_files\x00') r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='5\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="3183000000000000000019000000180001801400020076657468315f766c616e000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000d9}, 0x40010) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000d80)={'tunl0\x00', 0x0, 0x40, 0x10, 0xb2, 0x68, {{0x2f, 0x4, 0x0, 0x2f, 0xbc, 0x68, 0x0, 0x5, 0x4, 0x0, @broadcast, @multicast1, {[@timestamp_prespec={0x44, 0x34, 0xa8, 0x3, 0x1, [{@multicast1, 0xbb9b}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x2}, {@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x2}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x2}, {@private=0xa010102, 0x4}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4, 0xf0, 0x3, 0x6}, @lsrr={0x83, 0x17, 0xfc, [@dev={0xac, 0x14, 0x14, 0x29}, @loopback, @multicast1, @local, @local]}, @end, @rr={0x7, 0x23, 0x58, [@local, @loopback, @remote, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2, @broadcast]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0xca, 0x1, 0x0, [{@loopback, 0xf}, {@multicast2, 0x401}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0xf5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, @broadcast]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000bc0)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r9, &(0x7f0000000d40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r11, @ANYBLOB="20042bbd7000ffdbdf25170000002400018008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800030002000000140002006d6163766c616e30000000000000000008000100", @ANYRES32=r14, @ANYBLOB="14000200697036746e6c300000000000000000000800030003000000"], 0x84}}, 0xc4) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000640)={&(0x7f0000001240)=ANY=[@ANYBLOB="a666ea47fc3c3155eba2ab1700cf4da1d5e233807bf2c575d7fd60f4cdef398542d5eeeeb2e17f1b3650bad6a3ba1cf9721fc2e4502e57a4bc0fd053d52574425fc27d93ab9658556ed1818a430c2d5066222cb002035a0458b39e4fb10058d11c1bc0bca34e9274a65685ccc11a4f8b7a2470369385f79a9535fd268c7b91c0ec06d281a62adce0ba0db40bbf37c539c912ed75799ac3f64086379de5935eec352443b0819c244f867b933ff87d5c918805b53a89e53e03cb12375ac05b0b5dc39c69dac5e3fcf1a7d9af9fed636637b4198e6a00783fa9d57351409391076f5b7812cc1c5b787b58c7d025e26968cf73c73578fc", @ANYRES16=r11, @ANYBLOB="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"], 0x648}, 0x1, 0x0, 0x0, 0x40}, 0x20000090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='i2c_write\x00', r2, 0x0, 0x9}, 0x18) r15 = socket$nl_audit(0x10, 0x3, 0x9) getpeername$netlink(r15, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 7m7.983107088s ago: executing program 0 (id=257): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) stat(0x0, 0x0) 7m7.670922041s ago: executing program 0 (id=262): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000a00)={[{@init_itable_val}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@journal_ioprio}]}, 0x2, 0x44a, &(0x7f0000000c40)="$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") (fail_nth: 3) 7m7.645180812s ago: executing program 32 (id=262): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000a00)={[{@init_itable_val}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@journal_ioprio}]}, 0x2, 0x44a, &(0x7f0000000c40)="$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") (fail_nth: 3) 6m43.500324023s ago: executing program 4 (id=551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x1, 0xf0}, 0xfe}, 0x18) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x8000000) syz_io_uring_setup(0x5c6, 0x0, 0x0, &(0x7f0000000580)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000010000000000049500"/24], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="540100001800010029bd70004951ea642460c9ff9015fddbdf251d0100001e010600feff0300ff71ec6d721744cc5200080000f8cfcad402006511ec028c7028564a9ce83afe1cc93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9ae9c7a2aea5823bb2a7440a71e28452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5560fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347e6b740e105d090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d458ec5d42c3ef0619022c0000000000000000000000000000000000035c8d586b2a88d818b56d2a5e15c8a95d2917229ae5b2ea0000080005000209f50215000400030000a00005000009000000000000000100004d7b1a22e65b85e9f479380a360f495f8768d6c09e6e0fcbf927d56a4c8ca74da3a63c98310a54bdaba520c45cde98805bff98748e7a0b9da6dc558a1d76b05600308439ddc50427d5e6270ef781b6dac02b5e77d7889e8c21875af7e79c6a70d9fa60fcbab039d15eb1c14353052aed8e258567e8037257e0cf584f0491515481512b5dd5b152f22cb74b4fc914d2addc328f021ccd"], 0x154}}, 0x40000) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000480)={@dev={0xfe, 0x80, '\x00', 0x30}}, 0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r0], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8ad29c00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x5}, 0x18) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) pause() setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) 6m42.328475281s ago: executing program 4 (id=568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="7008000000004000000000000089bdf7c1b7fb4d", @ANYRES32, @ANYBLOB="0000000000000000b7080000140000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r6], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r8, &(0x7f00000005c0), 0x2, 0x0) r9 = openat$cgroup_freezer_state(r8, &(0x7f0000000340), 0x2, 0x0) close(r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sync() 6m40.519271106s ago: executing program 4 (id=587): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './bus\x00'}) fchmodat(r0, &(0x7f0000000040)='./bus\x00', 0x33) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000001380), 0x1, 0x20442) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000000)=""/43) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000580)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x869f, 0x3a, 'GPL\x00', 0x3a, '-', 0x3a, './file0'}, 0x2c) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000480)={@rand_addr, @broadcast, 0x0}, &(0x7f00000004c0)=0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYRESDEC=0x0, @ANYRESHEX=r1], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x9, 0xd, 0x41, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x7, 0x10, 0x81, 0x82c4}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4000000}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x802}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000}, 0x4050) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'geneve0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000440)={&(0x7f0000000040), 0xc, &(0x7f0000000400)={&(0x7f0000001080)=ANY=[@ANYBLOB="10010000", @ANYRES16=0x0, @ANYBLOB="000104000000ffdbdf2117000000340001801400020000000000000000001400020030696d7265673000000000000000000008000100badbb2dad6f77c06eb00d166ab75d9022ae3245942", @ANYRES32=r6, @ANYBLOB="0400018004000180a800018008000100", @ANYRES32=r9, @ANYRES8=0x0, @ANYRESOCT=0x0, @ANYBLOB="1400020076657468315f766c616e00000000000008000100", @ANYRES32=r12, @ANYBLOB="1400020073697430000000000000000000000000040001801400018008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x110}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) chmod(&(0x7f0000000340)='./bus\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000380)={'gre0\x00', r12, 0x40, 0x0, 0xa50, 0x8, {{0xa, 0x4, 0x0, 0x1, 0x28, 0x68, 0x0, 0x9, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x7, 0x10, "6cbbbf7676825a1010b4d4c3f085"}, @ra={0x94, 0x4, 0x1}]}}}}}) 6m39.913256381s ago: executing program 4 (id=596): semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)=[0x8, 0x1, 0x9c6, 0x0, 0xe96e, 0x8, 0x7, 0x5]) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000c00)="$eJzs3M9rHFUcAPDv7OZHfyfWWm1tdbWKxR9Jk1btwYOKggcFQQ/1GJO01mwbaSLYEjQVqUcpeBePgn+BNy+iHkTwquBRCkWD0NRTZHZm2s1mkyZpkm2znw9s9r35se99Z+btvpmXmQDaViX9k0TsiIjfI6Iny85foJK9zc5MDV+fmRpOYm7urb+T2nLXZqaGi0WL9bbnmcOliNJnSbyYLCx34vyFsaFqdfRcnu+fPPNB/8T5C8+cPjN0avTU6NnB48ePHR14/rnBZ9ckzjSua/s/Hj+w77V3Lr8xfOLyuz99m1Zr78Fsfn0ct3S9SUBNVNKt9s9cTeO8x1dQ97vBzrp00tHCirAi5YhId1dnrf33RDlu7ryeePXTllYOWFfpb1P34rOn54BNLIlW1wBojeKHPj3/LV4b1PW4I1x9KaIrT8/OTA3P3oi/I0r59M51LL8SESem//sqfcVKr0MAAKxCrW/zdLP+Xyn21t6zsY5d+RhKb0TcExG7I+LeiNgTEfdF1Ja9PyIeyFae61lm+ZWG/ML+T+lK0zqvkbT/90Jd32+2Lv78rbec53bW4u9MTp6ujh7Jt8nh6OxO8wNLlPH9K799sdi8+v5f+krLL/qCeQWudDRcoBsZmhxaq41w9WLE/o5m8Sc3RgLSI2BfROxf2UfvKhKnn/zmwGIL3Tr+JazBONPc1xFPZPt/OhriLyRLj0/2b4nq6JH+4qhY6OdfL72ZJ7sa591W/Gsg3f/b5h//+ZyL+XvPv0k2XtsZ1erouYmVl3Hpj88XPadZ7fHflbxdG7P+5b1s2kdDk5PnBiK6ktdr+WJD16YP3ly3yBfLp/EfPtS8/e/O10njfzAi0oP4YEQ8FBEP53V/JCIejYhDS8T/48uPvb9E/Ekk0dL9P9L0++/G8d+b1I/XryJRHvvhu/zTtiyMv5i01P4/FtO179pM7fvvFpZbwdvcfAAAAHBXKEXEjkhKfVm6siNKpb6+7H/498S2UnV8YvKpk+Mfnh3J7hHojc5ScaWrp+566EAynX9ilh/MrxUX84/m142/LG+t5fuGx6sjLY4d2t32+e0/ivaf+qvc6toB6879WtC+Gtt/qUX1ADbecn7/nQvA5tSk/W9tRT2Ajef8H9pXs/b/SUNe/x82p4Xt/88mj6wDNiP9f2hf2j+0L+0f2tJy7+LviojuiFj1QwDmJYqbBVa6evFFdWFsy7Lv8L/zEpV1+eTiiRfrWfmtcXNKlO6IjbmBifJYd8tKT1vMxhba5GE1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd6H/AwAA///g6dxC") r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x1ffffffffffffffd}, 0x18) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="5bea6d1ed320e65857a83bec7e0db982e346cf733f679d7a33bc00b6cf104e64d92c3241b722d866b3e4d19ed9c3af4e305d45a316c0d22519391dd07344bdf9679a5a8250e4f62d716a513776bfeb09e9c576920a31d85b82b07c0b6ee3f98e8cc99e80dacb56ce7a5cf822a7a5788f200628ce9cbddeac623a0a6c9396b9d3e084f11fd5c09de4f37e79531b1a7fba1d4948150473bf4a14966cf6268cab72010f76ee0f459f800959128333c2b38f6961f26447ed48443d4f7023baaaaada36a65ae8067bb1524631f0ddb75707a9813911bfa0047bcaac0724c8ba38fdb0bd1fbefa99dab8cb244d6273a99b39fb86bdaff03facf489fa2bd70b653ea606d0e5a07e91207042f2d6587ab10c3e8aec9845b1068cf7f728dc8436cfdabb9637fcc37a25edb772a3dea93c51729902258f0131f61442bab249cee5d400fba44bd1cdf9719f8cc9869a5fa989f2437c0a31f0abe3125de7035da205d359cfec9941b3d350a4", @ANYRESHEX=r4, @ANYRES16=r0, @ANYRES8=r4, @ANYRES32=0x0, @ANYRES8=r0, @ANYRESOCT=r2], 0x0) ioctl$EVIOCRMFF(r4, 0x40095505, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) write$UHID_CREATE(r1, &(0x7f0000000740)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x1, 0x3, 0x7, 0x3, 0xd2}}, 0x120) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='ext4_request_blocks\x00', r7, 0x0, 0x8000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) sysinfo(&(0x7f0000000540)=""/145) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)=[0x8, 0x1, 0x9c6, 0x0, 0xe96e, 0x8, 0x7, 0x5]) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000c00)="$eJzs3M9rHFUcAPDv7OZHfyfWWm1tdbWKxR9Jk1btwYOKggcFQQ/1GJO01mwbaSLYEjQVqUcpeBePgn+BNy+iHkTwquBRCkWD0NRTZHZm2s1mkyZpkm2znw9s9r35se99Z+btvpmXmQDaViX9k0TsiIjfI6Iny85foJK9zc5MDV+fmRpOYm7urb+T2nLXZqaGi0WL9bbnmcOliNJnSbyYLCx34vyFsaFqdfRcnu+fPPNB/8T5C8+cPjN0avTU6NnB48ePHR14/rnBZ9ckzjSua/s/Hj+w77V3Lr8xfOLyuz99m1Zr78Fsfn0ct3S9SUBNVNKt9s9cTeO8x1dQ97vBzrp00tHCirAi5YhId1dnrf33RDlu7ryeePXTllYOWFfpb1P34rOn54BNLIlW1wBojeKHPj3/LV4b1PW4I1x9KaIrT8/OTA3P3oi/I0r59M51LL8SESem//sqfcVKr0MAAKxCrW/zdLP+Xyn21t6zsY5d+RhKb0TcExG7I+LeiNgTEfdF1Ja9PyIeyFae61lm+ZWG/ML+T+lK0zqvkbT/90Jd32+2Lv78rbec53bW4u9MTp6ujh7Jt8nh6OxO8wNLlPH9K799sdi8+v5f+krLL/qCeQWudDRcoBsZmhxaq41w9WLE/o5m8Sc3RgLSI2BfROxf2UfvKhKnn/zmwGIL3Tr+JazBONPc1xFPZPt/OhriLyRLj0/2b4nq6JH+4qhY6OdfL72ZJ7sa591W/Gsg3f/b5h//+ZyL+XvPv0k2XtsZ1erouYmVl3Hpj88XPadZ7fHflbxdG7P+5b1s2kdDk5PnBiK6ktdr+WJD16YP3ly3yBfLp/EfPtS8/e/O10njfzAi0oP4YEQ8FBEP53V/JCIejYhDS8T/48uPvb9E/Ekk0dL9P9L0++/G8d+b1I/XryJRHvvhu/zTtiyMv5i01P4/FtO179pM7fvvFpZbwdvcfAAAAHBXKEXEjkhKfVm6siNKpb6+7H/498S2UnV8YvKpk+Mfnh3J7hHojc5ScaWrp+566EAynX9ilh/MrxUX84/m142/LG+t5fuGx6sjLY4d2t32+e0/ivaf+qvc6toB6879WtC+Gtt/qUX1ADbecn7/nQvA5tSk/W9tRT2Ajef8H9pXs/b/SUNe/x82p4Xt/88mj6wDNiP9f2hf2j+0L+0f2tJy7+LviojuiFj1QwDmJYqbBVa6evFFdWFsy7Lv8L/zEpV1+eTiiRfrWfmtcXNKlO6IjbmBifJYd8tKT1vMxhba5GE1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd6H/AwAA///g6dxC") (async) creat(&(0x7f0000000380)='./bus\x00', 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x1ffffffffffffffd}, 0x18) (async) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) (async) syz_usb_disconnect(r4) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYRES16=r0, @ANYRES8=r4, @ANYRES32=0x0, @ANYRES8=r0, @ANYRESOCT=r2], 0x0) (async) ioctl$EVIOCRMFF(r4, 0x40095505, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async) write$UHID_CREATE(r1, &(0x7f0000000740)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x1, 0x3, 0x7, 0x3, 0xd2}}, 0x120) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='ext4_request_blocks\x00', r7, 0x0, 0x8000000}, 0x18) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) (async) sysinfo(&(0x7f0000000540)=""/145) (async) 6m39.293698757s ago: executing program 4 (id=606): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000009900"], 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x158, 0x10, 0x713, 0x0, 0x24dfdbfe, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x9, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xf8}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, 0x0, 0x580, 0x70bd28, 0x25dfdbff, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x810) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@noload}]}, 0xea, 0x472, &(0x7f0000000f40)="$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") 6m39.097200555s ago: executing program 4 (id=608): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='./file0\x00') 6m39.055661587s ago: executing program 33 (id=608): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='./file0\x00') 5m38.082514715s ago: executing program 2 (id=1407): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000020000000000ee090018090000", @ANYRESHEX, @ANYBLOB="0000000000005a0000000000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000f8ff840000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e24000000090000000000000000000000000000000006000000000000000200130003"], 0x98}, 0x1, 0x7}, 0x0) (fail_nth: 4) 5m37.799032176s ago: executing program 2 (id=1413): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8, 0x2, 0x2000001}]}, 0x1c}}, 0x8000) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x4c, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0x6}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}]}, 0x4c}, 0x1, 0x0, 0x0, 0x659f46798ff0671a}, 0x20004000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) sendmmsg(r7, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) 5m37.769137038s ago: executing program 2 (id=1416): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfc, 0x7ffc1ffb}]}) shmdt(0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) set_mempolicy(0x2, &(0x7f0000000c80)=0x1ff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 5m37.590863325s ago: executing program 2 (id=1422): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0}, 0x94) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x28, &(0x7f0000000340)={0x9, 0x8, 0x7}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r4, &(0x7f0000000780)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0, 0x3e, 0x0, 0x0, 0x41000, 0xb}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000700)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x62, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r7, &(0x7f0000000000)={0x1d, r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r9}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0xfd}, 0xfffffffffffffe9d) 5m37.346474055s ago: executing program 2 (id=1426): syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0000ffffffffbddbf704050086dd6018232500082c00fe8000000000000000000000000000bbfe"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) 5m37.074091416s ago: executing program 2 (id=1428): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = timerfd_create(0x7, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) 5m37.060022717s ago: executing program 34 (id=1428): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = timerfd_create(0x7, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) 2m40.014938117s ago: executing program 3 (id=3993): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="00001000", @ANYRES16=r1, @ANYBLOB="00042abd7000ffdbdf250600000014000600ff01000000000000000000000000000108000c0001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4004001}, 0x805) r2 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000300)=0xf) r4 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd733, 0x80, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r7, &(0x7f0000000680), &(0x7f0000000280)=@udp6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x10007ffffffff}, 0x18) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002680)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x860}, 0x42094) io_uring_enter(r4, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r10}, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='rxrpc_peer\x00', r11, 0x0, 0xfffffffffb}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='mm_compaction_kcompactd_sleep\x00', r8, 0x0, 0xffffffffffffffff}, 0x18) 2m39.729681688s ago: executing program 3 (id=3998): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000100003050000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 2m39.633512792s ago: executing program 3 (id=3999): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @remote, 0x1}, 0x1c) 2m39.540717796s ago: executing program 3 (id=4000): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008040000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syslog(0x0, &(0x7f0000000f80)=""/178, 0xb2) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}]}, 0x0, 0x788, &(0x7f0000001bc0)="$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") syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) (async) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) setfsgid(0xee01) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x68) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x68) write$P9_RREADLINK(r3, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="f0d8c3b100002800000001000031870018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="f0d8c3b100002800000001000031870018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000900)=""/246, 0xf6}, {&(0x7f00000006c0)=""/136, 0x88}, {&(0x7f00000005c0)=""/32, 0x20}, {&(0x7f0000000b00)=""/190, 0xbe}, {&(0x7f0000000bc0)=""/2, 0x2}, {&(0x7f0000000c00)=""/233, 0xe9}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000000d00)=""/18, 0x12}, {&(0x7f0000000d40)=""/121, 0x79}], 0x9) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004c03c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a320000000008000180fffffffd0900010073797a30000000000900020073797a32"], 0x94}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000a00)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000ffdbdf25460000000e0001006e657464657673696d00000f0002006e657464657673696d30000008008e00000000000c008f0004000000000000000c00900001000080000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00020000000c008f0009000000000000000c009000020000000000000000a749289d3e3831160f3eba18da96f4fee60d137121e054f73e8bb58dae1f3f59e8185aaa53075ef315c866c21b6a310a780de3c42ef6585e7c33c8d468f26cbacc06f57fb3c91a7d117b36ce6e4c3a6d0825c1"], 0x94}, 0x1, 0x0, 0x0, 0x4000005}, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000010427bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="031500000000000018001280f40001007769726567756172640000000400028008000a00ee8921584c54f09692c025060c58b0b6e1b0477411fa524cfeed5e1daac500ab030d6c35d6538e2c8bdd54b2c54bb6", @ANYRES32=r7, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2m39.283693777s ago: executing program 3 (id=4003): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) unshare(0x6020400) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) flistxattr(r8, 0x0, 0x0) write$selinux_validatetrans(r3, 0x0, 0x79) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, 0x0, 0x0, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f0000000280)=""/99, 0x63}, &(0x7f0000000300), 0x4}, 0x20) request_key(&(0x7f0000000380)='ceph\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)='\x00', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, &(0x7f0000000580), &(0x7f0000000680)=""/58) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) kexec_load(0x0, 0x0, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 2m38.335778566s ago: executing program 3 (id=4013): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f84814000000da6a0602000000000e000a000f00000002", 0x29}], 0x1}, 0x24044810) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x68dd, 0x47721, 0x16, 0x0, 0x0) (fail_nth: 2) 2m38.321852457s ago: executing program 35 (id=4013): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f84814000000da6a0602000000000e000a000f00000002", 0x29}], 0x1}, 0x24044810) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x68dd, 0x47721, 0x16, 0x0, 0x0) (fail_nth: 2) 3.587879261s ago: executing program 5 (id=6098): socket(0x1d, 0x2, 0x6) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180100000000001c0000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$netlink(0x10, 0x3, 0xa) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c00"], 0x124}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010025bd7000fbdbdf250b0000000c00058008000100657468"], 0x20}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r8 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f00000006c0)=0x10) r9 = fcntl$dupfd(r7, 0x406, r7) ioctl$MON_IOCX_GETX(r8, 0x4018920a, &(0x7f00000000c0)={0x0, &(0x7f0000000940)=""/4096, 0x1000}) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) fcntl$lock(r6, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) r10 = syz_clone(0x40001000, &(0x7f0000000140)="d79c8a523222b8c7c90662086a3564af73ba6ad9834f5fbabf38aa262be559b621a5fe6ab6b899ff166433bc15ad43145dde635af2bf239f381261b415172dfb366831f4f231ebb76ee87bca37e19ce8a985348051538b", 0x57, &(0x7f0000000200), &(0x7f0000000500), &(0x7f0000001940)="8a30fdef304aafa7da8915c3444a55fc5abd632d6ce8892f47fa09baa27414b75b05847739c18c3773e4ece6f044c02e2984ce30f9e241fc1e9004e4b1e074f14ef072cd450c384486f684dd7427a66db0c5c1c1f018cab0fb4097f8d05d64627c2eb750918ffc2b637537e9430c55e252a84289325fea66a140b8b04f6a1ff98f3978195f4b280daa70caf9960b4c26ec7629b333232a93b5c8dfa47dbd86f8e0a8be49c141aff88afbdc5699a1ae969342f231cd59ece8353e37e89060bd7649a9b50fadf7acb33ee671c24bd7513867ff8597d2ae5cd3bb70235ca0887921b0b55c93c342e0cff00ae9ed1c8272d67a7dd374d0d5ab8ac4e4b999d487080133783b82e7d15e166499cef6072d0715144dd0a9f4ade527defaa64fbafa9f7274d06767ecb17a245b5e46c04629867222b3a89e017af40ca96b0bb6bf3636208347eb2555fc2bba83ba8e4c52ef0f02092cfd7e3b071a75f9f59b66e949a5b3b35d9900cdc700c90c72b6aa37e44235ec9442b3ffccc62b5bb894234f181bfbbaf67dc5adb9bbf6bc1e2e67bbf18e96c167db1020825a601dfed68b6ca2d8304f3f3b4f0835f417a50c581051ab2ace9dba73abd1bdf2366cb4aed8c6a678ea4cb39ff95c4e29e50e5dfddd5c53123d2e57730b54487693d391387592c9a5c835e34d004ea3307e11bc6a55372fc7eda780f29d7e56c9b3c7250418dfcaf07e1708cfa8bc27ad47151717dc529c500f643be370e6964418813d1d1d55c2ed3fbf3a79b502abcf8b2549b05ee9b91104a631e615aa010e5987b55006e4e66298d4d7c9c0ccfcb15d3d9d5d3ca276a51f9c4d7eccc13ea6b1ee030ce1d750c19933071b2ec8ebaef4ff0fb9dfb13e460070168a05e956f647c3152d581f4c9b9e3a700c7b748b043910479f85681046447f892677a7eeb6d986c002e0472fe2dd863335211d59c6e156a1dc4bb2120f89f610002c67d3e6ef573d05296db50ea7fd540b043acde856aca49df1e51b88cb938f3cd25847b4cb25c70e4d487b4da176a671d2577c5621049d8bcf81def0913e5f9680237837e546f161e712be27a79666c9b4df2d4f54afa37b9eb98e6084c109399c01a810e2854c00a83c0f129ab9194a9068924982fff3ff69f4a7fa543f45d24b645f7f8bfb49a651e762dbc2b902c4a9588bd0ff6371a36d8957bddc15a84b999677877641f73732c3ab78d897d7cf659d20550a4bbcfa140fdf65d5e703b110dbae128defa65f73da50b1bbd0d87e77b7647b52a60ad67382a5bfbe52e30f0ef66998ada41bfe5ebc9f31c98c6aae7c73d3a83994150c55cf5731ec0984b2712837cec0d7f208c59458c5c2e68f11cdf3689cf2620ee73c0db0ebfa3b3f080bd000f9430e40c8ed09001743c11054ea8b143d71e9542fc93ed6120f0952b79154b2dd7320db29f7715a0f3fd07aae9fb61790dcf29f01b2933d8cc46109119b71d164bb085d7c42443178ad38600296eb2b8e1f40832a5cfc4e4d41f22c259ed9de251d1438699132997030378c4520ee94dd9147669edd80ae508342ab9f43ff213e9724688982387ad5d4e5e55007c143bf9d8d59d489cf14badc137b48b5fbe138d64769da50d6fc1f251061b9b4bcab3a37d7a005482cec5557ecb7ee2878c5bd0307f610ba5ae43d93951ba4db0ba7c6d64b0257a0d561becd170a3770ba1984973da1f7e4a591f165f425b27b5cd72ccecf90d1ba04db5935d97195fa24eab060078f660788a84e266b48bb7d97d53a098badc630fe504596cde887fcd841edc432ec3476f821b499433e73d5ea1a933415fc26db0981e3054fd1a616729c07e81af7c86f67a1e58a196d0e4c685927105fa54f615ecdfd0c3c75325ade9ff6b4e64ed072d84af0c3e863fe7c1b2f002aba9f07ea70232bae8fce0d6999267a2482a84eb19ca755e6e90c607e704e76ee3ba006431098fe96dd1f8251b0d22545ea8e021099e1ae73f65e0bb047456438c947d2cff8d1515e6be2ac1d133b3636817df1ecab08ae0e5ab06046b449c42174aa64991117c0533ce1b53b53921d08ce82351a4b4e3956a5e670d5900f24d05437b506c30b66d968a5368e2a6e641c742e03ac0bb6962a0e57e84c5e9f3c566ade03e8ac4766a00a7a56b1e63082df248a0c82d02f1ad1017b64fbcf817a82da3e4104ce2a0dbe1ef5af9c0db9da6a261ec2bb33cf44ca94609e997f0e8f69f60234d51f539c21c92278df4d619d3651279359617510bf1c905fbd6f1c11e00815170f49eb59f915a0f4532ff9a32005e39678447f62fb293e6dc38029026cc3835be1ee296cb7effba7d150d50a7e4bb7e24b75894537f7e0b56d7c3ff166c914eaff5fe623a0a01cfde58f6d62787033d90568680288ebb1029bb2f0cc7e9c1f5b729bfb8bf1baf9f46068f3e1e989fe2d9c13e6eba6388ce9777e1230ab61a20b042e062b4dd1ee9b6bb7c9e66b392f878b03e230763a2259f23964a63cbd79773098600e82e1fc8061111ca2434d7b985dcceadbfcbcae556158ac06cde27c2ae2e48ffd31db39eb1f155419b723d123e695c08f02e3d0700c733a88aafbf7d8c7968d051d3c295bc3832f6e97f95c09bc7e6e790769859f10b4876b29e3175891aaa60cdda7a48c38fe5ce143cc3c8c1030fe859c388975df6dc22db81d2cbfa0f92884b2cdcf54e06087111d648bf3c283d3b38625fd47102a77e56a249b194018729581ac2a3b940d73f3d8b49a87c3494fa90b039f99191590981d18781d492894179157f81a9cc12c144f27ead0f71af1e175fd1a7865afdfe11c8990413e34127dc9c5badd9a49a4581a3964b3a4e6dd7a21acdd9ee3b01b01b0b30bfe805d54419c59e73f6d2e709a27b9ae662238466e6833424334aad63d17eeb114a9758d3d17dd72e9a9f376b4d54f179676301ee5a2174b0f7b2e39246eeed8d7e6f1fc99f7a7195f9b7ad856fcd9ffa4e37d2db713742575ba62c086d975fc44b604e50f8382bf368540366790b3f09a29c0c4770d590ca05bba79dfbb820e405b3a3ebca392e8258299482d53d6dfe7f36f3ef219136c69d4eeeff1081f9861131620f47da89ddc9572c8ae3792b7f47ab62831b2120be7aab01e53fcedcca9d1afa349bfabf8f2c812b8b09d01aff161c88b9040d0c5bb9ac5c499d7d282ccbf2086a9d170a5ebc83aba5d2dd46cdbb7c77a4975a97b285ad93a0a212f2463128b0a7d1a3da9c22e50139472e38c1167e85fdd2d4d5c82f15dfaef37471421011dc437286227a2ab278bbfc6161b4d2890603375a3c6e968bc242116775b1cc57c5c6cb791b3b7c64514a55e9d7664dbc92273d419010b99ff21151376502f3c438bb09810f48687d60504d4540d5a11a0e0e1cb32d7208f314603490cded27fb8bef65347452bb5b0d430028ca5f4d61bc9409f7403f499bd21f3284bafa67e80745b2f436f2fed035d86ea642955df828f285d0247ad901dddf1924eeb499e21c206d9569e44e60791621f387adcdacf343f824821d85f8a3f71cdc9c04feb8a4d3d5d1024a51c22d7e1fe63c6455093d40dcecfb8b51640202482c8edadf3295dfcf59fe40f36cdcd12bfbbb6e8ad62351681b9d7c2d7bee830adeb00d639fbfff1342568f8431e724a1622170c3bf2ff393543db8c528a08a84957575a823a0e2af9308160320c143e5b7a2b0003a2f67d1894309668e246c4586a9bf7c22f0bbeccbb596e39099a49cec2dd726882b2f4e3da5329315e141cf28569b7cf9fddf7be3d1c811405e51c5360a254039d9d610e9f56c059efd4421fdb648ce6d2b5c1e8b9d39e6f72131ecc27ef9224ab3788d054b82991ad8a37fbe7a9df59c49113aa1d39cceec7846da482e9140a6399d060e5f7faff60e64de42d79d617198cd7d26a6ea471a8b89348adb1b4bf297d6651c979f8940b14df0196c4d95b718852b66cab4d28deee57b63abc68631c5b0f0f01878fc05421c9008c65889750abf4c279ab9fd5906f86315cdc629fc48b40c1f9e103bd08b84a1c99efd72dc29cd0a9db2ea4c70ce8357db6320f21fd8384d47459dc3a6c17366d7fde3d8b0d1f11bbc2565ee77b77b9a7e57b02df210d380c283d4bcc34f8d190e3e3de902cbadb570b7dff50bd1ddb320ed3914730d3539b8527843d3827fc93af7d67d15f0a55f2c1561d056e9532df96403f55094589dbe9c56c9d918727951d572bd6b05bcf98c4db400096b15e8b0942bb7f39a55d45823dc9fe34cbcd79825569ccc859ec17a510acabd390e9da89224ff2e0592b4bd55f0761939be0def7532f343484aca9c0f866fcf191ff442beca35beb99e654fd1a3c6a05cf80a6a1835a8926233466ae466e9652b641017b694057cc902e3de3520b2a14013c50f1abc7ecec02e950e69ffd2595eab6ade3de406a01cf6a9f619144e5e7306bfd6a6325387efa7923b9848fa9077fd6f224688c9fc023a0ca92852e1dd0ab24a4a8bbb4fddf13415d7420816a3e7e0ff4a8ef1ed18f66f01e3298cf8a596567328a6855cc565acc831ce6599151778377beaf800ac7dd22e92257bfff4c32ee9d7a8d026f61c812443558fe7638da55e97290c0ae88a43faaebee0c9e14b3a4e3f5c0115a5c31649b620351cfe3501f2e1cd759076a29688c6e666a9c7f15b0c43e160922a7a242e51f73cf7975b26808ce8a77da6cbc540162ea8a1486298de7ed0a4567edfe43038eca0804ee7374038fb68dbe23f683195da945ce7d9f9b6f7b518059e3a36299ac88c4b3e2a849e901a56af0695354b2cadf33093a74eb4d72bc3ab1f25385d64bafb923d33ee7a5bad3c741948e097aaa4844e4cbd1806257acffdd4bb5e51a75325abe8c56dd80800a5b798920d43b3f78de8922899ba8e37f1de06d600fcb4cd65fdb728fe21d64998a534fda2e41ddf920c6a887e40356fc3a8d2ad899e540813f3a7706dad3187c6d247c99d43a828024336e0a6b39cc5020ed6963fc4a27ea3ec9bcefe5b2b78608412dafcdeac2e64089f7e0e4ceab84a8b811bf1b29e28b6cd831b2f447057e6c1268317e2baa8b1160009c478660fa6027363b5519dca3eb20c5e4b59629a88a7f0d4a44c54058c83dcfbbecf758f98256180f0d282a0a54185f66792592cb4361b20fef38f8b4e9574fc386403d30da9e7516fd14ab30db259a39b816391518254ad8a883f08819bef254e48929155ded65c8f4b7c119de969b0cd3fbcb9704cc6d7af2c96c815c6fbfc9a7cf2c48f7477c7270badb3d9e7373d9377e8723e91eb0d700715c91bc460bdd8d4d818ad2094dc9fee8c56ca328457f79096be29cfbb1caa32c6a6e9e0fe69bab828fcc7a4c37bef7495b03ea63b27efe1329eb22b0535a822ee3f674982f2421701b0c525e9cfa33ead01c7892007a57a37e2c8e709634a83e81a18ab90b1f506ed507eecdda7a75b384a901493b5685b91620a9e9cc75e64008e94100d369c8aa563a03e6b171e6a6c99127ac8deeea09ceb200ec80809b7b8f95a6d42d0f2bb83b9bedeb03f4f40eabc82d5e0ab8cb55cab50b465bca1760ff3544624e2820a6217f7d05248ddb374df88d08316757743fb7d380e4e8e2516006e75b36367b4e4c4cf0e86fd0139f5131343e1709b3a8759739609bd0253a9a0e46d8e85f26a93bc1d4dc7235ae4c2016b58f85f383472148cc66975644a93009506ef9c5e2d1b56bbfe8b096e5195ec52c2b65c31c2c8dea46046c0bfa36c1398d0dec4e26e19346cb90116326cf0542d2e7271241860aa660a239cb3b11") fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x0, 0x4, 0x2f, 0x0, r10}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="796100000000010000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) write$char_usb(r0, 0x0, 0x0) 3.397711439s ago: executing program 5 (id=6102): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043000000958c2261842118165dc85471cbc7d996f0e90908062f6b74de7efc748f8e76adaac3cfe6fc2a4e3c885897fa181970e1e4732c0ff5f34f19c24117b2604237c19dbf48b720c2bc5cba1ca416279e22cb69330a4c2c00a20f472aa9e02cbfc2c4d5f3530d431666099cf4c2195818ad794e25c92b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) pivot_root(&(0x7f0000000280)='./file0/file0\x00', 0x0) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x8b48a28600b56cfa) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x64000600) socket$unix(0x1, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) 2.549839744s ago: executing program 6 (id=6116): r0 = syz_io_uring_setup(0x1ec3, &(0x7f0000000080)={0x0, 0x6a5f, 0x0, 0x1, 0x386}, &(0x7f0000000000), &(0x7f0000000140)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) symlinkat(0x0, 0xffffffffffffff9c, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000034c0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002780)="5c00000012006bab9a3fe3d86e17aa0e076b876c1d0048007ea60864160af3650400410838001d001931a0e69ee517d34460bc06000000a76a5e2453375fa82e9d63c5d17405251e6182949a3651f60a84c9f4d4938037e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = open_tree(0xffffffffffffffff, &(0x7f0000004280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000001080)={{0x14}, [@NFT_MSG_NEWTABLE={0x98, 0x0, 0xa, 0x201, 0x0, 0x0, {0x9, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x5f, 0x6, "9fb4b2f0fdcb8a559f2fadf0c2578b4e9aa9fdd2b09ab749e12e72bf41f158a2eba4f6b979d0e1ab84778c7852ba77f44f1cea1f9eacbf4f6eae9476031ac09bc9a174653a89c6d986a5ccf05c7bc0143cf522897c2e553f0af318"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, @NFT_MSG_NEWFLOWTABLE={0x3d4, 0x16, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x124, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}, {0x14}, {0x14, 0x1, 'hsr0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xf0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x158, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffff9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14}, {0x14, 0x1, 'vlan0\x00'}]}]}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x500}, 0x1, 0x0, 0x0, 0x44000}, 0x4) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000000)={[{@jqfmt_vfsv1}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$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") chroot(&(0x7f0000000000)='./file0/../file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00'}, 0x10) stat(&(0x7f0000003240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2.537511895s ago: executing program 5 (id=6117): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x4, 0x2, 0xd}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x40}]}}]}, 0xa8}}, 0x0) 2.452695869s ago: executing program 5 (id=6119): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043000000958c2261842118165dc85471cbc7d996f0e90908062f6b74de7efc748f8e76adaac3cfe6fc2a4e3c885897fa181970e1e4732c0ff5f34f19c24117b2604237c19dbf48b720c2bc5cba1ca416279e22cb69330a4c2c00a20f472aa9e02cbfc2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) pivot_root(&(0x7f0000000280)='./file0/file0\x00', 0x0) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x8b48a28600b56cfa) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x64000600) socket$unix(0x1, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) 1.726822099s ago: executing program 6 (id=6130): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsync(r1) r2 = getpid() setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9661}, {0xa, 0x4e20, 0x7, @loopback, 0x7ff}, 0xffffffffffffffff, {[0x8, 0xd6, 0xe1, 0x200, 0x3, 0x8, 0x0, 0x9]}}, 0x5c) syz_pidfd_open(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000000480)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0xff, 0xf, "b10169a7369da51f11cddfd4117312ce7aa539d31b7e2c88c7a909612e6d040c07625b5bc1cafd02f19b0a526effe1df1d64ec294798c62fdcf727cdc22489", 0x26}, 0x60) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="02139c090a0000002abd7000fcdbdf25080012"], 0x50}}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x4, 0x4, 0x11, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x20, 0x1, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000600)={'syztnl1\x00', r9, 0x1, 0x20, 0x80000000, 0x0, {{0x14, 0x4, 0x3, 0x0, 0x50, 0x68, 0x0, 0xff, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@noop, @noop, @lsrr={0x83, 0x12, 0x10, [@broadcast, @multicast1, @loopback, @broadcast, @empty, @private=0xa010101]}, @rr={0x7, 0x3, 0x20}, @rr={0x7, 0x7, 0x2d}, @generic={0x94, 0x11, "01f0b08297341283c189b97a428cc5"}, @noop]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r10, &(0x7f0000000080)="ac", 0xfffd, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0xc5f}, 0x1c) 1.67007914s ago: executing program 8 (id=6131): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000e0100184857907207e8a012e5758807cb275be217b4fd891b9a5cc7292aabe9a64595377669e7183ddc0a07e606cf10212e41ae5d1893002fba5833780f139fc6cd34bf3a576855415f5a8f9677d82469235beab49143a3", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c1b3400000000000bf91000000000000b7020000000000008500000009010000b7000000000000009500000000000000"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00', r6, 0x0, 0x80000001}, 0x18) socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.580734504s ago: executing program 5 (id=6132): rt_sigpending(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x80122, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x10, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x522}, 0x0, 0x0, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001a40), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="faab", 0x2, 0x44054, 0x0, 0x0) fsopen(&(0x7f0000000180)='openpromfs\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x40, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) pread64(r0, &(0x7f0000000100)=""/174, 0xae, 0x7ff) statx(0xffffffffffffffff, 0x0, 0x6800, 0x20, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc", 0xf) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 1.490454618s ago: executing program 1 (id=6135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000fa36b3377961daeb147b0000000000000000000900000054545fb8", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5000000, 0xf}, 0x0, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x3000000, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f0000000280)) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000002c0)={{0x1, 0x1, 0x1ff, 0x3, 0xc}, 0x81, 0x9, 'id0\x00', 'timer1\x00', 0x0, 0x7f, 0x1, 0xc, 0x8}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='devlink_trap_report\x00', r6}, 0x18) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) unshare(0x22020600) close(r1) r7 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r7, &(0x7f00000001c0)={0x2c, 0x2, 0x0, 0x29, r7}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), 0xffffffffffffffff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r8, 0x112, 0xb, &(0x7f0000000f80)=0x3, 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x525400, 0x0) 909.234592ms ago: executing program 7 (id=6136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0) 831.729075ms ago: executing program 6 (id=6137): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9\xd3F\xaa\xa2fUk@\xeb\xb5~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fdatasync(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) unshare(0x6020400) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) flistxattr(r8, 0x0, 0x0) write$selinux_validatetrans(r3, 0x0, 0x79) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, 0x0, 0x0, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f0000000280)=""/99, 0x63}, &(0x7f0000000300), 0x4}, 0x20) request_key(&(0x7f0000000380)='ceph\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)='\x00', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, &(0x7f0000000580), &(0x7f0000000680)=""/58) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) kexec_load(0x0, 0x0, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 818.563386ms ago: executing program 7 (id=6138): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsync(r1) r2 = getpid() setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9661}, {0xa, 0x4e20, 0x7, @loopback, 0x7ff}, 0xffffffffffffffff, {[0x8, 0xd6, 0xe1, 0x200, 0x3, 0x8, 0x0, 0x9]}}, 0x5c) syz_pidfd_open(r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r3, &(0x7f0000000480)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0xff, 0xf, "b10169a7369da51f11cddfd4117312ce7aa539d31b7e2c88c7a909612e6d040c07625b5bc1cafd02f19b0a526effe1df1d64ec294798c62fdcf727cdc22489", 0x26}, 0x60) socket$inet_udplite(0x2, 0x2, 0x88) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="02139c090a0000002abd7000fcdbdf25080012"], 0x50}}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x4, 0x4, 0x11, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x20, 0x1, 0x6}}) r7 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r7, &(0x7f0000000080)="ac", 0xfffd, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0xc5f}, 0x1c) 758.069499ms ago: executing program 7 (id=6139): rt_sigpending(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x80122, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x10, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x522}, 0x0, 0x0, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001a40), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="faab", 0x2, 0x44054, 0x0, 0x0) fsopen(&(0x7f0000000180)='openpromfs\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x40, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) pread64(r0, 0x0, 0x0, 0x7ff) statx(0xffffffffffffffff, 0x0, 0x6800, 0x20, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf40", 0x14) sendfile(r1, 0xffffffffffffffff, 0x0, 0x3ffff) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffff000) 732.276029ms ago: executing program 6 (id=6140): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getitimer(0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/26, 0x180, 0x1a, 0x1, 0x10000}, 0x28) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000004000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") rename(0x0, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) fchown(r2, 0x0, 0xee01) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) socket$kcm(0x21, 0x2, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 613.974655ms ago: executing program 7 (id=6141): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsync(r1) r2 = getpid() setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9661}, {0xa, 0x4e20, 0x7, @loopback, 0x7ff}, 0xffffffffffffffff, {[0x8, 0xd6, 0xe1, 0x200, 0x3, 0x8, 0x0, 0x9]}}, 0x5c) r3 = syz_pidfd_open(r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r4, &(0x7f0000000480)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0xff, 0xf, "b10169a7369da51f11cddfd4117312ce7aa539d31b7e2c88c7a909612e6d040c07625b5bc1cafd02f19b0a526effe1df1d64ec294798c62fdcf727cdc22489", 0x26}, 0x60) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="02139c090a0000002abd7000fcdbdf25080012"], 0x50}}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x4, 0x4, 0x11, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x20, 0x1, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000600)={'syztnl1\x00', r9, 0x1, 0x20, 0x80000000, 0x0, {{0x14, 0x4, 0x3, 0x0, 0x50, 0x68, 0x0, 0xff, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@noop, @noop, @lsrr={0x83, 0x12, 0x10, [@broadcast, @multicast1, @loopback, @broadcast, @empty, @private=0xa010101]}, @rr={0x7, 0x3, 0x20}, @rr={0x7, 0x7, 0x2d}, @generic={0x94, 0x11, "01f0b08297341283c189b97a428cc5"}, @noop]}}}}}) fsopen(&(0x7f0000000100)='nilfs2\x00', 0x1) r10 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r10, &(0x7f0000000080)="ac", 0xfffd, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0xc5f}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) 601.123285ms ago: executing program 5 (id=6142): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043000000958c2261842118165dc85471cbc7d996f0e90908062f6b74de7efc748f8e76adaac3cfe6fc2a4e3c885897fa181970e1e4732c0ff5f34f19c24117b2604237c19dbf48b720c2bc5cba1ca416279e22cb69330a4c2c00a20f472aa9e02cbfc2c4d5f3530d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) pivot_root(&(0x7f0000000280)='./file0/file0\x00', 0x0) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x8b48a28600b56cfa) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x64000600) socket$unix(0x1, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) 547.712627ms ago: executing program 1 (id=6143): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x543a01, 0x40) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r0}, 0x18) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 515.977009ms ago: executing program 7 (id=6144): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r0, 0x200c17a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r0, r4, 0x0, r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") 458.937371ms ago: executing program 6 (id=6145): socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x58130, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x4}, 0x81203, 0x10000, 0xbdf7, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 365.275725ms ago: executing program 6 (id=6146): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043000000958c2261842118165dc85471cbc7d996f0e90908062f6b74de7efc748f8e76adaac3cfe6fc2a4e3c885897fa181970e1e4732c0ff5f34f19c24117b2604237c19dbf48b720c2bc5cba1ca416279e22cb69330a4c2c00a20f472aa9e02cbfc2c4d5f3530d431666099cf4c2195818ad794e25c92b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) pivot_root(&(0x7f0000000280)='./file0/file0\x00', 0x0) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x8b48a28600b56cfa) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x64000600) socket$unix(0x1, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) 364.882905ms ago: executing program 1 (id=6147): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x9}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 348.840765ms ago: executing program 7 (id=6148): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getitimer(0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/26, 0x180, 0x1a, 0x1, 0x10000}, 0x28) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000004000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") rename(0x0, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) fchown(r2, 0x0, 0xee01) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) socket$kcm(0x21, 0x2, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 256.332909ms ago: executing program 1 (id=6149): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 242.96807ms ago: executing program 8 (id=6150): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x4, 0x2, 0xd}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x40}]}}]}, 0xa8}}, 0x0) 219.424901ms ago: executing program 1 (id=6151): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) creat(&(0x7f0000000080)='./bus\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x7800, 0x20, 0x80000001, 0xdf, {{0x9, 0x4, 0x0, 0x7, 0x24, 0x68, 0x0, 0xbd, 0x29, 0x0, @multicast1, @multicast2, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0xcf, [@loopback, @broadcast]}]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000010) 187.095472ms ago: executing program 8 (id=6152): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x18) sched_getparam(0x0, &(0x7f0000000200)) 159.086453ms ago: executing program 1 (id=6153): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000fa36b3377961daeb147b0000000000000000000900000054545fb8", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5000000, 0xf}, 0x0, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x3000000, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f0000000280)) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000002c0)={{0x1, 0x1, 0x1ff, 0x3, 0xc}, 0x81, 0x9, 'id0\x00', 'timer1\x00', 0x0, 0x7f, 0x1, 0xc, 0x8}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='devlink_trap_report\x00', r6}, 0x18) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) unshare(0x22020600) close(r1) r7 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r7, &(0x7f00000001c0)={0x2c, 0x2, 0x0, 0x29, r7}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), 0xffffffffffffffff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r8, 0x112, 0xb, &(0x7f0000000f80)=0x3, 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x525400, 0x0) 143.714874ms ago: executing program 8 (id=6154): socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x102, &(0x7f0000000300)={0x0, 0x9a22, 0x10, 0x3, 0x200008d}, &(0x7f0000000500)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x3ff}, 0x18) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x14, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x480}, 0x0, 0x18, 0x0, 0x12345}) io_uring_enter(r0, 0x3516, 0x7723, 0x2, 0x0, 0x0) 114.345835ms ago: executing program 8 (id=6155): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r5}, 0x18) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) (fail_nth: 1) 0s ago: executing program 8 (id=6156): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000085"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 3][T19918] bridge_slave_1: left promiscuous mode [ 426.875884][T19918] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.890797][T19918] bridge_slave_0: left allmulticast mode [ 426.896569][T19918] bridge_slave_0: left promiscuous mode [ 426.902327][T19918] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.147804][T19931] siw: device registration error -23 [ 427.185728][T19933] netlink: 'syz.6.5397': attribute type 29 has an invalid length. [ 427.422530][T19944] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5402'. [ 427.450193][T19948] loop8: detected capacity change from 0 to 128 [ 427.556705][T19951] lo speed is unknown, defaulting to 1000 [ 427.680418][T19954] loop5: detected capacity change from 0 to 512 [ 427.698543][T19959] hub 9-0:1.0: USB hub found [ 427.703335][T19959] hub 9-0:1.0: 8 ports detected [ 427.729055][T19961] hub 9-0:1.0: USB hub found [ 427.736570][T19961] hub 9-0:1.0: 8 ports detected [ 427.750442][T19963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5409'. [ 427.775477][T19954] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.790934][T19954] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 427.879283][T13561] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.977994][T19982] netlink: 'syz.6.5414': attribute type 29 has an invalid length. [ 427.999164][T19978] lo speed is unknown, defaulting to 1000 [ 428.125898][T19990] FAULT_INJECTION: forcing a failure. [ 428.125898][T19990] name failslab, interval 1, probability 0, space 0, times 0 [ 428.138716][T19990] CPU: 0 UID: 0 PID: 19990 Comm: syz.1.5417 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 428.138821][T19990] Tainted: [W]=WARN [ 428.138829][T19990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 428.138841][T19990] Call Trace: [ 428.138847][T19990] [ 428.138853][T19990] __dump_stack+0x1d/0x30 [ 428.138979][T19990] dump_stack_lvl+0xe8/0x140 [ 428.139000][T19990] dump_stack+0x15/0x1b [ 428.139047][T19990] should_fail_ex+0x265/0x280 [ 428.139087][T19990] ? __se_sys_memfd_create+0x1cc/0x590 [ 428.139140][T19990] should_failslab+0x8c/0xb0 [ 428.139179][T19990] __kmalloc_cache_noprof+0x4c/0x4a0 [ 428.139210][T19990] __se_sys_memfd_create+0x1cc/0x590 [ 428.139315][T19990] __x64_sys_memfd_create+0x31/0x40 [ 428.139343][T19990] x64_sys_call+0x2ac2/0x3000 [ 428.139407][T19990] do_syscall_64+0xd2/0x200 [ 428.139425][T19990] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 428.139532][T19990] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 428.139689][T19990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.139735][T19990] RIP: 0033:0x7fefc385f749 [ 428.139753][T19990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.139776][T19990] RSP: 002b:00007fefc22c6d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 428.139799][T19990] RAX: ffffffffffffffda RBX: 0000000000001058 RCX: 00007fefc385f749 [ 428.139812][T19990] RDX: 00007fefc22c6dec RSI: 0000000000000000 RDI: 00007fefc38e4960 [ 428.139824][T19990] RBP: 0000200000001080 R08: 00007fefc22c6b07 R09: 0000000000000000 [ 428.139896][T19990] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 428.139912][T19990] R13: 00007fefc22c6dec R14: 00007fefc22c6df0 R15: 00007ffe44993678 [ 428.139938][T19990] [ 428.416828][T19999] loop7: detected capacity change from 0 to 1024 [ 428.424817][T19999] EXT4-fs: Ignoring removed bh option [ 428.460764][T19999] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 428.477154][T19999] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.742524][T18106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.746711][T20006] loop8: detected capacity change from 0 to 8192 [ 428.794135][T20006] loop8: p1 p2 p3 p4 [ 428.802976][T20006] loop8: p1 size 196608 extends beyond EOD, truncated [ 428.818006][T20006] loop8: p2 start 164919041 is beyond EOD, truncated [ 428.824822][T20006] loop8: p3 size 66846464 extends beyond EOD, truncated [ 428.840635][T20008] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5424'. [ 428.976160][T20006] loop8: p4 size 37048832 extends beyond EOD, truncated [ 429.060588][T20013] loop7: detected capacity change from 0 to 8192 [ 429.145189][T20017] lo speed is unknown, defaulting to 1000 [ 429.304621][T20013] loop7: p1 p2 p3 p4 [ 429.320426][T20013] loop7: p1 size 196608 extends beyond EOD, truncated [ 429.408636][T20013] loop7: p2 start 164919041 is beyond EOD, truncated [ 429.415429][T20013] loop7: p3 size 66846464 extends beyond EOD, truncated [ 429.458168][T20013] loop7: p4 size 37048832 extends beyond EOD, truncated [ 429.578336][T20025] loop8: detected capacity change from 0 to 512 [ 429.603588][T20025] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.8.5428: corrupted xattr block 95: invalid header [ 429.633795][T20025] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.5428: bg 0: block 7: invalid block bitmap [ 429.684864][T20029] lo speed is unknown, defaulting to 1000 [ 429.705239][T20025] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 429.736222][T20025] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2967: inode #11: comm syz.8.5428: corrupted xattr block 95: invalid header [ 429.752242][T20025] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 429.761437][T20025] EXT4-fs (loop8): 1 orphan inode deleted [ 429.773352][T20025] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.802390][T15822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.849883][T20041] lo speed is unknown, defaulting to 1000 [ 429.897804][T20047] netlink: 'syz.5.5434': attribute type 29 has an invalid length. [ 429.922373][T20047] loop5: detected capacity change from 0 to 1024 [ 429.936281][T20038] lo speed is unknown, defaulting to 1000 [ 429.942480][T20047] EXT4-fs: Ignoring removed mblk_io_submit option [ 429.949324][T20047] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 429.960704][T20047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.029038][T20051] loop7: detected capacity change from 0 to 512 [ 430.037295][T20051] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 430.047049][T20051] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.5436: bg 0: block 104: invalid block bitmap [ 430.059957][T20051] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 430.069165][T20051] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.5436: invalid indirect mapped block 1 (level 1) [ 430.082589][T20051] EXT4-fs (loop7): 1 truncate cleaned up [ 430.088770][T20051] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.114691][T18106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.152765][T20054] tmpfs: Bad value for 'nr_blocks' [ 430.160373][T20054] __nla_validate_parse: 1 callbacks suppressed [ 430.160389][T20054] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5437'. [ 430.179088][T20054] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5437'. [ 430.194132][T20054] team0: Port device team_slave_1 removed [ 430.298739][T20058] loop7: detected capacity change from 0 to 128 [ 430.308357][T20058] bio_check_eod: 122 callbacks suppressed [ 430.308370][T20058] syz.7.5439: attempt to access beyond end of device [ 430.308370][T20058] loop7: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 430.328085][T20058] syz.7.5439: attempt to access beyond end of device [ 430.328085][T20058] loop7: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 430.341535][T20058] buffer_io_error: 66 callbacks suppressed [ 430.341552][T20058] Buffer I/O error on dev loop7, logical block 80, lost async page write [ 430.356358][T20058] syz.7.5439: attempt to access beyond end of device [ 430.356358][T20058] loop7: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 430.372245][T20058] syz.7.5439: attempt to access beyond end of device [ 430.372245][T20058] loop7: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 430.385704][T20058] Buffer I/O error on dev loop7, logical block 84, lost async page write [ 430.395542][T20058] syz.7.5439: attempt to access beyond end of device [ 430.395542][T20058] loop7: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 430.409485][T20058] syz.7.5439: attempt to access beyond end of device [ 430.409485][T20058] loop7: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 430.423196][T20058] Buffer I/O error on dev loop7, logical block 96, lost async page write [ 430.441825][T20058] syz.7.5439: attempt to access beyond end of device [ 430.441825][T20058] loop7: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 430.455573][T20060] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5439'. [ 430.466058][T20058] syz.7.5439: attempt to access beyond end of device [ 430.466058][T20058] loop7: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 430.479516][T20058] Buffer I/O error on dev loop7, logical block 100, lost async page write [ 430.491051][T20058] syz.7.5439: attempt to access beyond end of device [ 430.491051][T20058] loop7: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 430.505435][T20058] syz.7.5439: attempt to access beyond end of device [ 430.505435][T20058] loop7: rw=2049, sector=224, nr_sectors = 2 limit=128 [ 430.518922][T20058] Buffer I/O error on dev loop7, logical block 112, lost async page write [ 430.528115][T20058] Buffer I/O error on dev loop7, logical block 116, lost async page write [ 430.541895][T20058] Buffer I/O error on dev loop7, logical block 88, lost async page write [ 430.562965][T20058] Buffer I/O error on dev loop7, logical block 92, lost async page write [ 430.605726][T20058] Buffer I/O error on dev loop7, logical block 120, lost async page write [ 430.624302][T20058] Buffer I/O error on dev loop7, logical block 124, lost async page write [ 430.704857][T13561] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.771330][T20078] loop5: detected capacity change from 0 to 512 [ 430.805360][T20078] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.5.5446: corrupted xattr block 95: invalid header [ 430.857136][T20078] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.5446: bg 0: block 7: invalid block bitmap [ 430.887760][T20078] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 430.917127][T20078] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2967: inode #11: comm syz.5.5446: corrupted xattr block 95: invalid header [ 430.944436][T20078] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 430.980426][T20078] EXT4-fs (loop5): 1 orphan inode deleted [ 430.995454][T20078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.017748][T20092] FAULT_INJECTION: forcing a failure. [ 431.017748][T20092] name failslab, interval 1, probability 0, space 0, times 0 [ 431.030661][T20092] CPU: 0 UID: 0 PID: 20092 Comm: syz.7.5453 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 431.030692][T20092] Tainted: [W]=WARN [ 431.030700][T20092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 431.030714][T20092] Call Trace: [ 431.030721][T20092] [ 431.030729][T20092] __dump_stack+0x1d/0x30 [ 431.030755][T20092] dump_stack_lvl+0xe8/0x140 [ 431.030829][T20092] dump_stack+0x15/0x1b [ 431.030863][T20092] should_fail_ex+0x265/0x280 [ 431.030898][T20092] should_failslab+0x8c/0xb0 [ 431.030994][T20092] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 431.031084][T20092] ? __alloc_skb+0x101/0x320 [ 431.031195][T20092] __alloc_skb+0x101/0x320 [ 431.031221][T20092] ? kernel_text_address+0x94/0xb0 [ 431.031284][T20092] alloc_skb_with_frags+0x7d/0x470 [ 431.031319][T20092] ? perf_callchain_user+0xae0/0xb50 [ 431.031362][T20092] sock_alloc_send_pskb+0x430/0x4e0 [ 431.031394][T20092] ? perf_output_begin_forward+0x562/0x5e0 [ 431.031429][T20092] ? __rcu_read_unlock+0x4f/0x70 [ 431.031471][T20092] packet_sendmsg+0x222b/0x31f0 [ 431.031550][T20092] ? __rcu_read_unlock+0x4f/0x70 [ 431.031601][T20092] ? avc_has_perm+0xf7/0x180 [ 431.031622][T20092] ? selinux_socket_sendmsg+0x175/0x1b0 [ 431.031673][T20092] ? __pfx_packet_sendmsg+0x10/0x10 [ 431.031836][T20092] __sock_sendmsg+0x145/0x180 [ 431.031925][T20092] ____sys_sendmsg+0x345/0x4e0 [ 431.031947][T20092] ___sys_sendmsg+0x17b/0x1d0 [ 431.031998][T20092] __sys_sendmmsg+0x178/0x300 [ 431.032044][T20092] __x64_sys_sendmmsg+0x57/0x70 [ 431.032070][T20092] x64_sys_call+0x1c4a/0x3000 [ 431.032172][T20092] do_syscall_64+0xd2/0x200 [ 431.032199][T20092] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 431.032236][T20092] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 431.032350][T20092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.032446][T20092] RIP: 0033:0x7f5f3345f749 [ 431.032462][T20092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.032479][T20092] RSP: 002b:00007f5f31ebf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 431.032497][T20092] RAX: ffffffffffffffda RBX: 00007f5f336b5fa0 RCX: 00007f5f3345f749 [ 431.032509][T20092] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 000000000000000c [ 431.032557][T20092] RBP: 00007f5f31ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 431.032568][T20092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.032579][T20092] R13: 00007f5f336b6038 R14: 00007f5f336b5fa0 R15: 00007ffefb0d8588 [ 431.032599][T20092] [ 431.356416][T13561] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.408832][ T29] kauditd_printk_skb: 729 callbacks suppressed [ 431.408850][ T29] audit: type=1326 audit(1763910817.484:33230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20109 comm="syz.1.5458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc385f749 code=0x7ffc0000 [ 431.439000][ T29] audit: type=1326 audit(1763910817.484:33231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20109 comm="syz.1.5458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc385f749 code=0x7ffc0000 [ 431.462684][ T29] audit: type=1326 audit(1763910817.484:33232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20109 comm="syz.1.5458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fefc385f749 code=0x7ffc0000 [ 431.486410][ T29] audit: type=1326 audit(1763910817.484:33233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20109 comm="syz.1.5458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc385f749 code=0x7ffc0000 [ 431.510249][ T29] audit: type=1326 audit(1763910817.484:33234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20109 comm="syz.1.5458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc385f749 code=0x7ffc0000 [ 431.534245][ T29] audit: type=1326 audit(1763910817.484:33235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20109 comm="syz.1.5458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fefc385f749 code=0x7ffc0000 [ 431.557951][ T29] audit: type=1326 audit(1763910817.484:33236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20109 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc385f749 code=0x7ffc0000 [ 431.580999][ T29] audit: type=1326 audit(1763910817.484:33237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20109 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc385f749 code=0x7ffc0000 [ 431.604660][ T29] audit: type=1326 audit(1763910817.504:33238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20097 comm="syz.6.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295489f749 code=0x7ffc0000 [ 431.628256][ T29] audit: type=1326 audit(1763910817.504:33239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20097 comm="syz.6.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295489f749 code=0x7ffc0000 [ 431.737436][T20121] FAULT_INJECTION: forcing a failure. [ 431.737436][T20121] name failslab, interval 1, probability 0, space 0, times 0 [ 431.750234][T20121] CPU: 0 UID: 0 PID: 20121 Comm: syz.8.5460 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 431.750280][T20121] Tainted: [W]=WARN [ 431.750289][T20121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 431.750303][T20121] Call Trace: [ 431.750310][T20121] [ 431.750316][T20121] __dump_stack+0x1d/0x30 [ 431.750336][T20121] dump_stack_lvl+0xe8/0x140 [ 431.750354][T20121] dump_stack+0x15/0x1b [ 431.750422][T20121] should_fail_ex+0x265/0x280 [ 431.750462][T20121] should_failslab+0x8c/0xb0 [ 431.750549][T20121] kmem_cache_alloc_noprof+0x50/0x480 [ 431.750583][T20121] ? alloc_empty_file+0x76/0x200 [ 431.750696][T20121] ? mntput+0x4b/0x80 [ 431.750718][T20121] alloc_empty_file+0x76/0x200 [ 431.750815][T20121] path_openat+0x68/0x2170 [ 431.750840][T20121] ? _parse_integer_limit+0x170/0x190 [ 431.750873][T20121] ? kstrtoull+0x111/0x140 [ 431.750908][T20121] ? kstrtouint+0x76/0xc0 [ 431.750974][T20121] do_filp_open+0x109/0x230 [ 431.751002][T20121] do_sys_openat2+0xa6/0x110 [ 431.751024][T20121] __x64_sys_openat+0xf2/0x120 [ 431.751042][T20121] x64_sys_call+0x2eab/0x3000 [ 431.751062][T20121] do_syscall_64+0xd2/0x200 [ 431.751143][T20121] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 431.751177][T20121] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 431.751235][T20121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.751300][T20121] RIP: 0033:0x7f180d1df749 [ 431.751314][T20121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.751413][T20121] RSP: 002b:00007f180bc3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 431.751435][T20121] RAX: ffffffffffffffda RBX: 00007f180d435fa0 RCX: 00007f180d1df749 [ 431.751446][T20121] RDX: 0000000000004420 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 431.751457][T20121] RBP: 00007f180bc3f090 R08: 0000000000000000 R09: 0000000000000000 [ 431.751472][T20121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.751492][T20121] R13: 00007f180d436038 R14: 00007f180d435fa0 R15: 00007ffcbec01458 [ 431.751517][T20121] [ 432.340544][T20138] loop7: detected capacity change from 0 to 512 [ 432.352492][T20138] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.7.5466: corrupted xattr block 95: invalid header [ 432.371187][T20138] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.5466: bg 0: block 7: invalid block bitmap [ 432.405704][T20138] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 432.446068][T20142] loop5: detected capacity change from 0 to 8192 [ 432.452679][T20138] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2967: inode #11: comm syz.7.5466: corrupted xattr block 95: invalid header [ 432.483394][T20138] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 432.493816][T20142] loop5: p1 < > p2 p4 < p5 > [ 432.498537][T20142] loop5: partition table partially beyond EOD, truncated [ 432.512737][T20138] EXT4-fs (loop7): 1 orphan inode deleted [ 432.519011][T20138] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.526820][T20142] loop5: p1 start 134217728 is beyond EOD, truncated [ 432.537857][T20142] loop5: p2 size 591360 extends beyond EOD, truncated [ 432.546186][T20142] loop5: p5 size 591360 extends beyond EOD, truncated [ 432.555526][T20150] loop8: detected capacity change from 0 to 128 [ 432.566610][T18106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.659501][T20163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5473'. [ 432.680166][T20162] hub 9-0:1.0: USB hub found [ 432.711921][T20162] hub 9-0:1.0: 8 ports detected [ 432.762173][T20155] lo speed is unknown, defaulting to 1000 [ 433.018599][T20181] lo speed is unknown, defaulting to 1000 [ 433.074948][T20188] openvswitch: netlink: Missing key (keys=40, expected=80) [ 433.154961][T20187] lo speed is unknown, defaulting to 1000 [ 433.241348][T20193] loop5: detected capacity change from 0 to 128 [ 433.343115][T20200] hub 9-0:1.0: USB hub found [ 433.347981][T20200] hub 9-0:1.0: 8 ports detected [ 433.426402][T20207] netlink: 'syz.1.5489': attribute type 10 has an invalid length. [ 433.439544][T20207] netlink: 'syz.1.5489': attribute type 10 has an invalid length. [ 433.459202][T20207] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 433.485689][T20196] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5483'. [ 433.551229][T20216] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5494'. [ 433.839805][T20220] loop7: detected capacity change from 0 to 512 [ 433.875090][T20220] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.889269][T20220] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 434.267166][T20238] loop5: detected capacity change from 0 to 128 [ 434.300251][T20236] loop8: detected capacity change from 0 to 8192 [ 434.344029][T20236] loop8: p1 < > p2 p4 < p5 > [ 434.348762][T20236] loop8: partition table partially beyond EOD, truncated [ 434.354567][T20241] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5502'. [ 434.356078][T20236] loop8: p1 start 134217728 is beyond EOD, truncated [ 434.371644][T20236] loop8: p2 size 591360 extends beyond EOD, truncated [ 434.379609][T20236] loop8: p5 size 591360 extends beyond EOD, truncated [ 434.426577][T20245] loop5: detected capacity change from 0 to 512 [ 434.456145][T20245] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 434.494183][T20245] EXT4-fs (loop5): mount failed [ 434.509714][T20255] loop8: detected capacity change from 0 to 512 [ 434.520737][T20249] lo speed is unknown, defaulting to 1000 [ 434.537007][T20255] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 434.560969][T20255] EXT4-fs (loop8): mount failed [ 434.640332][T20267] xt_CT: You must specify a L4 protocol and not use inversions on it [ 434.695850][T20271] loop8: detected capacity change from 0 to 128 [ 434.718113][T18106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.733184][T20271] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5514'. [ 434.889527][T20292] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5523'. [ 434.905445][T20292] loop8: detected capacity change from 0 to 128 [ 434.921328][T20290] lo speed is unknown, defaulting to 1000 [ 435.018157][T20299] loop5: detected capacity change from 0 to 128 [ 435.382233][T20304] lo speed is unknown, defaulting to 1000 [ 435.412113][T20307] loop5: detected capacity change from 0 to 128 [ 435.491667][T20292] bio_check_eod: 132 callbacks suppressed [ 435.491684][T20292] syz.8.5523: attempt to access beyond end of device [ 435.491684][T20292] loop8: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 435.513486][T20292] syz.8.5523: attempt to access beyond end of device [ 435.513486][T20292] loop8: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 435.527712][T20292] syz.8.5523: attempt to access beyond end of device [ 435.527712][T20292] loop8: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 435.542374][T20292] syz.8.5523: attempt to access beyond end of device [ 435.542374][T20292] loop8: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 435.557010][T20292] syz.8.5523: attempt to access beyond end of device [ 435.557010][T20292] loop8: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 435.570811][T20292] syz.8.5523: attempt to access beyond end of device [ 435.570811][T20292] loop8: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 435.584673][T20292] syz.8.5523: attempt to access beyond end of device [ 435.584673][T20292] loop8: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 435.597562][T20311] bond1: entered promiscuous mode [ 435.598579][T20292] syz.8.5523: attempt to access beyond end of device [ 435.598579][T20292] loop8: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 435.603101][T20311] bond1: entered allmulticast mode [ 435.617980][T20292] syz.8.5523: attempt to access beyond end of device [ 435.617980][T20292] loop8: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 435.635396][T20292] syz.8.5523: attempt to access beyond end of device [ 435.635396][T20292] loop8: rw=2049, sector=337, nr_sectors = 8 limit=128 [ 435.684021][T20311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.694830][T20311] bond1 (unregistering): Released all slaves [ 435.713809][T20318] hub 9-0:1.0: USB hub found [ 435.724072][T20318] hub 9-0:1.0: 8 ports detected [ 435.853472][T20312] buffer_io_error: 76 callbacks suppressed [ 435.853491][T20312] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 435.868212][T20307] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 435.888810][T20326] loop8: detected capacity change from 0 to 512 [ 435.891686][T20307] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 435.916632][T20323] lo speed is unknown, defaulting to 1000 [ 435.925123][T20326] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 435.945487][T20326] EXT4-fs (loop8): mount failed [ 436.007271][T20333] loop7: detected capacity change from 0 to 128 [ 436.022401][T20333] Buffer I/O error on dev loop7, logical block 80, lost async page write [ 436.032029][T20333] Buffer I/O error on dev loop7, logical block 84, lost async page write [ 436.056891][T20333] Buffer I/O error on dev loop7, logical block 96, lost async page write [ 436.065932][T20333] Buffer I/O error on dev loop7, logical block 100, lost async page write [ 436.074331][T20340] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5535'. [ 436.084143][T20333] Buffer I/O error on dev loop7, logical block 112, lost async page write [ 436.094507][T20342] netlink: 'syz.5.5533': attribute type 29 has an invalid length. [ 436.103437][T20333] Buffer I/O error on dev loop7, logical block 116, lost async page write [ 436.119506][T20333] Buffer I/O error on dev loop7, logical block 88, lost async page write [ 436.129148][T20343] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5534'. [ 436.195415][T20348] loop8: detected capacity change from 0 to 128 [ 436.287736][T20352] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5540'. [ 437.484499][ T29] kauditd_printk_skb: 905 callbacks suppressed [ 437.484515][ T29] audit: type=1326 audit(1763910823.564:34140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20369 comm="syz.6.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295489f749 code=0x7ffc0000 [ 437.571787][T20370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5547'. [ 437.584913][ T29] audit: type=1326 audit(1763910823.594:34141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20369 comm="syz.6.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f295489f749 code=0x7ffc0000 [ 437.589426][T20380] loop5: detected capacity change from 0 to 128 [ 437.608525][ T29] audit: type=1326 audit(1763910823.594:34142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20369 comm="syz.6.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295489f749 code=0x7ffc0000 [ 437.608560][ T29] audit: type=1326 audit(1763910823.594:34143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20369 comm="syz.6.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295489f749 code=0x7ffc0000 [ 437.662036][ T29] audit: type=1326 audit(1763910823.594:34144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20369 comm="syz.6.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f295489f749 code=0x7ffc0000 [ 437.685737][ T29] audit: type=1326 audit(1763910823.594:34145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20369 comm="syz.6.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295489f749 code=0x7ffc0000 [ 437.709475][ T29] audit: type=1326 audit(1763910823.594:34146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20369 comm="syz.6.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295489f749 code=0x7ffc0000 [ 437.733093][ T29] audit: type=1326 audit(1763910823.594:34147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20369 comm="syz.6.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f295489f749 code=0x7ffc0000 [ 437.733631][T20368] lo speed is unknown, defaulting to 1000 [ 437.756751][ T29] audit: type=1326 audit(1763910823.594:34148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20369 comm="syz.6.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295489f749 code=0x7ffc0000 [ 437.786112][ T29] audit: type=1326 audit(1763910823.594:34149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20369 comm="syz.6.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295489f749 code=0x7ffc0000 [ 437.861350][T20380] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5549'. [ 438.022331][T20396] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20396 comm=syz.7.5555 [ 438.097318][T20396] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5555'. [ 438.166208][T20402] loop7: detected capacity change from 0 to 512 [ 438.204494][T20402] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 438.633893][T20402] EXT4-fs (loop7): orphan cleanup on readonly fs [ 438.668951][T20402] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.5555: corrupted inode contents [ 438.708689][T20402] EXT4-fs (loop7): Remounting filesystem read-only [ 438.723828][T20402] EXT4-fs (loop7): 1 truncate cleaned up [ 438.729661][T13680] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 438.740211][T13680] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 438.846051][T13680] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 438.879127][T20402] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 438.978539][T18106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.995364][T20414] loop5: detected capacity change from 0 to 128 [ 439.015862][T20416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5561'. [ 439.057440][T20420] loop7: detected capacity change from 0 to 128 [ 439.191933][T20425] lo speed is unknown, defaulting to 1000 [ 439.294724][T20431] siw: device registration error -23 [ 439.457794][T20430] lo speed is unknown, defaulting to 1000 [ 439.594529][T20439] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5568'. [ 439.831027][T20440] lo speed is unknown, defaulting to 1000 [ 440.051956][T20446] netlink: 'syz.8.5569': attribute type 29 has an invalid length. [ 440.074254][T20445] loop7: detected capacity change from 0 to 8192 [ 440.133861][T20445] loop7: p1 < > p2 p4 < p5 > [ 440.138666][T20445] loop7: partition table partially beyond EOD, truncated [ 440.183879][T20445] loop7: p1 start 134217728 is beyond EOD, truncated [ 440.190763][T20445] loop7: p2 size 591360 extends beyond EOD, truncated [ 440.239775][T20445] loop7: p5 size 591360 extends beyond EOD, truncated [ 440.521986][T20448] loop7: detected capacity change from 0 to 128 [ 440.630988][T20448] FAULT_INJECTION: forcing a failure. [ 440.630988][T20448] name failslab, interval 1, probability 0, space 0, times 0 [ 440.643811][T20448] CPU: 1 UID: 0 PID: 20448 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 440.643854][T20448] Tainted: [W]=WARN [ 440.643860][T20448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 440.643871][T20448] Call Trace: [ 440.643877][T20448] [ 440.643884][T20448] __dump_stack+0x1d/0x30 [ 440.643904][T20448] dump_stack_lvl+0xe8/0x140 [ 440.643927][T20448] dump_stack+0x15/0x1b [ 440.643998][T20448] should_fail_ex+0x265/0x280 [ 440.644036][T20448] ? vfat_add_entry+0xca/0x1b90 [ 440.644129][T20448] should_failslab+0x8c/0xb0 [ 440.644155][T20448] __kmalloc_cache_noprof+0x4c/0x4a0 [ 440.644221][T20448] vfat_add_entry+0xca/0x1b90 [ 440.644258][T20448] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 440.644317][T20448] ? __tsan_read8+0xfc/0x190 [ 440.644348][T20448] ? current_time+0x174/0x240 [ 440.644389][T20448] vfat_create+0xa8/0x190 [ 440.644445][T20448] ? __pfx_vfat_create+0x10/0x10 [ 440.644482][T20448] path_openat+0x1105/0x2170 [ 440.644524][T20448] do_filp_open+0x109/0x230 [ 440.644641][T20448] do_sys_openat2+0xa6/0x110 [ 440.644662][T20448] __x64_sys_open+0xe6/0x110 [ 440.644720][T20448] x64_sys_call+0x1457/0x3000 [ 440.644793][T20448] do_syscall_64+0xd2/0x200 [ 440.644819][T20448] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 440.644859][T20448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.644951][T20448] RIP: 0033:0x7f5f3345f749 [ 440.645028][T20448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.645053][T20448] RSP: 002b:00007f5f31ebf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 440.645077][T20448] RAX: ffffffffffffffda RBX: 00007f5f336b5fa0 RCX: 00007f5f3345f749 [ 440.645121][T20448] RDX: 0000000000000170 RSI: 00000000001050c1 RDI: 0000200000000000 [ 440.645139][T20448] RBP: 00007f5f31ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 440.645150][T20448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.645162][T20448] R13: 00007f5f336b6038 R14: 00007f5f336b5fa0 R15: 00007ffefb0d8588 [ 440.645181][T20448] [ 440.678581][T20454] loop5: detected capacity change from 0 to 128 [ 441.054566][T20461] loop5: detected capacity change from 0 to 512 [ 441.087208][T20464] loop7: detected capacity change from 0 to 128 [ 441.094008][T20461] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.5.5577: corrupted xattr block 95: invalid header [ 441.144333][T20461] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.5577: bg 0: block 7: invalid block bitmap [ 441.185420][T20461] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 441.196123][T20474] netlink: 'syz.8.5578': attribute type 29 has an invalid length. [ 441.204425][T20461] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2967: inode #11: comm syz.5.5577: corrupted xattr block 95: invalid header [ 441.242678][T20474] loop8: detected capacity change from 0 to 1024 [ 441.256580][T20461] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 441.275907][T20474] EXT4-fs: Ignoring removed mblk_io_submit option [ 441.285009][T20461] EXT4-fs (loop5): 1 orphan inode deleted [ 441.296835][T20474] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 441.307343][T20461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.338168][T20480] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5583'. [ 441.339131][T20474] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.375580][T20478] lo speed is unknown, defaulting to 1000 [ 441.412171][T20474] EXT4-fs error (device loop8): __ext4_iget:5443: inode #12: block 13: comm syz.8.5578: invalid block [ 441.450310][T13561] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.466682][T20474] EXT4-fs (loop8): Remounting filesystem read-only [ 441.518229][T20487] netlink: 'syz.5.5584': attribute type 2 has an invalid length. [ 441.590605][T20484] lo speed is unknown, defaulting to 1000 [ 441.665950][T20499] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5588'. [ 441.763824][T20503] loop5: detected capacity change from 0 to 128 [ 441.940712][T15822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.950705][T20473] bio_check_eod: 310 callbacks suppressed [ 441.950721][T20473] syz.7.5576: attempt to access beyond end of device [ 441.950721][T20473] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 441.969963][T20473] buffer_io_error: 49 callbacks suppressed [ 441.969979][T20473] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 442.013243][ T5756] kworker/u8:10: attempt to access beyond end of device [ 442.013243][ T5756] loop5: rw=1, sector=145, nr_sectors = 8 limit=128 [ 442.032117][T20506] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5591'. [ 442.036743][ T5756] kworker/u8:10: attempt to access beyond end of device [ 442.036743][ T5756] loop5: rw=1, sector=161, nr_sectors = 8 limit=128 [ 442.057258][ T5756] kworker/u8:10: attempt to access beyond end of device [ 442.057258][ T5756] loop5: rw=1, sector=177, nr_sectors = 8 limit=128 [ 442.058006][T20464] syz.7.5576: attempt to access beyond end of device [ 442.058006][T20464] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 442.072617][ T5756] kworker/u8:10: attempt to access beyond end of device [ 442.072617][ T5756] loop5: rw=1, sector=193, nr_sectors = 8 limit=128 [ 442.084271][T20464] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 442.098071][ T5756] kworker/u8:10: attempt to access beyond end of device [ 442.098071][ T5756] loop5: rw=1, sector=209, nr_sectors = 8 limit=128 [ 442.120259][ T5756] kworker/u8:10: attempt to access beyond end of device [ 442.120259][ T5756] loop5: rw=1, sector=225, nr_sectors = 8 limit=128 [ 442.133913][ T5756] kworker/u8:10: attempt to access beyond end of device [ 442.133913][ T5756] loop5: rw=1, sector=241, nr_sectors = 8 limit=128 [ 442.148019][ T5756] kworker/u8:10: attempt to access beyond end of device [ 442.148019][ T5756] loop5: rw=1, sector=257, nr_sectors = 8 limit=128 [ 442.211733][T20510] loop5: detected capacity change from 0 to 512 [ 442.226088][T20510] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 442.231980][T20514] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5593'. [ 442.241106][T20510] EXT4-fs (loop5): mount failed [ 442.371318][T20525] lo speed is unknown, defaulting to 1000 [ 442.578279][T20531] 9pnet_fd: Insufficient options for proto=fd [ 442.629828][T20533] lo speed is unknown, defaulting to 1000 [ 442.823957][T20537] loop8: detected capacity change from 0 to 512 [ 442.844224][T20537] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.8.5601: corrupted xattr block 95: invalid header [ 442.858918][T20537] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.5601: bg 0: block 7: invalid block bitmap [ 442.871632][T20537] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 442.883027][T20537] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2967: inode #11: comm syz.8.5601: corrupted xattr block 95: invalid header [ 442.897025][T20537] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 442.906231][T20537] EXT4-fs (loop8): 1 orphan inode deleted [ 442.912747][T20537] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.940149][T15822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.991674][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 442.991691][ T29] audit: type=1326 audit(1763910829.064:34540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20539 comm="syz.8.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d1df749 code=0x7ffc0000 [ 443.053670][ T29] audit: type=1326 audit(1763910829.064:34541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20539 comm="syz.8.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f180d1df749 code=0x7ffc0000 [ 443.067001][T20540] loop8: detected capacity change from 0 to 512 [ 443.077311][ T29] audit: type=1326 audit(1763910829.094:34542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20539 comm="syz.8.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d1df749 code=0x7ffc0000 [ 443.077349][ T29] audit: type=1326 audit(1763910829.094:34543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20539 comm="syz.8.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f180d1df749 code=0x7ffc0000 [ 443.077390][ T29] audit: type=1326 audit(1763910829.094:34544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20539 comm="syz.8.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d1df749 code=0x7ffc0000 [ 443.077445][ T29] audit: type=1326 audit(1763910829.104:34545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20539 comm="syz.8.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f180d1df749 code=0x7ffc0000 [ 443.077507][ T29] audit: type=1326 audit(1763910829.104:34546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20539 comm="syz.8.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d1df749 code=0x7ffc0000 [ 443.077548][ T29] audit: type=1326 audit(1763910829.104:34547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20539 comm="syz.8.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f180d1df749 code=0x7ffc0000 [ 443.077586][ T29] audit: type=1326 audit(1763910829.104:34548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20539 comm="syz.8.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f180d1df783 code=0x7ffc0000 [ 443.077683][ T29] audit: type=1326 audit(1763910829.114:34549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20539 comm="syz.8.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f180d1de1ff code=0x7ffc0000 [ 443.333278][T20540] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.367578][T20540] ext4 filesystem being mounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 443.411268][T20544] lo speed is unknown, defaulting to 1000 [ 443.510531][T15822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.558263][T20562] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5608'. [ 443.569816][T20561] FAULT_INJECTION: forcing a failure. [ 443.569816][T20561] name failslab, interval 1, probability 0, space 0, times 0 [ 443.582560][T20561] CPU: 0 UID: 0 PID: 20561 Comm: syz.8.5609 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 443.582588][T20561] Tainted: [W]=WARN [ 443.582594][T20561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 443.582624][T20561] Call Trace: [ 443.582630][T20561] [ 443.582637][T20561] __dump_stack+0x1d/0x30 [ 443.582663][T20561] dump_stack_lvl+0xe8/0x140 [ 443.582687][T20561] dump_stack+0x15/0x1b [ 443.582708][T20561] should_fail_ex+0x265/0x280 [ 443.582760][T20561] ? __se_sys_timerfd_create+0xe2/0x260 [ 443.582782][T20561] should_failslab+0x8c/0xb0 [ 443.582808][T20561] __kmalloc_cache_noprof+0x4c/0x4a0 [ 443.582908][T20561] __se_sys_timerfd_create+0xe2/0x260 [ 443.582934][T20561] __x64_sys_timerfd_create+0x31/0x40 [ 443.583011][T20561] x64_sys_call+0x1039/0x3000 [ 443.583031][T20561] do_syscall_64+0xd2/0x200 [ 443.583050][T20561] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 443.583102][T20561] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 443.583135][T20561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.583154][T20561] RIP: 0033:0x7f180d1df749 [ 443.583169][T20561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.583185][T20561] RSP: 002b:00007f180bc3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 443.583268][T20561] RAX: ffffffffffffffda RBX: 00007f180d435fa0 RCX: 00007f180d1df749 [ 443.583279][T20561] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 443.583313][T20561] RBP: 00007f180bc3f090 R08: 0000000000000000 R09: 0000000000000000 [ 443.583323][T20561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.583337][T20561] R13: 00007f180d436038 R14: 00007f180d435fa0 R15: 00007ffcbec01458 [ 443.583359][T20561] [ 443.831306][T20564] qrtr: Invalid version 5 [ 443.868315][T20567] siw: device registration error -23 [ 443.896535][T20564] vhci_hcd: invalid port number 96 [ 443.901727][T20564] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 443.921426][T20551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5604'. [ 444.197070][T20587] loop5: detected capacity change from 0 to 1024 [ 444.212500][T20584] lo speed is unknown, defaulting to 1000 [ 444.222278][T20587] EXT4-fs: Ignoring removed orlov option [ 444.246866][T20587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.446165][T20599] siw: device registration error -23 [ 444.551013][T13561] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.665283][T20612] FAULT_INJECTION: forcing a failure. [ 444.665283][T20612] name failslab, interval 1, probability 0, space 0, times 0 [ 444.677983][T20612] CPU: 0 UID: 0 PID: 20612 Comm: syz.5.5627 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 444.678052][T20612] Tainted: [W]=WARN [ 444.678061][T20612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 444.678074][T20612] Call Trace: [ 444.678080][T20612] [ 444.678088][T20612] __dump_stack+0x1d/0x30 [ 444.678128][T20612] dump_stack_lvl+0xe8/0x140 [ 444.678188][T20612] dump_stack+0x15/0x1b [ 444.678211][T20612] should_fail_ex+0x265/0x280 [ 444.678322][T20612] should_failslab+0x8c/0xb0 [ 444.678351][T20612] kmem_cache_alloc_noprof+0x50/0x480 [ 444.678516][T20612] ? alloc_empty_file+0x76/0x200 [ 444.678557][T20612] ? mntput+0x4b/0x80 [ 444.678581][T20612] alloc_empty_file+0x76/0x200 [ 444.678639][T20612] path_openat+0x68/0x2170 [ 444.678661][T20612] ? _parse_integer_limit+0x170/0x190 [ 444.678708][T20612] ? kstrtoull+0x111/0x140 [ 444.678748][T20612] ? kstrtouint+0x76/0xc0 [ 444.678822][T20612] do_filp_open+0x109/0x230 [ 444.678864][T20612] do_sys_openat2+0xa6/0x110 [ 444.678899][T20612] __x64_sys_openat+0xf2/0x120 [ 444.678924][T20612] x64_sys_call+0x2eab/0x3000 [ 444.678949][T20612] do_syscall_64+0xd2/0x200 [ 444.679070][T20612] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 444.679166][T20612] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 444.679203][T20612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.679224][T20612] RIP: 0033:0x7fbd5041f749 [ 444.679239][T20612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.679338][T20612] RSP: 002b:00007fbd4ee7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 444.679362][T20612] RAX: ffffffffffffffda RBX: 00007fbd50675fa0 RCX: 00007fbd5041f749 [ 444.679379][T20612] RDX: 0000000000004420 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 444.679394][T20612] RBP: 00007fbd4ee7f090 R08: 0000000000000000 R09: 0000000000000000 [ 444.679408][T20612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.679420][T20612] R13: 00007fbd50676038 R14: 00007fbd50675fa0 R15: 00007fffe12eb068 [ 444.679476][T20612] [ 444.910987][T20614] loop5: detected capacity change from 0 to 128 [ 444.966243][T20616] netlink: 'syz.8.5630': attribute type 2 has an invalid length. [ 445.027087][T20620] loop7: detected capacity change from 0 to 128 [ 445.065258][T20620] Buffer I/O error on dev loop7, logical block 79, lost async page write [ 445.074468][T20620] Buffer I/O error on dev loop7, logical block 80, lost async page write [ 445.091149][T20626] netlink: 'syz.5.5635': attribute type 2 has an invalid length. [ 445.099422][T20620] Buffer I/O error on dev loop7, logical block 83, lost async page write [ 445.108375][T20620] Buffer I/O error on dev loop7, logical block 84, lost async page write [ 445.165925][T20630] siw: device registration error -23 [ 445.223032][T20620] Buffer I/O error on dev loop7, logical block 95, lost async page write [ 445.249186][T20620] Buffer I/O error on dev loop7, logical block 96, lost async page write [ 445.262094][T20620] Buffer I/O error on dev loop7, logical block 99, lost async page write [ 445.270889][T20620] Buffer I/O error on dev loop7, logical block 100, lost async page write [ 445.371790][T20635] 9p: Unknown access argument : -22 [ 445.413411][T20640] lo speed is unknown, defaulting to 1000 [ 445.523920][T20646] loop7: detected capacity change from 0 to 128 [ 445.595217][T20654] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5642'. [ 445.751964][T20650] lo speed is unknown, defaulting to 1000 [ 445.880937][T20666] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5647'. [ 445.911181][T20669] loop7: detected capacity change from 0 to 512 [ 445.960547][T20669] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.005338][T20669] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 446.199455][T20676] lo speed is unknown, defaulting to 1000 [ 446.301206][T20692] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5653'. [ 446.397518][T20698] loop8: detected capacity change from 0 to 128 [ 446.573372][T20705] loop5: detected capacity change from 0 to 128 [ 446.634808][T20709] FAULT_INJECTION: forcing a failure. [ 446.634808][T20709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.647916][T20709] CPU: 1 UID: 0 PID: 20709 Comm: syz.8.5660 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 446.647951][T20709] Tainted: [W]=WARN [ 446.647958][T20709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 446.648002][T20709] Call Trace: [ 446.648087][T20709] [ 446.648094][T20709] __dump_stack+0x1d/0x30 [ 446.648119][T20709] dump_stack_lvl+0xe8/0x140 [ 446.648190][T20709] dump_stack+0x15/0x1b [ 446.648268][T20709] should_fail_ex+0x265/0x280 [ 446.648306][T20709] should_fail+0xb/0x20 [ 446.648327][T20709] should_fail_usercopy+0x1a/0x20 [ 446.648427][T20709] _copy_from_user+0x1c/0xb0 [ 446.648508][T20709] perf_copy_attr+0x145/0x610 [ 446.648540][T20709] __se_sys_perf_event_open+0x67/0x11c0 [ 446.648566][T20709] ? vfs_write+0x7e8/0x960 [ 446.648589][T20709] ? __rcu_read_unlock+0x4f/0x70 [ 446.648645][T20709] __x64_sys_perf_event_open+0x67/0x80 [ 446.648679][T20709] x64_sys_call+0x7bd/0x3000 [ 446.648789][T20709] do_syscall_64+0xd2/0x200 [ 446.648829][T20709] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 446.648866][T20709] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 446.648920][T20709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.648945][T20709] RIP: 0033:0x7f180d1df749 [ 446.648964][T20709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.648987][T20709] RSP: 002b:00007f180bc3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 446.649033][T20709] RAX: ffffffffffffffda RBX: 00007f180d435fa0 RCX: 00007f180d1df749 [ 446.649047][T20709] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 446.649062][T20709] RBP: 00007f180bc3f090 R08: 000000000000000d R09: 0000000000000000 [ 446.649076][T20709] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 446.649091][T20709] R13: 00007f180d436038 R14: 00007f180d435fa0 R15: 00007ffcbec01458 [ 446.649120][T20709] [ 446.965027][T20701] lo speed is unknown, defaulting to 1000 [ 446.978507][T18106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.226421][T20735] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5666'. [ 447.274114][T20712] bio_check_eod: 258 callbacks suppressed [ 447.274158][T20712] syz.5.5659: attempt to access beyond end of device [ 447.274158][T20712] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 447.293355][T20712] buffer_io_error: 20 callbacks suppressed [ 447.293371][T20712] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 447.309766][T20705] syz.5.5659: attempt to access beyond end of device [ 447.309766][T20705] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 447.323297][T20705] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 447.349624][T20732] loop7: detected capacity change from 0 to 8192 [ 447.428160][T20732] loop7: p1 < > p2 p4 < p5 > [ 447.432999][T20732] loop7: partition table partially beyond EOD, truncated [ 447.448330][T20705] syz.5.5659: attempt to access beyond end of device [ 447.448330][T20705] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 447.460426][T20732] loop7: p1 start 134217728 is beyond EOD, truncated [ 447.461789][T20705] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 447.468467][T20732] loop7: p2 size 591360 extends beyond EOD, truncated [ 447.502603][T20732] loop7: p5 size 591360 extends beyond EOD, truncated [ 447.514112][T20729] ip6t_srh: unknown srh invflags 4000 [ 447.603796][T20742] loop7: detected capacity change from 0 to 128 [ 447.714597][T20746] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5672'. [ 447.856665][T20753] loop5: detected capacity change from 0 to 512 [ 447.881113][T20753] EXT4-fs: Ignoring removed oldalloc option [ 447.902446][T20753] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.5671: inode #0: comm syz.5.5671: iget: illegal inode # [ 447.937560][T20753] EXT4-fs (loop5): get orphan inode failed [ 447.950142][T20753] EXT4-fs (loop5): mount failed [ 447.993224][T20747] lo speed is unknown, defaulting to 1000 [ 448.044146][ T29] kauditd_printk_skb: 498 callbacks suppressed [ 448.044164][ T29] audit: type=1326 audit(1763910834.124:35048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20760 comm="syz.1.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc385f749 code=0x7ffc0000 [ 448.161748][ T29] audit: type=1326 audit(1763910834.124:35049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20760 comm="syz.1.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc385f749 code=0x7ffc0000 [ 448.185588][ T29] audit: type=1326 audit(1763910834.164:35050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20760 comm="syz.1.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fefc385f749 code=0x7ffc0000 [ 448.188580][T20759] lo speed is unknown, defaulting to 1000 [ 448.209189][ T29] audit: type=1326 audit(1763910834.164:35051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20760 comm="syz.1.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc385f749 code=0x7ffc0000 [ 448.238523][ T29] audit: type=1326 audit(1763910834.164:35052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20760 comm="syz.1.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc385f749 code=0x7ffc0000 [ 448.262184][ T29] audit: type=1326 audit(1763910834.164:35053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20760 comm="syz.1.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fefc385f749 code=0x7ffc0000 [ 448.285768][ T29] audit: type=1326 audit(1763910834.164:35054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20760 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc385f749 code=0x7ffc0000 [ 448.308782][ T29] audit: type=1326 audit(1763910834.164:35055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20760 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc385f749 code=0x7ffc0000 [ 448.331851][ T29] audit: type=1326 audit(1763910834.164:35056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20760 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefc385f749 code=0x7ffc0000 [ 448.355114][ T29] audit: type=1326 audit(1763910834.164:35057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20760 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc385f749 code=0x7ffc0000 [ 448.491153][T20768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5678'. [ 448.857493][T20779] loop7: detected capacity change from 0 to 512 [ 448.896268][T20779] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 449.003354][T20779] EXT4-fs (loop7): mount failed [ 449.102731][T20786] loop7: detected capacity change from 0 to 128 [ 449.186408][T20788] loop5: detected capacity change from 0 to 512 [ 449.213309][T20788] ext4: Unknown parameter 'uid>00000000000000000000' [ 449.427273][T20788] lo speed is unknown, defaulting to 1000 [ 449.807321][T20805] lo speed is unknown, defaulting to 1000 [ 450.387508][T20814] loop8: detected capacity change from 0 to 128 [ 450.579153][T20821] loop5: detected capacity change from 0 to 512 [ 450.609855][T20821] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.5.5695: corrupted xattr block 95: invalid header [ 450.689006][T20821] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.5695: bg 0: block 7: invalid block bitmap [ 450.773220][T20821] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 450.796948][T20821] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2967: inode #11: comm syz.5.5695: corrupted xattr block 95: invalid header [ 450.825905][T20821] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 450.845782][T20821] EXT4-fs (loop5): 1 orphan inode deleted [ 450.875184][T20821] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.932800][T13561] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.947268][T20824] lo speed is unknown, defaulting to 1000 [ 451.056324][T20817] syz.8.5692: attempt to access beyond end of device [ 451.056324][T20817] loop8: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 451.069977][T20817] Buffer I/O error on dev loop8, logical block 128, lost async page write [ 451.140869][T20814] syz.8.5692: attempt to access beyond end of device [ 451.140869][T20814] loop8: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 451.154393][T20814] Buffer I/O error on dev loop8, logical block 128, lost async page write [ 451.261588][T20842] loop5: detected capacity change from 0 to 8192 [ 451.322895][T20848] loop8: detected capacity change from 0 to 128 [ 451.335283][T20848] FAT-fs (loop8): Directory bread(block 162) failed [ 451.353176][T20842] loop5: p1 < > p2 p4 < p5 > [ 451.358005][T20842] loop5: partition table partially beyond EOD, truncated [ 451.368878][T20855] siw: device registration error -23 [ 451.370903][T20848] FAT-fs (loop8): Directory bread(block 163) failed [ 451.386297][T20842] loop5: p1 start 134217728 is beyond EOD, truncated [ 451.393026][T20842] loop5: p2 size 591360 extends beyond EOD, truncated [ 451.406564][T20848] FAT-fs (loop8): Directory bread(block 164) failed [ 451.418961][T20848] FAT-fs (loop8): Directory bread(block 165) failed [ 451.426579][T20842] loop5: p5 size 591360 extends beyond EOD, truncated [ 451.428070][T20861] netlink: 'syz.1.5707': attribute type 29 has an invalid length. [ 451.443036][T20848] FAT-fs (loop8): Directory bread(block 166) failed [ 451.453945][T20848] FAT-fs (loop8): Directory bread(block 167) failed [ 451.460714][T20848] FAT-fs (loop8): Directory bread(block 168) failed [ 451.513184][T20862] lo speed is unknown, defaulting to 1000 [ 451.513720][T20848] FAT-fs (loop8): Directory bread(block 169) failed [ 451.571761][T20848] FAT-fs (loop8): Directory bread(block 162) failed [ 451.591136][T20848] FAT-fs (loop8): Directory bread(block 163) failed [ 451.617113][T20848] syz.8.5706: attempt to access beyond end of device [ 451.617113][T20848] loop8: rw=3, sector=226, nr_sectors = 6 limit=128 [ 451.649047][T20848] syz.8.5706: attempt to access beyond end of device [ 451.649047][T20848] loop8: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 451.663181][T20860] lo speed is unknown, defaulting to 1000 [ 451.670966][T20870] loop5: detected capacity change from 0 to 128 [ 451.814810][T20879] loop8: detected capacity change from 0 to 128 [ 451.878001][T20883] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5718'. [ 452.183962][T20890] lo speed is unknown, defaulting to 1000 [ 452.473127][T20900] loop7: detected capacity change from 0 to 128 [ 452.503727][T20900] syz.7.5723: attempt to access beyond end of device [ 452.503727][T20900] loop7: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 452.534051][T20900] syz.7.5723: attempt to access beyond end of device [ 452.534051][T20900] loop7: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 452.547589][T20900] Buffer I/O error on dev loop7, logical block 79, lost async page write [ 452.594475][T20900] syz.7.5723: attempt to access beyond end of device [ 452.594475][T20900] loop7: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 452.607943][T20900] Buffer I/O error on dev loop7, logical block 80, lost async page write [ 452.649986][T20900] syz.7.5723: attempt to access beyond end of device [ 452.649986][T20900] loop7: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 452.667677][T20900] syz.7.5723: attempt to access beyond end of device [ 452.667677][T20900] loop7: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 452.681141][T20900] Buffer I/O error on dev loop7, logical block 83, lost async page write [ 452.691841][T20900] syz.7.5723: attempt to access beyond end of device [ 452.691841][T20900] loop7: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 452.705381][T20900] Buffer I/O error on dev loop7, logical block 84, lost async page write [ 452.714778][T20900] syz.7.5723: attempt to access beyond end of device [ 452.714778][T20900] loop7: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 452.728689][T20900] syz.7.5723: attempt to access beyond end of device [ 452.728689][T20900] loop7: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 452.732845][T20908] qrtr: Invalid version 5 [ 452.742207][T20900] Buffer I/O error on dev loop7, logical block 95, lost async page write [ 452.743577][T20900] syz.7.5723: attempt to access beyond end of device [ 452.743577][T20900] loop7: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 452.768653][T20900] Buffer I/O error on dev loop7, logical block 96, lost async page write [ 452.779147][T20900] syz.7.5723: attempt to access beyond end of device [ 452.779147][T20900] loop7: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 452.798619][T20900] Buffer I/O error on dev loop7, logical block 99, lost async page write [ 452.807267][T20900] Buffer I/O error on dev loop7, logical block 100, lost async page write [ 452.817795][T20900] Buffer I/O error on dev loop7, logical block 111, lost async page write [ 452.826652][T20900] Buffer I/O error on dev loop7, logical block 112, lost async page write [ 453.053704][ T29] kauditd_printk_skb: 542 callbacks suppressed [ 453.053718][ T29] audit: type=1326 audit(1763910839.124:35599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20918 comm="syz.7.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3345f749 code=0x7ffc0000 [ 453.054083][T20920] 9pnet_fd: Insufficient options for proto=fd [ 453.059928][ T29] audit: type=1326 audit(1763910839.124:35600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20918 comm="syz.7.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5f3345f749 code=0x7ffc0000 [ 453.113108][ T29] audit: type=1326 audit(1763910839.124:35601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20918 comm="syz.7.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3345f749 code=0x7ffc0000 [ 453.136485][T20923] xt_TPROXY: Can be used only with -p tcp or -p udp [ 453.142319][ T29] audit: type=1326 audit(1763910839.124:35602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20918 comm="syz.7.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5f3345f749 code=0x7ffc0000 [ 453.166871][ T29] audit: type=1326 audit(1763910839.174:35603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20918 comm="syz.7.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3345f749 code=0x7ffc0000 [ 453.190544][ T29] audit: type=1326 audit(1763910839.174:35604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20918 comm="syz.7.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f3345df90 code=0x7ffc0000 [ 453.214217][ T29] audit: type=1326 audit(1763910839.174:35605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20918 comm="syz.7.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3345f749 code=0x7ffc0000 [ 453.237821][ T29] audit: type=1326 audit(1763910839.174:35606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20918 comm="syz.7.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3345f749 code=0x7ffc0000 [ 453.261505][ T29] audit: type=1326 audit(1763910839.174:35607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20918 comm="syz.7.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f3345f749 code=0x7ffc0000 [ 453.274573][T20930] netlink: 'syz.6.5732': attribute type 29 has an invalid length. [ 453.285319][ T29] audit: type=1326 audit(1763910839.174:35608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20918 comm="syz.7.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3345f749 code=0x7ffc0000 [ 453.355953][T20924] lo speed is unknown, defaulting to 1000 [ 453.432803][T20931] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 453.903216][T20949] lo speed is unknown, defaulting to 1000 [ 453.996111][T20950] lo speed is unknown, defaulting to 1000 [ 454.008885][T20953] siw: device registration error -23 [ 454.520171][T20960] lo speed is unknown, defaulting to 1000 [ 455.213932][T20968] lo speed is unknown, defaulting to 1000 [ 455.310463][T20983] lo speed is unknown, defaulting to 1000 [ 455.488682][T20968] chnl_net:caif_netlink_parms(): no params data found [ 455.616858][ T5756] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.718487][T21001] lo speed is unknown, defaulting to 1000 [ 455.772553][ T5756] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.804820][T20968] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.811989][T20968] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.819375][T20968] bridge_slave_0: entered allmulticast mode [ 455.826458][T20968] bridge_slave_0: entered promiscuous mode [ 455.835725][T21008] loop5: detected capacity change from 0 to 128 [ 455.836505][ T5756] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.862856][T21010] loop7: detected capacity change from 0 to 128 [ 455.864090][T20968] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.876288][T20968] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.893621][T20968] bridge_slave_1: entered allmulticast mode [ 455.894592][T21008] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5754'. [ 455.900625][T20968] bridge_slave_1: entered promiscuous mode [ 455.937701][ T5756] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.966293][T20968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.977253][T20968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.006446][T20968] team0: Port device team_slave_0 added [ 456.021744][T20968] team0: Port device team_slave_1 added [ 456.057874][T20968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.064929][T20968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.090917][T20968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.097239][T21013] loop7: detected capacity change from 0 to 512 [ 456.130379][T20968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.137492][T20968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.163460][T20968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.180157][T21013] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.203763][T21013] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 456.238690][T20968] hsr_slave_0: entered promiscuous mode [ 456.250476][T20968] hsr_slave_1: entered promiscuous mode [ 456.256690][T20968] debugfs: 'hsr0' already exists in 'hsr' [ 456.262431][T20968] Cannot create hsr debugfs directory [ 456.287791][ T5756] bridge_slave_1: left allmulticast mode [ 456.293494][ T5756] bridge_slave_1: left promiscuous mode [ 456.299216][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.328100][ T5756] bridge_slave_0: left allmulticast mode [ 456.333955][ T5756] bridge_slave_0: left promiscuous mode [ 456.339745][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.528523][T21026] loop8: detected capacity change from 0 to 128 [ 456.542348][T21026] FAT-fs (loop8): Directory bread(block 162) failed [ 456.549331][T21026] FAT-fs (loop8): Directory bread(block 163) failed [ 456.556367][T21026] FAT-fs (loop8): Directory bread(block 164) failed [ 456.563074][T21029] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5760'. [ 456.573477][T21026] FAT-fs (loop8): Directory bread(block 165) failed [ 456.580431][T21026] FAT-fs (loop8): Directory bread(block 166) failed [ 456.603886][T21026] FAT-fs (loop8): Directory bread(block 167) failed [ 456.620802][T21026] FAT-fs (loop8): Directory bread(block 168) failed [ 456.631873][T21026] FAT-fs (loop8): Directory bread(block 169) failed [ 456.732249][T21026] FAT-fs (loop8): Directory bread(block 162) failed [ 456.739170][T21026] FAT-fs (loop8): Directory bread(block 163) failed [ 456.842542][T21037] xt_TPROXY: Can be used only with -p tcp or -p udp [ 457.027216][ T5756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.049974][ T5756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.083198][ T5756] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 457.098752][ T5756] bond0 (unregistering): Released all slaves [ 457.196322][T18106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.241466][T21016] lo speed is unknown, defaulting to 1000 [ 457.263507][ T3402] syû: Port: 1 Link DOWN [ 457.366523][T21036] lo speed is unknown, defaulting to 1000 [ 457.383783][ T5756] hsr_slave_0: left promiscuous mode [ 457.397762][ T5756] hsr_slave_1: left promiscuous mode [ 457.410585][ T5756] veth1_macvtap: left promiscuous mode [ 457.423331][ T5756] veth0_macvtap: left promiscuous mode [ 457.429694][ T5756] veth1_vlan: left promiscuous mode [ 457.434991][ T5756] veth0_vlan: left promiscuous mode [ 457.520351][T21043] 9pnet_fd: Insufficient options for proto=fd [ 457.556623][T21040] lo speed is unknown, defaulting to 1000 [ 457.573099][T13690] smc: removing ib device syû [ 457.922072][ T5756] IPVS: stop unused estimator thread 0... [ 458.069645][T20968] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 458.079209][T20968] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 458.090175][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 458.090187][ T29] audit: type=1326 audit(1763910844.164:35907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21039 comm="syz.7.5764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3345f749 code=0x7fc00000 [ 458.122140][T20968] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 458.137127][T20968] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 458.238614][T21073] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5773'. [ 458.262346][T20968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.294966][T20968] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.298656][T21077] loop7: detected capacity change from 0 to 128 [ 458.318135][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.325268][ T5756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.344835][T20968] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 458.355342][T20968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 458.369921][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.377015][ T5756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.464827][ T29] audit: type=1326 audit(1763910844.544:35908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="syz.6.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295489f749 code=0x7ffc0000 [ 458.488461][ T29] audit: type=1326 audit(1763910844.544:35909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="syz.6.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295489f749 code=0x7ffc0000 [ 458.514459][T21084] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5777'. [ 458.517712][ T29] audit: type=1326 audit(1763910844.544:35910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="syz.6.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f295489f749 code=0x7ffc0000 [ 458.547005][ T29] audit: type=1326 audit(1763910844.544:35911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="syz.6.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295489f749 code=0x7ffc0000 [ 458.570668][ T29] audit: type=1326 audit(1763910844.544:35912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="syz.6.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f295489f749 code=0x7ffc0000 [ 458.594664][ T29] audit: type=1326 audit(1763910844.544:35913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="syz.6.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295489f749 code=0x7ffc0000 [ 458.618398][ T29] audit: type=1326 audit(1763910844.544:35914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="syz.6.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f295489f749 code=0x7ffc0000 [ 458.641975][ T29] audit: type=1326 audit(1763910844.544:35915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="syz.6.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295489f749 code=0x7ffc0000 [ 458.665692][ T29] audit: type=1326 audit(1763910844.544:35916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="syz.6.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f295489f749 code=0x7ffc0000 [ 458.716836][T20968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.736096][T21090] lo speed is unknown, defaulting to 1000 [ 458.942100][T20968] veth0_vlan: entered promiscuous mode [ 458.972098][T20968] veth1_vlan: entered promiscuous mode [ 459.017346][T20968] veth0_macvtap: entered promiscuous mode [ 459.045514][T20968] veth1_macvtap: entered promiscuous mode [ 459.076731][T20968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.097317][T21119] 9p: Unknown access argument : -22 [ 459.105655][T20968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.152743][T13690] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.180497][T13690] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.210343][T13690] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.233136][T13690] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.271759][T21123] loop8: detected capacity change from 0 to 128 [ 459.329711][T21127] loop7: detected capacity change from 0 to 128 [ 459.401479][T21130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5787'. [ 459.441349][T21130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.448795][T21130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.464718][T21133] loop8: detected capacity change from 0 to 512 [ 459.487421][T21130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.494874][T21130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.503603][T21133] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 459.597667][T21133] EXT4-fs (loop8): mount failed [ 459.799749][T21140] lo speed is unknown, defaulting to 1000 [ 459.878048][T21127] bio_check_eod: 62 callbacks suppressed [ 459.878067][T21127] syz.7.5786: attempt to access beyond end of device [ 459.878067][T21127] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 459.897252][T21127] buffer_io_error: 32 callbacks suppressed [ 459.897272][T21127] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 459.941089][T21131] syz.7.5786: attempt to access beyond end of device [ 459.941089][T21131] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 459.954587][T21131] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 460.240174][T21165] siw: device registration error -23 [ 460.526342][T21177] loop5: detected capacity change from 0 to 128 [ 460.535300][T21178] xt_TPROXY: Can be used only with -p tcp or -p udp [ 461.405479][T21209] 9pnet: Could not find request transport: fd p2 p4 < p5 > [ 461.632295][T21207] loop5: partition table partially beyond EOD, truncated [ 461.667534][T21207] loop5: p1 start 134217728 is beyond EOD, truncated [ 461.674337][T21207] loop5: p2 size 591360 extends beyond EOD, truncated [ 461.681472][T21217] syz.8.5815: attempt to access beyond end of device [ 461.681472][T21217] loop8: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 461.700005][T21223] 9p: Unknown access argument : -22 [ 461.708614][T21217] syz.8.5815: attempt to access beyond end of device [ 461.708614][T21217] loop8: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 461.745156][T21207] loop5: p5 size 591360 extends beyond EOD, truncated [ 461.764380][T21217] syz.8.5815: attempt to access beyond end of device [ 461.764380][T21217] loop8: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 461.818791][T21217] syz.8.5815: attempt to access beyond end of device [ 461.818791][T21217] loop8: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 461.847989][T21217] syz.8.5815: attempt to access beyond end of device [ 461.847989][T21217] loop8: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 461.889740][T21231] loop7: detected capacity change from 0 to 512 [ 461.919398][T21228] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5820'. [ 461.933880][T21228] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 461.945361][T21228] 0ªî{X¹¦: entered allmulticast mode [ 461.964340][T21228] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 461.980974][T21231] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 462.026898][T21231] EXT4-fs (loop7): mount failed [ 462.106727][T21249] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5826'. [ 462.496135][T21270] netlink: 25 bytes leftover after parsing attributes in process `syz.8.5833'. [ 462.505665][T21270] gretap0: entered allmulticast mode [ 462.532566][T21272] ip6gretap0: entered promiscuous mode [ 462.538232][T21272] macsec1: entered promiscuous mode [ 462.550962][T21272] ip6gretap0: left promiscuous mode [ 462.606947][T21274] lo speed is unknown, defaulting to 1000 [ 462.716522][T21283] FAULT_INJECTION: forcing a failure. [ 462.716522][T21283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.729708][T21283] CPU: 1 UID: 0 PID: 21283 Comm: syz.8.5837 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 462.729747][T21283] Tainted: [W]=WARN [ 462.729755][T21283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 462.729772][T21283] Call Trace: [ 462.729785][T21283] [ 462.729794][T21283] __dump_stack+0x1d/0x30 [ 462.729856][T21283] dump_stack_lvl+0xe8/0x140 [ 462.729877][T21283] dump_stack+0x15/0x1b [ 462.729908][T21283] should_fail_ex+0x265/0x280 [ 462.729953][T21283] should_fail+0xb/0x20 [ 462.730043][T21283] should_fail_usercopy+0x1a/0x20 [ 462.730070][T21283] _copy_to_user+0x20/0xa0 [ 462.730107][T21283] simple_read_from_buffer+0xb5/0x130 [ 462.730133][T21283] proc_fail_nth_read+0x10e/0x150 [ 462.730274][T21283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 462.730308][T21283] vfs_read+0x1a8/0x770 [ 462.730338][T21283] ? __rcu_read_unlock+0x4f/0x70 [ 462.730372][T21283] ? __fget_files+0x184/0x1c0 [ 462.730436][T21283] ksys_read+0xda/0x1a0 [ 462.730462][T21283] __x64_sys_read+0x40/0x50 [ 462.730489][T21283] x64_sys_call+0x27c0/0x3000 [ 462.730519][T21283] do_syscall_64+0xd2/0x200 [ 462.730630][T21283] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 462.730726][T21283] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 462.730762][T21283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.730792][T21283] RIP: 0033:0x7f180d1de15c [ 462.730811][T21283] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 462.730834][T21283] RSP: 002b:00007f180bc3f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 462.730858][T21283] RAX: ffffffffffffffda RBX: 00007f180d435fa0 RCX: 00007f180d1de15c [ 462.730874][T21283] RDX: 000000000000000f RSI: 00007f180bc3f0a0 RDI: 0000000000000003 [ 462.730889][T21283] RBP: 00007f180bc3f090 R08: 0000000000000000 R09: 0000000000000000 [ 462.730972][T21283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.730983][T21283] R13: 00007f180d436038 R14: 00007f180d435fa0 R15: 00007ffcbec01458 [ 462.731006][T21283] [ 463.121144][ T29] kauditd_printk_skb: 593 callbacks suppressed [ 463.121212][ T29] audit: type=1326 audit(463.107:36508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21287 comm="syz.8.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d1df749 code=0x7ffc0000 [ 463.150481][ T29] audit: type=1326 audit(463.107:36509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21287 comm="syz.8.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d1df749 code=0x7ffc0000 [ 463.186447][T21289] loop7: detected capacity change from 0 to 512 [ 463.247720][T21289] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.253954][ T29] audit: type=1326 audit(463.107:36510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21287 comm="syz.8.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f180d1df749 code=0x7ffc0000 [ 463.283437][ T29] audit: type=1326 audit(463.107:36511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21287 comm="syz.8.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d1df749 code=0x7ffc0000 [ 463.306614][ T29] audit: type=1326 audit(463.107:36512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21287 comm="syz.8.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d1df749 code=0x7ffc0000 [ 463.329636][ T29] audit: type=1326 audit(463.107:36513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21287 comm="syz.8.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f180d1df749 code=0x7ffc0000 [ 463.352657][ T29] audit: type=1326 audit(463.107:36514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21287 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d1df749 code=0x7ffc0000 [ 463.375182][ T29] audit: type=1326 audit(463.107:36515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21287 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d1df749 code=0x7ffc0000 [ 463.397761][ T29] audit: type=1326 audit(463.107:36516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21287 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f180d1df749 code=0x7ffc0000 [ 463.420165][ T29] audit: type=1326 audit(463.107:36517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21287 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180d1df749 code=0x7ffc0000 [ 463.994237][T18106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.025283][T21318] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5850'. [ 464.416247][T21335] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5855'. [ 464.807567][T21346] loop5: detected capacity change from 0 to 128 [ 464.824987][T21346] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 464.843673][T21346] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 464.852574][T21346] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 464.883703][T21346] bio_check_eod: 109 callbacks suppressed [ 464.883719][T21346] syz.5.5859: attempt to access beyond end of device [ 464.883719][T21346] loop5: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 464.903038][T21346] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 464.934322][T21346] syz.5.5859: attempt to access beyond end of device [ 464.934322][T21346] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 464.967403][T21346] syz.5.5859: attempt to access beyond end of device [ 464.967403][T21346] loop5: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 464.980854][T21346] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 464.989998][T21346] syz.5.5859: attempt to access beyond end of device [ 464.989998][T21346] loop5: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 465.003444][T21346] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 465.013673][T21346] syz.5.5859: attempt to access beyond end of device [ 465.013673][T21346] loop5: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 465.028037][T21346] syz.5.5859: attempt to access beyond end of device [ 465.028037][T21346] loop5: rw=2049, sector=198, nr_sectors = 2 limit=128 [ 465.041464][T21346] Buffer I/O error on dev loop5, logical block 99, lost async page write [ 465.050081][T21346] syz.5.5859: attempt to access beyond end of device [ 465.050081][T21346] loop5: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 465.063753][T21346] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 465.074790][T21346] syz.5.5859: attempt to access beyond end of device [ 465.074790][T21346] loop5: rw=2049, sector=218, nr_sectors = 6 limit=128 [ 465.089466][T21346] syz.5.5859: attempt to access beyond end of device [ 465.089466][T21346] loop5: rw=2049, sector=222, nr_sectors = 2 limit=128 [ 465.102953][T21346] Buffer I/O error on dev loop5, logical block 111, lost async page write [ 465.111872][T21346] syz.5.5859: attempt to access beyond end of device [ 465.111872][T21346] loop5: rw=2049, sector=224, nr_sectors = 2 limit=128 [ 465.125321][T21346] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 465.134690][T21346] Buffer I/O error on dev loop5, logical block 115, lost async page write [ 465.143328][T21346] Buffer I/O error on dev loop5, logical block 116, lost async page write [ 465.154988][T21346] Buffer I/O error on dev loop5, logical block 87, lost async page write [ 465.163538][T21346] Buffer I/O error on dev loop5, logical block 88, lost async page write [ 465.320036][T21358] loop5: detected capacity change from 0 to 128 [ 465.408569][T21362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5866'. [ 465.561654][T21372] loop8: detected capacity change from 0 to 512 [ 465.595480][T21372] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 465.626373][T21378] siw: device registration error -23 [ 465.634052][T21372] EXT4-fs (loop8): mount failed [ 465.647325][T21373] loop5: detected capacity change from 0 to 512 [ 465.760717][T21373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.865014][T21396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5878'. [ 465.884224][T21394] loop8: detected capacity change from 0 to 8192 [ 465.938601][T21394] loop8: p1 < > p2 p4 < p5 > [ 465.943377][T21394] loop8: partition table partially beyond EOD, truncated [ 465.954467][T13561] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.974127][T21394] loop8: p1 start 134217728 is beyond EOD, truncated [ 465.980859][T21394] loop8: p2 size 591360 extends beyond EOD, truncated [ 465.998753][T21394] loop8: p5 size 591360 extends beyond EOD, truncated [ 466.013769][T21400] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5880'. [ 466.289017][T21415] loop5: detected capacity change from 0 to 512 [ 466.349406][T21416] xt_TPROXY: Can be used only with -p tcp or -p udp [ 466.426226][T21415] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 466.451778][T21415] EXT4-fs (loop5): mount failed [ 467.036484][T21423] lo speed is unknown, defaulting to 1000 [ 467.144457][T21420] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5885'. [ 467.189190][T21427] lo speed is unknown, defaulting to 1000 [ 467.378313][T21432] lo speed is unknown, defaulting to 1000 [ 468.181038][T21475] 9pnet_fd: Insufficient options for proto=fd [ 468.276700][T21459] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5899'. [ 468.290440][T21474] lo speed is unknown, defaulting to 1000 [ 468.634147][ T29] kauditd_printk_skb: 479 callbacks suppressed [ 468.634165][ T29] audit: type=1326 audit(468.627:36995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21491 comm="syz.5.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5041f749 code=0x7ffc0000 [ 468.650173][T21494] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5911'. [ 468.684441][T21496] lo speed is unknown, defaulting to 1000 [ 468.719131][ T29] audit: type=1326 audit(468.657:36996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21491 comm="syz.5.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fbd5041f749 code=0x7ffc0000 [ 468.742183][ T29] audit: type=1326 audit(468.657:36997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21491 comm="syz.5.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5041f749 code=0x7ffc0000 [ 468.765180][ T29] audit: type=1326 audit(468.657:36998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21491 comm="syz.5.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5041f749 code=0x7ffc0000 [ 468.792719][ T29] audit: type=1326 audit(468.777:36999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21491 comm="syz.5.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbd5041f749 code=0x7ffc0000 [ 468.815936][ T29] audit: type=1326 audit(468.777:37000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21491 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5041f749 code=0x7ffc0000 [ 468.838403][ T29] audit: type=1326 audit(468.777:37001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21491 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5041f749 code=0x7ffc0000 [ 468.891583][ T29] audit: type=1326 audit(468.777:37002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21491 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd5041f749 code=0x7ffc0000 [ 468.914111][ T29] audit: type=1326 audit(468.777:37003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21491 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5041f749 code=0x7ffc0000 [ 468.936496][ T29] audit: type=1326 audit(468.777:37004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21491 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5041f749 code=0x7ffc0000 [ 469.064449][T21507] siw: device registration error -23 [ 469.485041][T21515] loop8: detected capacity change from 0 to 512 [ 469.552833][T21515] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.8.5919: corrupted xattr block 95: invalid header [ 469.643887][T21515] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.5919: bg 0: block 7: invalid block bitmap [ 469.709819][T21515] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 469.773442][T21515] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2967: inode #11: comm syz.8.5919: corrupted xattr block 95: invalid header [ 469.825065][T21515] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 469.853820][T21515] EXT4-fs (loop8): 1 orphan inode deleted [ 469.859931][T21515] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.948115][T15822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.046520][T21519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5918'. [ 470.167802][T21532] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5923'. [ 470.205208][T21527] loop8: detected capacity change from 0 to 512 [ 470.272787][T21534] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5924'. [ 470.309019][T21538] siw: device registration error -23 [ 470.346495][T21527] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.392049][T21536] loop5: detected capacity change from 0 to 128 [ 470.416043][T21536] FAT-fs (loop5): Directory bread(block 162) failed [ 470.441233][T21536] FAT-fs (loop5): Directory bread(block 163) failed [ 470.460363][T21536] FAT-fs (loop5): Directory bread(block 164) failed [ 470.483731][T21536] FAT-fs (loop5): Directory bread(block 165) failed [ 470.503196][T15822] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.524850][T21536] FAT-fs (loop5): Directory bread(block 166) failed [ 470.531592][T21536] FAT-fs (loop5): Directory bread(block 167) failed [ 470.546559][T21547] netlink: 'syz.1.5930': attribute type 2 has an invalid length. [ 470.575824][T21536] FAT-fs (loop5): Directory bread(block 168) failed [ 470.596254][T21536] FAT-fs (loop5): Directory bread(block 169) failed [ 470.623419][T21536] FAT-fs (loop5): Directory bread(block 162) failed [ 470.643609][T21536] FAT-fs (loop5): Directory bread(block 163) failed [ 470.654920][T21552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5931'. [ 470.684681][T21536] bio_check_eod: 139 callbacks suppressed [ 470.684701][T21536] syz.5.5925: attempt to access beyond end of device [ 470.684701][T21536] loop5: rw=3, sector=226, nr_sectors = 6 limit=128 [ 470.726709][T21554] lo speed is unknown, defaulting to 1000 [ 470.758091][T21536] syz.5.5925: attempt to access beyond end of device [ 470.758091][T21536] loop5: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 470.902752][T21560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5934'. [ 471.105083][T21568] lo speed is unknown, defaulting to 1000 [ 471.179709][T21579] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5936'. [ 471.956239][T21606] loop8: detected capacity change from 0 to 8192 [ 472.015455][T21606] loop8: p1 < > p2 p4 < p5 > [ 472.020220][T21606] loop8: partition table partially beyond EOD, truncated [ 472.028070][T21606] loop8: p1 start 134217728 is beyond EOD, truncated [ 472.034868][T21606] loop8: p2 size 591360 extends beyond EOD, truncated [ 472.044512][T21606] loop8: p5 size 591360 extends beyond EOD, truncated [ 472.085306][T21617] netlink: 'syz.7.5953': attribute type 2 has an invalid length. [ 473.333861][T21626] xt_TPROXY: Can be used only with -p tcp or -p udp [ 473.649735][T21628] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5957'. [ 473.730448][T21631] lo speed is unknown, defaulting to 1000 [ 473.814100][T21643] xt_TPROXY: Can be used only with -p tcp or -p udp [ 474.197960][ T29] kauditd_printk_skb: 415 callbacks suppressed [ 474.197974][ T29] audit: type=1326 audit(474.187:37420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21654 comm="syz.1.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d207f749 code=0x7ffc0000 [ 474.249655][ T29] audit: type=1326 audit(474.217:37421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21654 comm="syz.1.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3d207f749 code=0x7ffc0000 [ 474.272669][ T29] audit: type=1326 audit(474.217:37422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21654 comm="syz.1.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d207f749 code=0x7ffc0000 [ 474.296209][ T29] audit: type=1326 audit(474.217:37423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21654 comm="syz.1.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d207f749 code=0x7ffc0000 [ 474.319326][ T29] audit: type=1326 audit(474.217:37424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21654 comm="syz.1.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3d207f749 code=0x7ffc0000 [ 474.342549][ T29] audit: type=1326 audit(474.217:37425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21654 comm="syz.1.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d207f749 code=0x7ffc0000 [ 474.365553][ T29] audit: type=1326 audit(474.217:37426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21654 comm="syz.1.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d207f749 code=0x7ffc0000 [ 474.388530][ T29] audit: type=1326 audit(474.217:37427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21654 comm="syz.1.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d207f749 code=0x7ffc0000 [ 474.413132][ T29] audit: type=1326 audit(474.217:37428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21654 comm="syz.1.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d207f749 code=0x7ffc0000 [ 474.436141][ T29] audit: type=1326 audit(474.217:37429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21654 comm="syz.1.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3d207f749 code=0x7ffc0000 [ 474.525573][T21668] loop7: detected capacity change from 0 to 128 [ 474.535413][T21668] syz.7.5970: attempt to access beyond end of device [ 474.535413][T21668] loop7: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 474.549521][T21668] syz.7.5970: attempt to access beyond end of device [ 474.549521][T21668] loop7: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 474.563074][T21668] buffer_io_error: 14 callbacks suppressed [ 474.563098][T21668] Buffer I/O error on dev loop7, logical block 79, lost async page write [ 474.583944][T21668] syz.7.5970: attempt to access beyond end of device [ 474.583944][T21668] loop7: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 474.596532][T21671] loop8: detected capacity change from 0 to 128 [ 474.597456][T21668] Buffer I/O error on dev loop7, logical block 80, lost async page write [ 474.612436][T21668] syz.7.5970: attempt to access beyond end of device [ 474.612436][T21668] loop7: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 474.618781][T21671] syz.8.5971: attempt to access beyond end of device [ 474.618781][T21671] loop8: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 474.626594][T21668] syz.7.5970: attempt to access beyond end of device [ 474.626594][T21668] loop7: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 474.640275][T21671] syz.8.5971: attempt to access beyond end of device [ 474.640275][T21671] loop8: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 474.653040][T21668] Buffer I/O error on dev loop7, logical block 83, lost async page write [ 474.653278][T21668] syz.7.5970: attempt to access beyond end of device [ 474.653278][T21668] loop7: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 474.666585][T21671] Buffer I/O error on dev loop8, logical block 79, lost async page write [ 474.675007][T21668] Buffer I/O error on dev loop7, logical block 84, lost async page write [ 474.696968][T21671] Buffer I/O error on dev loop8, logical block 80, lost async page write [ 474.718675][T21671] Buffer I/O error on dev loop8, logical block 83, lost async page write [ 474.727662][T21671] Buffer I/O error on dev loop8, logical block 84, lost async page write [ 474.728077][T21668] Buffer I/O error on dev loop7, logical block 95, lost async page write [ 474.737475][T21671] Buffer I/O error on dev loop8, logical block 95, lost async page write [ 474.944252][T21677] loop8: detected capacity change from 0 to 128 [ 475.030896][T21688] lo speed is unknown, defaulting to 1000 [ 475.065682][T21685] lo speed is unknown, defaulting to 1000 [ 475.497791][T21715] loop7: detected capacity change from 0 to 512 [ 475.526451][T21715] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.590138][T21719] 9pnet_fd: Insufficient options for proto=fd [ 476.219925][T21739] lo speed is unknown, defaulting to 1000 [ 476.371013][T18106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.385038][T21753] lo speed is unknown, defaulting to 1000 [ 476.468156][T21760] lo speed is unknown, defaulting to 1000 [ 476.604527][T21769] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6001'. [ 476.883504][T21775] lo speed is unknown, defaulting to 1000 [ 476.968899][T21777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6004'. [ 477.083980][T21787] lo speed is unknown, defaulting to 1000 [ 477.226100][T21791] lo speed is unknown, defaulting to 1000 [ 477.372407][T21805] netlink: 'syz.5.6015': attribute type 2 has an invalid length. [ 477.574544][T21817] lo speed is unknown, defaulting to 1000 [ 477.819883][T21830] lo speed is unknown, defaulting to 1000 [ 477.858792][T21836] netlink: 'syz.8.6027': attribute type 2 has an invalid length. [ 478.007667][T21851] lo speed is unknown, defaulting to 1000 [ 478.107740][T21861] lo speed is unknown, defaulting to 1000 [ 478.166601][T21863] loop8: detected capacity change from 0 to 512 [ 478.209757][T21863] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 478.263345][T21863] EXT4-fs (loop8): mount failed [ 478.587785][T21873] xt_TPROXY: Can be used only with -p tcp or -p udp [ 479.048090][T21875] loop5: detected capacity change from 0 to 128 [ 479.132150][T21882] lo speed is unknown, defaulting to 1000 [ 479.354824][ T29] kauditd_printk_skb: 546 callbacks suppressed [ 479.354843][ T29] audit: type=1326 audit(479.347:37975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21899 comm="syz.7.6047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3345f749 code=0x7ffc0000 [ 479.397767][T21898] lo speed is unknown, defaulting to 1000 [ 479.424418][ T29] audit: type=1326 audit(479.347:37976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21899 comm="syz.7.6047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3345f749 code=0x7ffc0000 [ 479.447411][ T29] audit: type=1326 audit(479.377:37977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21899 comm="syz.7.6047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f3345f749 code=0x7ffc0000 [ 479.470431][ T29] audit: type=1326 audit(479.377:37978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21899 comm="syz.7.6047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3345f749 code=0x7ffc0000 [ 479.493514][ T29] audit: type=1326 audit(479.377:37979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21899 comm="syz.7.6047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3345f749 code=0x7ffc0000 [ 479.589151][T21904] loop8: detected capacity change from 0 to 128 [ 479.606438][T21908] loop7: detected capacity change from 0 to 128 [ 479.632167][T21904] FAT-fs (loop8): Directory bread(block 162) failed [ 479.653701][ T29] audit: type=1326 audit(479.417:37980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21899 comm="syz.7.6047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f3345f749 code=0x7ffc0000 [ 479.676879][ T29] audit: type=1326 audit(479.417:37981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21899 comm="syz.7.6047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3345f749 code=0x7ffc0000 [ 479.700148][ T29] audit: type=1326 audit(479.417:37982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21899 comm="syz.7.6047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3345f749 code=0x7ffc0000 [ 479.708289][T21904] FAT-fs (loop8): Directory bread(block 163) failed [ 479.723504][ T29] audit: type=1326 audit(479.417:37983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21899 comm="syz.7.6047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f3345f749 code=0x7ffc0000 [ 479.753017][ T29] audit: type=1326 audit(479.417:37984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21899 comm="syz.7.6047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3345f749 code=0x7ffc0000 [ 479.782642][T21904] FAT-fs (loop8): Directory bread(block 164) failed [ 479.789912][T21904] FAT-fs (loop8): Directory bread(block 165) failed [ 479.796996][T21904] FAT-fs (loop8): Directory bread(block 166) failed [ 479.803939][T21904] FAT-fs (loop8): Directory bread(block 167) failed [ 479.842555][T21904] FAT-fs (loop8): Directory bread(block 168) failed [ 479.849606][T21904] FAT-fs (loop8): Directory bread(block 169) failed [ 479.867479][T21904] FAT-fs (loop8): Directory bread(block 162) failed [ 479.889652][T21913] lo speed is unknown, defaulting to 1000 [ 479.919306][T21904] FAT-fs (loop8): Directory bread(block 163) failed [ 479.933431][T21904] bio_check_eod: 78 callbacks suppressed [ 479.933446][T21904] syz.8.6049: attempt to access beyond end of device [ 479.933446][T21904] loop8: rw=3, sector=226, nr_sectors = 6 limit=128 [ 479.964766][T21917] loop5: detected capacity change from 0 to 512 [ 480.001767][T21917] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.5.6053: corrupted xattr block 95: invalid header [ 480.015965][T21904] syz.8.6049: attempt to access beyond end of device [ 480.015965][T21904] loop8: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 480.049979][T21917] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.6053: bg 0: block 7: invalid block bitmap [ 480.065803][T13690] kworker/u8:56: attempt to access beyond end of device [ 480.065803][T13690] loop7: rw=1, sector=145, nr_sectors = 8 limit=128 [ 480.100152][T21917] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 480.110849][T13690] kworker/u8:56: attempt to access beyond end of device [ 480.110849][T13690] loop7: rw=1, sector=161, nr_sectors = 8 limit=128 [ 480.134299][T21917] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2967: inode #11: comm syz.5.6053: corrupted xattr block 95: invalid header [ 480.158886][T13690] kworker/u8:56: attempt to access beyond end of device [ 480.158886][T13690] loop7: rw=1, sector=177, nr_sectors = 8 limit=128 [ 480.183540][T21917] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 480.203039][T13690] kworker/u8:56: attempt to access beyond end of device [ 480.203039][T13690] loop7: rw=1, sector=193, nr_sectors = 8 limit=128 [ 480.216918][T21917] EXT4-fs (loop5): 1 orphan inode deleted [ 480.223468][T21917] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.244400][T13690] kworker/u8:56: attempt to access beyond end of device [ 480.244400][T13690] loop7: rw=1, sector=209, nr_sectors = 8 limit=128 [ 480.282640][T13561] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.297795][T13690] kworker/u8:56: attempt to access beyond end of device [ 480.297795][T13690] loop7: rw=1, sector=225, nr_sectors = 8 limit=128 [ 480.329293][T21923] loop8: detected capacity change from 0 to 128 [ 480.331776][T13690] kworker/u8:56: attempt to access beyond end of device [ 480.331776][T13690] loop7: rw=1, sector=241, nr_sectors = 8 limit=128 [ 480.350797][T21923] FAT-fs (loop8): Directory bread(block 162) failed [ 480.359343][T21923] FAT-fs (loop8): Directory bread(block 163) failed [ 480.363720][T13690] kworker/u8:56: attempt to access beyond end of device [ 480.363720][T13690] loop7: rw=1, sector=257, nr_sectors = 8 limit=128 [ 480.381270][T21923] FAT-fs (loop8): Directory bread(block 164) failed [ 480.396621][T21923] FAT-fs (loop8): Directory bread(block 165) failed [ 480.412697][T21923] FAT-fs (loop8): Directory bread(block 166) failed [ 480.429597][T21923] FAT-fs (loop8): Directory bread(block 167) failed [ 480.445167][T21929] netlink: 'syz.5.6056': attribute type 29 has an invalid length. [ 480.448554][T21923] FAT-fs (loop8): Directory bread(block 168) failed [ 480.481343][T21929] loop5: detected capacity change from 0 to 1024 [ 480.483800][T21923] FAT-fs (loop8): Directory bread(block 169) failed [ 480.508392][T21929] EXT4-fs: Ignoring removed mblk_io_submit option [ 480.518818][T21929] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 480.533411][T21923] FAT-fs (loop8): Directory bread(block 162) failed [ 480.545297][T21929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.553965][T21923] FAT-fs (loop8): Directory bread(block 163) failed [ 480.616225][T21929] EXT4-fs error (device loop5): __ext4_iget:5443: inode #12: block 13: comm syz.5.6056: invalid block [ 480.685439][T21929] EXT4-fs (loop5): Remounting filesystem read-only [ 480.732027][T21944] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6062'. [ 480.764725][T21942] lo speed is unknown, defaulting to 1000 [ 480.857769][T21951] lo speed is unknown, defaulting to 1000 [ 481.063269][T21959] lo speed is unknown, defaulting to 1000 [ 481.139013][T21954] 9pnet_fd: Insufficient options for proto=fd [ 481.176927][T13561] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.209749][T21971] lo speed is unknown, defaulting to 1000 [ 481.243131][T21968] loop7: detected capacity change from 0 to 128 [ 481.304226][T21975] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6071'. [ 481.356466][T21984] loop5: detected capacity change from 0 to 128 [ 481.380461][T21987] loop7: detected capacity change from 0 to 128 [ 481.403446][T21987] buffer_io_error: 48 callbacks suppressed [ 481.403461][T21987] Buffer I/O error on dev loop7, logical block 80, lost async page write [ 481.433357][T21987] Buffer I/O error on dev loop7, logical block 84, lost async page write [ 481.450089][T21987] Buffer I/O error on dev loop7, logical block 96, lost async page write [ 481.466737][T21987] Buffer I/O error on dev loop7, logical block 100, lost async page write [ 481.493580][T21987] Buffer I/O error on dev loop7, logical block 112, lost async page write [ 481.505899][T21987] Buffer I/O error on dev loop7, logical block 116, lost async page write [ 481.515468][T21990] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6075'. [ 481.529409][T21987] Buffer I/O error on dev loop7, logical block 88, lost async page write [ 481.551986][T21987] Buffer I/O error on dev loop7, logical block 92, lost async page write [ 481.562024][T21987] Buffer I/O error on dev loop7, logical block 120, lost async page write [ 481.571633][T21987] Buffer I/O error on dev loop7, logical block 124, lost async page write [ 481.786159][T22006] loop7: detected capacity change from 0 to 128 [ 481.804381][T22006] FAT-fs (loop7): Directory bread(block 162) failed [ 481.811118][T22006] FAT-fs (loop7): Directory bread(block 163) failed [ 481.817984][T22006] FAT-fs (loop7): Directory bread(block 164) failed [ 481.824845][T22006] FAT-fs (loop7): Directory bread(block 165) failed [ 481.831535][T22006] FAT-fs (loop7): Directory bread(block 166) failed [ 481.838261][T22006] FAT-fs (loop7): Directory bread(block 167) failed [ 481.844970][T22006] FAT-fs (loop7): Directory bread(block 168) failed [ 481.851695][T22006] FAT-fs (loop7): Directory bread(block 169) failed [ 481.863108][T22006] FAT-fs (loop7): Directory bread(block 162) failed [ 481.869803][T22006] FAT-fs (loop7): Directory bread(block 163) failed [ 481.907259][T22009] loop7: detected capacity change from 0 to 512 [ 481.926769][T22009] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 481.946305][T22009] EXT4-fs (loop7): mount failed [ 482.058703][T22016] lo speed is unknown, defaulting to 1000 [ 482.141318][T22018] loop7: detected capacity change from 0 to 128 [ 482.188623][T22023] loop8: detected capacity change from 0 to 128 [ 482.360846][T22028] lo speed is unknown, defaulting to 1000 [ 482.502137][T22032] loop5: detected capacity change from 0 to 128 [ 482.581979][T22032] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6089'. [ 482.599106][T22033] 9pnet_fd: Insufficient options for proto=fd [ 482.937580][T22040] lo speed is unknown, defaulting to 1000 [ 482.998049][T22044] loop5: detected capacity change from 0 to 128 [ 483.147804][T22048] siw: device registration error -23 [ 483.259305][T22054] lo speed is unknown, defaulting to 1000 [ 483.290425][T22059] loop8: detected capacity change from 0 to 128 [ 483.301164][T22050] lo speed is unknown, defaulting to 1000 [ 483.322337][T22059] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6101'. [ 483.450245][T22067] loop7: detected capacity change from 0 to 512 [ 483.470372][T22068] lo speed is unknown, defaulting to 1000 [ 483.505520][T22067] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 483.524666][T22067] EXT4-fs (loop7): mount failed [ 483.662743][T22083] loop8: detected capacity change from 0 to 128 [ 483.671247][T22080] loop7: detected capacity change from 0 to 128 [ 483.759684][T22088] siw: device registration error -23 [ 483.844719][T22091] loop7: detected capacity change from 0 to 512 [ 483.878307][T22091] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 483.922158][T22091] EXT4-fs (loop7): mount failed [ 484.034420][T22102] loop7: detected capacity change from 0 to 128 [ 484.281491][T22108] netlink: 'syz.5.6117': attribute type 2 has an invalid length. [ 484.320573][T22109] netlink: 'syz.6.6116': attribute type 29 has an invalid length. [ 484.419789][T22114] lo speed is unknown, defaulting to 1000 [ 484.482634][T22117] loop7: detected capacity change from 0 to 128 [ 484.658090][ T29] kauditd_printk_skb: 779 callbacks suppressed [ 484.658105][ T29] audit: type=1326 audit(484.647:38761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22120 comm="syz.1.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d207f749 code=0x7ffc0000 [ 484.687866][ T29] audit: type=1326 audit(484.647:38762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22120 comm="syz.1.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d207f749 code=0x7ffc0000 [ 484.795383][ T29] audit: type=1326 audit(484.647:38763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22120 comm="syz.1.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3d207f749 code=0x7ffc0000 [ 484.818907][ T29] audit: type=1326 audit(484.647:38764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22120 comm="syz.1.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d207f749 code=0x7ffc0000 [ 484.841910][ T29] audit: type=1326 audit(484.647:38765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22120 comm="syz.1.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3d207f749 code=0x7ffc0000 [ 484.865042][ T29] audit: type=1326 audit(484.647:38766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22120 comm="syz.1.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d207f749 code=0x7ffc0000 [ 484.888410][ T29] audit: type=1326 audit(484.647:38767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22120 comm="syz.1.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3d207f749 code=0x7ffc0000 [ 484.911895][ T29] audit: type=1326 audit(484.647:38768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22120 comm="syz.1.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d207f749 code=0x7ffc0000 [ 484.919573][T22119] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6121'. [ 484.935646][ T29] audit: type=1326 audit(484.647:38769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22120 comm="syz.1.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d207f749 code=0x7ffc0000 [ 484.935680][ T29] audit: type=1326 audit(484.647:38770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22120 comm="syz.1.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc3d207f749 code=0x7ffc0000 [ 485.083378][T22147] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6131'. [ 485.159284][T22150] lo speed is unknown, defaulting to 1000 [ 485.249083][T22153] loop5: detected capacity change from 0 to 128 [ 485.395376][T22163] lo speed is unknown, defaulting to 1000 [ 486.075541][T22175] loop7: detected capacity change from 0 to 128 [ 486.114238][T22153] bio_check_eod: 752 callbacks suppressed [ 486.114257][T22153] syz.5.6132: attempt to access beyond end of device [ 486.114257][T22153] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 486.282345][T22188] lo speed is unknown, defaulting to 1000 [ 486.335023][T22190] loop7: detected capacity change from 0 to 512 [ 486.356108][T22190] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 486.397703][T22190] EXT4-fs (loop7): mount failed [ 486.471186][T22204] lo speed is unknown, defaulting to 1000 [ 486.558991][T22210] netlink: 'syz.8.6150': attribute type 2 has an invalid length. [ 486.603696][T22212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6151'. [ 486.630891][T22202] loop7: detected capacity change from 0 to 512 [ 486.680593][T22224] FAULT_INJECTION: forcing a failure. [ 486.680593][T22224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.693910][T22224] CPU: 0 UID: 0 PID: 22224 Comm: syz.8.6155 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 486.693950][T22224] Tainted: [W]=WARN [ 486.693959][T22224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 486.693981][T22224] Call Trace: [ 486.693988][T22224] [ 486.693997][T22224] __dump_stack+0x1d/0x30 [ 486.694025][T22224] dump_stack_lvl+0xe8/0x140 [ 486.694049][T22224] dump_stack+0x15/0x1b [ 486.694073][T22224] should_fail_ex+0x265/0x280 [ 486.694136][T22224] should_fail+0xb/0x20 [ 486.694156][T22224] should_fail_usercopy+0x1a/0x20 [ 486.694179][T22224] _copy_from_user+0x1c/0xb0 [ 486.694212][T22224] ___sys_sendmsg+0xc1/0x1d0 [ 486.694337][T22224] __x64_sys_sendmsg+0xd4/0x160 [ 486.694366][T22224] x64_sys_call+0x191e/0x3000 [ 486.694394][T22224] do_syscall_64+0xd2/0x200 [ 486.694481][T22224] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 486.694594][T22224] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 486.694733][T22224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.694760][T22224] RIP: 0033:0x7f180d1df749 [ 486.694777][T22224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.694855][T22224] RSP: 002b:00007f180bc3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.694948][T22224] RAX: ffffffffffffffda RBX: 00007f180d435fa0 RCX: 00007f180d1df749 [ 486.694965][T22224] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 486.694981][T22224] RBP: 00007f180bc3f090 R08: 0000000000000000 R09: 0000000000000000 [ 486.695032][T22224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.695048][T22224] R13: 00007f180d436038 R14: 00007f180d435fa0 R15: 00007ffcbec01458 [ 486.695073][T22224] [ 486.695110][T22202] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.695193][T22224] ================================================================== [ 486.695220][T22224] BUG: KCSAN: data-race in data_alloc / data_push_tail [ 486.695248][T22224] [ 486.695254][T22224] write to 0xffffffff88e80658 of 8 bytes by task 22202 on cpu 1: [ 486.695273][T22224] data_alloc+0x1d5/0x2e0 [ 486.695289][T22224] prb_reserve+0x807/0xaf0 [ 486.695308][T22224] vprintk_store+0x56d/0x860 [ 486.695332][T22224] vprintk_emit+0x10d/0x580 [ 486.695357][T22224] vprintk_default+0x26/0x30 [ 486.695377][T22224] vprintk+0x1d/0x30 [ 486.695408][T22224] _printk+0x79/0xa0 [ 486.695442][T22224] __ext4_msg+0x18f/0x1a0 [ 486.695463][T22224] ext4_fill_super+0x2fcb/0x3810 [ 486.695484][T22224] get_tree_bdev_flags+0x291/0x300 [ 486.695514][T22224] get_tree_bdev+0x1f/0x30 [ 486.695542][T22224] ext4_get_tree+0x1c/0x30 [ 486.695564][T22224] vfs_get_tree+0x57/0x1d0 [ 486.695592][T22224] do_new_mount+0x24d/0x660 [ 486.695622][T22224] path_mount+0x4a5/0xb70 [ 486.695646][T22224] __se_sys_mount+0x28c/0x2e0 [ 486.695673][T22224] __x64_sys_mount+0x67/0x80 [ 486.695701][T22224] x64_sys_call+0x2b51/0x3000 [ 486.695727][T22224] do_syscall_64+0xd2/0x200 [ 486.695751][T22224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.695776][T22224] [ 486.695782][T22224] read to 0xffffffff88e80658 of 8 bytes by task 22224 on cpu 0: [ 486.695799][T22224] data_push_tail+0xfd/0x420 [ 486.695817][T22224] data_alloc+0xfb/0x2e0 [ 486.695837][T22224] prb_reserve+0x807/0xaf0 [ 486.695857][T22224] vprintk_store+0x56d/0x860 [ 486.695882][T22224] vprintk_emit+0x10d/0x580 [ 486.695905][T22224] vprintk_default+0x26/0x30 [ 486.695933][T22224] vprintk+0x1d/0x30 [ 486.695970][T22224] _printk+0x79/0xa0 [ 486.696008][T22224] show_trace_log_lvl+0x50e/0x560 [ 486.696041][T22224] __dump_stack+0x1d/0x30 [ 486.696064][T22224] dump_stack_lvl+0xe8/0x140 [ 486.696086][T22224] dump_stack+0x15/0x1b [ 486.696108][T22224] should_fail_ex+0x265/0x280 [ 486.696147][T22224] should_fail+0xb/0x20 [ 486.696167][T22224] should_fail_usercopy+0x1a/0x20 [ 486.696193][T22224] _copy_from_user+0x1c/0xb0 [ 486.696224][T22224] ___sys_sendmsg+0xc1/0x1d0 [ 486.696246][T22224] __x64_sys_sendmsg+0xd4/0x160 [ 486.696267][T22224] x64_sys_call+0x191e/0x3000 [ 486.696295][T22224] do_syscall_64+0xd2/0x200 [ 486.696320][T22224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.696346][T22224] [ 486.696351][T22224] value changed: 0x0000000100000ec4 -> 0x0000000100001a44 [ 486.696365][T22224] [ 486.696369][T22224] Reported by Kernel Concurrency Sanitizer on: [ 486.696385][T22224] CPU: 0 UID: 0 PID: 22224 Comm: syz.8.6155 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 486.696425][T22224] Tainted: [W]=WARN [ 486.696433][T22224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 486.696450][T22224] ================================================================== [ 486.786811][T22227] lo speed is unknown, defaulting to 1000 [ 487.336086][T18106] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.