last executing test programs: 7m51.5345446s ago: executing program 32 (id=2646): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x20) r2 = openat(r1, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)}}], 0x1, 0x700, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000006000000080000000800000040000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000085a353e97fac98d5eaaebe000000b66d36570aa7183885", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c338ec62c457a18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, 0x0, 0x200, 0x0, 0x0, {0x3}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x20}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) time(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="3b00fa0018001874df8700000000910000000000b6070000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000cd080000860000007b8af8ff00000000d8a200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000"], 0x0, 0x0, 0x0, 0x0, 0x908a7c46dd191d55, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000080)=[{&(0x7f0000000500)='|', 0x1}], 0x1, 0x0) 7m47.707663823s ago: executing program 33 (id=2716): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xb, 0x5, 0x4, 0xa932, 0x9, 0xffffffffffffffff, 0x800008}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x3) 7m47.685761853s ago: executing program 34 (id=2717): r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a3000"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 7m47.409126855s ago: executing program 35 (id=2724): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x122, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x10, 0x2, &(0x7f0000003200)=ANY=[@ANYBLOB="8500ddff8a"], &(0x7f0000003240)='GPL\x00'}, 0x94) sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r1, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/199, 0xc7}], 0x92}, 0x2}], 0x1, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20e8086) sendmmsg(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000040)="c36ef0fdbb2048e7b0db22eb7343f07638297c2cee289edf89390fedf67b6125cdcc848ae4f9a477a3f972ffc7e7bf2c77a73e284d08e415959bcd31db065e5597462fdb4f463251773ce56be431b0136d1ce25d2eea7b05fc3cd88321460ee1e60d3bd4846d4dbeb1c5c8cf10fd6fff46a81ef67ff1f650e25ce15abdd06bd70030ece95495c17964c9ad5b70ed084f9d73a3127ea9e96dc506715f6b357d7aeffaacf74a86", 0xa6}, {0x0}], 0x2}}], 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x18, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x400006, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 7m41.955508548s ago: executing program 36 (id=2783): r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES8], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(r0) 7m41.308563041s ago: executing program 37 (id=2793): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}, @jmp={0x5, 0x0, 0x3}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000a00)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000000600)=""/38, 0x26}, {&(0x7f0000000b40)=""/4096, 0x1000}, {0x0}, {&(0x7f00000006c0)=""/227, 0xe3}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/46, 0x2e}], 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x111900, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef3106", 0x74}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387b", 0x3a7}], 0x3}}], 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 7m37.234551976s ago: executing program 38 (id=2845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1804000004200000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7m35.039759559s ago: executing program 39 (id=2864): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000000000001b0000000c00018008000100", @ANYRES32=r5], 0x20}}, 0x0) 7m32.547472245s ago: executing program 40 (id=2890): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) write$cgroup_type(r1, 0x0, 0x0) 7m18.545331468s ago: executing program 0 (id=3075): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000200000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000000ffffb703000000000000040000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r2, &(0x7f00000004c0)=ANY=[], 0x56) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x6, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000e0000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r4}, 0x18) getpgrp(0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x3, 0x5) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) write$binfmt_elf64(r5, 0x0, 0x40) r8 = socket(0x10, 0x803, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r10, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x9}}}, 0x24}}, 0x0) 7m17.921096893s ago: executing program 0 (id=3081): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2900) setreuid(r5, r5) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000c40)={{{@in=@dev={0xac, 0x14, 0x14, 0x1d}, @in=@broadcast, 0x4e24, 0x9, 0x4e24, 0x7b9, 0x2, 0x90, 0xa0, 0x0, 0x0, r5}, {0x8, 0x6, 0x1fa, 0x3, 0x3, 0x0, 0x40, 0xb}, {0x7, 0x8000, 0x6, 0x9}, 0x3, 0x6e6bb0, 0x1, 0x1, 0x1, 0x2}, {{@in=@remote, 0x4d2, 0x33}, 0xa, @in6=@private1, 0x3507, 0x0, 0x2, 0x6, 0x6, 0xd1, 0x10001}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$KDDELIO(r1, 0x4b34, 0x3bf) ioctl$KDDISABIO(r1, 0x4b37) 7m17.814957683s ago: executing program 0 (id=3082): r0 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 7m17.814513513s ago: executing program 0 (id=3083): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) chdir(&(0x7f0000000100)='./file0/file0\x00') move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x3) 7m17.798913843s ago: executing program 0 (id=3084): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) chdir(&(0x7f0000000100)='./file0/file0\x00') move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x3) 7m17.558071935s ago: executing program 0 (id=3086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000380)={'netdevsim0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x148, 0x11, 0x148, 0x0, 0x0, 0x258, 0x2a8, 0x2a8, 0x258, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x8, 0x3, 0xac9b, {0x170f}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r8 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x24, &(0x7f0000000640), 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) 7m17.557728164s ago: executing program 41 (id=3086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000380)={'netdevsim0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x148, 0x11, 0x148, 0x0, 0x0, 0x258, 0x2a8, 0x2a8, 0x258, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x8, 0x3, 0xac9b, {0x170f}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r8 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x24, &(0x7f0000000640), 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) 7m3.207744731s ago: executing program 8 (id=3318): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100e6ff04000000080000000800000000000000", @ANYRES32, @ANYBLOB="9b5800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000006700000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r4, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) getrlimit(0x0, &(0x7f0000000380)) r5 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='cpu>=0||!') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x318, 0x11, 0x148, 0x318, 0x0, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x318, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1000, 'system_u:object_r:apt_var_log_t:s0\x00'}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'vlan0\x00', 'ip_vti0\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x7ff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x98, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_SEQ_ADJ_ORIG={0x4}, @CTA_NAT_DST={0x80, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1a}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}]}]}, 0x98}}, 0x40000) 7m3.094570762s ago: executing program 8 (id=3320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x18) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000021) read(r3, 0x0, 0x20) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) 7m3.019795642s ago: executing program 8 (id=3321): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r2, 0x20, &(0x7f00000002c0)={&(0x7f0000002480)=""/4096, 0x1000, 0x0, &(0x7f0000000540)=""/246, 0xf6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1b, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000acd17c2dc9e60d4cda329bd56003ecd9a5183875938b64744dabbb2d86c670e1ee52c6c4", @ANYRES32=r1, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ptrace$getregset(0x4205, r5, 0x2, &(0x7f0000000080)={0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x2d, 0x20040040) r6 = socket(0x10, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file0'}, 0xb) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10020, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 7m2.937165963s ago: executing program 8 (id=3323): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) chdir(0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x3) 7m2.912122253s ago: executing program 8 (id=3324): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x801000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x18, r4, 0x301, 0x70bd2a, 0x25dfdbfc, {0x24}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000e80)={0x314, r5, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10000016}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "73af96928627c9c00a76022039d59828c9af61d45d89751c7650a5e985015c57691bcb4e"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xce5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd4d6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd52}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x49, 0x3, "2406567f9ac7151c26ddc18a68f0b883790f092a4a81baa8d16b41f389eed3c253f9a137c18c46db311b22bae7cc4c8adee02e16b7d5115ca6d2af9ef2004c3f16241dedca"}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x4}, 0x204c0c8) socket(0x200000000000011, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r6, &(0x7f0000001180)={0x5, 0x6}, &(0x7f000009de80), 0x0) 7m2.535480605s ago: executing program 8 (id=3328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x4, '\x00', r2, r3, 0x3, 0x3, 0x3}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 7m2.507150785s ago: executing program 42 (id=3328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x4, '\x00', r2, r3, 0x3, 0x3, 0x3}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 7m0.814465005s ago: executing program 3 (id=3346): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 7m0.813473225s ago: executing program 3 (id=3347): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0xfff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000000600)=""/38, 0x26}, {&(0x7f0000000b40)=""/4096, 0x1000}, {0x0}, {0x0}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/46, 0x2e}], 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)={0x2, 0x7, 0x0, 0x5, 0x4, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_key={0x2, 0x8, 0x20, 0x0, "090ebfec"}]}, 0x20}}, 0x4040014) 6m58.704147568s ago: executing program 3 (id=3365): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_read_part_table(0x106b, &(0x7f0000002280)="$eJzsz7FJxkAcxuH3ckm8YOcCrmFpEbCxVNzFRgVHcALBxspaN3ALV8gCEQNxBP2K5+nux8vBP/yrqWsnb8nZY31KS3Kf5GZIUscxSfkdfnxe/jyG56UdpdSc91te319u91FN+ovlKsN6V77Wbmtlntr+xXycpHs4rXuo169/eCoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHKzvAAAA//8EGhD+") 6m58.478386309s ago: executing program 3 (id=3370): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) chdir(&(0x7f0000000100)='./file0/file0\x00') move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x3) 6m58.44686663s ago: executing program 3 (id=3372): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x4ab}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 6m58.086440482s ago: executing program 3 (id=3377): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0, 0x1000000}, 0x32) 6m58.062612422s ago: executing program 43 (id=3377): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0, 0x1000000}, 0x32) 6m53.931695586s ago: executing program 1 (id=3428): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r1}) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') fchdir(r2) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000240)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x190da) 6m53.740474578s ago: executing program 1 (id=3432): bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m53.683676888s ago: executing program 1 (id=3434): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) unshare(0x400) socket$inet_sctp(0x2, 0x5, 0x84) socket$can_raw(0x1d, 0x3, 0x1) pipe(0x0) getpgrp(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x2000c800) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66a}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) sendto$inet6(r3, 0x0, 0x0, 0x26004001, &(0x7f0000b63fe4)={0xa, 0xffff, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x3069, 0x0, 0x1, 0xfffffc01}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) 6m53.556243549s ago: executing program 1 (id=3440): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_secret(0x80000) fchownat(r2, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) 6m53.525360299s ago: executing program 1 (id=3442): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0xfe, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x6}, 0x0, 0xffff, 0x1, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x2, 0x0, 0x20002006}, 0x0, 0xc, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0xd4d, &(0x7f0000000240)={0x0, 0xdb60, 0x40, 0x3, 0x12f}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000480), 0x0) 6m53.49008361s ago: executing program 1 (id=3443): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0xe4, 0x80000002, 0x1, 'queue0\x00', 0x8}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000580)={0x0, 0x9e, 0x0, 'queue0\x00', 0x20000}) 6m38.37189035s ago: executing program 44 (id=3443): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0xe4, 0x80000002, 0x1, 'queue0\x00', 0x8}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000580)={0x0, 0x9e, 0x0, 'queue0\x00', 0x20000}) 5.688727315s ago: executing program 5 (id=10878): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "bb28ced7b820ec2d", "ca08bd91171e6405c84cdc6e52f57229", "f5ce6f37", "fe017c9f4e95f742"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) 5.658150595s ago: executing program 5 (id=10879): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, 0x0}, 0x240448c4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='snd_soc_dapm_walk_done\x00', r1, 0x0, 0x355}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$notify(r2, 0x402, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffc000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) chown(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 5.625984095s ago: executing program 5 (id=10882): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) 5.594028766s ago: executing program 5 (id=10883): r0 = perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x8, 0x6, 0xe, 0x7, 0x0, 0xf0dd, 0x10c05, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x6, 0xc257}, 0x10b251, 0xf188, 0x6, 0x0, 0xffffffffffff8089, 0xf5f, 0x557, 0x0, 0x3, 0x0, 0x101}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x2d, 0x4, 0xfd, 0x0, 0x0, 0x4, 0x514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x4000, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, r0, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000001f00)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064", 0x14}, {0x0, 0xfd}], 0x2}}], 0x1, 0x4004040) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000040000", @ANYRES32, @ANYBLOB="e90500000400000000000000d7ffffffffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000500"/28], 0x50) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 5.361550987s ago: executing program 5 (id=10889): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0xe2803, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) pidfd_send_signal(0xffffffffffffffff, 0x2, 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x2, 0xb, &(0x7f0000000600)=ANY=[@ANYRES64=r8], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'sit0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x40, 0x7, 0x77c8c512, 0xd, {{0x8, 0x4, 0x1, 0x7, 0x20, 0x66, 0x0, 0xc, 0x2f, 0x0, @empty, @multicast2, {[@lsrr={0x83, 0x7, 0xcf, [@empty]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xa9, 0x2, 0x9, 0x20, @local, @mcast1, 0x7f90, 0x7, 0xfffffffa, 0x4}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000840)={0xe0, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0xe0}, 0x1, 0x0, 0x0, 0x6104}, 0x8001) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@bsdgroups}]}, 0x0, 0x484, &(0x7f0000001040)="$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") 5.187894128s ago: executing program 5 (id=10892): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0x10000001}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="6000000002060300000000000000000000000000050001000700000014000300686173683a69702c706f72742c697000140007800800124008070000080008400000001405000500020000000500040000000000090002"], 0x60}}, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 5.187665518s ago: executing program 45 (id=10892): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0x10000001}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="6000000002060300000000000000000000000000050001000700000014000300686173683a69702c706f72742c697000140007800800124008070000080008400000001405000500020000000500040000000000090002"], 0x60}}, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 4.477133732s ago: executing program 6 (id=10906): getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000004) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000100)={0x3bc41e4f, r0, 0x38, {0x6, 0x4}, 0x5f}, 0x1) prctl$PR_SET_MM(0x23, 0xa, &(0x7f000073f000/0x1000)=nil) 3.571865018s ago: executing program 6 (id=10911): semget$private(0x0, 0x4000, 0x400) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r0, 0x20, &(0x7f0000000540)={&(0x7f0000000440)=""/145, 0x91, 0x0, &(0x7f0000000500)=""/9, 0x9}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000004d, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = creat(&(0x7f00000002c0)='./file1\x00', 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r8, &(0x7f0000000300)="ca0e808bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRESOCT, @ANYBLOB='_'], 0x48) clock_settime(0x2, &(0x7f00000001c0)={0x0, 0x989680}) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000200)=""/238) 2.432583645s ago: executing program 6 (id=10921): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f00000006c0)=""/227, 0xe3}, {0x0}, {0x0}, {0x0}], 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000400)=""/181, &(0x7f0000000580)=0xb5) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbff}, 0x10}}, 0x4040014) pwritev2(r0, 0x0, 0x0, 0xe7b, 0x0, 0x8) 1.785444719s ago: executing program 4 (id=10934): bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000900000044"], 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001a00010025bd7000000000000a000000", @ANYRES32=0x0, @ANYBLOB="20008402140003000700000000000000000000000000000014000100ff"], 0x44}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002c0007010000000000000000027c00000c0001800600060080d80000fe3c64792eec49fe4bdfe8387dd01a36c59c1223c97f98c5407dd62d88f432a99d0d4c21dd0d714f51c9da5d279b57a6300fbcba16e61ccfb616ce08cfa714735e56f69671b722b35708e58dadb36ef20a7d"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYBLOB="c1abcb3ad07f0e842b75d253f228763c0a482dffd6144d4bf8e3d8ad4a8d1c9d1371589f6eb83adffd035241a4359b94e57bd57ff07b3779ed5456829c81df1844cdb1e96f045b9a04f36297a5c453c2e6f925873b37cbb7abf4f74b3395118249c9d0da8182d835e402971ea1610f6a7cc6988cce3b0cc9d3d38c9a65e49466d8b691835db8a18959559602757e00781e316837ad5247df5dcad589e72eaf4e93624ddae6fd", @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x13) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000008000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x80000, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000680)="c30961d49c14dc43dc219980a2b452c9036e18b51c3a47551ee45f39be72251f55ef54e0a4be23f8c97b004b9a309b29146f41160bb3af64760c94bb956c45f8bd26e45712fe0fd556478210106ba135745b18edb5b7e3435de9868fd9149275b2ea4593e631c9db209910a563f4b4d3d9b8f3115426b3b8f47b4c495d6857d549b58cf603db41729bce35aa8efbdc766743fbf7a7fe7c93043133b421dca26d94ea972d5f34b513b29e8676cc0c4059274d1fb0d498dea8706926af136db8f017410749c436", 0xc6}, {&(0x7f0000000900)="e10ec9510dc291e92b51365b6f0becc9db7239ee95e02145f30e51ce38272718f5e25bab18406a5f64ed075ac7969e729c5bae6bc73beb49a513ca9f569190746e8ba54224babcad2f98f76775152939e762dbd5bec8aa97169bc868948409df321dfc0b3a9ecf1708b5f54b9e3baef42b3a5cbc16a74191c67236ba5120bab2f8e863b35c3a333a62abc854b5dc3d09b66d98944dc5741b68953612fb41665780cceed60dc976874fa6046e48514c09218a1a10d826de69f4316e3b63b9c89a74b3b1739e4b0688ca2e04f9620fcb9b13", 0xd1}], 0x2, &(0x7f0000000a00)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0xb3, 0x0, 0x6, [0x10000]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x68}, 0x850) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3}) syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d2d, 0x13500}, &(0x7f0000000240), &(0x7f0000000480)) 1.295809132s ago: executing program 4 (id=10942): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_cpu_set_ldt\x00', r2, 0x0, 0x1fe}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x3a000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000800)={&(0x7f0000004000)={[{&(0x7f0000001080)="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", 0x1000, 0x2}, {&(0x7f0000000640)="2d11749a0ce9fad36bd9199aef817bd5a77a1c3ce8bc138cdd05a3acc50f1fd3783b8356ff51b6f8cb4d9c5438cfb81743a1e4ca798d4c021f533f8835d2eb643803c667dbc2c64f44d9dfd738c6656164f1d885715779b86d14b3e1ec902ca9186c0abcaa311c70abb686dbd7e4ffdd289457a28b6efc306edfa11f6d45cc1b82526e6a149d03c2404f19dd9060524d4931293b42c59206d78f8a317ff5e9c1b88228a86c8c96fd3fc9366a4e2112a2e9bb98eb0d8b33e2c676554c18818f2d36abd5b87d4efdcd6c218deabc67f3652c39587f4c2a86016833f92828fbe3da5413fde7fc8941", 0xe7}, {&(0x7f0000000500)="0d0a7b59e28a727828f8b65a244eeba6a407bb54e5e81b4a128c25498dc9dcf9ad4a90f64bcf25", 0x27, 0x1}, {&(0x7f0000002080)="0607428b53c2971db1af9a8cd42909509b7e1b26954fda1af2c4bd4e5172ee22676b691fa1aeddb72d58b296761651ce4997e256ccd0f8232e73ecf91e4467d1537f647fca272b78644ee82def20e90ac16bc115864722942c9645a67b21180040554d89bbc0cdb5b45d8d9adc2a6b2bb22fd5b19115db82bfe3f3a80790464da516bb7767cade504aa4396d72a1324094cc2cbcded59b8b0f5fa0302d82764c8ef403e5a4c4cd971ce7f91052200e7bc12bcf0cc2e4f75151252909e222f94371180b1c8ab9ba2723a86b6f2a1eb87dc8c795878ff89036a95602ea2d63f2412c700329352a112699c2f5cdd6f698213d0b869a9808c0eef40228a5b781d021107632d0a399134d4e555d3daf56da0b31130eafa122cf7c7e58d385c8b2eb078a44190660ae16081e507d6330840ca9fefb5ca5d69258695e6889ccb89cfd7fdfbe32ee40c7a364fd480ddc7a99190e4c70bc4d3cdeb3097d08faad3c0ff3614544c1c0673c3fede1c9eb7e7633395ba22420c71708c3ec08f3e6c26dc78fa32f7996b1745864205c9fba2c6f6cf1aa3f7e9c2dcee1834b65fd8525fd9e4b4bad9f89d7eefa454641953a78142d609ee0e5978e54a1f43c77be0766551e3c90cd3095e3aac6a638a16a03b96a346f42749b544ee21cbf91b7aedaeb6514df7000f070021326f5cfffe0c1500c4006dcfcc45b11b4690dd89cee0f0e4f6523cfcd13c303e996d52c0f81ece50dabe7fd5a69f67efb299b7c81477d863892302e1f2efb0a38e294a2eb99a88c3bcfdaf911059dfc91d2273e00d5aba2b11b2ab1b1b94f428ef2dd6bf584b117959596abca70b57ebe655d5b406dc1770d7fb21f168efb1010d4fb65b81795cfd6465f8fe0616a570f415632b29f183cf06556a0c70b44c176f4c0f045bb8a5cd8bf95d83b11cf63816d7c93934898d970d63e452aa4fd6754f959e7994d2b7546e6a80cb66eb4101f108f72dd873cb5992c2da0f42e6f524f2256a8990458e490c049eebfa3e227f88648651c94130a49b08215593012bc18c16d0a36f11b4c8d9855743d2cad4ed7afb1042ea010eed3828c94d1ffa900d5820029c095ff612e5de1e4fa9c2086e7e1e82752388bce0706ee581566868038b551be24ecb7a8a4f010f9f6b5b68b03c8193ef8ed83d6f02e11066a152ed327a3f8c000f6a281984a3d68bc3754e84a4ee0d16d1d2a699865b6a722fc405817d1b3abb09dab71cee78be333253d9c33df5079be8b9c5d82c24dead3fa68cb06254a75822f0248c0fd0e559c23b11a54cf5d1f58ce8742f9d63e74976d000f2a25d279dca125137389e58ab5e7f139450802d6f094fa67843a48ee51782f1b4c5ffd713bc805b3e9d288cfc514f5865a120e5f9c7fc6c5ab1f6479675654567f5da6a404d6c083773b5bc193f65de09d9b0cd208bc1619ebd9e30313c7049b491df6f39a6918241b34206d7a688efea1cabe77e8c8fc54806aeeaf158f7fca4c8d19899255f2f503774862f36ab4689df747096cfed81cbc836110e966b7cab1f898181eb93e9016f60a0ecac526e33c347b95af1004f2e7bb190a7b803a3d7f207bf0535a03371480621111187b3b82b24d35f32e24e404ff16ab122e2f767fc7813c126618d72d5cbc5eef71f6fa9d2d644a4a2ed1b464ebafbf0eeb663f0d323a53a30ae61cd8908109e54cecbe75878112e79e19329225a9fb18b0f8020e416ebbed8564d1ade4ca2850bcd03e5da391af105404f61840734fda09d56b7b1a02541a27dc9f8441f89f8a37b9d6c3fbf13aed9db03059b5808565915db2d9f783a61f33325dff94e59a71c8d723acd88fd37bd61fb15148d4149beabadd20f772587c40ac8d15c959ae52f7b6785094f3351da55f3ba5858ca2920526cc2a0a027dfa884b66b411f89f3d96b58f7963fdc7b92ea81112a28bdb0d74c5fc653d5e3b2baf713350c8a014a69b06211e6747cd28de290a3d03d878779798b3f0d4717222abd6c8d514f80d60c9b9323e98057929963d08053e6327741e441d9d96ee6441edaf6afea1536bf663d4b18eed03a871ce737e828f38a30525a40390293331af930fe71a1e09dd20564c2be15eba2c468ae3e694fbce9d22b987d663a71814df139dc5f326960f738b242a3ad9395b23a26ad675c3b68f0d8a46e4fc9575cddb12b023ba3e3f366d57cba2badcce733a1a9ab69847823713a0e42483a949cb9b80890984d9189a28917115ef2f570fd8420657ad7a43c105a74e36d5f739f80cdd29d77700462098f0e6c46836dc0a3a11a1363f97140b664232feac6f579730d152c445320f06439c7266c624b546042703f19e3f77b5a4256552af38f0d9221bd32c828665cce22c0035ab37ddde70fac7924c3725e17417936b2bd7b12433682653ff104c2eec9a018152192b9d7546df972518abceec30a053d109dd5703740588ffe4a049bb816026b5de5e275fd37713e630c91c0b50ccccf3629acd935f6210435159bd0f18b32403c7f26342b1c701b1a2e6a4fbd9cb315c752ddd6509be4266f6cc9bdbf949bb6b7da85d6bf4454348643958e66559d9e42897bcf89feb489b6270d3f3e3df41c714595a1fa076a249f828f2a4fefcec30f2837236b4e18b99a51acdf8bf7d1232c7312795bc0d828cf786acb1f5a2bfbbebddfc3d6c6fa1ca253286d43e66ded73c42d26e4f83a40c1a47abf1fe79935e397c3187b0b419bbf8edcaad5b9eb6e7a26d0e7f825779b10e28f8d209f92a3fadb5d866bb607ba444d6627829a70cce289e6a52dc7939f58beb5aa2b19767beb055564ce779305fc62c526af252bfba19d706352c7f438bd85d18e0543551fb265080d2369c4d27de3e29e5c4830b64f9dcc464d067674fa678cddc543651baf12c3350f11bc6a3050edc08cf8a591f5f1e9eabd98840d19e99d2c080fdd9e59eae57f17bdb5f6252415aae33903b379e55de46db8580436900928c7aba43e9e028396dbc666ac9df079c7ec82837c66a4da714a08a564f4f3527583fa379a8a7940d3a46dfc8c0cc2df3047c985d9c895f1716d82307e84d5c4527b862e9882007de53f758077d25b46f3c621469c2b54954748e086293feb9f271fb9174ad219a79eba85ace79f82fc0e8b8cd61601cb8efe907f19f13b9503da4aa28547c26bfce3ba5a0bf6b05922ff615185e8b73f7597d50d9186fd77cd178d04502f7abf3f921095801c9f1a44045e089e189d805c17a99c9e8844dc0b2417830aee2151d102c8b2367789cd56468ddd5886be58fa279308841df4ed4fa0da8235c62fdb72112b161872572e7555321a7b2b743c50e2b688ec2902b6e4caa7bff839dd16ce83da8ecc9d19d270fab409fbd0bdb436bea35be180caf84037549fa84adf347b2b0d3e3f14d1bea1121a1fb0ef6500500017f89282cfa2514585e557c86344558b70220be695920502906f929fee27b277fc99aa200a618586e394e445b46277f085619a108adccb2b1ef0dc33bdf493036f92be7c6ffa5e0b58b78884d3d18f55c59a8bcc54640247b0a880090bff92d1ebf49add9b3b0832e70a8769707a57e09326a94105da1292c16872ca564ba737c79820a10f1ea77493e0ac98f3fb06b7ddb156d2d5aaf38dce985fed780806feca6c419f264f7771600459339c03cdc89f361e8070ca13eed6067de753a04ed4d92f4ed5f838bc8a98973a2d908c39744c8b6b6a0ce5553112e87647d7a96d1b9a5103c704a6b0363e1925aaf380f945c06fc611d1b8c8cd300a31ae4cb91f38c3914b48fe6eeab921e7ae0ada5a8f67bdddfeb7a6d54d448e9998d1bdb128b343c82642869ebadcae349e309261be9e4e533638208429621967015afa8ed3c2093ad68f03dd524f15569b56bd0ec837615c2ebb3f3f2aa5c4ee81411ad552ecd7f609109218b67dcddf41021989d4c2576c7c6d28e22ede543d96b2be05c190d1295fe93c94f1325bd8a344d3fdea61bd647fc033fb1d22f16a06be5472e9a736e7b29277d9854e2043d0225974fbc148d65301f8494ee8d2e5ed007301aba2d620bd0c083dd190f32625f8a693326f6a693bdde04c3d0a8326afc7bdec93e310db13a03608097cc41dd697a9a8bc25cdd0c88d845afd4e1386afd3f3fda89c5e547dbb0f1169a35f65c06179beda4a5edc03926773c41cc3ad1322373b4d45f09a06f17e8baff4f476d365f88c4503420055402507897ee6aa155be4d92061fa3fd4012060bb8e01c1a1e08f75b9e0f0484fa84db4ff7c5ec635f0571d0ee03ff3deee5d8084b08b2ca6e4857050c30ee3ec9ea2a71b56ed607f2f29cbf1d16bf19c76deae791", 0xc00, 0x3}]}, 0x4}, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r6) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000ffdbdf250c0000000c000600010000000100000008000300", @ANYRES32=r8, @ANYBLOB="f8aec6c2596502fc33ae42879e249f1ba76ea5836685f0b6980802724e1cfbf470a9b9a86c84ca097d09de95fa28e1a7e350d01217fa13ad6f379e"], 0x28}, 0x1, 0x0, 0x0, 0x8841}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0xaea2}}, './file0\x00'}) epoll_wait(r0, &(0x7f00000004c0)=[{}, {}], 0x2, 0x64b5) accept4$tipc(r9, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r4, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 1.292320232s ago: executing program 4 (id=10943): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, 0x0}, 0x240448c4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='snd_soc_dapm_walk_done\x00', r1, 0x0, 0x355}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$notify(r2, 0x402, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffc000/0x1000)=nil) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1.253467692s ago: executing program 4 (id=10945): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x20) r2 = openat(r1, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)}}], 0x1, 0x700, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 1.212132103s ago: executing program 2 (id=10946): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "bb28ced7b820ec2d", "ca08bd91171e6405c84cdc6e52f57229", "f5ce6f37", "fe017c9f4e95f742"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) 1.164198613s ago: executing program 2 (id=10947): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 855.279405ms ago: executing program 2 (id=10953): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 840.506705ms ago: executing program 9 (id=10954): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x1b, 0x7, 0x15e, &(0x7f0000000000)="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"}) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_cpu_set_ldt\x00', r2, 0x0, 0x1fe}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x3a000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000800)={&(0x7f0000004000)={[{&(0x7f0000001080)="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", 0x1000, 0x2}, {&(0x7f0000000640)="2d11749a0ce9fad36bd9199aef817bd5a77a1c3ce8bc138cdd05a3acc50f1fd3783b8356ff51b6f8cb4d9c5438cfb81743a1e4ca798d4c021f533f8835d2eb643803c667dbc2c64f44d9dfd738c6656164f1d885715779b86d14b3e1ec902ca9186c0abcaa311c70abb686dbd7e4ffdd289457a28b6efc306edfa11f6d45cc1b82526e6a149d03c2404f19dd9060524d4931293b42c59206d78f8a317ff5e9c1b88228a86c8c96fd3fc9366a4e2112a2e9bb98eb0d8b33e2c676554c18818f2d36abd5b87d4efdcd6c218deabc67f3652c39587f4c2a86016833f92828fbe3da5413fde7fc8941", 0xe7}, {&(0x7f0000000500)="0d0a7b59e28a727828f8b65a244eeba6a407bb54e5e81b4a128c25498dc9dcf9ad4a90f64bcf25", 0x27, 0x1}, {&(0x7f0000002080)="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", 0xc00, 0x3}]}, 0x4}, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r6) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000ffdbdf250c0000000c000600010000000100000008000300", @ANYRES32=r8, @ANYBLOB="f8aec6c2596502fc33ae42879e249f1ba76ea5836685f0b6980802724e1cfbf470a9b9a86c84ca097d09de95fa28e1a7e350d01217fa13ad6f379e"], 0x28}, 0x1, 0x0, 0x0, 0x8841}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0xaea2}}, './file0\x00'}) epoll_wait(r0, &(0x7f00000004c0)=[{}, {}], 0x2, 0x64b5) accept4$tipc(r9, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r4, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 823.254225ms ago: executing program 2 (id=10955): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 793.606825ms ago: executing program 2 (id=10956): msgget$private(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x18, 0xd, &(0x7f0000001600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c000000"], 0x50) syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, 0x0, 0x24008840) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000001c80), 0x0, &(0x7f00000015c0)=[{&(0x7f0000001cc0)=""/112, 0x70}, {&(0x7f0000001480)=""/227, 0xe3}], 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000c573af7a4b5839829b789c000000000000", @ANYRESOCT=r8], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r9}, 0x18) r10 = socket$nl_rdma(0x10, 0x3, 0x14) r11 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r11, 0x65, 0x6, &(0x7f00000001c0), 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0xff07, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000001580), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@loopback, @empty}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) 793.294595ms ago: executing program 9 (id=10957): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 754.280815ms ago: executing program 9 (id=10958): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xe) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4001}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 738.911635ms ago: executing program 2 (id=10959): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x1b, 0x7, 0x15e, &(0x7f0000000000)="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"}) fchdir(r1) exit(0xffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_cpu_set_ldt\x00', r3, 0x0, 0x1fe}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x3a000, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000800)={&(0x7f0000004000)={[{&(0x7f0000001080)="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", 0x1000, 0x2}, {&(0x7f0000000640)="2d11749a0ce9fad36bd9199aef817bd5a77a1c3ce8bc138cdd05a3acc50f1fd3783b8356ff51b6f8cb4d9c5438cfb81743a1e4ca798d4c021f533f8835d2eb643803c667dbc2c64f44d9dfd738c6656164f1d885715779b86d14b3e1ec902ca9186c0abcaa311c70abb686dbd7e4ffdd289457a28b6efc306edfa11f6d45cc1b82526e6a149d03c2404f19dd9060524d4931293b42c59206d78f8a317ff5e9c1b88228a86c8c96fd3fc9366a4e21", 0xae}, {&(0x7f0000000500)="0d0a7b59e28a727828f8b65a244eeba6a407bb54e5e81b4a128c25498dc9dcf9ad4a90f64bcf25", 0x27, 0x1}, {&(0x7f0000002080)="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", 0x1000, 0x3}]}, 0x4}, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r7) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000ffdbdf250c0000000c000600010000000100000008000300", @ANYRES32=r9, @ANYBLOB="f8aec6c2596502fc33ae42879e249f1ba76ea5836685f0b6980802724e1cfbf470a9b9a86c84ca097d09de95fa28e1a7e350d01217fa13ad6f379e"], 0x28}, 0x1, 0x0, 0x0, 0x8841}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0xaea2}}, './file0\x00'}) epoll_wait(r0, &(0x7f00000004c0)=[{}, {}], 0x2, 0x64b5) accept4$tipc(r10, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r5, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 679.965626ms ago: executing program 9 (id=10960): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 513.548786ms ago: executing program 9 (id=10962): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) (fail_nth: 3) 508.179987ms ago: executing program 7 (id=10963): r0 = perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x8, 0x6, 0xe, 0x7, 0x0, 0xf0dd, 0x10c05, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x6, 0xc257}, 0x10b251, 0xf188, 0x6, 0x0, 0xffffffffffff8089, 0xf5f, 0x557, 0x0, 0x3, 0x0, 0x101}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x2d, 0x4, 0xfd, 0x0, 0x0, 0x4, 0x514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x4000, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, r0, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000001f00)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064", 0x14}, {0x0, 0xfd}], 0x2}}], 0x1, 0x4004040) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000040000", @ANYRES32, @ANYBLOB="e90500000400000000000000d7ffffffffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000500"/28], 0x50) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 419.877557ms ago: executing program 9 (id=10964): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x40) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 398.095107ms ago: executing program 4 (id=10965): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8205, &(0x7f0000000080)={[{@user_xattr}]}, 0x81, 0x633, &(0x7f0000000600)="$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") 309.221508ms ago: executing program 6 (id=10966): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 151.108849ms ago: executing program 7 (id=10967): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdcf, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) 132.969629ms ago: executing program 4 (id=10968): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x1b, 0x7, 0x15e, &(0x7f0000000000)="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"}) fchdir(r1) exit(0xffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_cpu_set_ldt\x00', r3, 0x0, 0x1fe}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x3a000, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0x0, 0x1) r7 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(0x0, r8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000ffdbdf250c0000000c0006000100000001", @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8841}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18009b3d76f0f3d25a7f000a53528e49b63577fb9aabcd06c77400", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r10}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0xaea2}}, './file0\x00'}) epoll_wait(r0, &(0x7f00000004c0)=[{}, {}], 0x2, 0x64b5) accept4$tipc(r11, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r5, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 120.755369ms ago: executing program 6 (id=10969): msgget$private(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x18, 0xd, &(0x7f0000001600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c000000"], 0x50) syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, 0x0, 0x24008840) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000001c80), 0x0, &(0x7f00000015c0)=[{&(0x7f0000001cc0)=""/112, 0x70}, {&(0x7f0000001480)=""/227, 0xe3}], 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000c573af7a4b5839829b789c000000000000", @ANYRESOCT=r8], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r9}, 0x18) r10 = socket$nl_rdma(0x10, 0x3, 0x14) r11 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r11, 0x65, 0x6, &(0x7f00000001c0), 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0xff07, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000001580), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@loopback, @empty}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) 85.82838ms ago: executing program 7 (id=10970): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, 0x0}, 0x240448c4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='snd_soc_dapm_walk_done\x00', r1, 0x0, 0x355}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$notify(r2, 0x402, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 77.086039ms ago: executing program 6 (id=10971): socket$key(0xf, 0x3, 0x2) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd61fbddf000083afffe88000000000000000000000000010100000000000000000000000000000001"], 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000680)={0x9, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 67.04092ms ago: executing program 7 (id=10972): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdcf, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) 22.99442ms ago: executing program 7 (id=10973): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) 0s ago: executing program 7 (id=10974): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x20) r2 = openat(r1, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) preadv2(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="3b00fa0018001874df8700000000910000000000b6"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000000308010100000000000000000200008a0500030011000000440004800800"], 0x60}, 0x1, 0x0, 0x0, 0x4008840}, 0x50) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000080)=[{&(0x7f0000000500)='|', 0x1}], 0x1, 0x0) kernel console output (not intermixed with test programs): ocess `syz.2.10478'. [ 657.685237][T15239] loop2: detected capacity change from 0 to 128 [ 657.723435][T15245] loop4: detected capacity change from 0 to 1024 [ 657.733618][T15245] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 657.753067][T15245] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 657.778842][T15245] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 657.791487][T15245] EXT4-fs (loop4): orphan cleanup on readonly fs [ 657.807635][T15245] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.10483: Inode bitmap for bg 0 marked uninitialized [ 657.844315][T15250] netem: change failed [ 657.884506][T15259] siw: device registration error -23 [ 657.901802][T15262] loop6: detected capacity change from 0 to 512 [ 657.906404][T15264] loop4: detected capacity change from 0 to 512 [ 657.914020][T15262] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 657.933915][T15262] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 9: comm syz.6.10488: lblock 0 mapped to illegal pblock 9 (length 1) [ 657.948780][T15262] EXT4-fs (loop6): mount failed [ 657.954255][T15264] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.10489: bad orphan inode 11862016 [ 657.956599][T15262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15262 comm=syz.6.10488 [ 657.978130][T15264] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 658.007152][T15269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10490'. [ 658.153822][T15284] loop4: detected capacity change from 0 to 512 [ 658.166380][T15284] ext4: Unknown parameter 'smackfsfloor' [ 658.265462][T15295] loop6: detected capacity change from 0 to 1024 [ 658.272938][T15295] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 658.297463][T15289] loop4: detected capacity change from 0 to 128 [ 658.306480][T15295] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 658.329418][T15295] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 658.399693][T15295] EXT4-fs (loop6): orphan cleanup on readonly fs [ 658.409887][T15295] EXT4-fs error (device loop6): ext4_read_inode_bitmap:167: comm syz.6.10498: Inode bitmap for bg 0 marked uninitialized [ 658.444903][ T29] kauditd_printk_skb: 581 callbacks suppressed [ 658.444921][ T29] audit: type=1326 audit(2000000229.530:217804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15292 comm="syz.6.10498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbadfa7d810 code=0x7ffc0000 [ 658.475720][ T29] audit: type=1326 audit(2000000229.530:217805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15292 comm="syz.6.10498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fbadfa7dd17 code=0x7ffc0000 [ 658.493690][ T8578] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 658.499598][ T29] audit: type=1326 audit(2000000229.530:217806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15292 comm="syz.6.10498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbadfa7d810 code=0x7ffc0000 [ 658.505668][ T7289] Bluetooth: hci0: command 0x1003 tx timeout [ 658.537230][ T29] audit: type=1326 audit(2000000229.530:217807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15292 comm="syz.6.10498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbadfa7efc9 code=0x7ffc0000 [ 658.561063][ T29] audit: type=1326 audit(2000000229.530:217808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15292 comm="syz.6.10498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbadfa7efc9 code=0x7ffc0000 [ 658.593593][T15302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10502'. [ 658.636208][T15316] loop6: detected capacity change from 0 to 512 [ 658.658343][T15318] loop4: detected capacity change from 0 to 1024 [ 658.666186][ T29] audit: type=1326 audit(2000000229.530:217809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15292 comm="syz.6.10498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbadfa7efc9 code=0x7ffc0000 [ 658.690716][ T29] audit: type=1326 audit(2000000229.560:217810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15292 comm="syz.6.10498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbadfa7efc9 code=0x7ffc0000 [ 658.715198][ T29] audit: type=1326 audit(2000000229.730:217811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15317 comm="syz.4.10507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ed73efc9 code=0x7ffc0000 [ 658.739032][ T29] audit: type=1326 audit(2000000229.730:217812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15317 comm="syz.4.10507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ed73efc9 code=0x7ffc0000 [ 658.763557][ T29] audit: type=1326 audit(2000000229.730:217813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15317 comm="syz.4.10507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ed73efc9 code=0x7ffc0000 [ 658.787457][T15318] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 658.798143][T15318] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 658.809021][T15318] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 658.817157][T15318] EXT4-fs (loop4): orphan cleanup on readonly fs [ 658.820507][T15321] loop5: detected capacity change from 0 to 8192 [ 658.824538][T15318] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.10507: Inode bitmap for bg 0 marked uninitialized [ 658.843538][T15316] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.10504: bad orphan inode 11862016 [ 658.861690][T15316] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 658.950993][T15320] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 658.958666][T15320] FAT-fs (loop5): Filesystem has been set read-only [ 658.985626][T15320] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 659.137141][T15336] loop2: detected capacity change from 0 to 128 [ 659.447526][T15339] loop6: detected capacity change from 0 to 32768 [ 659.496907][T15339] loop6: p3 < p5 p6 > [ 659.501032][T15339] loop6: partition table partially beyond EOD, truncated [ 659.510001][T15339] loop6: p6 start 141371 is beyond EOD, truncated [ 659.572093][T15342] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10512'. [ 659.640745][T15348] FAULT_INJECTION: forcing a failure. [ 659.640745][T15348] name failslab, interval 1, probability 0, space 0, times 0 [ 659.653522][T15348] CPU: 0 UID: 0 PID: 15348 Comm: syz.6.10514 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 659.653554][T15348] Tainted: [W]=WARN [ 659.653560][T15348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 659.653627][T15348] Call Trace: [ 659.653633][T15348] [ 659.653640][T15348] __dump_stack+0x1d/0x30 [ 659.653705][T15348] dump_stack_lvl+0xe8/0x140 [ 659.653726][T15348] dump_stack+0x15/0x1b [ 659.653745][T15348] should_fail_ex+0x265/0x280 [ 659.653766][T15348] ? __se_sys_memfd_create+0x1cc/0x590 [ 659.653791][T15348] should_failslab+0x8c/0xb0 [ 659.653885][T15348] __kmalloc_cache_noprof+0x4c/0x4a0 [ 659.653917][T15348] ? fput+0x8f/0xc0 [ 659.654004][T15348] __se_sys_memfd_create+0x1cc/0x590 [ 659.654041][T15348] __x64_sys_memfd_create+0x31/0x40 [ 659.654066][T15348] x64_sys_call+0x2ac2/0x3000 [ 659.654138][T15348] do_syscall_64+0xd2/0x200 [ 659.654158][T15348] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 659.654230][T15348] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 659.654264][T15348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.654288][T15348] RIP: 0033:0x7fbadfa7efc9 [ 659.654305][T15348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 659.654386][T15348] RSP: 002b:00007fbade4dee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 659.654406][T15348] RAX: ffffffffffffffda RBX: 0000000000000214 RCX: 00007fbadfa7efc9 [ 659.654471][T15348] RDX: 00007fbade4deef0 RSI: 0000000000000000 RDI: 00007fbadfb02960 [ 659.654490][T15348] RBP: 0000200000000840 R08: 00007fbade4debb7 R09: 00007fbade4dee40 [ 659.654504][T15348] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 659.654519][T15348] R13: 00007fbade4deef0 R14: 00007fbade4deeb0 R15: 00002000000002c0 [ 659.654544][T15348] [ 659.856243][T15350] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10516'. [ 659.960301][T15364] loop4: detected capacity change from 0 to 128 [ 659.967454][T15362] loop6: detected capacity change from 0 to 512 [ 659.969157][T15358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10518'. [ 659.995517][T15364] EXT4-fs mount: 69 callbacks suppressed [ 659.995592][T15364] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 660.024675][T15362] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.10520: bad orphan inode 11862016 [ 660.083842][T15362] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 660.096603][T15364] ext4 filesystem being mounted at /274/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 660.129639][T15362] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 660.174662][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 660.218036][ T9830] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 660.255999][T15385] netlink: 'syz.9.10523': attribute type 13 has an invalid length. [ 660.440775][T15399] loop5: detected capacity change from 0 to 128 [ 660.507036][T15413] FAULT_INJECTION: forcing a failure. [ 660.507036][T15413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.520192][T15413] CPU: 0 UID: 0 PID: 15413 Comm: syz.5.10526 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 660.520229][T15413] Tainted: [W]=WARN [ 660.520237][T15413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 660.520254][T15413] Call Trace: [ 660.520264][T15413] [ 660.520275][T15413] __dump_stack+0x1d/0x30 [ 660.520304][T15413] dump_stack_lvl+0xe8/0x140 [ 660.520332][T15413] dump_stack+0x15/0x1b [ 660.520393][T15413] should_fail_ex+0x265/0x280 [ 660.520416][T15413] should_fail+0xb/0x20 [ 660.520436][T15413] should_fail_usercopy+0x1a/0x20 [ 660.520462][T15413] _copy_to_user+0x20/0xa0 [ 660.520503][T15413] simple_read_from_buffer+0xb5/0x130 [ 660.520531][T15413] proc_fail_nth_read+0x10e/0x150 [ 660.520574][T15413] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 660.520716][T15413] vfs_read+0x1a8/0x770 [ 660.520752][T15413] ? __rcu_read_unlock+0x4f/0x70 [ 660.520796][T15413] ? __fget_files+0x184/0x1c0 [ 660.520829][T15413] ? radix_tree_lookup+0xfa/0x140 [ 660.520869][T15413] ksys_read+0xda/0x1a0 [ 660.520945][T15413] __x64_sys_read+0x40/0x50 [ 660.521030][T15413] x64_sys_call+0x27c0/0x3000 [ 660.521059][T15413] do_syscall_64+0xd2/0x200 [ 660.521082][T15413] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 660.521118][T15413] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 660.521207][T15413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.521238][T15413] RIP: 0033:0x7f05607dd9dc [ 660.521258][T15413] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 660.521282][T15413] RSP: 002b:00007f055f23f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 660.521306][T15413] RAX: ffffffffffffffda RBX: 00007f0560a35fa0 RCX: 00007f05607dd9dc [ 660.521372][T15413] RDX: 000000000000000f RSI: 00007f055f23f0a0 RDI: 0000000000000003 [ 660.521389][T15413] RBP: 00007f055f23f090 R08: 0000000000000000 R09: 0000000000000000 [ 660.521406][T15413] R10: 000000002590f58a R11: 0000000000000246 R12: 0000000000000001 [ 660.521423][T15413] R13: 00007f0560a36038 R14: 00007f0560a35fa0 R15: 00007ffd4b52b568 [ 660.521448][T15413] [ 661.037663][T15448] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10528'. [ 661.104238][T15456] FAULT_INJECTION: forcing a failure. [ 661.104238][T15456] name failslab, interval 1, probability 0, space 0, times 0 [ 661.116977][T15456] CPU: 0 UID: 0 PID: 15456 Comm: syz.6.10530 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 661.117063][T15456] Tainted: [W]=WARN [ 661.117072][T15456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 661.117090][T15456] Call Trace: [ 661.117098][T15456] [ 661.117108][T15456] __dump_stack+0x1d/0x30 [ 661.117139][T15456] dump_stack_lvl+0xe8/0x140 [ 661.117167][T15456] dump_stack+0x15/0x1b [ 661.117213][T15456] should_fail_ex+0x265/0x280 [ 661.117241][T15456] should_failslab+0x8c/0xb0 [ 661.117281][T15456] kmem_cache_alloc_noprof+0x50/0x480 [ 661.117320][T15456] ? getname_flags+0x80/0x3b0 [ 661.117389][T15456] ? get_pid_task+0x96/0xd0 [ 661.117415][T15456] getname_flags+0x80/0x3b0 [ 661.117446][T15456] do_mq_open+0xd9/0x4f0 [ 661.117516][T15456] ? __rcu_read_unlock+0x4f/0x70 [ 661.117542][T15456] ? __fget_files+0x184/0x1c0 [ 661.117573][T15456] __x64_sys_mq_open+0xcb/0x100 [ 661.117625][T15456] x64_sys_call+0x8c6/0x3000 [ 661.117657][T15456] do_syscall_64+0xd2/0x200 [ 661.117677][T15456] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 661.117738][T15456] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 661.117772][T15456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.117801][T15456] RIP: 0033:0x7fbadfa7efc9 [ 661.117821][T15456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.117849][T15456] RSP: 002b:00007fbade4df038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 661.117875][T15456] RAX: ffffffffffffffda RBX: 00007fbadfcd5fa0 RCX: 00007fbadfa7efc9 [ 661.117892][T15456] RDX: 0000000000000000 RSI: 0000000000000042 RDI: 0000000000000000 [ 661.117905][T15456] RBP: 00007fbade4df090 R08: 0000000000000000 R09: 0000000000000000 [ 661.117917][T15456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.117933][T15456] R13: 00007fbadfcd6038 R14: 00007fbadfcd5fa0 R15: 00007ffec19c7308 [ 661.117954][T15456] [ 661.533714][T15481] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10532'. [ 661.588584][T15496] loop9: detected capacity change from 0 to 512 [ 661.618781][T15499] FAULT_INJECTION: forcing a failure. [ 661.618781][T15499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.632009][T15499] CPU: 1 UID: 0 PID: 15499 Comm: syz.5.10535 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 661.632042][T15499] Tainted: [W]=WARN [ 661.632050][T15499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 661.632066][T15499] Call Trace: [ 661.632075][T15499] [ 661.632084][T15499] __dump_stack+0x1d/0x30 [ 661.632152][T15499] dump_stack_lvl+0xe8/0x140 [ 661.632189][T15499] dump_stack+0x15/0x1b [ 661.632213][T15499] should_fail_ex+0x265/0x280 [ 661.632241][T15499] should_fail+0xb/0x20 [ 661.632264][T15499] should_fail_usercopy+0x1a/0x20 [ 661.632358][T15499] _copy_from_user+0x1c/0xb0 [ 661.632441][T15499] __sys_sendto+0x19e/0x330 [ 661.632492][T15499] __x64_sys_sendto+0x76/0x90 [ 661.632532][T15499] x64_sys_call+0x2d14/0x3000 [ 661.632570][T15499] do_syscall_64+0xd2/0x200 [ 661.632595][T15499] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 661.632661][T15499] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 661.632698][T15499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.632719][T15499] RIP: 0033:0x7f05607defc9 [ 661.632805][T15499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.632885][T15499] RSP: 002b:00007f055f23f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 661.632904][T15499] RAX: ffffffffffffffda RBX: 00007f0560a35fa0 RCX: 00007f05607defc9 [ 661.632916][T15499] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 661.632928][T15499] RBP: 00007f055f23f090 R08: 0000200000000140 R09: 000000000000001c [ 661.632941][T15499] R10: 000000000400c0d4 R11: 0000000000000246 R12: 0000000000000001 [ 661.632957][T15499] R13: 00007f0560a36038 R14: 00007f0560a35fa0 R15: 00007ffd4b52b568 [ 661.632980][T15499] [ 661.731330][T15496] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.10534: bad orphan inode 11862016 [ 661.825443][T15496] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 661.838658][T15496] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 661.869326][T15510] lo speed is unknown, defaulting to 1000 [ 661.880993][T15510] lo speed is unknown, defaulting to 1000 [ 661.910329][T15517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.928024][T15517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.938247][ T9331] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 662.253379][ T7289] Bluetooth: hci0: command 0x1003 tx timeout [ 662.259435][ T8578] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 662.558055][T15558] loop6: detected capacity change from 0 to 128 [ 662.701181][ T9475] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 662.766649][T15565] __nla_validate_parse: 2 callbacks suppressed [ 662.766669][T15565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10544'. [ 662.840595][T15574] loop4: detected capacity change from 0 to 8192 [ 662.932192][T15584] loop9: detected capacity change from 0 to 128 [ 662.942671][T15574] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 662.950345][T15574] FAT-fs (loop4): Filesystem has been set read-only [ 662.968420][T15574] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 662.981852][T15584] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 662.994404][T15584] ext4 filesystem being mounted at /257/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 663.027697][T15588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10550'. [ 663.131031][T15604] netlink: 'syz.5.10551': attribute type 13 has an invalid length. [ 663.315283][T15615] loop4: detected capacity change from 0 to 128 [ 663.342372][T15628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10558'. [ 663.512117][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 663.512156][ T29] audit: type=1400 audit(2000000234.590:218078): avc: denied { getopt } for pid=15651 comm="syz.4.10560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 663.561128][ T29] audit: type=1400 audit(2000000234.630:218079): avc: denied { connect } for pid=15651 comm="syz.4.10560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 663.581969][ T29] audit: type=1400 audit(2000000234.630:218080): avc: denied { name_connect } for pid=15651 comm="syz.4.10560" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 663.623214][ T29] audit: type=1400 audit(2000000234.700:218081): avc: denied { write } for pid=15651 comm="syz.4.10560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 663.643836][ T29] audit: type=1400 audit(2000000234.700:218082): avc: denied { shutdown } for pid=15651 comm="syz.4.10560" lport=50718 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 663.956748][T15676] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10563'. [ 663.987275][ T29] audit: type=1326 audit(2000000235.070:218083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15672 comm="syz.5.10562" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05607defc9 code=0x0 [ 664.048075][ T29] audit: type=1326 audit(2000000235.120:218084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.6.10564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbadfa7efc9 code=0x7ffc0000 [ 664.072786][ T29] audit: type=1326 audit(2000000235.120:218085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.6.10564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbadfa7efc9 code=0x7ffc0000 [ 664.096871][ T29] audit: type=1326 audit(2000000235.120:218086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.6.10564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbadfa7efc9 code=0x7ffc0000 [ 664.097233][T15673] loop5: detected capacity change from 0 to 1024 [ 664.121621][ T29] audit: type=1326 audit(2000000235.120:218087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.6.10564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbadfa7efc9 code=0x7ffc0000 [ 664.128235][T15673] EXT4-fs (loop5): inodes count not valid: 204800 vs 32 [ 664.180035][T15673] loop5: detected capacity change from 0 to 512 [ 664.188056][T15673] EXT4-fs (loop5): orphan cleanup on readonly fs [ 664.194842][T15673] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.10562: bad orphan inode 13 [ 664.210777][T15681] loop6: detected capacity change from 0 to 512 [ 664.223872][T15673] ext4_test_bit(bit=12, block=18) = 1 [ 664.229312][T15673] is_bad_inode(inode)=0 [ 664.234223][T15673] NEXT_ORPHAN(inode)=2130706432 [ 664.239087][T15673] max_ino=32 [ 664.242368][T15673] i_nlink=1 [ 664.249782][T15681] EXT4-fs: Ignoring removed nobh option [ 664.260991][T15681] EXT4-fs: journaled quota format not specified [ 664.284900][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10564'. [ 664.299912][T15695] loop2: detected capacity change from 0 to 1024 [ 664.308197][T15673] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 664.326715][T15695] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 664.352680][T15695] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 664.383967][T15695] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 664.392454][T15695] EXT4-fs (loop2): orphan cleanup on readonly fs [ 664.400330][T15695] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.10565: Inode bitmap for bg 0 marked uninitialized [ 664.414324][T15695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 664.428436][T15673] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.10562: deleted inode referenced: 12 [ 664.480879][ T9134] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.551605][T15718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10569'. [ 664.680475][T15737] loop2: detected capacity change from 0 to 8192 [ 664.902237][ T7585] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.921020][T15750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10574'. [ 665.230550][T15765] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10573'. [ 665.240430][T15765] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10573'. [ 665.251905][T15765] netlink: 7 bytes leftover after parsing attributes in process `syz.5.10573'. [ 665.293192][T15775] FAULT_INJECTION: forcing a failure. [ 665.293192][T15775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.306541][T15775] CPU: 0 UID: 0 PID: 15775 Comm: syz.5.10577 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 665.306574][T15775] Tainted: [W]=WARN [ 665.306580][T15775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 665.306592][T15775] Call Trace: [ 665.306666][T15775] [ 665.306677][T15775] __dump_stack+0x1d/0x30 [ 665.306706][T15775] dump_stack_lvl+0xe8/0x140 [ 665.306735][T15775] dump_stack+0x15/0x1b [ 665.306778][T15775] should_fail_ex+0x265/0x280 [ 665.306829][T15775] should_fail+0xb/0x20 [ 665.306854][T15775] should_fail_usercopy+0x1a/0x20 [ 665.306883][T15775] _copy_from_user+0x1c/0xb0 [ 665.306918][T15775] ___sys_sendmsg+0xc1/0x1d0 [ 665.307039][T15775] __x64_sys_sendmsg+0xd4/0x160 [ 665.307080][T15775] x64_sys_call+0x191e/0x3000 [ 665.307106][T15775] do_syscall_64+0xd2/0x200 [ 665.307131][T15775] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 665.307245][T15775] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 665.307288][T15775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.307317][T15775] RIP: 0033:0x7f05607defc9 [ 665.307337][T15775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.307405][T15775] RSP: 002b:00007f055f23f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 665.307424][T15775] RAX: ffffffffffffffda RBX: 00007f0560a35fa0 RCX: 00007f05607defc9 [ 665.307438][T15775] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000005 [ 665.307456][T15775] RBP: 00007f055f23f090 R08: 0000000000000000 R09: 0000000000000000 [ 665.307473][T15775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.307490][T15775] R13: 00007f0560a36038 R14: 00007f0560a35fa0 R15: 00007ffd4b52b568 [ 665.307521][T15775] [ 665.538688][T15807] loop6: detected capacity change from 0 to 512 [ 665.602556][T15807] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.10578: bad orphan inode 11862016 [ 665.616241][T15807] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 665.629360][T15807] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 665.672886][T15819] loop2: detected capacity change from 0 to 512 [ 665.680467][T15812] loop5: detected capacity change from 0 to 1024 [ 665.691421][T15812] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 665.705141][T15812] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 665.705903][T15821] FAULT_INJECTION: forcing a failure. [ 665.705903][T15821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.716653][T15812] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 665.729289][T15821] CPU: 1 UID: 0 PID: 15821 Comm: gtp Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 665.729336][T15821] Tainted: [W]=WARN [ 665.729346][T15821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 665.729367][T15821] Call Trace: [ 665.729377][T15821] [ 665.729388][T15821] __dump_stack+0x1d/0x30 [ 665.729421][T15821] dump_stack_lvl+0xe8/0x140 [ 665.729522][T15821] dump_stack+0x15/0x1b [ 665.729548][T15821] should_fail_ex+0x265/0x280 [ 665.729645][T15821] should_fail+0xb/0x20 [ 665.729668][T15821] should_fail_usercopy+0x1a/0x20 [ 665.729745][T15821] _copy_from_user+0x1c/0xb0 [ 665.729845][T15821] ___sys_sendmsg+0xc1/0x1d0 [ 665.729890][T15821] __x64_sys_sendmsg+0xd4/0x160 [ 665.729936][T15821] x64_sys_call+0x191e/0x3000 [ 665.730030][T15821] do_syscall_64+0xd2/0x200 [ 665.730063][T15821] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 665.730130][T15821] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 665.730176][T15821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.730215][T15821] RIP: 0033:0x7fd8ed73efc9 [ 665.730236][T15821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.730298][T15821] RSP: 002b:00007fd8ec1a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 665.730325][T15821] RAX: ffffffffffffffda RBX: 00007fd8ed995fa0 RCX: 00007fd8ed73efc9 [ 665.730380][T15821] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 665.730397][T15821] RBP: 00007fd8ec1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 665.730415][T15821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.730433][T15821] R13: 00007fd8ed996038 R14: 00007fd8ed995fa0 R15: 00007ffc051fecb8 [ 665.730525][T15821] [ 665.805481][T15819] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.10582: bad orphan inode 11862016 [ 665.809687][T15812] EXT4-fs (loop5): orphan cleanup on readonly fs [ 665.824249][T15819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 665.836605][T15812] EXT4-fs error (device loop5): ext4_read_inode_bitmap:167: comm syz.5.10580: Inode bitmap for bg 0 marked uninitialized [ 665.837170][T15812] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 665.969933][T15819] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 665.991235][ T7585] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.002331][ T9830] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 666.053538][T15834] FAULT_INJECTION: forcing a failure. [ 666.053538][T15834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 666.066846][T15834] CPU: 1 UID: 0 PID: 15834 Comm: syz.4.10587 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 666.066887][T15834] Tainted: [W]=WARN [ 666.066896][T15834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 666.066980][T15834] Call Trace: [ 666.067047][T15834] [ 666.067055][T15834] __dump_stack+0x1d/0x30 [ 666.067080][T15834] dump_stack_lvl+0xe8/0x140 [ 666.067102][T15834] dump_stack+0x15/0x1b [ 666.067121][T15834] should_fail_ex+0x265/0x280 [ 666.067144][T15834] should_fail+0xb/0x20 [ 666.067161][T15834] should_fail_usercopy+0x1a/0x20 [ 666.067184][T15834] _copy_from_user+0x1c/0xb0 [ 666.067211][T15834] ___sys_sendmsg+0xc1/0x1d0 [ 666.067254][T15834] __x64_sys_sendmsg+0xd4/0x160 [ 666.067279][T15834] x64_sys_call+0x191e/0x3000 [ 666.067365][T15834] do_syscall_64+0xd2/0x200 [ 666.067386][T15834] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 666.067452][T15834] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 666.067486][T15834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.067509][T15834] RIP: 0033:0x7fd8ed73efc9 [ 666.067535][T15834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.067554][T15834] RSP: 002b:00007fd8ec1a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 666.067575][T15834] RAX: ffffffffffffffda RBX: 00007fd8ed995fa0 RCX: 00007fd8ed73efc9 [ 666.067588][T15834] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000003 [ 666.067602][T15834] RBP: 00007fd8ec1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 666.067646][T15834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.067659][T15834] R13: 00007fd8ed996038 R14: 00007fd8ed995fa0 R15: 00007ffc051fecb8 [ 666.067679][T15834] [ 666.281463][ T9134] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 666.292455][ T9331] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 666.311085][T15843] FAULT_INJECTION: forcing a failure. [ 666.311085][T15843] name failslab, interval 1, probability 0, space 0, times 0 [ 666.323893][T15843] CPU: 0 UID: 0 PID: 15843 Comm: syz.2.10591 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 666.323931][T15843] Tainted: [W]=WARN [ 666.323939][T15843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 666.323956][T15843] Call Trace: [ 666.323964][T15843] [ 666.323974][T15843] __dump_stack+0x1d/0x30 [ 666.324049][T15843] dump_stack_lvl+0xe8/0x140 [ 666.324078][T15843] dump_stack+0x15/0x1b [ 666.324102][T15843] should_fail_ex+0x265/0x280 [ 666.324128][T15843] ? alloc_pipe_info+0xae/0x350 [ 666.324168][T15843] should_failslab+0x8c/0xb0 [ 666.324206][T15843] __kmalloc_cache_noprof+0x4c/0x4a0 [ 666.324257][T15843] alloc_pipe_info+0xae/0x350 [ 666.324335][T15843] splice_direct_to_actor+0x592/0x680 [ 666.324367][T15843] ? kstrtouint_from_user+0x9f/0xf0 [ 666.324393][T15843] ? __pfx_direct_splice_actor+0x10/0x10 [ 666.324489][T15843] ? __rcu_read_unlock+0x4f/0x70 [ 666.324576][T15843] ? get_pid_task+0x96/0xd0 [ 666.324632][T15843] ? avc_policy_seqno+0x15/0x30 [ 666.324656][T15843] ? selinux_file_permission+0x1e4/0x320 [ 666.324705][T15843] do_splice_direct+0xda/0x150 [ 666.324728][T15843] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 666.324836][T15843] do_sendfile+0x380/0x650 [ 666.324892][T15843] __x64_sys_sendfile64+0x105/0x150 [ 666.324989][T15843] x64_sys_call+0x2bb4/0x3000 [ 666.325021][T15843] do_syscall_64+0xd2/0x200 [ 666.325045][T15843] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 666.325116][T15843] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 666.325148][T15843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.325237][T15843] RIP: 0033:0x7f8dcd8cefc9 [ 666.325263][T15843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.325287][T15843] RSP: 002b:00007f8dcc337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 666.325316][T15843] RAX: ffffffffffffffda RBX: 00007f8dcdb25fa0 RCX: 00007f8dcd8cefc9 [ 666.325333][T15843] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 666.325427][T15843] RBP: 00007f8dcc337090 R08: 0000000000000000 R09: 0000000000000000 [ 666.325445][T15843] R10: 00000000003fffff R11: 0000000000000246 R12: 0000000000000001 [ 666.325461][T15843] R13: 00007f8dcdb26038 R14: 00007f8dcdb25fa0 R15: 00007fffe1de3b28 [ 666.325481][T15843] [ 666.648745][T15854] loop2: detected capacity change from 0 to 8192 [ 666.662473][T15856] loop5: detected capacity change from 0 to 512 [ 666.680235][T15856] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.10597: bad orphan inode 11862016 [ 666.691755][T15856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 666.704424][T15856] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 666.713829][T15854] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 666.722468][T15854] FAT-fs (loop2): Filesystem has been set read-only [ 666.731137][T15854] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 666.752744][ T7585] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 666.778634][T15864] loop5: detected capacity change from 0 to 1024 [ 666.791141][T15864] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 666.801765][T15864] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 666.814170][T15864] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 666.822333][T15864] EXT4-fs (loop5): orphan cleanup on readonly fs [ 666.831893][T15864] EXT4-fs error (device loop5): ext4_read_inode_bitmap:167: comm syz.5.10598: Inode bitmap for bg 0 marked uninitialized [ 666.836431][T15872] loop2: detected capacity change from 0 to 1024 [ 666.852217][T15864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 666.876221][T15872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 666.890768][T15880] loop9: detected capacity change from 0 to 1024 [ 666.904037][ T7585] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.907766][T15880] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 666.947092][T15872] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.10601: Allocating blocks 449-513 which overlap fs metadata [ 666.964278][T15880] FAULT_INJECTION: forcing a failure. [ 666.964278][T15880] name failslab, interval 1, probability 0, space 0, times 0 [ 666.971705][T15871] EXT4-fs (loop2): pa ffff888100496d20: logic 48, phys. 177, len 21 [ 666.976954][T15880] CPU: 1 UID: 0 PID: 15880 Comm: syz.9.10602 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 666.976994][T15880] Tainted: [W]=WARN [ 666.977084][T15880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 666.977102][T15880] Call Trace: [ 666.977114][T15880] [ 666.977125][T15880] __dump_stack+0x1d/0x30 [ 666.977158][T15880] dump_stack_lvl+0xe8/0x140 [ 666.977188][T15880] dump_stack+0x15/0x1b [ 666.977213][T15880] should_fail_ex+0x265/0x280 [ 666.977313][T15880] ? alloc_pipe_info+0xae/0x350 [ 666.977351][T15880] should_failslab+0x8c/0xb0 [ 666.977403][T15880] __kmalloc_cache_noprof+0x4c/0x4a0 [ 666.977453][T15880] alloc_pipe_info+0xae/0x350 [ 666.977493][T15880] splice_direct_to_actor+0x592/0x680 [ 666.977569][T15880] ? kstrtouint_from_user+0x9f/0xf0 [ 666.977657][T15880] ? __pfx_direct_splice_actor+0x10/0x10 [ 666.977692][T15880] ? __rcu_read_unlock+0x4f/0x70 [ 666.977730][T15880] ? get_pid_task+0x96/0xd0 [ 666.977763][T15880] ? avc_policy_seqno+0x15/0x30 [ 666.977857][T15880] ? selinux_file_permission+0x1e4/0x320 [ 666.977977][T15880] do_splice_direct+0xda/0x150 [ 666.978011][T15880] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 666.978084][T15880] do_sendfile+0x380/0x650 [ 666.978135][T15880] __x64_sys_sendfile64+0x105/0x150 [ 666.978219][T15880] x64_sys_call+0x2bb4/0x3000 [ 666.978281][T15880] do_syscall_64+0xd2/0x200 [ 666.978342][T15880] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 666.978382][T15880] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 666.978485][T15880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.978563][T15880] RIP: 0033:0x7ffb96a6efc9 [ 666.978652][T15880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.978679][T15880] RSP: 002b:00007ffb954cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 666.978707][T15880] RAX: ffffffffffffffda RBX: 00007ffb96cc5fa0 RCX: 00007ffb96a6efc9 [ 666.978725][T15880] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 666.978784][T15880] RBP: 00007ffb954cf090 R08: 0000000000000000 R09: 0000000000000000 [ 666.978850][T15880] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 666.978868][T15880] R13: 00007ffb96cc6038 R14: 00007ffb96cc5fa0 R15: 00007ffed44eb138 [ 666.978895][T15880] [ 667.037914][T15889] netlink: 'syz.6.10605': attribute type 13 has an invalid length. [ 667.039468][T15871] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, [ 667.150865][T15895] loop4: detected capacity change from 0 to 512 [ 667.161736][T15871] free 0, pa_free 4 [ 667.183620][ T9331] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.212750][T15895] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.10608: bad orphan inode 11862016 [ 667.216213][ T9134] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.234607][T15895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 667.288631][T15895] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 667.314723][T15901] loop9: detected capacity change from 0 to 1024 [ 667.318393][T15899] siw: device registration error -23 [ 667.333134][T15901] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 667.365222][T15901] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.10606: bg 0: block 88: padding at end of block bitmap is not set [ 667.386620][T15901] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 667.438428][ T9331] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.450444][ T9475] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 667.618489][T15921] loop2: detected capacity change from 0 to 512 [ 667.624960][T15927] loop9: detected capacity change from 0 to 8192 [ 667.632483][T15921] EXT4-fs: Ignoring removed nobh option [ 667.638653][T15921] EXT4-fs: journaled quota format not specified [ 667.706127][T15927] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 667.714488][T15927] FAT-fs (loop9): Filesystem has been set read-only [ 667.721563][T15927] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 667.762804][T15938] siw: device registration error -23 [ 667.792130][T15944] __nla_validate_parse: 10 callbacks suppressed [ 667.792146][T15944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10622'. [ 667.798597][T15934] loop2: detected capacity change from 0 to 8192 [ 667.918888][T15934] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 667.927242][T15934] FAT-fs (loop2): Filesystem has been set read-only [ 667.939857][T15934] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 668.016968][T15966] loop6: detected capacity change from 0 to 1024 [ 668.025047][T15966] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 668.034740][T15966] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 668.051312][T15966] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 668.060162][T15966] EXT4-fs (loop6): orphan cleanup on readonly fs [ 668.070140][T15966] EXT4-fs error (device loop6): ext4_read_inode_bitmap:167: comm syz.6.10629: Inode bitmap for bg 0 marked uninitialized [ 668.085388][T15966] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 668.117492][ T9830] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.167494][T15977] FAULT_INJECTION: forcing a failure. [ 668.167494][T15977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.171381][T15973] loop4: detected capacity change from 0 to 8192 [ 668.180652][T15977] CPU: 0 UID: 0 PID: 15977 Comm: syz.6.10632 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 668.180701][T15977] Tainted: [W]=WARN [ 668.180707][T15977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 668.180724][T15977] Call Trace: [ 668.180734][T15977] [ 668.180743][T15977] __dump_stack+0x1d/0x30 [ 668.180772][T15977] dump_stack_lvl+0xe8/0x140 [ 668.180797][T15977] dump_stack+0x15/0x1b [ 668.180841][T15977] should_fail_ex+0x265/0x280 [ 668.180873][T15977] should_fail+0xb/0x20 [ 668.180895][T15977] should_fail_usercopy+0x1a/0x20 [ 668.180923][T15977] _copy_from_user+0x1c/0xb0 [ 668.180956][T15977] vt_ioctl+0xf54/0x18a0 [ 668.181035][T15977] ? tty_jobctrl_ioctl+0x29e/0x810 [ 668.181110][T15977] tty_ioctl+0x7d8/0xb80 [ 668.181136][T15977] ? __pfx_tty_ioctl+0x10/0x10 [ 668.181164][T15977] __se_sys_ioctl+0xce/0x140 [ 668.181225][T15977] __x64_sys_ioctl+0x43/0x50 [ 668.181250][T15977] x64_sys_call+0x1816/0x3000 [ 668.181281][T15977] do_syscall_64+0xd2/0x200 [ 668.181337][T15977] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 668.181384][T15977] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 668.181428][T15977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.181454][T15977] RIP: 0033:0x7fbadfa7efc9 [ 668.181473][T15977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.181507][T15977] RSP: 002b:00007fbade4df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 668.181593][T15977] RAX: ffffffffffffffda RBX: 00007fbadfcd5fa0 RCX: 00007fbadfa7efc9 [ 668.181610][T15977] RDX: 0000200000000040 RSI: 0000000000004b67 RDI: 0000000000000003 [ 668.181645][T15977] RBP: 00007fbade4df090 R08: 0000000000000000 R09: 0000000000000000 [ 668.181659][T15977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.181710][T15977] R13: 00007fbadfcd6038 R14: 00007fbadfcd5fa0 R15: 00007ffec19c7308 [ 668.181732][T15977] [ 668.192412][T15976] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10633'. [ 668.303256][T15983] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 668.404098][T15983] FAT-fs (loop4): Filesystem has been set read-only [ 668.413000][T15973] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 668.523120][T15994] netlink: 'syz.5.10634': attribute type 13 has an invalid length. [ 668.591174][T15996] loop4: detected capacity change from 0 to 1024 [ 668.642172][ T29] kauditd_printk_skb: 756 callbacks suppressed [ 668.642188][ T29] audit: type=1326 audit(2000000239.710:218844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.9.10641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb96a6efc9 code=0x7ffc0000 [ 668.672383][ T29] audit: type=1326 audit(2000000239.710:218845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.9.10641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ffb96a6efc9 code=0x7ffc0000 [ 668.696240][ T29] audit: type=1326 audit(2000000239.710:218846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.9.10641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb96a6efc9 code=0x7ffc0000 [ 668.720112][ T29] audit: type=1326 audit(2000000239.710:218847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.9.10641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb96a6efc9 code=0x7ffc0000 [ 668.744005][ T29] audit: type=1326 audit(2000000239.710:218848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.9.10641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb96a6efc9 code=0x7ffc0000 [ 668.767901][ T29] audit: type=1326 audit(2000000239.710:218849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.9.10641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb96a6efc9 code=0x7ffc0000 [ 668.791692][ T29] audit: type=1326 audit(2000000239.710:218850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.9.10641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb96a6efc9 code=0x7ffc0000 [ 668.815563][ T29] audit: type=1326 audit(2000000239.710:218851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.9.10641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7ffb96a6efc9 code=0x7ffc0000 [ 668.839402][ T29] audit: type=1326 audit(2000000239.710:218852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.9.10641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb96a6efc9 code=0x7ffc0000 [ 668.863175][ T29] audit: type=1326 audit(2000000239.710:218853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16001 comm="syz.9.10641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb96a6efc9 code=0x7ffc0000 [ 668.916463][T15996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.922588][T16002] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10641'. [ 668.973926][T15996] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.10638: bg 0: block 88: padding at end of block bitmap is not set [ 669.006185][T16015] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10643'. [ 669.006558][T16016] loop6: detected capacity change from 0 to 1024 [ 669.017012][T16015] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10643'. [ 669.032849][T16016] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 669.044444][ T9475] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.054126][T16016] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 669.057880][T16020] netlink: 7 bytes leftover after parsing attributes in process `syz.9.10643'. [ 669.075467][T16020] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10643'. [ 669.082240][T16016] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 669.099472][T16016] EXT4-fs (loop6): orphan cleanup on readonly fs [ 669.107049][T16016] EXT4-fs error (device loop6): ext4_read_inode_bitmap:167: comm syz.6.10645: Inode bitmap for bg 0 marked uninitialized [ 669.120177][T16026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10644'. [ 669.120819][T16016] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 669.156184][ T9830] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.222100][T16031] loop9: detected capacity change from 0 to 8192 [ 669.342231][T16031] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 669.351658][T16031] FAT-fs (loop9): Filesystem has been set read-only [ 669.356229][T16052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10655'. [ 669.361525][T16031] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 669.367374][T16052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10655'. [ 669.388150][T16052] FAULT_INJECTION: forcing a failure. [ 669.388150][T16052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.401344][T16052] CPU: 0 UID: 0 PID: 16052 Comm: syz.4.10655 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 669.401388][T16052] Tainted: [W]=WARN [ 669.401396][T16052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 669.401414][T16052] Call Trace: [ 669.401422][T16052] [ 669.401432][T16052] __dump_stack+0x1d/0x30 [ 669.401463][T16052] dump_stack_lvl+0xe8/0x140 [ 669.401528][T16052] dump_stack+0x15/0x1b [ 669.401602][T16052] should_fail_ex+0x265/0x280 [ 669.401629][T16052] should_fail+0xb/0x20 [ 669.401715][T16052] should_fail_usercopy+0x1a/0x20 [ 669.401743][T16052] _copy_from_user+0x1c/0xb0 [ 669.401785][T16052] ___sys_sendmsg+0xc1/0x1d0 [ 669.401826][T16052] __x64_sys_sendmsg+0xd4/0x160 [ 669.401856][T16052] x64_sys_call+0x191e/0x3000 [ 669.401902][T16052] do_syscall_64+0xd2/0x200 [ 669.401929][T16052] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 669.401965][T16052] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 669.402066][T16052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.402095][T16052] RIP: 0033:0x7fd8ed73efc9 [ 669.402124][T16052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.402147][T16052] RSP: 002b:00007fd8ec1a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 669.402171][T16052] RAX: ffffffffffffffda RBX: 00007fd8ed995fa0 RCX: 00007fd8ed73efc9 [ 669.402260][T16052] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 669.402277][T16052] RBP: 00007fd8ec1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 669.402333][T16052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.402346][T16052] R13: 00007fd8ed996038 R14: 00007fd8ed995fa0 R15: 00007ffc051fecb8 [ 669.402366][T16052] [ 669.719708][T16080] netlink: 'syz.9.10661': attribute type 13 has an invalid length. [ 669.792410][T16089] FAULT_INJECTION: forcing a failure. [ 669.792410][T16089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.805650][T16089] CPU: 0 UID: 0 PID: 16089 Comm: syz.4.10668 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 669.805694][T16089] Tainted: [W]=WARN [ 669.805704][T16089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 669.805761][T16089] Call Trace: [ 669.805770][T16089] [ 669.805779][T16089] __dump_stack+0x1d/0x30 [ 669.805809][T16089] dump_stack_lvl+0xe8/0x140 [ 669.805866][T16089] dump_stack+0x15/0x1b [ 669.805890][T16089] should_fail_ex+0x265/0x280 [ 669.805917][T16089] should_fail+0xb/0x20 [ 669.805939][T16089] should_fail_usercopy+0x1a/0x20 [ 669.806031][T16089] _copy_from_user+0x1c/0xb0 [ 669.806064][T16089] ___sys_sendmsg+0xc1/0x1d0 [ 669.806106][T16089] __x64_sys_sendmsg+0xd4/0x160 [ 669.806131][T16089] x64_sys_call+0x191e/0x3000 [ 669.806158][T16089] do_syscall_64+0xd2/0x200 [ 669.806192][T16089] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 669.806229][T16089] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 669.806339][T16089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.806367][T16089] RIP: 0033:0x7fd8ed73efc9 [ 669.806405][T16089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.806429][T16089] RSP: 002b:00007fd8ec1a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 669.806454][T16089] RAX: ffffffffffffffda RBX: 00007fd8ed995fa0 RCX: 00007fd8ed73efc9 [ 669.806471][T16089] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 669.806487][T16089] RBP: 00007fd8ec1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 669.806562][T16089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.806581][T16089] R13: 00007fd8ed996038 R14: 00007fd8ed995fa0 R15: 00007ffc051fecb8 [ 669.806604][T16089] [ 670.328599][T16126] FAULT_INJECTION: forcing a failure. [ 670.328599][T16126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.343097][T16126] CPU: 1 UID: 0 PID: 16126 Comm: syz.5.10680 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 670.343138][T16126] Tainted: [W]=WARN [ 670.343179][T16126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 670.343195][T16126] Call Trace: [ 670.343205][T16126] [ 670.343214][T16126] __dump_stack+0x1d/0x30 [ 670.343239][T16126] dump_stack_lvl+0xe8/0x140 [ 670.343259][T16126] dump_stack+0x15/0x1b [ 670.343346][T16126] should_fail_ex+0x265/0x280 [ 670.343374][T16126] should_fail+0xb/0x20 [ 670.343390][T16126] should_fail_usercopy+0x1a/0x20 [ 670.343413][T16126] _copy_from_user+0x1c/0xb0 [ 670.343439][T16126] ___sys_sendmsg+0xc1/0x1d0 [ 670.343559][T16126] __x64_sys_sendmsg+0xd4/0x160 [ 670.343600][T16126] x64_sys_call+0x191e/0x3000 [ 670.343621][T16126] do_syscall_64+0xd2/0x200 [ 670.343639][T16126] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 670.343722][T16126] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 670.343814][T16126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.343886][T16126] RIP: 0033:0x7f05607defc9 [ 670.343900][T16126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.343916][T16126] RSP: 002b:00007f055f23f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 670.343933][T16126] RAX: ffffffffffffffda RBX: 00007f0560a35fa0 RCX: 00007f05607defc9 [ 670.343953][T16126] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 670.343964][T16126] RBP: 00007f055f23f090 R08: 0000000000000000 R09: 0000000000000000 [ 670.344002][T16126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.344019][T16126] R13: 00007f0560a36038 R14: 00007f0560a35fa0 R15: 00007ffd4b52b568 [ 670.344045][T16126] [ 670.643878][T16144] loop4: detected capacity change from 0 to 1024 [ 670.651805][T16144] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 670.662585][T16144] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 670.675752][T16144] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 670.684086][T16144] EXT4-fs (loop4): orphan cleanup on readonly fs [ 670.692038][T16144] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.10687: Inode bitmap for bg 0 marked uninitialized [ 670.697812][T16153] FAULT_INJECTION: forcing a failure. [ 670.697812][T16153] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 670.714682][T16144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 670.718010][T16153] CPU: 1 UID: 0 PID: 16153 Comm: syz.6.10689 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 670.718124][T16153] Tainted: [W]=WARN [ 670.718135][T16153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 670.718154][T16153] Call Trace: [ 670.718166][T16153] [ 670.718177][T16153] __dump_stack+0x1d/0x30 [ 670.718269][T16153] dump_stack_lvl+0xe8/0x140 [ 670.718391][T16153] dump_stack+0x15/0x1b [ 670.718415][T16153] should_fail_ex+0x265/0x280 [ 670.718445][T16153] should_fail_alloc_page+0xf2/0x100 [ 670.718542][T16153] __alloc_frozen_pages_noprof+0xff/0x360 [ 670.718576][T16153] alloc_pages_mpol+0xb3/0x260 [ 670.718608][T16153] vma_alloc_folio_noprof+0x1aa/0x300 [ 670.718641][T16153] handle_mm_fault+0xec2/0x2be0 [ 670.718703][T16153] ? vma_start_read+0x141/0x1f0 [ 670.718836][T16153] do_user_addr_fault+0x630/0x1080 [ 670.718871][T16153] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 670.718910][T16153] exc_page_fault+0x62/0xa0 [ 670.719076][T16153] asm_exc_page_fault+0x26/0x30 [ 670.719105][T16153] RIP: 0033:0x7fbadfa2c4cb [ 670.719125][T16153] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 670.719151][T16153] RSP: 002b:00007fbade4dce10 EFLAGS: 00010246 [ 670.719173][T16153] RAX: 00007fbade4def30 RBX: 00007fbadfca7640 RCX: 0000000000000000 [ 670.719202][T16153] RDX: 00007fbade4def78 RSI: 00007fbadfadedf8 RDI: 00007fbade4dce30 [ 670.719219][T16153] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 670.719237][T16153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.719254][T16153] R13: 00007fbadfcd6038 R14: 00007fbadfcd5fa0 R15: 00007ffec19c7308 [ 670.719362][T16153] [ 670.719397][T16153] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 670.786723][T16156] netlink: 'syz.9.10690': attribute type 149 has an invalid length. [ 670.892028][T16160] loop6: detected capacity change from 0 to 8192 [ 670.938237][ T9475] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.018696][T16160] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 671.027781][T16160] FAT-fs (loop6): Filesystem has been set read-only [ 671.035425][T16160] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 671.103812][T16182] siw: device registration error -23 [ 671.141380][T16191] siw: device registration error -23 [ 671.167345][T16196] loop6: detected capacity change from 0 to 512 [ 671.196631][T16196] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.10702: bad orphan inode 11862016 [ 671.196879][T16199] loop9: detected capacity change from 0 to 1024 [ 671.220727][T16199] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 671.224740][T16202] loop2: detected capacity change from 0 to 1024 [ 671.231928][T16196] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 671.243725][T16202] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 671.249771][T16199] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 671.259608][T16202] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 671.269664][T16196] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.292768][T16199] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 671.302582][T16199] EXT4-fs (loop9): orphan cleanup on readonly fs [ 671.309347][T16202] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 671.317495][T16199] EXT4-fs error (device loop9): ext4_read_inode_bitmap:167: comm syz.9.10703: Inode bitmap for bg 0 marked uninitialized [ 671.324557][T16202] EXT4-fs (loop2): orphan cleanup on readonly fs [ 671.332836][T16199] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 671.337828][T16202] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.10704: Inode bitmap for bg 0 marked uninitialized [ 671.373443][ T9331] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.383054][T16202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 671.409932][T16217] loop9: detected capacity change from 0 to 128 [ 671.418790][ T9830] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 671.426547][T16217] bio_check_eod: 70 callbacks suppressed [ 671.426567][T16217] syz.9.10706: attempt to access beyond end of device [ 671.426567][T16217] loop9: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 671.428544][ T9134] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.433475][T16217] buffer_io_error: 42 callbacks suppressed [ 671.433493][T16217] Buffer I/O error on dev loop9, logical block 2078, async page read [ 671.472878][T16217] syz.9.10706: attempt to access beyond end of device [ 671.472878][T16217] loop9: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 671.487677][T16217] Buffer I/O error on dev loop9, logical block 2078, async page read [ 671.504690][T16217] syz.9.10706: attempt to access beyond end of device [ 671.504690][T16217] loop9: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 671.519559][T16217] Buffer I/O error on dev loop9, logical block 2078, async page read [ 671.528332][T16217] syz.9.10706: attempt to access beyond end of device [ 671.528332][T16217] loop9: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 671.541758][T16217] Buffer I/O error on dev loop9, logical block 2078, async page read [ 671.552974][T16217] syz.9.10706: attempt to access beyond end of device [ 671.552974][T16217] loop9: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 671.566519][T16217] Buffer I/O error on dev loop9, logical block 2078, async page read [ 671.579991][T16217] syz.9.10706: attempt to access beyond end of device [ 671.579991][T16217] loop9: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 671.593470][T16217] Buffer I/O error on dev loop9, logical block 2078, async page read [ 671.608473][T16235] loop5: detected capacity change from 0 to 1024 [ 671.615808][T16235] EXT4-fs (loop5): inodes count not valid: 204800 vs 32 [ 671.630238][T16235] loop5: detected capacity change from 0 to 512 [ 671.630409][T16217] syz.9.10706: attempt to access beyond end of device [ 671.630409][T16217] loop9: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 671.650049][T16217] Buffer I/O error on dev loop9, logical block 2078, async page read [ 671.659196][T16217] syz.9.10706: attempt to access beyond end of device [ 671.659196][T16217] loop9: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 671.672554][T16217] Buffer I/O error on dev loop9, logical block 2078, async page read [ 671.681015][T16217] syz.9.10706: attempt to access beyond end of device [ 671.681015][T16217] loop9: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 671.694575][T16217] Buffer I/O error on dev loop9, logical block 2078, async page read [ 671.703414][T16217] syz.9.10706: attempt to access beyond end of device [ 671.703414][T16217] loop9: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 671.716786][T16217] Buffer I/O error on dev loop9, logical block 2078, async page read [ 671.717787][T16235] EXT4-fs (loop5): orphan cleanup on readonly fs [ 671.735480][T16235] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.10709: bad orphan inode 13 [ 671.766988][T16235] ext4_test_bit(bit=12, block=18) = 1 [ 671.772431][T16235] is_bad_inode(inode)=0 [ 671.776651][T16235] NEXT_ORPHAN(inode)=2130706432 [ 671.781565][T16235] max_ino=32 [ 671.786241][T16235] i_nlink=1 [ 671.860704][T16235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 671.866514][T16249] siw: device registration error -23 [ 671.959954][T16258] x_tables: duplicate underflow at hook 2 [ 671.984452][T16259] netlink: 'syz.2.10715': attribute type 13 has an invalid length. [ 672.005238][T16261] loop6: detected capacity change from 0 to 1024 [ 672.013007][T16261] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 672.022900][T16261] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 672.035951][T16261] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 672.044129][T16261] EXT4-fs (loop6): orphan cleanup on readonly fs [ 672.060128][T16261] EXT4-fs error (device loop6): ext4_read_inode_bitmap:167: comm syz.6.10719: Inode bitmap for bg 0 marked uninitialized [ 672.081934][T16261] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 672.110023][ T9830] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.220613][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 672.349805][ T7585] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.378743][T16288] siw: device registration error -23 [ 672.434537][T16291] loop5: detected capacity change from 0 to 8192 [ 672.876435][T16298] loop2: detected capacity change from 0 to 8192 [ 672.942730][T16298] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 672.950399][T16298] FAT-fs (loop2): Filesystem has been set read-only [ 672.971977][T16298] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 672.985071][T16305] loop4: detected capacity change from 0 to 8192 [ 673.035437][T16312] __nla_validate_parse: 22 callbacks suppressed [ 673.035455][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10731'. [ 673.086369][T16305] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 673.094000][T16305] FAT-fs (loop4): Filesystem has been set read-only [ 673.119128][T16317] loop2: detected capacity change from 0 to 1024 [ 673.140775][T16319] loop9: detected capacity change from 0 to 512 [ 673.152866][T16317] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 673.154387][T16305] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 673.171608][T16317] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 673.205010][T16317] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 673.214763][T16319] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 673.216068][T16317] EXT4-fs (loop2): orphan cleanup on readonly fs [ 673.229674][T16319] EXT4-fs (loop9): orphan cleanup on readonly fs [ 673.239038][T16319] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #16: comm syz.9.10733: corrupted inode contents [ 673.249394][T16317] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.10732: Inode bitmap for bg 0 marked uninitialized [ 673.251467][T16319] EXT4-fs (loop9): Remounting filesystem read-only [ 673.272033][T16319] EXT4-fs (loop9): 1 truncate cleaned up [ 673.279590][ T58] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 673.290255][ T58] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 673.312920][ T58] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 673.325349][T16317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 673.338255][T16319] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 673.373683][ T9134] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.395296][ T9331] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.425564][T16339] netlink: 'syz.4.10738': attribute type 13 has an invalid length. [ 673.440477][T16341] siw: device registration error -23 [ 673.468137][T16351] loop9: detected capacity change from 0 to 512 [ 673.498018][T16351] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.10739: bad orphan inode 11862016 [ 673.516817][T16353] loop2: detected capacity change from 0 to 1024 [ 673.525633][T16351] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 673.525971][T16353] EXT4-fs (loop2): inodes count not valid: 204800 vs 32 [ 673.546859][T16351] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 673.567056][T16353] loop2: detected capacity change from 0 to 512 [ 673.575354][T16353] EXT4-fs (loop2): orphan cleanup on readonly fs [ 673.588579][T16353] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.10736: bad orphan inode 13 [ 673.614910][T16353] ext4_test_bit(bit=12, block=18) = 1 [ 673.620335][T16353] is_bad_inode(inode)=0 [ 673.625976][T16353] NEXT_ORPHAN(inode)=2130706432 [ 673.630865][T16353] max_ino=32 [ 673.634119][T16353] i_nlink=1 [ 673.641154][T16353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 673.647720][ T29] kauditd_printk_skb: 975 callbacks suppressed [ 673.647747][ T29] audit: type=1326 audit(2000000244.730:219823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16350 comm="syz.9.10739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb96a6efc9 code=0x7ffc0000 [ 673.686355][ T29] audit: type=1326 audit(2000000244.730:219824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16350 comm="syz.9.10739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb96a6efc9 code=0x7ffc0000 [ 673.710409][ T29] audit: type=1326 audit(2000000244.740:219825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16358 comm="syz.4.10740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd8ed735e67 code=0x7ffc0000 [ 673.735611][ T29] audit: type=1326 audit(2000000244.740:219826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16358 comm="syz.4.10740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd8ed6db099 code=0x7ffc0000 [ 673.759478][ T29] audit: type=1326 audit(2000000244.740:219827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16358 comm="syz.4.10740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fd8ed73efc9 code=0x7ffc0000 [ 673.784891][ T29] audit: type=1326 audit(2000000244.740:219828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16350 comm="syz.9.10739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb96a6efc9 code=0x7ffc0000 [ 673.808692][ T29] audit: type=1326 audit(2000000244.740:219829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16350 comm="syz.9.10739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb96a6efc9 code=0x7ffc0000 [ 673.833848][ T29] audit: type=1326 audit(2000000244.740:219830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16350 comm="syz.9.10739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb96a6efc9 code=0x7ffc0000 [ 673.858387][ T29] audit: type=1326 audit(2000000244.740:219831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16358 comm="syz.4.10740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd8ed735e67 code=0x7ffc0000 [ 673.883013][ T29] audit: type=1326 audit(2000000244.740:219832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16358 comm="syz.4.10740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd8ed6db099 code=0x7ffc0000 [ 673.908951][T16333] netlink: 'syz.5.10735': attribute type 10 has an invalid length. [ 673.910061][ T9331] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 673.916930][T16333] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10735'. [ 673.938777][T16333] veth1_vlan: left promiscuous mode [ 673.944790][T16333] net_ratelimit: 4 callbacks suppressed [ 673.944807][T16333] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 673.987778][T16374] loop9: detected capacity change from 0 to 8192 [ 674.045520][T16374] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 674.053376][T16374] FAT-fs (loop9): Filesystem has been set read-only [ 674.062135][T16374] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 674.093401][ T58] Bluetooth: hci1: Frame reassembly failed (-84) [ 674.253338][T16390] Bluetooth: hci0: command 0x1003 tx timeout [ 674.253363][ T8578] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 674.271224][ T9134] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.366122][T16406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10747'. [ 674.384635][T16410] netlink: 'syz.2.10746': attribute type 13 has an invalid length. [ 674.401599][T16412] loop4: detected capacity change from 0 to 512 [ 674.415220][T16412] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 674.423279][T16412] EXT4-fs (loop4): orphan cleanup on readonly fs [ 674.431380][T16412] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.10748: corrupted inode contents [ 674.444743][T16412] EXT4-fs (loop4): Remounting filesystem read-only [ 674.451424][T16412] EXT4-fs (loop4): 1 truncate cleaned up [ 674.457300][ T58] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 674.467826][ T58] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 674.478364][ T58] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 674.488992][T16412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 674.511804][ T9475] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.802608][T16428] pim6reg1: entered promiscuous mode [ 674.809191][T16428] pim6reg1: entered allmulticast mode [ 674.964668][T16440] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 675.046158][T16448] loop9: detected capacity change from 0 to 512 [ 675.064145][T16448] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 675.072187][T16448] EXT4-fs (loop9): orphan cleanup on readonly fs [ 675.080409][T16448] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #16: comm syz.9.10754: corrupted inode contents [ 675.092702][T16448] EXT4-fs (loop9): Remounting filesystem read-only [ 675.099547][T16448] EXT4-fs (loop9): 1 truncate cleaned up [ 675.105626][ T52] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 675.116314][ T52] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 675.126957][ T52] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 675.138649][T16448] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 675.163178][ T9331] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.225406][T16460] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10757'. [ 675.282850][T16469] loop9: detected capacity change from 0 to 512 [ 675.292216][T16469] EXT4-fs (loop9): orphan cleanup on readonly fs [ 675.299384][T16469] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 675.312557][T16469] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #15: comm syz.9.10760: corrupted inode contents [ 675.321990][T16477] netlink: 'syz.2.10761': attribute type 13 has an invalid length. [ 675.332902][T16469] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #15: comm syz.9.10760: mark_inode_dirty error [ 675.345057][T16469] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #15: comm syz.9.10760: corrupted inode contents [ 675.357266][T16469] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2996: inode #15: comm syz.9.10760: mark_inode_dirty error [ 675.369772][T16469] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2999: inode #15: comm syz.9.10760: mark inode dirty (error -117) [ 675.384295][T16469] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117) [ 675.393559][T16469] EXT4-fs (loop9): 1 orphan inode deleted [ 675.399791][T16469] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 675.428864][ T9331] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.473434][T16483] loop9: detected capacity change from 0 to 512 [ 675.482305][T16483] EXT4-fs (loop9): orphan cleanup on readonly fs [ 675.489303][T16483] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #15: comm syz.9.10763: corrupted inode contents [ 675.501498][T16483] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #15: comm syz.9.10763: mark_inode_dirty error [ 675.513906][T16483] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #15: comm syz.9.10763: corrupted inode contents [ 675.526684][T16483] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2996: inode #15: comm syz.9.10763: mark_inode_dirty error [ 675.538917][T16483] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2999: inode #15: comm syz.9.10763: mark inode dirty (error -117) [ 675.552339][T16483] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117) [ 675.562275][T16483] EXT4-fs (loop9): 1 orphan inode deleted [ 675.568544][T16483] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 675.592633][ T9331] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.737036][T16498] netlink: 'syz.9.10766': attribute type 13 has an invalid length. [ 675.800236][T16500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10767'. [ 675.867116][T16506] FAULT_INJECTION: forcing a failure. [ 675.867116][T16506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 675.880300][T16506] CPU: 0 UID: 0 PID: 16506 Comm: syz.4.10770 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 675.880442][T16506] Tainted: [W]=WARN [ 675.880450][T16506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 675.880463][T16506] Call Trace: [ 675.880469][T16506] [ 675.880483][T16506] __dump_stack+0x1d/0x30 [ 675.880513][T16506] dump_stack_lvl+0xe8/0x140 [ 675.880583][T16506] dump_stack+0x15/0x1b [ 675.880601][T16506] should_fail_ex+0x265/0x280 [ 675.880623][T16506] should_fail+0xb/0x20 [ 675.880639][T16506] should_fail_usercopy+0x1a/0x20 [ 675.880661][T16506] _copy_from_user+0x1c/0xb0 [ 675.880758][T16506] ___sys_sendmsg+0xc1/0x1d0 [ 675.880794][T16506] __x64_sys_sendmsg+0xd4/0x160 [ 675.880818][T16506] x64_sys_call+0x191e/0x3000 [ 675.880841][T16506] do_syscall_64+0xd2/0x200 [ 675.880860][T16506] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 675.880933][T16506] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 675.880966][T16506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.880988][T16506] RIP: 0033:0x7fd8ed73efc9 [ 675.881003][T16506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.881071][T16506] RSP: 002b:00007fd8ec1a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.881091][T16506] RAX: ffffffffffffffda RBX: 00007fd8ed995fa0 RCX: 00007fd8ed73efc9 [ 675.881105][T16506] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 675.881118][T16506] RBP: 00007fd8ec1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 675.881132][T16506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.881144][T16506] R13: 00007fd8ed996038 R14: 00007fd8ed995fa0 R15: 00007ffc051fecb8 [ 675.881172][T16506] [ 676.092676][T16508] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10771'. [ 676.101834][ T7289] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 676.176063][T16529] netlink: 7 bytes leftover after parsing attributes in process `syz.6.10777'. [ 676.186031][T16529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10777'. [ 676.216244][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10778'. [ 676.287297][T16527] loop4: detected capacity change from 0 to 1024 [ 676.298101][T16527] EXT4-fs: Ignoring removed mblk_io_submit option [ 676.306827][T16527] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 676.386146][T16548] FAULT_INJECTION: forcing a failure. [ 676.386146][T16548] name failslab, interval 1, probability 0, space 0, times 0 [ 676.398881][T16548] CPU: 0 UID: 0 PID: 16548 Comm: wÞ££‘ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 676.398921][T16548] Tainted: [W]=WARN [ 676.398929][T16548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 676.398945][T16548] Call Trace: [ 676.398952][T16548] [ 676.398961][T16548] __dump_stack+0x1d/0x30 [ 676.398987][T16548] dump_stack_lvl+0xe8/0x140 [ 676.399012][T16548] dump_stack+0x15/0x1b [ 676.399111][T16548] should_fail_ex+0x265/0x280 [ 676.399131][T16548] should_failslab+0x8c/0xb0 [ 676.399200][T16548] kmem_cache_alloc_noprof+0x50/0x480 [ 676.399231][T16548] ? wg_peer_create+0x74/0x430 [ 676.399267][T16548] ? __siphash_unaligned+0x184/0x2d0 [ 676.399355][T16548] wg_peer_create+0x74/0x430 [ 676.399420][T16548] wg_set_device+0x9cd/0x1280 [ 676.399457][T16548] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 676.399491][T16548] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 676.399546][T16548] genl_family_rcv_msg_doit+0x143/0x1b0 [ 676.399587][T16548] genl_rcv_msg+0x422/0x460 [ 676.399618][T16548] ? __pfx_wg_set_device+0x10/0x10 [ 676.399705][T16548] netlink_rcv_skb+0x123/0x220 [ 676.399744][T16548] ? __pfx_genl_rcv_msg+0x10/0x10 [ 676.399780][T16548] genl_rcv+0x28/0x40 [ 676.399828][T16548] netlink_unicast+0x5c0/0x690 [ 676.399868][T16548] netlink_sendmsg+0x58b/0x6b0 [ 676.399892][T16548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.399916][T16548] __sock_sendmsg+0x145/0x180 [ 676.399976][T16548] ____sys_sendmsg+0x31e/0x4e0 [ 676.400021][T16548] ___sys_sendmsg+0x17b/0x1d0 [ 676.400064][T16548] __x64_sys_sendmsg+0xd4/0x160 [ 676.400093][T16548] x64_sys_call+0x191e/0x3000 [ 676.400120][T16548] do_syscall_64+0xd2/0x200 [ 676.400143][T16548] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 676.400178][T16548] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 676.400289][T16548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.400346][T16548] RIP: 0033:0x7f8dcd8cefc9 [ 676.400369][T16548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 676.400391][T16548] RSP: 002b:00007f8dcc337038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.400413][T16548] RAX: ffffffffffffffda RBX: 00007f8dcdb25fa0 RCX: 00007f8dcd8cefc9 [ 676.400468][T16548] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000000000000003 [ 676.400484][T16548] RBP: 00007f8dcc337090 R08: 0000000000000000 R09: 0000000000000000 [ 676.400497][T16548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.400517][T16548] R13: 00007f8dcdb26038 R14: 00007f8dcdb25fa0 R15: 00007fffe1de3b28 [ 676.400561][T16548] [ 676.698734][T16553] x_tables: duplicate underflow at hook 2 [ 676.788267][T16566] FAULT_INJECTION: forcing a failure. [ 676.788267][T16566] name failslab, interval 1, probability 0, space 0, times 0 [ 676.801085][T16566] CPU: 0 UID: 0 PID: 16566 Comm: syz.9.10793 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 676.801200][T16566] Tainted: [W]=WARN [ 676.801209][T16566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 676.801286][T16566] Call Trace: [ 676.801294][T16566] [ 676.801304][T16566] __dump_stack+0x1d/0x30 [ 676.801334][T16566] dump_stack_lvl+0xe8/0x140 [ 676.801363][T16566] dump_stack+0x15/0x1b [ 676.801405][T16566] should_fail_ex+0x265/0x280 [ 676.801432][T16566] should_failslab+0x8c/0xb0 [ 676.801543][T16566] __kmalloc_noprof+0xa5/0x570 [ 676.801656][T16566] ? sock_kmalloc+0x85/0xc0 [ 676.801678][T16566] sock_kmalloc+0x85/0xc0 [ 676.801698][T16566] ipv6_sock_ac_join+0x1ea/0x540 [ 676.801744][T16566] do_ipv6_setsockopt+0x1938/0x2160 [ 676.801785][T16566] ? kstrtoull+0x111/0x140 [ 676.801871][T16566] ? avc_has_perm_noaudit+0x1b1/0x200 [ 676.801901][T16566] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 676.801942][T16566] ipv6_setsockopt+0x59/0x130 [ 676.802069][T16566] udpv6_setsockopt+0x99/0xb0 [ 676.802100][T16566] sock_common_setsockopt+0x69/0x80 [ 676.802135][T16566] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 676.802205][T16566] __sys_setsockopt+0x184/0x200 [ 676.802254][T16566] __x64_sys_setsockopt+0x64/0x80 [ 676.802296][T16566] x64_sys_call+0x20ec/0x3000 [ 676.802394][T16566] do_syscall_64+0xd2/0x200 [ 676.802420][T16566] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 676.802466][T16566] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 676.802503][T16566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.802608][T16566] RIP: 0033:0x7ffb96a6efc9 [ 676.802626][T16566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 676.802668][T16566] RSP: 002b:00007ffb954cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 676.802689][T16566] RAX: ffffffffffffffda RBX: 00007ffb96cc5fa0 RCX: 00007ffb96a6efc9 [ 676.802702][T16566] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000006 [ 676.802772][T16566] RBP: 00007ffb954cf090 R08: 0000000000000014 R09: 0000000000000000 [ 676.802784][T16566] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 676.802797][T16566] R13: 00007ffb96cc6038 R14: 00007ffb96cc5fa0 R15: 00007ffed44eb138 [ 676.802832][T16566] [ 677.068466][T16570] loop4: detected capacity change from 0 to 512 [ 677.115109][T16570] EXT4-fs (loop4): 1 orphan inode deleted [ 677.121572][T16570] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 677.141598][ T58] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 1 [ 677.307842][T16600] FAULT_INJECTION: forcing a failure. [ 677.307842][T16600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.321067][T16600] CPU: 0 UID: 0 PID: 16600 Comm: syz.9.10803 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 677.321112][T16600] Tainted: [W]=WARN [ 677.321120][T16600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 677.321138][T16600] Call Trace: [ 677.321147][T16600] [ 677.321158][T16600] __dump_stack+0x1d/0x30 [ 677.321188][T16600] dump_stack_lvl+0xe8/0x140 [ 677.321233][T16600] dump_stack+0x15/0x1b [ 677.321272][T16600] should_fail_ex+0x265/0x280 [ 677.321296][T16600] should_fail+0xb/0x20 [ 677.321317][T16600] should_fail_usercopy+0x1a/0x20 [ 677.321345][T16600] _copy_from_user+0x1c/0xb0 [ 677.321434][T16600] vmemdup_user+0x5e/0xd0 [ 677.321482][T16600] path_setxattrat+0x1b6/0x310 [ 677.321608][T16600] __x64_sys_fsetxattr+0x6b/0x80 [ 677.321647][T16600] x64_sys_call+0x1ced/0x3000 [ 677.321702][T16600] do_syscall_64+0xd2/0x200 [ 677.321729][T16600] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 677.321768][T16600] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 677.321880][T16600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.321910][T16600] RIP: 0033:0x7ffb96a6efc9 [ 677.321926][T16600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.321950][T16600] RSP: 002b:00007ffb954cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 677.321977][T16600] RAX: ffffffffffffffda RBX: 00007ffb96cc5fa0 RCX: 00007ffb96a6efc9 [ 677.321994][T16600] RDX: 0000200000000380 RSI: 0000200000000280 RDI: 0000000000000003 [ 677.322073][T16600] RBP: 00007ffb954cf090 R08: 0000000000000000 R09: 0000000000000000 [ 677.322091][T16600] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 677.322108][T16600] R13: 00007ffb96cc6038 R14: 00007ffb96cc5fa0 R15: 00007ffed44eb138 [ 677.322134][T16600] [ 677.578695][T16606] loop4: detected capacity change from 0 to 512 [ 677.609128][T16606] EXT4-fs (loop4): orphan cleanup on readonly fs [ 677.619831][T16606] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.10806: corrupted inode contents [ 677.639385][T16606] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #15: comm syz.4.10806: mark_inode_dirty error [ 677.651655][T16606] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.10806: corrupted inode contents [ 677.664425][T16606] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.10806: mark_inode_dirty error [ 677.681065][ T3540] Bluetooth: hci0: Frame reassembly failed (-84) [ 677.688872][T16606] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.10806: mark inode dirty (error -117) [ 677.712255][T16606] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 677.723770][T16606] EXT4-fs (loop4): 1 orphan inode deleted [ 677.951140][T16642] loop6: detected capacity change from 0 to 128 [ 678.058641][T16652] loop6: detected capacity change from 0 to 8192 [ 678.139971][T16656] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16656 comm=syz.2.10818 [ 678.168339][T16656] loop2: detected capacity change from 0 to 512 [ 678.189477][T16659] loop4: detected capacity change from 0 to 512 [ 678.217657][T16656] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.10818: couldn't read orphan inode 26 (err -116) [ 678.233866][T16656] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 678.253552][T16659] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.10819: bad orphan inode 11862016 [ 678.265385][T16659] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 678.286817][T16669] __nla_validate_parse: 12 callbacks suppressed [ 678.286845][T16669] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10817'. [ 678.303599][T16652] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 678.311203][T16652] FAT-fs (loop6): Filesystem has been set read-only [ 678.327461][T16652] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 678.337035][T16673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10820'. [ 678.437365][T16688] netlink: 'syz.2.10823': attribute type 13 has an invalid length. [ 678.654669][ T29] kauditd_printk_skb: 1423 callbacks suppressed [ 678.654705][ T29] audit: type=1326 audit(2000000249.740:221241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.4.10824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd8ed735e67 code=0x7ffc0000 [ 678.694169][ T29] audit: type=1326 audit(2000000249.770:221242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.4.10824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd8ed6db099 code=0x7ffc0000 [ 678.717970][ T29] audit: type=1326 audit(2000000249.770:221243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.4.10824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fd8ed73efc9 code=0x7ffc0000 [ 678.741802][ T29] audit: type=1326 audit(2000000249.770:221244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.4.10824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd8ed735e67 code=0x7ffc0000 [ 678.765555][ T29] audit: type=1326 audit(2000000249.770:221245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.4.10824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd8ed6db099 code=0x7ffc0000 [ 678.789324][ T29] audit: type=1326 audit(2000000249.770:221246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.4.10824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fd8ed73efc9 code=0x7ffc0000 [ 678.815274][ T29] audit: type=1326 audit(2000000249.780:221247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.4.10824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd8ed735e67 code=0x7ffc0000 [ 678.839054][ T29] audit: type=1326 audit(2000000249.780:221248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.4.10824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd8ed6db099 code=0x7ffc0000 [ 678.862750][ T29] audit: type=1326 audit(2000000249.780:221249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.4.10824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fd8ed73efc9 code=0x7ffc0000 [ 678.886610][ T29] audit: type=1326 audit(2000000249.800:221250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16683 comm="syz.4.10824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd8ed735e67 code=0x7ffc0000 [ 679.105941][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10827'. [ 679.120687][T16704] loop6: detected capacity change from 0 to 512 [ 679.127958][T16704] EXT4-fs: Ignoring removed orlov option [ 679.134392][T16704] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 679.146190][T16704] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.10827: corrupted in-inode xattr: e_value size too large [ 679.160896][T16704] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.10827: couldn't read orphan inode 15 (err -117) [ 679.317600][T16718] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10829'. [ 679.326945][T16715] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10829'. [ 679.363854][T16722] loop4: detected capacity change from 0 to 1024 [ 679.371697][T16722] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 679.382147][T16722] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 679.394056][T16722] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 679.402659][T16722] EXT4-fs (loop4): orphan cleanup on readonly fs [ 679.409542][T16722] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.10831: Inode bitmap for bg 0 marked uninitialized [ 679.460598][T16730] FAULT_INJECTION: forcing a failure. [ 679.460598][T16730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.473804][T16730] CPU: 0 UID: 0 PID: 16730 Comm: syz.4.10832 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 679.473844][T16730] Tainted: [W]=WARN [ 679.473853][T16730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 679.473887][T16730] Call Trace: [ 679.473894][T16730] [ 679.473903][T16730] __dump_stack+0x1d/0x30 [ 679.473928][T16730] dump_stack_lvl+0xe8/0x140 [ 679.473954][T16730] dump_stack+0x15/0x1b [ 679.473978][T16730] should_fail_ex+0x265/0x280 [ 679.474000][T16730] should_fail+0xb/0x20 [ 679.474086][T16730] should_fail_usercopy+0x1a/0x20 [ 679.474115][T16730] _copy_from_user+0x1c/0xb0 [ 679.474150][T16730] ___sys_recvmsg+0xaa/0x370 [ 679.474179][T16730] ? 0xffffffff81000000 [ 679.474196][T16730] ? __rcu_read_unlock+0x4f/0x70 [ 679.474326][T16730] __x64_sys_recvmsg+0xd1/0x160 [ 679.474362][T16730] x64_sys_call+0x2b46/0x3000 [ 679.474385][T16730] do_syscall_64+0xd2/0x200 [ 679.474559][T16730] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 679.474624][T16730] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 679.474669][T16730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.474820][T16730] RIP: 0033:0x7fd8ed73efc9 [ 679.474840][T16730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.474865][T16730] RSP: 002b:00007fd8ec1a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 679.474928][T16730] RAX: ffffffffffffffda RBX: 00007fd8ed995fa0 RCX: 00007fd8ed73efc9 [ 679.474941][T16730] RDX: bf9d5a5a4c2f3718 RSI: 0000200000000040 RDI: 0000000000000006 [ 679.474958][T16730] RBP: 00007fd8ec1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 679.474974][T16730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.474992][T16730] R13: 00007fd8ed996038 R14: 00007fd8ed995fa0 R15: 00007ffc051fecb8 [ 679.475019][T16730] [ 679.480968][T16730] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10832'. [ 679.694449][ T8578] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 680.151507][T16756] loop2: detected capacity change from 0 to 512 [ 680.160157][T16756] EXT4-fs (loop2): orphan cleanup on readonly fs [ 680.167845][T16756] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.10838: corrupted inode contents [ 680.183675][T16756] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.10838: mark_inode_dirty error [ 680.201122][T16756] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.10838: corrupted inode contents [ 680.230304][T16766] binfmt_misc: register: failed to install interpreter file ./file2 [ 680.232911][T16756] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.10838: mark_inode_dirty error [ 680.251919][T16756] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.10838: mark inode dirty (error -117) [ 680.268880][T16756] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 680.279534][T16756] EXT4-fs (loop2): 1 orphan inode deleted [ 680.329211][T16771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10842'. [ 680.357802][T16776] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16776 comm=syz.5.10843 [ 680.402786][T16784] loop5: detected capacity change from 0 to 128 [ 680.417246][T16784] ext4 filesystem being mounted at /351/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 680.458346][T16780] loop2: detected capacity change from 0 to 8192 [ 680.528336][T16792] loop9: detected capacity change from 0 to 8192 [ 680.568606][T16780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10844'. [ 680.578437][T16780] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 680.586096][T16780] FAT-fs (loop2): Filesystem has been set read-only [ 680.589959][T16792] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 680.595594][T16780] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 680.600405][T16792] FAT-fs (loop9): Filesystem has been set read-only [ 680.623100][T16792] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 680.693858][T16818] loop2: detected capacity change from 0 to 512 [ 680.707894][T16821] loop9: detected capacity change from 0 to 128 [ 680.716400][T16818] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.10851: bad orphan inode 11862016 [ 680.729067][T16818] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 680.853722][T16828] loop9: detected capacity change from 0 to 1024 [ 680.860966][T16828] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 680.869742][T16832] loop2: detected capacity change from 0 to 512 [ 680.872467][T16832] EXT4-fs (loop2): orphan cleanup on readonly fs [ 680.884829][T16832] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.10855: corrupted inode contents [ 680.898361][T16832] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.10855: mark_inode_dirty error [ 680.910191][T16832] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.10855: corrupted inode contents [ 680.922510][T16832] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.10855: mark_inode_dirty error [ 680.929791][T16842] netlink: 7 bytes leftover after parsing attributes in process `syz.9.10856'. [ 680.934945][T16832] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.10855: mark inode dirty (error -117) [ 680.944120][T16842] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10856'. [ 680.956653][T16832] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 680.956704][T16832] EXT4-fs (loop2): 1 orphan inode deleted [ 681.024737][T16846] siw: device registration error -23 [ 681.147889][T16867] loop4: detected capacity change from 0 to 8192 [ 681.230439][T16887] loop9: detected capacity change from 0 to 128 [ 681.246880][T16887] ext4 filesystem being mounted at /326/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 681.253267][T16867] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 681.286345][T16867] FAT-fs (loop4): Filesystem has been set read-only [ 681.291432][T16891] netlink: 'syz.2.10866': attribute type 13 has an invalid length. [ 681.311402][T16867] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 681.396516][T16897] x_tables: duplicate underflow at hook 1 [ 681.414695][T16906] loop4: detected capacity change from 0 to 2048 [ 681.434639][T16906] EXT4-fs (loop4): failed to initialize system zone (-117) [ 681.441906][T16906] EXT4-fs (loop4): mount failed [ 681.481524][T16927] siw: device registration error -23 [ 681.570753][T16936] loop5: detected capacity change from 0 to 512 [ 681.592333][T16936] EXT4-fs (loop5): orphan cleanup on readonly fs [ 681.602733][T16936] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.10873: corrupted inode contents [ 681.617289][T16936] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #15: comm syz.5.10873: mark_inode_dirty error [ 681.635599][T16936] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.10873: corrupted inode contents [ 681.655614][T16936] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2996: inode #15: comm syz.5.10873: mark_inode_dirty error [ 681.672061][T16936] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.10873: mark inode dirty (error -117) [ 681.686171][T16936] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 681.695575][T16936] EXT4-fs (loop5): 1 orphan inode deleted [ 681.793950][T16980] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16980 comm=syz.5.10882 [ 681.831372][T16986] loop5: detected capacity change from 0 to 512 [ 681.842107][T16986] EXT4-fs (loop5): orphan cleanup on readonly fs [ 681.853241][T16986] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.10883: bad orphan inode 13 [ 681.859747][T16987] siw: device registration error -23 [ 681.869235][T16986] ext4_test_bit(bit=12, block=18) = 1 [ 681.876245][T16986] is_bad_inode(inode)=0 [ 681.880484][T16986] NEXT_ORPHAN(inode)=2130706432 [ 681.885391][T16986] max_ino=32 [ 681.888730][T16986] i_nlink=1 [ 681.897695][T16986] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 681.923734][T16986] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.10883: bg 0: block 248: padding at end of block bitmap is not set [ 681.944865][T16986] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.10883: Failed to acquire dquot type 1 [ 681.966993][T16986] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 682.030151][ T7585] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 682.067291][ T7585] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 682.103598][T17020] loop2: detected capacity change from 0 to 512 [ 682.145718][T17020] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.10890: bad orphan inode 11862016 [ 682.166556][T17020] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 682.350797][T17059] loop2: detected capacity change from 0 to 1024 [ 682.365191][T17059] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 682.375056][T17059] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 682.391090][T17059] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 682.407367][T17059] EXT4-fs (loop2): orphan cleanup on readonly fs [ 682.417624][T17059] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.10895: Inode bitmap for bg 0 marked uninitialized [ 682.461589][T17046] lo speed is unknown, defaulting to 1000 [ 682.472135][T17046] lo speed is unknown, defaulting to 1000 [ 682.503916][T17092] loop6: detected capacity change from 0 to 1024 [ 682.542961][T17092] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.10900: Allocating blocks 449-513 which overlap fs metadata [ 682.621152][T17091] EXT4-fs (loop6): pa ffff888100496e00: logic 48, phys. 177, len 21 [ 682.630827][T17091] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 682.647820][T17046] chnl_net:caif_netlink_parms(): no params data found [ 682.719786][T17046] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.727217][T17046] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.734888][T17046] bridge_slave_0: entered allmulticast mode [ 682.741431][T17046] bridge_slave_0: entered promiscuous mode [ 682.751275][T17046] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.758483][T17046] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.765850][T17046] bridge_slave_1: entered allmulticast mode [ 682.772695][T17046] bridge_slave_1: entered promiscuous mode [ 682.802124][T17046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.823484][T17272] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 682.844801][T17046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.918015][T17046] team0: Port device team_slave_0 added [ 682.928179][T17046] team0: Port device team_slave_1 added [ 682.949492][T17340] loop2: detected capacity change from 0 to 512 [ 682.957186][T17344] loop4: detected capacity change from 0 to 512 [ 682.980463][T17046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.987531][T17046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.013499][T17046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.026321][T17340] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.10905: bad orphan inode 11862016 [ 683.037821][T17340] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 683.049236][T17344] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.10904: bad orphan inode 11862016 [ 683.060969][T17046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.068021][T17046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.094051][T17046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.107526][T17344] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 683.263010][T17046] hsr_slave_0: entered promiscuous mode [ 683.277864][T17046] hsr_slave_1: entered promiscuous mode [ 683.291426][T17046] debugfs: 'hsr0' already exists in 'hsr' [ 683.297244][T17046] Cannot create hsr debugfs directory [ 683.390411][T17473] loop4: detected capacity change from 0 to 1024 [ 683.407573][T17473] EXT4-fs (loop4): inodes count not valid: 204800 vs 32 [ 683.625794][T17046] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 683.634852][T17046] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 683.645662][T17046] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 683.655211][T17046] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 683.700703][T17046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.716426][T17046] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.727030][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.734222][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.749037][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.756294][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.830146][T17046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.906876][T17547] __nla_validate_parse: 16 callbacks suppressed [ 683.906896][T17547] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10912'. [ 684.221665][ T29] kauditd_printk_skb: 1309 callbacks suppressed [ 684.221685][ T29] audit: type=1326 audit(2000000255.300:222558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17564 comm="syz.2.10914" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8dcd8cefc9 code=0x0 [ 684.346620][T17046] veth0_vlan: entered promiscuous mode [ 684.357067][T17566] loop2: detected capacity change from 0 to 1024 [ 684.384020][T17046] veth1_vlan: entered promiscuous mode [ 684.396241][T17566] EXT4-fs (loop2): inodes count not valid: 204800 vs 32 [ 684.460450][T17046] veth0_macvtap: entered promiscuous mode [ 684.499183][T17046] veth1_macvtap: entered promiscuous mode [ 684.512240][T17046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.528394][T17046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.542528][T17570] siw: device registration error -23 [ 684.551634][ T58] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.561228][ T58] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.570879][ T58] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.608621][ T29] audit: type=1400 audit(2000000255.690:222559): avc: denied { mounton } for pid=17046 comm="syz-executor" path="/root/syzkaller.Hb24xM/syz-tmp" dev="sda1" ino=2095 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 684.635236][T17575] loop9: detected capacity change from 0 to 512 [ 684.645222][ T58] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.663787][T17578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10917'. [ 684.694054][T17575] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.10916: bad orphan inode 11862016 [ 684.718211][T17575] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 684.725011][ T29] audit: type=1400 audit(2000000255.770:222560): avc: denied { mount } for pid=17046 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 684.751533][ T29] audit: type=1400 audit(2000000255.770:222561): avc: denied { mounton } for pid=17046 comm="syz-executor" path="/root/syzkaller.Hb24xM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 684.779768][ T29] audit: type=1400 audit(2000000255.770:222562): avc: denied { mounton } for pid=17046 comm="syz-executor" path="/root/syzkaller.Hb24xM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=114785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 684.809123][ T29] audit: type=1400 audit(2000000255.770:222563): avc: denied { mounton } for pid=17046 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 684.832498][ T29] audit: type=1400 audit(2000000255.770:222564): avc: denied { mount } for pid=17046 comm="syz-executor" name="/" dev="gadgetfs" ino=60549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 684.859923][ T29] audit: type=1326 audit(2000000255.840:222565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17574 comm="syz.9.10916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb96a6efc9 code=0x7ffc0000 [ 684.885135][ T29] audit: type=1326 audit(2000000255.840:222566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17574 comm="syz.9.10916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb96a6efc9 code=0x7ffc0000 [ 684.908997][ T29] audit: type=1326 audit(2000000255.840:222567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17574 comm="syz.9.10916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7ffb96a6efc9 code=0x7ffc0000 [ 684.986359][T17595] loop6: detected capacity change from 0 to 128 [ 684.986909][T17589] loop7: detected capacity change from 0 to 8192 [ 685.005899][T17595] ext4 filesystem being mounted at /308/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 685.089888][T17589] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 685.097766][T17589] FAT-fs (loop7): Filesystem has been set read-only [ 685.112442][T17589] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 685.150261][T17607] loop9: detected capacity change from 0 to 8192 [ 685.154398][T17619] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17619 comm=syz.2.10925 [ 685.232761][T17633] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10927'. [ 685.242906][T17633] bridge_slave_1: left allmulticast mode [ 685.249366][T17633] bridge_slave_1: left promiscuous mode [ 685.255108][T17633] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.265519][T17633] bridge_slave_0: left allmulticast mode [ 685.271219][T17633] bridge_slave_0: left promiscuous mode [ 685.277856][T17633] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.321882][T17607] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 685.329630][T17607] FAT-fs (loop9): Filesystem has been set read-only [ 685.342886][T17607] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 685.513891][T17679] netlink: 'syz.2.10931': attribute type 13 has an invalid length. [ 685.591771][T17694] loop2: detected capacity change from 0 to 512 [ 685.608504][T17694] EXT4-fs (loop2): orphan cleanup on readonly fs [ 685.626551][T17694] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.10933: bad orphan inode 13 [ 685.641693][T17694] ext4_test_bit(bit=12, block=18) = 1 [ 685.641987][T17700] netlink: 'syz.4.10934': attribute type 3 has an invalid length. [ 685.647162][T17694] is_bad_inode(inode)=0 [ 685.647173][T17694] NEXT_ORPHAN(inode)=2130706432 [ 685.647182][T17694] max_ino=32 [ 685.647188][T17694] i_nlink=1 [ 685.672316][T17694] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 685.682880][T17700] netlink: 'syz.4.10934': attribute type 1 has an invalid length. [ 685.691261][T17694] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 685.731804][T17711] 9pnet_fd: Insufficient options for proto=fd [ 685.741436][T17715] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17715 comm=syz.2.10936 [ 685.817538][T17724] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10938'. [ 685.921718][T17730] loop2: detected capacity change from 0 to 512 [ 685.930438][T17730] EXT4-fs (loop2): orphan cleanup on readonly fs [ 685.938980][T17730] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.10939: corrupted inode contents [ 685.957888][T17730] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.10939: mark_inode_dirty error [ 685.971337][T17730] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.10939: corrupted inode contents [ 686.003160][T17730] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.10939: mark_inode_dirty error [ 686.028501][T17730] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.10939: mark inode dirty (error -117) [ 686.061690][T17730] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 686.076055][T17730] EXT4-fs (loop2): 1 orphan inode deleted [ 686.097206][T17761] netlink: 'syz.4.10942': attribute type 13 has an invalid length. [ 686.162627][T17771] siw: device registration error -23 [ 686.294227][T17799] loop9: detected capacity change from 0 to 512 [ 686.315802][T17799] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.10948: bad orphan inode 11862016 [ 686.332977][T17799] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 686.480628][T17841] loop9: detected capacity change from 0 to 1024 [ 686.488768][T17841] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 686.502349][T17841] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 686.515889][T17841] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 686.524056][T17841] EXT4-fs (loop9): orphan cleanup on readonly fs [ 686.530876][T17841] EXT4-fs error (device loop9): ext4_read_inode_bitmap:167: comm syz.9.10952: Inode bitmap for bg 0 marked uninitialized [ 686.588654][T17863] netlink: 'syz.9.10954': attribute type 13 has an invalid length. [ 686.622643][T17870] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10957'. [ 686.631713][T17870] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10957'. [ 686.648868][T17868] siw: device registration error -23 [ 686.662080][T17873] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10958'. [ 686.736952][T17892] netlink: 'syz.2.10959': attribute type 13 has an invalid length. [ 686.905672][T17910] FAULT_INJECTION: forcing a failure. [ 686.905672][T17910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 686.915230][T17912] loop7: detected capacity change from 0 to 512 [ 686.918876][T17910] CPU: 1 UID: 0 PID: 17910 Comm: syz.9.10962 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 686.919000][T17910] Tainted: [W]=WARN [ 686.919036][T17910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 686.919055][T17910] Call Trace: [ 686.919063][T17910] [ 686.919147][T17910] __dump_stack+0x1d/0x30 [ 686.919180][T17910] dump_stack_lvl+0xe8/0x140 [ 686.919209][T17910] dump_stack+0x15/0x1b [ 686.919234][T17910] should_fail_ex+0x265/0x280 [ 686.919265][T17910] should_fail+0xb/0x20 [ 686.919310][T17910] should_fail_usercopy+0x1a/0x20 [ 686.919340][T17910] _copy_to_user+0x20/0xa0 [ 686.919377][T17910] simple_read_from_buffer+0xb5/0x130 [ 686.919457][T17910] proc_fail_nth_read+0x10e/0x150 [ 686.919535][T17910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 686.919580][T17910] vfs_read+0x1a8/0x770 [ 686.919614][T17910] ? __rcu_read_unlock+0x4f/0x70 [ 686.919652][T17910] ? __fget_files+0x184/0x1c0 [ 686.919729][T17910] ksys_read+0xda/0x1a0 [ 686.919766][T17910] __x64_sys_read+0x40/0x50 [ 686.919803][T17910] x64_sys_call+0x27c0/0x3000 [ 686.919845][T17910] do_syscall_64+0xd2/0x200 [ 686.919885][T17910] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 686.919926][T17910] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 686.919973][T17910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.920004][T17910] RIP: 0033:0x7ffb96a6d9dc [ 686.920055][T17910] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 686.920081][T17910] RSP: 002b:00007ffb954cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 686.920109][T17910] RAX: ffffffffffffffda RBX: 00007ffb96cc5fa0 RCX: 00007ffb96a6d9dc [ 686.920128][T17910] RDX: 000000000000000f RSI: 00007ffb954cf0a0 RDI: 0000000000000006 [ 686.920146][T17910] RBP: 00007ffb954cf090 R08: 0000000000000000 R09: 0000000000000000 [ 686.920164][T17910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.920182][T17910] R13: 00007ffb96cc6038 R14: 00007ffb96cc5fa0 R15: 00007ffed44eb138 [ 686.920268][T17910] [ 687.136259][T17912] EXT4-fs (loop7): orphan cleanup on readonly fs [ 687.143212][T17912] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.10963: bad orphan inode 13 [ 687.154772][T17912] ext4_test_bit(bit=12, block=18) = 1 [ 687.160168][T17912] is_bad_inode(inode)=0 [ 687.160653][T17916] loop4: detected capacity change from 0 to 1024 [ 687.164437][T17912] NEXT_ORPHAN(inode)=2130706432 [ 687.164450][T17912] max_ino=32 [ 687.164459][T17912] i_nlink=1 [ 687.184375][T17912] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 687.185783][T17916] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 687.205334][T17916] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 687.217315][T17916] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 687.228563][T17916] EXT4-fs (loop4): orphan cleanup on readonly fs [ 687.235500][T17912] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 687.245051][T17916] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.10965: Inode bitmap for bg 0 marked uninitialized [ 687.278019][T17936] netlink: 7 bytes leftover after parsing attributes in process `syz.7.10967'. [ 687.292953][T17936] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10967'. [ 687.314464][T17940] siw: device registration error -23 [ 687.351937][T17951] netlink: 7 bytes leftover after parsing attributes in process `syz.7.10972'. [ 687.365789][T17952] netlink: 'syz.4.10968': attribute type 13 has an invalid length. [ 687.395986][T17954] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17954 comm=syz.7.10973 [ 687.396090][T17950] ================================================================== [ 687.396121][T17950] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 687.396153][T17950] [ 687.396161][T17950] write to 0xffffffff868894a8 of 8 bytes by task 17954 on cpu 0: [ 687.396183][T17950] data_alloc+0x274/0x2e0 [ 687.396206][T17950] prb_reserve+0x807/0xaf0 [ 687.396229][T17950] vprintk_store+0x56d/0x860 [ 687.396256][T17950] vprintk_emit+0x10d/0x580 [ 687.396284][T17950] vprintk_default+0x26/0x30 [ 687.396311][T17950] vprintk+0x1d/0x30 [ 687.396347][T17950] _printk+0x79/0xa0 [ 687.396376][T17950] selinux_netlink_send+0x583/0x5f0 [ 687.396399][T17950] security_netlink_send+0x40/0x80 [ 687.396419][T17950] netlink_sendmsg+0x498/0x6b0 [ 687.396438][T17950] __sock_sendmsg+0x145/0x180 [ 687.396461][T17950] __sys_sendto+0x268/0x330 [ 687.396501][T17950] __x64_sys_sendto+0x76/0x90 [ 687.396530][T17950] x64_sys_call+0x2d14/0x3000 [ 687.396556][T17950] do_syscall_64+0xd2/0x200 [ 687.396581][T17950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.396608][T17950] [ 687.396616][T17950] read to 0xffffffff868894a8 of 16 bytes by task 17950 on cpu 1: [ 687.396637][T17950] _prb_read_valid+0x1bc/0x920 [ 687.396662][T17950] prb_read_valid+0x3c/0x60 [ 687.396686][T17950] printk_get_next_message+0xc8/0x510 [ 687.396719][T17950] console_flush_all+0x290/0x6a0 [ 687.396745][T17950] console_unlock+0xa1/0x2e0 [ 687.396770][T17950] do_con_write+0x28df/0x2940 [ 687.396812][T17950] con_write+0x24/0x40 [ 687.396845][T17950] do_output_char+0x49a/0x500 [ 687.396884][T17950] n_tty_write+0x869/0xb40 [ 687.396921][T17950] file_tty_write+0x378/0x690 [ 687.396946][T17950] tty_write+0x25/0x30 [ 687.396964][T17950] vfs_write+0x52a/0x960 [ 687.396987][T17950] ksys_write+0xda/0x1a0 [ 687.397016][T17950] __x64_sys_write+0x40/0x50 [ 687.397048][T17950] x64_sys_call+0x2802/0x3000 [ 687.397076][T17950] do_syscall_64+0xd2/0x200 [ 687.397099][T17950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.397125][T17950] [ 687.397130][T17950] Reported by Kernel Concurrency Sanitizer on: [ 687.397146][T17950] CPU: 1 UID: 0 PID: 17950 Comm: syz.6.10971 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 687.397186][T17950] Tainted: [W]=WARN [ 687.397195][T17950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 687.397213][T17950] ================================================================== [ 687.443167][ T3513] Bluetooth: hci0: Frame reassembly failed (-84) [ 689.463648][ T8578] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 689.465106][ T7289] Bluetooth: hci0: command 0x1003 tx timeout