last executing test programs: 1m6.581868164s ago: executing program 3 (id=4042): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000740)='kfree\x00', r2, 0x0, 0x8000000000020}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x4, './file0/file1\x00'}}) 1m6.547766045s ago: executing program 3 (id=4043): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f00000023c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x43, 0xa02, &(0x7f0000003640)="$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") 1m6.505597125s ago: executing program 3 (id=4046): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x3, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000780)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffff289fffffffe7ee00000058fbf6aabe36ca1c2200", 0x58}], 0x1) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) listen(r2, 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) openat(r1, &(0x7f0000000900)='./file0\x00', 0x80000, 0x84) writev(r3, &(0x7f0000000300), 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@sg0, 0x0, 0x0, 0x200000, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80008, 0x0) mount$cgroup2(0x0, 0x0, 0x0, 0x81, 0x0) pread64(r4, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e20, 0x9, @mcast1, 0xffffffd5}}, [0x3, 0x2, 0x9, 0xfffffffffffffffa, 0x3ff, 0x8000000000, 0xffffffffffff1aec, 0x9, 0x8, 0x81, 0x6, 0x2, 0xd2, 0xdee, 0x1c000000000]}, &(0x7f0000000840)=0x100) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000880)={r5, 0x901a}, &(0x7f00000008c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m6.470267186s ago: executing program 3 (id=4048): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x70e, &(0x7f0000000c00)="$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") stat(&(0x7f0000000000)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000001000000000040004ef818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800b7ec125d007b8af80301000000bf3ca38005000000070200eeb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0xe0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x2c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000280)="d3f75a090e1ed49c1167a889b33431cba888b0577f07ff8cd0a2b78283e4a0ad8a865bb93cc90790df313a49d8d91f95c73fd4878ab83507bdfccfcccfe6d77996c54ad4e8cc7a75ebb91158f2e5a9b3267e3b39d8db6d1c3772ab3eb7d636d926cbea23c62ec7e6d0abb6aa1a096990b420d5c4c32560b48fe14f660d5d5899022b35e1ecc9ba3ac421d41a5e460034c3655a9c393b1fec945bcc633d4339caac90e9df768429677abfc50388cc927ac55049df50ba2b163ac87f6ab6b8692b954b28d83f494514c430934d78f786c851", 0xd1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc1d}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="020000004c00000000002c0000000000f1ff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00'/24], 0x48) 1m6.011942115s ago: executing program 3 (id=4054): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000080f030cd5c925b", @ANYRES32], 0x1, 0x2b2, &(0x7f00000006c0)="$eJzs3NFLU28cx/Hvz6mbE91+EEFB9aVu6uag6w+oEQrRoDAn1UVwzLMaO21yzlgsIncT3fZ3SJfdBdU/4E100313EgTdeBGd8Jwd3XTa1M2t+X6BnO/xeT4+jzrlewSf9XtvnhZyrpEzyzIUUxkSqcmGSHKzqvuvfh3y61FpVJMr4z+/nrt7/8GtdCYzM6c6m56/mlLVyQsfnr14e/FTeXzh3eT7qKwlH67/SH1bO712Zv33/JO8q3lXi6WymrpYKpXNRdvSpbxbMFTv2JbpWpovupbTNJ6zS8vLVTWLSxPxZcdyXTWLVS1YVS2XtOxU1Xxs5otqGIZOxOVkG25jTnZ1bs5M7znsRTq6I3RetPl2rNUcx0nXWg9mV7u1LwAA0L/27/+DXn/v/j+zEFw73P+L0P93Sa3p7i/9PwaC46TNeP3ntxn9PwAAAAAAAAAAAAAAAAAAAAAA/4INz0t4npcIr+FbVERiIhLe93qf6I5Dfv+v9Wi76LCGf9yLidivK9lKNrgG4+mc5MUWS6YkIb/810NdUM/ezMxMqW+k/iE38yuVbMQ/m8DPh5Kt8uf/nw7yKh83c5V6fkTijeunJCGnWq+f2s6HxyGsVLKjcvlSQ96QhHx+JCWxZcl/XW/nX06r3rid2bH+mD8PAAAAAIBBYOiWZPPzb3D2o+FPiMnu8SB/gL8P7Hi+Hpaz7RxRCQAAAAAAjsytPi+Ytm05hyiiInKE+KAWEemLbeworotIH2zjuIqYiATv0cPEv2/F20p5bcwZFpGef1kOUPT6NxMAAACATttu+g8Q+vKqizsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODkafc8sHD+rqFwYJ94w3KRY/8EAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD7yJwAA//+j7Rqj") r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x4, 0x7, 0xff, 0x6, 0x2, 0x6, 0x5, 0x5, 0x81, 0x8, 0xc, 0x0, 0x1, 0x8}, 0xe) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000080)={[{@errors_remount}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 1m6.011016145s ago: executing program 32 (id=4054): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000080f030cd5c925b", @ANYRES32], 0x1, 0x2b2, &(0x7f00000006c0)="$eJzs3NFLU28cx/Hvz6mbE91+EEFB9aVu6uag6w+oEQrRoDAn1UVwzLMaO21yzlgsIncT3fZ3SJfdBdU/4E100313EgTdeBGd8Jwd3XTa1M2t+X6BnO/xeT4+jzrlewSf9XtvnhZyrpEzyzIUUxkSqcmGSHKzqvuvfh3y61FpVJMr4z+/nrt7/8GtdCYzM6c6m56/mlLVyQsfnr14e/FTeXzh3eT7qKwlH67/SH1bO712Zv33/JO8q3lXi6WymrpYKpXNRdvSpbxbMFTv2JbpWpovupbTNJ6zS8vLVTWLSxPxZcdyXTWLVS1YVS2XtOxU1Xxs5otqGIZOxOVkG25jTnZ1bs5M7znsRTq6I3RetPl2rNUcx0nXWg9mV7u1LwAA0L/27/+DXn/v/j+zEFw73P+L0P93Sa3p7i/9PwaC46TNeP3ntxn9PwAAAAAAAAAAAAAAAAAAAAAA/4INz0t4npcIr+FbVERiIhLe93qf6I5Dfv+v9Wi76LCGf9yLidivK9lKNrgG4+mc5MUWS6YkIb/810NdUM/ezMxMqW+k/iE38yuVbMQ/m8DPh5Kt8uf/nw7yKh83c5V6fkTijeunJCGnWq+f2s6HxyGsVLKjcvlSQ96QhHx+JCWxZcl/XW/nX06r3rid2bH+mD8PAAAAAIBBYOiWZPPzb3D2o+FPiMnu8SB/gL8P7Hi+Hpaz7RxRCQAAAAAAjsytPi+Ytm05hyiiInKE+KAWEemLbeworotIH2zjuIqYiATv0cPEv2/F20p5bcwZFpGef1kOUPT6NxMAAACATttu+g8Q+vKqizsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODkafc8sHD+rqFwYJ94w3KRY/8EAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD7yJwAA//+j7Rqj") r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x4, 0x7, 0xff, 0x6, 0x2, 0x6, 0x5, 0x5, 0x81, 0x8, 0xc, 0x0, 0x1, 0x8}, 0xe) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000080)={[{@errors_remount}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 33.464965479s ago: executing program 2 (id=4584): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 33.40652508s ago: executing program 2 (id=4585): r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r0) 33.053546847s ago: executing program 2 (id=4592): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={0x0}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x3c, 0x1, 0x8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$eJzs28FrXEUcB/BfkqapqclGrdUWxEEvFeTR5OBFL0FSkC4obSO0gvBqXnTJczfkLYEVsXry6t8hggjeBPGml1z8DwRvuXisID7JrrZd3RVWQjfI53PZH8z7zs7ssAuzzBy+8tn7O9tVtp13Y3ZmJmZ3I9LdFClm4y8fxwsvf//DM9dv3rq63mxuXEvpyvqN1ZdSSsvPfvvWh18891337JtfL3+zEAcrbx/+svbzwfmDC4e/33ivVaVWldqdbsrT7U6nm98ui7TVqnaylN4oi7wqUqtdFXtD7dtlZ3e3l/L21tLi7l5RVSlv99JO0UvdTuru9VL+bt5qpyzL0tJiMLlT96rNz+/WdR1R1/NxOuq6rh+JxTgbj8ZSLEcjVuKxeDyeiHPxZJyPp+Lp+OqnL3tHCQAAAAAAAAAAAAAAAAAAAOD4THr//0L/qWmPGgAAAAAAAAAAAAAAAAAAAP5frt+8dXW92dy4ltKZiPLT/c39zcHroH19O1pRRhGXoxG/Rf/2/8CgvvJac+Ny6luJT8o7f+bv7G/ODedXoxEvjs6vDvJpOL8Qiw/m16IR50bl52NtZP5MXHr+gXwWjfjxnehEGVtxlL3//h+tpvTq682/5S/2nxtv7mEsDwAAAByLLN0zcv+eZePaB/kJ/h8Y2l8fZS+emurUiYiq98FOXpbFnmJkcelkDKNfnD7ODucjYrLUr3VdT/9DmFIx/puyEBH/ueeZiDgZE/xHMe1fJh6G+4s+7ZEAAAAAAAAAAAAwibHHABf+7YTg3ETHCac9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//0AbP3Q==") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r5}, 0x10) write$binfmt_register(r4, &(0x7f00000003c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '#! ', 0x3a, '#\x0e ', 0x3a, './file1', 0x3a, [0x46]}, 0x2e) socket$unix(0x1, 0x1, 0x0) ftruncate(r3, 0x2000009) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 32.177312164s ago: executing program 2 (id=4598): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mlockall(0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0xc, 0x0, 0x0) 31.964960938s ago: executing program 2 (id=4600): syz_io_uring_setup(0x2106, 0x0, &(0x7f0000000400), 0x0) r0 = syz_open_dev$evdev(0x0, 0x8000, 0x10000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x803fd, 0x1, 0x800}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001640)={{0x0, 0x6, 0x10000, 0x9, 0xb, 0x6, 0xffffffff, 0x7, 0x7, 0x9, 0x9, 0x1, 0x4, 0x8}, 0x18, [0x0, 0x0, 0x0]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7070000080000008500000069000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1066, 0x80, 0x4, 0x10001}, &(0x7f0000000040), &(0x7f00000000c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='-:-%-(\'\xb9^/$]&\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c90780100ffff000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a0000b042d200000000000000000000643fcbb2c5a57df67d544af6e8dafe02c36a90cbdce39ea99a3c09"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) recvmmsg(r3, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000100), &(0x7f0000000300)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x84) 31.928012739s ago: executing program 33 (id=4600): syz_io_uring_setup(0x2106, 0x0, &(0x7f0000000400), 0x0) r0 = syz_open_dev$evdev(0x0, 0x8000, 0x10000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x803fd, 0x1, 0x800}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001640)={{0x0, 0x6, 0x10000, 0x9, 0xb, 0x6, 0xffffffff, 0x7, 0x7, 0x9, 0x9, 0x1, 0x4, 0x8}, 0x18, [0x0, 0x0, 0x0]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7070000080000008500000069000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1066, 0x80, 0x4, 0x10001}, &(0x7f0000000040), &(0x7f00000000c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='-:-%-(\'\xb9^/$]&\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c90780100ffff000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a0000b042d200000000000000000000643fcbb2c5a57df67d544af6e8dafe02c36a90cbdce39ea99a3c09"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) recvmmsg(r3, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000100), &(0x7f0000000300)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x84) 20.159562648s ago: executing program 34 (id=4796): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) stat(&(0x7f0000000000)='./file1\x00', 0x0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x80, 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000001000000000040004ef818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800b7ec125d007b8af80301000000bf3ca38005000000070200eeb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) close(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0xe0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x2c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r6) add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000280)="d3f75a090e1ed49c1167a889b33431cba888b0577f07ff8cd0a2b78283e4a0ad8a865bb93cc90790df313a49d8d91f95c73fd4878ab83507bdfccfcccfe6d77996c54ad4e8cc7a75ebb91158f2e5a9b3267e3b39d8db6d1c3772ab3eb7d636d926cbea23c62ec7e6d0abb6aa1a096990b420d5c4c32560b48fe14f660d5d5899022b35e1ecc9ba3ac421d41a5e460034c3655a9c393b1fec945bcc633d4339caac90e9df768429677abfc50388cc927ac55049df50ba2b163ac87f6ab6b8692b954b28d83f494514c430934d78f786c851", 0xd1, r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="020000004c00000000002c0000000000f1ff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00'/24], 0x48) 20.134645258s ago: executing program 35 (id=4798): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc, 0x15, {0x2}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') (async) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 15.018256608s ago: executing program 0 (id=4885): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 14.91344157s ago: executing program 0 (id=4887): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 14.858756411s ago: executing program 0 (id=4889): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x5eea, 0xffffffffffffffff, 'id0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000008}, 0x10) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000200)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fstat(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getgid() getgroups(0x4, &(0x7f0000000480)=[r5, r6, r8, r9]) syz_io_uring_setup(0x6ca4, &(0x7f00000004c0)={0x0, 0xbb03, 0x40, 0x2, 0x29b}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r4, 0x21, &(0x7f00000005c0)={0x0, 0xc850, 0x4, 0x1, 0x3e, 0x0, r4}, 0x1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r3, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3dc, 0x16}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3bb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x13e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x250}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x10000}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x102) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) socket$pppoe(0x18, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a40)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3e}, @in=@multicast1, 0x4e22, 0x4, 0x4e22, 0x8, 0xa, 0xa0, 0x0, 0x33, 0x0, r7}, {0x4, 0x8, 0x4, 0xffffffffffff8f1b, 0x6, 0xff, 0x6, 0x7}, {0x7, 0x2, 0x401, 0xff}, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0xff}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x3505, 0x3, 0x2, 0xc, 0x6, 0x4}}, 0xe8) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000bc0)={0x8, 0x7ff, 0x6, 0x6}) syz_io_uring_submit(r10, r11, &(0x7f0000000d00)=@IORING_OP_WRITE={0x17, 0x40, 0x2007, @fd, 0x0, &(0x7f0000000c40)="b02e6da0ee74fa5c27411212cd6b86b77878d7709f4630fcb534ebb31b8b5bba532d09b29da62f7a91ba1426615c49f876c7d65210ad22059c9a8ef076d5e6c4ce8bf2d68b3b6f94c40d479921d02dc555cccc99ec2eff06f5228a462c791133c7b33baa3bcf133e35c325ab2d1adbf320dfe08a3945433dc08bc52d1958e2986979faf03fb9c1ce042bc3e7b5d8057817bbb723c3831ff67eaf512d9e8cc852ebb2774b3d4f09871f925a1fd282c6bc7596b2df92", 0xb5, 0x10, 0x1}) 14.715672914s ago: executing program 0 (id=4892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e", @ANYRESOCT=0x0], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r2, &(0x7f00000004c0)="0600", 0x2) listen(0xffffffffffffffff, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f00000003c0)={@rand_addr=0x64010102, @empty, 0x1, "fd799a9ecd7bd3b81cc2bab856845b68938ff8cacd6d8711e69795542f7db228", 0x2, 0x7, 0xe, 0x200}, 0x3c) sendfile(r2, r2, &(0x7f0000001000), 0xffff) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a40), 0x109080, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000a80)='system.posix_acl_access\x00', &(0x7f0000000e40)={{}, {0x1, 0x4}, [], {0x4, 0x3}, [], {}, {0x20, 0x3}}, 0x24, 0x3) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="0200000001000000000000000400050000000000100000000000000020"], 0x24, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x200009, &(0x7f0000000280)={[{@data_writeback}, {@data_err_ignore}, {@dioread_nolock}, {@errors_remount}, {@data_writeback}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@usrjquota}, {@delalloc}, {@nodelalloc}]}, 0xee, 0x46e, &(0x7f0000000c40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) preadv(r5, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007b00850000007600000095000000000000009500a5050000009a00"/46], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r7}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.848805321s ago: executing program 0 (id=4907): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x100, 0x0) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000540), 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)) io_setup(0xd, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xfffffffffffffffa, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20c882, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x11) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x8, &(0x7f0000000100)=0x147ae147ae147ad, 0x112) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="ad432bbd7000100000000d"], 0x14}}, 0x0) io_destroy(r5) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000006c00673c24bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9881040000080000180034731400350070696d72656730000000000000000000140003006361696630000000f700000000000000e5961f2e26f16f1b984f8376527601a2242990f4c0f635ea5ddd2c1e30d073e155576cc7b3"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRESDEC=r5, @ANYRES16=r0], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r11, @ANYRES32=r9], &(0x7f0000000900)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kfree\x00', r12, 0x0, 0x200003}, 0x18) r13 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r13, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r13, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(r13, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000002000000e0000002"], 0x110) 13.695443524s ago: executing program 0 (id=4911): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @remote, 0x3033}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000000100000032"], 0x28}, 0x50) 13.682713494s ago: executing program 36 (id=4911): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @remote, 0x3033}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000000100000032"], 0x28}, 0x50) 13.115925065s ago: executing program 6 (id=4923): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = io_uring_setup(0x1927, &(0x7f0000000500)={0x0, 0x2, 0x2000, 0x1000000, 0x4}) openat$incfs(0xffffffffffffff9c, &(0x7f0000000400)='.pending_reads\x00', 0x4a0001, 0x88) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd}, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000340)}, 0x10) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) setfsuid(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffef) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040), 0x1, 0x512, &(0x7f0000000380)="$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") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) 12.542703456s ago: executing program 6 (id=4927): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0x7}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xe}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 12.445223378s ago: executing program 6 (id=4931): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) write$selinux_attr(r0, &(0x7f0000000000)='system_u:object_r:init_var_run_t:s0\x00', 0x24) 12.426958049s ago: executing program 6 (id=4932): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 12.383073699s ago: executing program 6 (id=4935): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0x0, 0x702, &(0x7f0000001140)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80081}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x40, r8, 0x1, 0xffffff84, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0x820) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000060000000000000c03000000000000000000000201000000000000000000000d000000000000000000005f"], 0x0, 0x44}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) vmsplice(r1, &(0x7f0000000740)=[{&(0x7f0000000040)="0616ca65cbcf902e72cc296a26da148afb43f8d88c072c4e1a6cba1a5672ee223bc3e78c4eb3eaa545b5539f25b2d932230430", 0x33}, {&(0x7f00000000c0)="2dc883f6e7e73fcbffdbb10596d629532d675ab579fda841c0f68e81", 0x1c}, {&(0x7f0000000340)="e73ff8ebe0286894a227db715d4e379e55b48060c17db39edac83ff1785a896f8c1a447dea5b74d1c40ddd078232313cc6b1f5ab090d1a21aacc689958c9bc05cd6403be39ccdc4c0a80ae5a56e6953c997451ec676a133bb272f6c69b7e57bfb7b525344c57eb246c72fd976fdaeb1ca84f8dc64dc6f112f205a93ae17d2f26cbd271a44ba1064dfe98d97d8f7dcde6d960ae9cee28d10719f1112b58996952f0fd1143192ca03446889912a6357a3f49bd157aae7baa19b5f7b7165d1e993662442beb330072efe62698f7aa8cd190137468ad65614cb313ef073d6c9d82cda6236a316fd1b37247cd885dbcbb", 0xee}, {&(0x7f0000000100)="a6894341db88c7af70622f8d9d0f7e4a37b794fc9e5ce99df77b022db3f13b5786a17f0a9ce9dffbc9db36d3b1198583e59c3e2f7ffad9426f2f2e607b0c11c70b47e5c681c1387f2380ed004ba9666412c577f3503fc2e55b001f9cb9e86fa05205cac198655b5a3094d3033f6c76787590f6f4580851e497c80e25f26d64b90d2fec152b7d1bf9254f2f45563f5c1ebe151a3a149808f195fbaa9be0ec3839517bb94e21d0014c4734379f2332841ca55c75a70a895a47a5", 0xb9}, {&(0x7f0000000440)="7aef6895331df0efde057f5a9d64a53a4dd1b62b386f416b31e4ed8f162fe1c50f4890a98b7c59465ae102a630badd1b996d81cba130caa8b6db7dc084f46c9fa57066f30dfe67105498e7aa31f01ff3957c69b869d01d746d94347ae37678f9f368de0f78a983be67c437fd27f3befb0640f968a6a00d3924f35bcd1e059e1e6000cc6f282a5291cfa5acb27493335e9ae3293f8f8f3eccaec18d375bd48584d675fc94cc6d7af1f0f88082dbe9829735a8cfaf993de6f3292d078236a2f2223bdec22af9d65273a8f6e31923894069af62f97efd", 0xd5}, {&(0x7f0000000540)="8afd4228d72dd1617693060e136a1e28553642d5592e537457e6ba9c3d0fb5852b6dda81fba28b1d345fccf96d91c4e0ba453ccc3e6b4cfa2c39a71dbb686a48db0372f25735d47f", 0x48}, {&(0x7f00000005c0)="05b9febd075d44d7f33851115ef53614631a30c8fb4ca7e09b80ad4a5be88046e17a3e1ef27abdf46ed1b04d0609f8616304511793b089de70444397556ed5c627cee37f981e87492c31f9d4979229ca223a64dd833056ab5d961f9d4acd97546dd153066f85d7064bd45c713ca02ea6f0da5a99244541ec793a", 0x7a}, {&(0x7f0000000640)="20689cd0c9d3d119547570fd9a8a62239355bf334b6069184dda9578fddd17358871005550184882dc0928d15d6c75a33cc162a8c73706d16d8138524851eabb76c02905c6e2519b0ac27d65a8c42d1d0addf718d38a5d6e68171b9dd578ca0d5cc7870ca107d04eeb86c70b16cfa5cb89abd8418963861ce80b2ad4944c913f6890f3b44da87d95c6f6fd9841867a2abf8287381bd439d2a065356ceee3ecf24b2d6f65ded47fe9cc4ef427d0b74d6d8d6d9cec3eefe5287cd40599204d85c7f5718d9581f540f69930e37cd5e97de4272400fe960f4fb07c0c16605b13bfe4e023d3569f93aa376533fddb1874", 0xee}, {&(0x7f0000001880)="4e62f59d9bfcbc4b02978b4041fc16ac0721b4ef416aeebc2dec1d6a5ac5e46a892106a1e6473eae89f053741283558c716438ddce1ed0dd85d7bd6bbcd91e7582d9a6f65e516c7638d647d6fc8ad6a409318bd21ac9d5761934ace57cb0859fa000b99405af005d98fad8392e4903920671c3854d7b4e67e89af687581000b52c76204a88fafa7bf308fdad08f2e1a94cd6d217dbd62e13cc254e5ed5b640a1620ff14067f10793081ed4c513e8f0bdc5909ba239fc8e08e33a8f9a415744d805caac759459aa56a7d0efc95bd481cc5966097d03d0a06eb9a043056d48b2019c8f49fdeb3d1bf90c223bb1a969a34ea22ab9fd5417acf553ff4fb16c72b41bf486ee86678ff7de45cf7d8962cf23b6ff30dc33bc8e767a3f71693b8d47050e0d6b260507d51a779b9d306101b033b930b1efe9207e66c5f7b5224c49aa167f57949e9cba524f2788e26edd0807a6b5c9f0aafafcced6437c84aba448382b044bfa0be56c3e0f1663936f7e356ad0ee3b70c98c651f0375cd9694629b52dc59523abc24ef66c928fc6198d49f8d9971b582c739920bd703a4c4666a22ac2ea30cf49d091ead44b04b1e6e9f48912d00cb67d5d49103fcca106ec699f230f2cdb5dd632500a864a523801008654eb40b5f126cb445e245301eb2e6bf6f265e2da59bf06c0420b9ac988e349096acb143f451dcf17b810412f6a564c22bd32826d6da458d3626b8122bc0ee329d5fbee28a5a65c205505c45d26c9f34d6cf5d9053eb6fcc19e40b4a7fd991b7c1543d779ca3ec1c46fd6e4a5b17721adee6d757ba2f47ff39d1fb73dc5811350b2e8a3952ae333247f2b7832464fbe2183fbff518bf8e46f6b819d9db07c4eca05ee53226ffe94d4f5bfa3c0381fec94419d55a0f4211afd4a4cd8c65200aa7e6f1de4ebe8a188b43c0444e00bacc54adbd021b4a5c78268afe810fdaeb9a63f4f95037d497c7b8d3f3235de4f804ea50cd30cd0184fcdb83926094c5e8a7f5e2f6c3f93e7863b1a14e0f4d40190868186504e082805cf4af405d38391b5feeb150d0ab0377b3cc43333385d2e6ec0a46d64e1352e59143e283140c30ca6b77aa1c91edb6717d7f8ac52e9b4dba5b308ae237c3ac37d0f91cb0a70315c235fa08589cb6f75c68739cba52c5eac2defe007455da06e5a0d75a62f77b6d96c91c8382347982732c9b16e5c64f732c0a7ea8c0497fbf40349bc23ed0fc52a1ee5db13bf6be26f5f34ad56d33594b45435134a56df39e4c04f0226ad295da34e2ff7a77d3060bff2c312e3b6ac542876d5451fd7036e25d27d3dd92e7cd316e97d45c5473cc0cf55774f46142fd94858fe29b20fd9b31e07c34f6e30987f15377395421bc6c3eca1161fa87072d2a5a4b4347be501533fa9c52176a760caed8eda7f6b1d6ba6249b9efff874301fca085829adff3dc9fa181d17988e37fa44086349b74d7197b28b92347de4d257af7635ea89de946cb1a977e27ee6b521c5dc3c07f3eed97d618ec16dc61e0c5b6fc81a52167854252e8c96d935667eb531f5375abb1b74a2be3d61b585e74ee20d159f4efaca80a54c70162c2cef8f10f615fa8dd66a2d4da24033aec1e84a369f1d6c52d0ecb49a995c10c2ee0b7b233dcfc05a5711c09968a684aed91b52ead4c4ec1e651cf8d3553fe650329ae471d53bd7982db36c3e416906ec595160b312c50af141b498b8b9a3b4e2d0e3b1e04587230418153239b1a2dcc8ff01f0d08ef1dbb532a7bcbae4f7ae506c7146d4e35013235260c0e9f4c86df125bb977c67a2c9b64f9cd2117db7044ed81961ded97037a7beb17c874675954c49de6c878a82ad702cc42d89e77033db5a773130e22ec45546b9628be2ecb38cc373bab6b24c6db25831e7018330d9b563a991ae116ea32f6f21288b906b40da0c7db39d1402a9a4cfac5092fbd26b99e6d6aa4b88c49031081995e7cd2468b28f06a45ac6a91e98a152a4f0baa1e1fea932299669fecdf1dcac5c3a612085ec781a6a27512dbfc79fb4b23ee3662c3ace50d23c57668d2431acb510162ef154bc978217327d1653acc5af60319b252ad969268ac208a02eb0bda6f807fe410bb6067866347a9a6d5ae74f170a00b50376186f941eaef9733273187cbda81a920708c56f4bc8a522fa55cef6bc61f6472f928ebe55e4f88efd7c5d9176e4f64a6307e2aa37d7a9f9b798748a8f19b4f38ce25d71cefe27ff8be3880a3afd9fdc4bdd49e6d59663304a581ca235b81e3a34343ea8359cbbd8dfc3e81bad2220c23993b95ba67988512eaceb2293ad82e9584477f795875c60e23144031e9e16d98ec92e59b1ceaf1a0fac7657913506e79934386a36f2a102878ac0067f8c0fa80cb59d895e8440e46a30c18ab6f809cb42e6cfac2c88786ae30457706c551bb2121d32ef41e6b587eec25201802c5b1e443bb8882d3cfaecbdca0341b07549e71313afb5a83e5b711b7548405428b13f173139b63604c4f18f2b80b7cd9ebf9e2ed90334690abd5e902b466daca3f84d3cfb7aaa9b1360d2e66684106fc35e5f988055a17360e64a43963517353bd7d73e14f838315adbb20ee9d2263d6be2a4057dc2dc639ab35a9748ae7cf1e94dfc4d82a23d36e8b9b5911b32116a93b943e5dba0a65b0f530b65a1e555c2a16108db9b7292dbde2147129b24319838f9dcc7b4cbf28a42f779250fcb2b7352697150bffa00887623f5d37228594444c1ca5b53eaeaa6a4b509447e8c533749416341ae53aee801a3a00592cc51e607c20648f673e3aec63d380733a75352d7ef0288bc58cba3d217bd9184ba2f25f8eeda24e8867f214bd5ac3f52bacdf3a263f3193caa09a46620381d67afa970ea05395971689ad3e5dc64b6316a641de9c98deef1055aaaf62eff0b453b6c9c9df8a4e4cf02bd17b1770d9895c6c5ab94ee27b8bf1b27aa139f96f7fa9e3d0586379dedb68b2cb2dbb836a95e00ec26f26f58cc7511d18b6d1de5cdafc56c151c7b550512e1fdf5ec1bb41b6011fe7360dad8d6748a068b538e5077c3335c4ac8fbc400ce45aa7a75d7d8ef8725a34b4d2c76bf15268ae0a232836cbd0a0619132eb55eaaa6cfa6ebb67e4de0146e11527f060e8a0c1087627d84dd3c8a3975581b7af70b09fa287062d24cf0b5600f78e12a4ab0fe197afb271f795b36c5e179b17dcbb7160a9a42fc276a17dc4b542cd0780e5d42cd71d25e5d270f693a49f35a70a8b6c6088df54a8a78def266a17aa55810291d95234c40bf690db1d6c9399beb9b11e04731508e1db16d56cb88e7bc4ce09d473ffa129e34d79be7873ae57bf13b5874b3560594ab1c404ae265c6b55edf276cb13177dd37622a05ce8ad6809e31cfb98aec48bbae01141d62001d59a8408fbd8d1166bef21aaf7081b1d1b063693c260d67719dd1e6bcea7888129029e8f8f686f55637d6b2b1bd630f3de131f471e19a25940cd9dc1b2a0bef570f7c37f0d7ddb860a1479980018ef1ca9664d1af20571fea6dd336b2825cdad650f71679add5d849c7757d61224d990945b8df06a3785c62745c2f3476ba185afb023db5c79e80ce38cf999261108015f72bdbe947f96226eba2cbb35290738b569c2f0c65ae0a3195401d3530d86e7370fe5e940cbc5b507457f3005114aea84c2497e3dd8429591e2f926b8c7cb467b1d135671c787bcfbedd979259db29aee8953de5522919764da202bbf9bbcc6af01ed037b230970dec8378cc9e23a854546f8f371a54811b37b6f34c70ba0008c24e67533cd53e88644797e1651c16aff969227453d010f71895dc74e9effecfb07dd06425a952bd9ce134b3ade4557e86bda716537cf73379da8991874f186abc149f29feddb9c414bcb7ab8e74efcca37cd95bb5bbaaae3ae5a66a1ecd15d6aa61b56c14285ba012a6fc93147d9ac58004ce0591942a8ef5d109294a8fcd371049acd4856e8a373c86bfbdf082630f2c05b5d809cf5bdfbbb8df55ecd7f89ef65da729068e2e6d03e230d29540515f9dcbaf4cbd77b7827feda339d6428e602607ebbdfe67d7157078376eb6e0a994efc02e78348e4ada2ce5ecf0cca3ce742f914bf3ede01e63f0b680f512ab3671c31037edcce57ce7cd45913a93576d443fff817f8e4ba50f28f9244a180991cc55a2dbbe8336e7dcbd3be37f68a00182a134c1a727a9d5a5a224e617674fb6b41e8f954d1557212ff4ff1b4a7228bae60cc87d50a14fb5b2d18aee9703875c72130c944ca7003478c63f5c283d4046a0301ca90f592d3d4880219280d2a6efa600835abbe3197e9386c568aa0623ab8bf78486bfafb7282768c1fc333529e6dcb3484a84b23dcf2b8ec606b13ce25d0963fdb4e63f19b9c9b2e26b51a2c7be59860cc754fedec7e5e2814363203e4997087cd252c519ea2bde9f2229e3eead797253bda35c7f361fe51a1aa88f36f6a0b0cba9667196b5367cf8994f91402f15104e9da1a1f811b3b41debc1dd811eb76011b434aa2845f14fc055e24f420fa978d7d35ef3a794c33ecb64a0c6cc71539d8b19e8270ef6a6ba44ce4d4a925eea27df1a23d041101357a4e0dfd323bab6c2eec7577dbc650db37dcba96e2a7d1f459bff87b5225afd69d4c76f4103901eb07a5fd111e58898b06e10c14443e040096280fcdf7a1445ee6c968c70d166a023d0f7805535d71b74bb89069e6b923239ae9ada2ca6faa1f1e25373724d8492e1426239527bf1e3e8367195362cbf00864d596aa1e9c7e4af595c8a2eb89e58bb4b68eb7d5a8eda9cdf2467d0baf3d99bc68263e6ef98effcd7b86ca9a125bdb32f383311d6b6629694d80b2af23622a676a3b335cd7660ef4c4e861789df2572c767a42fc0652595f4e081022ee0ac731f6e61bc51aab5eef2fa2c34ddb225a15485c1c6cacd154b663a1b8170616113cbf34e6671d9238c97459ae119067e7b63d30803eea510d9e8a9f37b19a57dd6fadc944cfa94225344a86f00db7ead1ec70b7dd36a3183e69e1edf68e2cfe5c19c38e30809b245d493dd797145d69174db19b8a6b52fb67ac473fddc2785852fc91e1ce78665cc0a8ff60b3f5941aefab70f3c29d259dc3ce079670adecf97af858f193996e4c813445eaed58cccff1d2f4cb287df22480641da3f211e6e9eec15f75bf4fbee05aff5892a9b8c46eb5e1276222b1f1701a1f91afd96808dd905fda3ea70d10235389d5604fd87fb9a106b5cd2dcff9739534aade14dc5d365323a1c6682f7b647a6e95800bf5bc5e9294562238ba67d8945111cde1ae24724896f07d240fcdaa23f561eb9428811122ccd3274e52ba8461c25e6d6db103e26bd191574f025a2692eb5aa878499c1059f8b3f86bc82ebd3f2b936f7a10074e784e225ff25782d604f4b3ee5abea366d60db745fe20eb06c9aa2d1280bc03ffe608efeea09b6d8876b5ba4572196ee4873f7109bc94c941939c6396425bc78973afa3eb45e74cfc3a0f45fca7a9afd8011ff66a0fec23f9526241592f2b5dcd661ae2c2c2cac2510a4acde4b0097be827fe3965c91cc0752c1390c17963dbe8089e8fc92d925b118e4057c8d4b2b237f2b7837065672c4ea6baa228c31bc8871e779c5fecc94d44692afd4cca9ec2e8ea0ab2599b101c24326cb4138cba32551bfabb9491314867a510d7db68f30a00a43b1a219a8f76f7137076149ab88aac788c07078326b8c87925aabfe50ba45a0ee14bd3545655b385e0f36bcb665463424fdfcfbe86748cac6ece56bc55336264c0ab3fcc9e29d68d67966c0560", 0x1000}], 0x9, 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) futimesat(r0, &(0x7f0000000000)='./file1\x00', 0x0) 12.313852971s ago: executing program 9 (id=4913): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 12.298841871s ago: executing program 37 (id=4913): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 12.178602413s ago: executing program 6 (id=4939): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xe}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 12.173040973s ago: executing program 38 (id=4939): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xe}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 9.599834044s ago: executing program 3 (id=4937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0xb}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0xfff2}, {0x4}}, @TCA_BPF_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 9.566008514s ago: executing program 39 (id=4937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0xb}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0xfff2}, {0x4}}, @TCA_BPF_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 9.546922385s ago: executing program 2 (id=4940): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x201400, 0x0, 0x3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@getchain={0x34, 0x66, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0xffff, 0xb}, {0xffe0, 0x3}}, [{0x8, 0xb, 0xff}, {0x8, 0xb, 0x3}]}, 0xfffffffffffffe1d}}, 0x4040014) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010084fffffffcdbdf250100001408000113dbfbbc0014000480050003002c8f00000500030180000086080002000200b33f"], 0x38}}, 0x820) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="10000000fa4cefa844761433a052605e6922b1358ab3e8406831b85e8688f2c489c5edb0fdd39e7c3513c2fde4d33600"/62], 0x1c}}, 0x0) 9.499243446s ago: executing program 40 (id=4940): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x201400, 0x0, 0x3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@getchain={0x34, 0x66, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0xffff, 0xb}, {0xffe0, 0x3}}, [{0x8, 0xb, 0xff}, {0x8, 0xb, 0x3}]}, 0xfffffffffffffe1d}}, 0x4040014) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010084fffffffcdbdf250100001408000113dbfbbc0014000480050003002c8f00000500030180000086080002000200b33f"], 0x38}}, 0x820) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="10000000fa4cefa844761433a052605e6922b1358ab3e8406831b85e8688f2c489c5edb0fdd39e7c3513c2fde4d33600"/62], 0x1c}}, 0x0) 3.390080414s ago: executing program 5 (id=5045): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0x7}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xe}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 3.360765995s ago: executing program 5 (id=5047): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(&(0x7f0000000000)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file1\x00', 0x80, 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000001000000000040004ef818110000", @ANYRES32, @ANYBLOB="0000000000000000b70800b7ec125d007b8af80301000000bf3ca38005000000070200eeb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) close(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0xe0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r4) add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000280)="d3f75a090e1ed49c1167a889b33431cba888b0577f07ff8cd0a2b78283e4a0ad8a865bb93cc90790df313a49d8d91f95c73fd4878ab83507bdfccfcccfe6d77996c54ad4e8cc7a75ebb91158f2e5a9b3267e3b39d8db6d1c3772ab3eb7d636d926cbea23c62ec7e6d0abb6aa1a096990b420d5c4c32560b48fe14f660d5d5899022b35e1ecc9ba3ac421d41a5e460034c3655a9c393b1fec945bcc633d4339caac90e9df768429677abfc50388cc927ac55049df50ba2b163ac87f6ab6b8692b954b28d83f494514c430934d78f786c851", 0xd1, r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc1d}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="020000004c00000000002c0000000000f1ff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00'/24], 0x48) 3.212092388s ago: executing program 5 (id=5050): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffedc, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x74, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) getcwd(&(0x7f0000000280)=""/222, 0xde) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x1ffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 2.991803962s ago: executing program 5 (id=5052): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e0000005800028014000600200100000000000000000000000000020500160001000000140007"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@gettfilter={0x24, 0x2e, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x4}, {0xe, 0xffe0}, {0x4, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000049) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}, {0x0, 0xe}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x4000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000800)=[{{&(0x7f00000006c0)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000740)="aff8554a104e502e8aec21e072aaa86f7d93c5187abc38a11bec29bbd7b18637b2882afde3ccda8c8aefdd772d105bdbc62b4a661a31b7e893d4a63de7252d9186b7789f13dd774efefb2971ad2dae6e90a0ba4c5929bf2076348c05a1e50194be72c6852194569741781da8d527d344142c2ed7", 0x74}], 0x1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"/770], 0x2d8}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = epoll_create(0x3ff) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0000000}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r10 = fcntl$dupfd(r9, 0x0, r9) read$snapshot(r10, 0x0, 0xffffffbf) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x31, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="7f2782ca1a3cb58b1e8c0543b9b111dda74f3246d0d647f1969c13142ca64b2ded93511d3ae98ead982e997a0d27fb6bfb8a9a4aac31e8fdd9aa753adb0250844214318e1d2bce54e0f1513cd2b3eb4d1a22bc2ccc659ff5c84858cc251745198f34df8b89db1a899fafe243fc340acebb98530bc586122cb6181dce5243578d42fb5b54b02b2a7a6e2e419fb4fcb27e495e693f877ed87da99a19097cc8f0788a51261bb1fc0ec6aa30e4dede3c", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT=r5, @ANYRESHEX=r11, @ANYRESDEC, @ANYRESHEX=r4], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000480)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r12, 0x0, 0xb}, 0x18) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000280)={0x2000000}) 1.980723492s ago: executing program 5 (id=5064): unshare(0x20000480) socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r3, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) write(r1, &(0x7f0000000240)="94", 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000000e80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000380)='1$', 0x2}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="28000000000000002900000039000000ff02000700000000fe880000000000000000000000000101880000000000000029000000390000003c0e010500000000fc000000000000000000000000000001ff010000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000bbff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000b80000000000000029000000390000000614010b0000000000000000000000000000000000000001fe880000000000000000000000000001fe8000000000000000000000000000aa20010000000000000000000000000002fe88000000000000000000000000000100000000000000000000ffff00000000fc000000000000000000000000000001fe880000000000000000000000000101fe8000000000000000000000000000aafe8000000000000000000000000000bb1400000000000000290000003e0000000400000000000000500000000000000029000000360000009e06000000000000010900000000000000000001000718000000000409090006000000000000000400000000000000c2040000000305026e1a0000000000000058000000000000002900000039000000110802050000000000000000000000000000ffff0a01010120010000000000000000000000000000fe80000000000000000000000000003e000000000000000000000000ff00000028000000000000002900000004000000020100000000000005020001c2040001000000010000000014000000000000002900000008000000050000000000000014"], 0x280}}, {{&(0x7f0000000300)={0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000840)="c0", 0x1}], 0x1}}, {{&(0x7f0000000c00)={0xa, 0x4e23, 0x6, @private1, 0x1ff}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000c40)="dd", 0x1}], 0x1}}], 0x3, 0x40048d1) setsockopt(r5, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) 1.957340892s ago: executing program 5 (id=5066): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) mkdir(&(0x7f0000000000)='./file1\x00', 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000009606000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) socket(0x29, 0x2, 0x3a) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x7}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}}, 0x24}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x4}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="a966d82799d82147cc06405c29b04866a73e3980cf7f60352998f0914adf5096d0a9bf898d9f21c16003d0f5e6e526c56bc88211a59dd7389f9a58"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r9}, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r10, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) 1.800419655s ago: executing program 1 (id=5067): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) chroot(&(0x7f0000002a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r2, &(0x7f0000000480)={&(0x7f0000000040)=@x25, 0x80, &(0x7f0000000640)=[{0x0}, {&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f0000000100)=""/37, 0x25}, {&(0x7f0000000140)=""/103, 0x67}, {&(0x7f00000001c0)=""/238, 0xee}, {&(0x7f00000002c0)=""/79, 0x4f}, {&(0x7f0000000380)=""/253, 0xfd}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0x8}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r3 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) 1.799363635s ago: executing program 1 (id=5070): syz_io_uring_setup(0x2106, 0x0, &(0x7f0000000400), 0x0) r0 = syz_open_dev$evdev(0x0, 0x8000, 0x10000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x803fd, 0x1, 0x800}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001640)={{0x0, 0x6, 0x10000, 0x9, 0xb, 0x6, 0xffffffff, 0x7, 0x7, 0x9, 0x9, 0x1, 0x4, 0x8}, 0x18, [0x0, 0x0, 0x0]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1066, 0x80, 0x4, 0x10001}, &(0x7f0000000040), &(0x7f00000000c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='-:-%-(\'\xb9^/$]&\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c90780100ffff000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a0000b042d200000000000000000000643fcbb2c5a57df67d544af6e8dafe02c36a90cbdce39ea99a3c09"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) recvmmsg(r3, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000100), &(0x7f0000000300)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x84) 1.475178652s ago: executing program 4 (id=5080): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b00000019000100007f0000000094bc2d"], 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c0002800800050001000000050025000100000005002900"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup3(r3, 0xffffffffffffffff, 0x80000) 1.421886413s ago: executing program 4 (id=5081): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) chroot(&(0x7f0000002a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_socket_connect_nvme_tcp() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) 1.421088473s ago: executing program 4 (id=5083): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000d00)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f83ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe0900000000002cedd76091558ec90ab092e6f83defbdad236b8062dbed3ebf"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffc5d, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="14"], 0x400000) recvmmsg(r0, &(0x7f0000006a80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/121, 0x79}, {&(0x7f00000006c0)=""/183, 0xb7}], 0x2}, 0x2983}], 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010300000100f1dbdf2526"], 0x14}}, 0x0) perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x18) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) 1.287884435s ago: executing program 8 (id=5084): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r3 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES8=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df25010018"], 0x18}}, 0x40) 1.242709656s ago: executing program 8 (id=5085): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) stat(0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x80, 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000001000000000040004ef818110000", @ANYRES32, @ANYBLOB="0000000000000000b70800b7ec125d007b8af80301000000bf3ca38005000000070200eeb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) close(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0xe0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r4) add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000280)="d3f75a090e1ed49c1167a889b33431cba888b0577f07ff8cd0a2b78283e4a0ad8a865bb93cc90790df313a49d8d91f95c73fd4878ab83507bdfccfcccfe6d77996c54ad4e8cc7a75ebb91158f2e5a9b3267e3b39d8db6d1c3772ab3eb7d636d926cbea23c62ec7e6d0abb6aa1a096990b420d5c4c32560b48fe14f660d5d5899022b35e1ecc9ba3ac421d41a5e460034c3655a9c393b1fec945bcc633d4339caac90e9df768429677abfc50388cc927ac55049df50ba2b163ac87f6ab6b8692b954b28d83f494514c430934d78f786c851", 0xd1, r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc1d}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="020000004c00000000002c0000000000f1ff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00'/24], 0x48) 1.162782698s ago: executing program 8 (id=5086): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x80000) (fail_nth: 3) 1.107854789s ago: executing program 8 (id=5087): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) socket$nl_route(0x10, 0x3, 0x0) r8 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c4, 0x8, 0x0, 0x1000168}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r8, 0xffffffffffffffff, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r10, &(0x7f00000002c0)=[{&(0x7f0000000180)='u', 0x1}], 0x1) accept4$unix(r1, 0x0, 0x0, 0x0) syz_read_part_table(0x106a, &(0x7f0000000000)="$eJzsz7FJxVAUBuD/5ibxpnUB17C0EGwsFXexUcERnECwsbLWDdzCFbJAxECEt8B7r/i+6pyfHw4nHNTUtdOP5Py5vqQleUxyNySp45ik/Be/vq//luF1bicpNRf9Gi+fb/dbqSb91XyTYXkoP0u3ZuVyajsHu6ezus319n0/XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAcfsNAAD//3OqEK8=") 965.078612ms ago: executing program 1 (id=5088): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x181101, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) write(r1, &(0x7f0000000180)='$', 0x1) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2982, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 958.143162ms ago: executing program 8 (id=5089): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x2c, r2, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) socket$can_raw(0x1d, 0x3, 0x1) fspick(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") 779.165666ms ago: executing program 7 (id=5094): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r3 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES8=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df25010018"], 0x18}}, 0x40) 725.817886ms ago: executing program 1 (id=5095): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000380)='1$', 0x2}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x280}}, {{&(0x7f0000000300)={0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000840)="c0", 0x1}], 0x1}}, {{&(0x7f0000000c00)={0xa, 0x4e23, 0x6, @private1, 0x1ff}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000c40)="dd", 0x1}], 0x1}}], 0x3, 0x40048d1) setsockopt(r0, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) 725.278896ms ago: executing program 1 (id=5096): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x70e, &(0x7f0000000c00)="$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") stat(&(0x7f0000000000)='./file1\x00', 0x0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x80, 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000001000000000040004ef818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800b7ec125d007b8af80301000000bf3ca38005000000070200eeb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) close(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0xe0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x2c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r6) add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000280)="d3f75a090e1ed49c1167a889b33431cba888b0577f07ff8cd0a2b78283e4a0ad8a865bb93cc90790df313a49d8d91f95c73fd4878ab83507bdfccfcccfe6d77996c54ad4e8cc7a75ebb91158f2e5a9b3267e3b39d8db6d1c3772ab3eb7d636d926cbea23c62ec7e6d0abb6aa1a096990b420d5c4c32560b48fe14f660d5d5899022b35e1ecc9ba3ac421d41a5e460034c3655a9c393b1fec945bcc633d4339caac90e9df768429677abfc50388cc927ac55049df50ba2b163ac87f6ab6b8692b954b28d83f494514c430934d78f786c851", 0xd1, r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="020000004c00000000002c0000000000f1ff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00'/24], 0x48) 532.44711ms ago: executing program 4 (id=5097): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0x7}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xe}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 477.473181ms ago: executing program 1 (id=5098): syz_io_uring_setup(0x2106, 0x0, &(0x7f0000000400), 0x0) r0 = syz_open_dev$evdev(0x0, 0x8000, 0x10000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x803fd, 0x1, 0x800}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001640)={{0x0, 0x6, 0x10000, 0x9, 0xb, 0x6, 0xffffffff, 0x7, 0x7, 0x9, 0x9, 0x1, 0x4, 0x8}, 0x18, [0x0, 0x0, 0x0]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1066, 0x80, 0x4, 0x10001}, &(0x7f0000000040), &(0x7f00000000c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='-:-%-(\'\xb9^/$]&\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c90780100ffff000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a0000b042d200000000000000000000643fcbb2c5a57df67d544af6e8dafe02c36a90cbdce39ea99a3c09"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) recvmmsg(r3, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000100), &(0x7f0000000300)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x84) 440.815812ms ago: executing program 4 (id=5099): bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 415.672532ms ago: executing program 4 (id=5100): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e0000005800028014000600200100000000000000000000000000020500160001000000140007"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@gettfilter={0x24, 0x2e, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x4}, {0xe, 0xffe0}, {0x4, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000049) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}, {0x0, 0xe}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x4000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000800)=[{{&(0x7f00000006c0)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000740)="aff8554a104e502e8aec21e072aaa86f7d93c5187abc38a11bec29bbd7b18637b2882afde3ccda8c8aefdd772d105bdbc62b4a661a31b7e893d4a63de7252d9186b7789f13dd774efefb2971ad2dae6e90a0ba4c5929bf2076348c05a1e50194be72c6852194569741781da8d527d344142c2ed7082332cd23a00429000408062954b08e7f5fe2f2c5d4c14f463e9a699a3a534ad9eae169306eae45ab82f50e28d52396c55846cba1ef834c8bcca2a896e7d529739c1508ec", 0xb9}], 0x1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"/770], 0x2d8}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = epoll_create(0x3ff) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0000000}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r10 = fcntl$dupfd(r9, 0x0, r9) read$snapshot(r10, 0x0, 0xffffffbf) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000280)={0x2000000}) 415.116512ms ago: executing program 7 (id=5101): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) symlink(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = dup2(r3, r3) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@v1={0x1000000, [{0x73a91235, 0x102}]}, 0xc, 0x3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x7ffffffe, 0x40000000, 0x10}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000000000101480000000c0a01060000000000000000070000000900020073797a31000000000900010073"], 0xf8}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 408.584383ms ago: executing program 8 (id=5102): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x4000, &(0x7f0000000000)={[{@resuid}, {@dioread_nolock}, {@noblock_validity}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0xf9b}}, {@quota}]}, 0x8, 0x457, &(0x7f0000000a00)="$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") r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='rxrpc_rx_ack\x00', r0, 0x0, 0x1fc000000000000}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000140)={0xa96, 0x8}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)="d8000000180081044e81f782db4cb9041c1d0800fe007c05e8fe55b204000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f01ea23b77edf704bc2ce8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350d3798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) write(r3, &(0x7f00000009c0)=';', 0x1) sendfile(r3, r1, 0x0, 0x3ffff) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) getrlimit(0x3, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, 0x0, 0x20000000) sendfile(r3, r1, 0x0, 0x7fffeffd) 368.903873ms ago: executing program 7 (id=5103): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r3 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES8=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df25010018"], 0x18}}, 0x40) 284.169065ms ago: executing program 7 (id=5104): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r3 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES8=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df25010018"], 0x18}}, 0x40) 194.801247ms ago: executing program 7 (id=5105): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r3, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x2, 0x400122a0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYBLOB="000001c34df78769f0ab640fdfe7e869c9732915077ef5b351c0cdbc2258b04203452667434a482dc05c86c34ca30819aecfd02c21ee0e15158b039bd07c40b09ab00153f5bfafd43ed7a9482e10b33850f8a7f68d27ef16adfd7892012e2872579ebcca790c7b448ae862cee0bc88e678d809021f8af5c4bacf21bd4d4e85463dcbd4901284de6c5c9a9aba9b64cad84608bdaafb762a9557510c414c11"], 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000080), 0x0}, 0x20) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r4, 0x0, 0x8000000000000}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r8, 0x4b68, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) 0s ago: executing program 7 (id=5106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1810040", 0x15}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) kernel console output (not intermixed with test programs): =tcp_socket permissive=1 [ 311.764914][ T29] audit: type=1400 audit(1757659991.294:7312): avc: denied { remount } for pid=17621 comm="syz.1.4647" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 311.823916][T17469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.867218][T17469] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.897574][T17399] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.904673][T17399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.927334][T17399] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.934450][T17399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.014312][T17641] FAULT_INJECTION: forcing a failure. [ 312.014312][T17641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.027543][T17641] CPU: 1 UID: 0 PID: 17641 Comm: syz.0.4655 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 312.027573][T17641] Tainted: [W]=WARN [ 312.027611][T17641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.027621][T17641] Call Trace: [ 312.027648][T17641] [ 312.027656][T17641] __dump_stack+0x1d/0x30 [ 312.027682][T17641] dump_stack_lvl+0xe8/0x140 [ 312.027698][T17641] dump_stack+0x15/0x1b [ 312.027714][T17641] should_fail_ex+0x265/0x280 [ 312.027749][T17641] should_fail+0xb/0x20 [ 312.027820][T17641] should_fail_usercopy+0x1a/0x20 [ 312.027852][T17641] _copy_from_user+0x1c/0xb0 [ 312.027898][T17641] bpf_test_init+0xdf/0x160 [ 312.027954][T17641] bpf_prog_test_run_xdp+0x274/0x910 [ 312.028012][T17641] ? kstrtouint+0x76/0xc0 [ 312.028043][T17641] ? __rcu_read_unlock+0x4f/0x70 [ 312.028082][T17641] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 312.028103][T17641] bpf_prog_test_run+0x227/0x390 [ 312.028172][T17641] __sys_bpf+0x4b9/0x7b0 [ 312.028215][T17641] __x64_sys_bpf+0x41/0x50 [ 312.028318][T17641] x64_sys_call+0x2aea/0x2ff0 [ 312.028346][T17641] do_syscall_64+0xd2/0x200 [ 312.028409][T17641] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 312.028432][T17641] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 312.028480][T17641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.028504][T17641] RIP: 0033:0x7f1e183eeba9 [ 312.028575][T17641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.028633][T17641] RSP: 002b:00007f1e16e57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 312.028652][T17641] RAX: ffffffffffffffda RBX: 00007f1e18635fa0 RCX: 00007f1e183eeba9 [ 312.028690][T17641] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 312.028755][T17641] RBP: 00007f1e16e57090 R08: 0000000000000000 R09: 0000000000000000 [ 312.028827][T17641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.028837][T17641] R13: 00007f1e18636038 R14: 00007f1e18635fa0 R15: 00007ffe575961b8 [ 312.028854][T17641] [ 312.277772][T17469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.314175][ T29] audit: type=1326 audit(1757659991.924:7313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17650 comm="syz.1.4657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ad74eba9 code=0x7ffc0000 [ 312.337756][ T29] audit: type=1326 audit(1757659991.924:7314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17650 comm="syz.1.4657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f76ad74eba9 code=0x7ffc0000 [ 312.361321][ T29] audit: type=1326 audit(1757659991.924:7315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17650 comm="syz.1.4657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ad74eba9 code=0x7ffc0000 [ 312.493860][T17667] loop4: detected capacity change from 0 to 1024 [ 312.511234][T17667] EXT4-fs: Ignoring removed orlov option [ 312.539545][T17667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.545674][T17469] veth0_vlan: entered promiscuous mode [ 312.580908][T17469] veth1_vlan: entered promiscuous mode [ 312.595967][T17469] veth0_macvtap: entered promiscuous mode [ 312.603418][T17469] veth1_macvtap: entered promiscuous mode [ 312.616334][T17469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.627029][T13057] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.627512][T17469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.647045][T16348] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.658113][T16348] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.669277][T16348] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.682546][T16348] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.016820][T17692] loop4: detected capacity change from 0 to 8192 [ 313.112962][T17689] Set syz1 is full, maxelem 65536 reached [ 313.132864][T17692] loop4: p1 p2[DM] p4 [ 313.137055][T17692] loop4: p1 size 196608 extends beyond EOD, truncated [ 313.150256][T17692] loop4: p2 start 4292936063 is beyond EOD, truncated [ 313.157223][T17692] loop4: p4 size 50331648 extends beyond EOD, truncated [ 313.183196][T17698] FAULT_INJECTION: forcing a failure. [ 313.183196][T17698] name failslab, interval 1, probability 0, space 0, times 0 [ 313.195883][T17698] CPU: 1 UID: 0 PID: 17698 Comm: syz.5.4667 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 313.195917][T17698] Tainted: [W]=WARN [ 313.195924][T17698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 313.195937][T17698] Call Trace: [ 313.195943][T17698] [ 313.195950][T17698] __dump_stack+0x1d/0x30 [ 313.195973][T17698] dump_stack_lvl+0xe8/0x140 [ 313.196030][T17698] dump_stack+0x15/0x1b [ 313.196044][T17698] should_fail_ex+0x265/0x280 [ 313.196067][T17698] should_failslab+0x8c/0xb0 [ 313.196148][T17698] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 313.196178][T17698] ? sidtab_sid2str_get+0xa0/0x130 [ 313.196201][T17698] kmemdup_noprof+0x2b/0x70 [ 313.196287][T17698] sidtab_sid2str_get+0xa0/0x130 [ 313.196315][T17698] security_sid_to_context_core+0x1eb/0x2e0 [ 313.196335][T17698] security_sid_to_context+0x27/0x40 [ 313.196402][T17698] avc_audit_post_callback+0x9d/0x520 [ 313.196429][T17698] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 313.196499][T17698] common_lsm_audit+0x1bb/0x230 [ 313.196525][T17698] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 313.196625][T17698] slow_avc_audit+0x104/0x140 [ 313.196652][T17698] audit_inode_permission+0x111/0x150 [ 313.196681][T17698] selinux_inode_permission+0x69b/0x740 [ 313.196773][T17698] security_inode_permission+0x6d/0xb0 [ 313.196798][T17698] inode_permission+0x106/0x310 [ 313.196822][T17698] ? may_open+0x1ee/0x350 [ 313.196837][T17698] may_open+0x255/0x350 [ 313.196912][T17698] path_openat+0x1b4a/0x2170 [ 313.196930][T17698] ? read_tsc+0x9/0x20 [ 313.196957][T17698] do_filp_open+0x109/0x230 [ 313.196978][T17698] do_sys_openat2+0xa6/0x110 [ 313.197004][T17698] __x64_sys_openat+0xf2/0x120 [ 313.197084][T17698] x64_sys_call+0x2e9c/0x2ff0 [ 313.197107][T17698] do_syscall_64+0xd2/0x200 [ 313.197170][T17698] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 313.197200][T17698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.197222][T17698] RIP: 0033:0x7f14cc41eba9 [ 313.197268][T17698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.197283][T17698] RSP: 002b:00007f14cae87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 313.197300][T17698] RAX: ffffffffffffffda RBX: 00007f14cc665fa0 RCX: 00007f14cc41eba9 [ 313.197318][T17698] RDX: 00000000000acd83 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 313.197331][T17698] RBP: 00007f14cae87090 R08: 0000000000000000 R09: 0000000000000000 [ 313.197345][T17698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 313.197405][T17698] R13: 00007f14cc666038 R14: 00007f14cc665fa0 R15: 00007ffc64614d48 [ 313.197424][T17698] [ 313.197723][T17698] random: crng reseeded on system resumption [ 313.262800][T17702] netlink: 'syz.1.4668': attribute type 1 has an invalid length. [ 313.473657][T17702] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.4668'. [ 313.478289][T17706] netlink: 'syz.0.4670': attribute type 13 has an invalid length. [ 313.508186][T17706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.605599][ T3393] IPVS: starting estimator thread 0... [ 313.656806][T17720] loop6: detected capacity change from 0 to 164 [ 313.674936][T17720] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 313.693219][T17720] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 313.694277][T17716] IPVS: using max 2544 ests per chain, 127200 per kthread [ 313.709185][T17720] Symlink component flag not implemented [ 313.714915][T17720] Symlink component flag not implemented [ 313.730971][T17720] Symlink component flag not implemented (7) [ 313.731055][T17727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4678'. [ 313.737035][T17720] Symlink component flag not implemented (116) [ 314.100031][T17752] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 314.211589][T17758] lo speed is unknown, defaulting to 1000 [ 314.316719][T17758] lo speed is unknown, defaulting to 1000 [ 314.419360][T17767] FAULT_INJECTION: forcing a failure. [ 314.419360][T17767] name failslab, interval 1, probability 0, space 0, times 0 [ 314.432090][T17767] CPU: 0 UID: 0 PID: 17767 Comm: syz.6.4692 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 314.432122][T17767] Tainted: [W]=WARN [ 314.432199][T17767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 314.432209][T17767] Call Trace: [ 314.432215][T17767] [ 314.432222][T17767] __dump_stack+0x1d/0x30 [ 314.432244][T17767] dump_stack_lvl+0xe8/0x140 [ 314.432261][T17767] dump_stack+0x15/0x1b [ 314.432275][T17767] should_fail_ex+0x265/0x280 [ 314.432300][T17767] should_failslab+0x8c/0xb0 [ 314.432347][T17767] kmem_cache_alloc_noprof+0x50/0x310 [ 314.432376][T17767] ? alloc_empty_file+0x76/0x200 [ 314.432405][T17767] ? is_bpf_text_address+0x141/0x160 [ 314.432434][T17767] alloc_empty_file+0x76/0x200 [ 314.432506][T17767] path_openat+0x68/0x2170 [ 314.432522][T17767] ? perf_callchain_kernel+0x301/0x330 [ 314.432596][T17767] ? __bpf_get_stackid+0x166/0x800 [ 314.432629][T17767] ? _parse_integer_limit+0x170/0x190 [ 314.432652][T17767] do_filp_open+0x109/0x230 [ 314.432680][T17767] do_open_execat+0xd8/0x260 [ 314.432701][T17767] alloc_bprm+0x25/0x350 [ 314.432731][T17767] do_execveat_common+0x12e/0x750 [ 314.432753][T17767] __x64_sys_execve+0x5c/0x70 [ 314.432773][T17767] x64_sys_call+0x2716/0x2ff0 [ 314.432794][T17767] do_syscall_64+0xd2/0x200 [ 314.432861][T17767] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 314.432882][T17767] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 314.432910][T17767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.432932][T17767] RIP: 0033:0x7fa47ba6eba9 [ 314.433015][T17767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.433030][T17767] RSP: 002b:00007fa47a4cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 314.433050][T17767] RAX: ffffffffffffffda RBX: 00007fa47bcb5fa0 RCX: 00007fa47ba6eba9 [ 314.433063][T17767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 314.433142][T17767] RBP: 00007fa47a4cf090 R08: 0000000000000000 R09: 0000000000000000 [ 314.433187][T17767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.433198][T17767] R13: 00007fa47bcb6038 R14: 00007fa47bcb5fa0 R15: 00007ffffac2d538 [ 314.433245][T17767] [ 314.843716][T17786] loop5: detected capacity change from 0 to 1024 [ 314.854181][T17786] EXT4-fs: Ignoring removed orlov option [ 314.868247][T17786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.871779][T17795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.889872][T17795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.903780][T17795] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4704'. [ 314.932910][T17798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4705'. [ 315.018665][T15788] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.244670][T17821] loop5: detected capacity change from 0 to 1024 [ 315.253462][T17821] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.4713: Failed to acquire dquot type 0 [ 315.265255][T17821] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 315.279893][T17821] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.4713: corrupted inode contents [ 315.292064][T17821] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #13: comm syz.5.4713: mark_inode_dirty error [ 315.303724][T17821] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.4713: corrupted inode contents [ 315.315874][T17821] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.4713: mark_inode_dirty error [ 315.327591][T17821] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.4713: corrupted inode contents [ 315.339956][T17821] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 315.348641][T17821] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.4713: corrupted inode contents [ 315.360807][T17821] EXT4-fs error (device loop5): ext4_truncate:4666: inode #13: comm syz.5.4713: mark_inode_dirty error [ 315.372128][T17821] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 315.381451][T17821] EXT4-fs (loop5): 1 truncate cleaned up [ 315.387553][T17821] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.409265][T15788] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.620131][T17837] loop5: detected capacity change from 0 to 512 [ 315.629749][T17837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.642494][T17837] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.763904][T15788] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.843772][T17862] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 315.855806][T17863] sch_fq: defrate 4294967295 ignored. [ 316.043091][T17871] loop4: detected capacity change from 0 to 8192 [ 316.417243][T17882] netlink: 'syz.6.4733': attribute type 13 has an invalid length. [ 316.452250][T17882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.471023][T17883] loop6: detected capacity change from 0 to 512 [ 316.478035][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 316.478077][ T29] audit: type=1400 audit(1757659996.303:7457): avc: denied { mounton } for pid=17881 comm="+}[@" path="/19/file0" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 316.509288][T17883] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 316.528958][T17883] EXT4-fs (loop6): Remounting filesystem read-only [ 316.535694][T17883] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 316.550319][T17883] EXT4-fs (loop6): 1 orphan inode deleted [ 316.557496][T17883] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.558170][ T29] audit: type=1400 audit(1757659996.387:7458): avc: denied { create } for pid=17885 comm="syz.0.4734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 316.570425][T17883] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.706977][ T29] audit: type=1326 audit(1757659996.544:7459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17885 comm="syz.0.4734" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e183eeba9 code=0x0 [ 316.765110][T17900] syzkaller1: entered promiscuous mode [ 316.770651][T17900] syzkaller1: entered allmulticast mode [ 316.774255][T17903] loop6: detected capacity change from 0 to 512 [ 316.783877][ T29] audit: type=1400 audit(1757659996.597:7460): avc: denied { name_bind } for pid=17899 comm="syz.1.4739" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 316.805780][ T29] audit: type=1400 audit(1757659996.597:7461): avc: denied { node_bind } for pid=17899 comm="syz.1.4739" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 316.826868][ T29] audit: type=1326 audit(1757659996.597:7462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.6.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa47ba6eba9 code=0x7ffc0000 [ 316.850513][ T29] audit: type=1326 audit(1757659996.597:7463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.6.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa47ba6eba9 code=0x7ffc0000 [ 316.874015][ T29] audit: type=1326 audit(1757659996.607:7464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.6.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa47ba6eba9 code=0x7ffc0000 [ 316.897758][ T29] audit: type=1326 audit(1757659996.607:7465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.6.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa47ba6eba9 code=0x7ffc0000 [ 316.921471][ T29] audit: type=1326 audit(1757659996.607:7466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.6.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa47ba6eba9 code=0x7ffc0000 [ 316.948067][T17903] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 316.964695][T17903] EXT4-fs (loop6): mount failed [ 317.068351][T17914] netlink: 'syz.6.4744': attribute type 13 has an invalid length. [ 317.090861][T17914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.133527][T17914] loop6: detected capacity change from 0 to 512 [ 317.149467][T17914] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 317.161736][T17914] EXT4-fs (loop6): Remounting filesystem read-only [ 317.168402][T17914] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 317.178870][T17914] EXT4-fs (loop6): 1 orphan inode deleted [ 317.186050][T17925] sch_fq: defrate 4294967295 ignored. [ 317.191407][T17914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.204833][T17914] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.216201][T17927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4749'. [ 317.286925][T17941] loop6: detected capacity change from 0 to 164 [ 317.293991][T17941] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 317.303065][T17941] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 317.312859][T17941] Symlink component flag not implemented [ 317.318643][T17941] Symlink component flag not implemented [ 317.325921][T17941] Symlink component flag not implemented (7) [ 317.331976][T17941] Symlink component flag not implemented (116) [ 317.480086][T17946] pimreg: entered allmulticast mode [ 317.486428][T17946] pimreg: left allmulticast mode [ 317.921431][T17960] Set syz1 is full, maxelem 65536 reached [ 317.944629][T17965] loop6: detected capacity change from 0 to 1024 [ 317.956196][T17965] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.4761: Failed to acquire dquot type 0 [ 317.968229][T17965] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 317.986960][T17965] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.4761: corrupted inode contents [ 317.999979][T17965] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #13: comm syz.6.4761: mark_inode_dirty error [ 318.011581][T17965] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.4761: corrupted inode contents [ 318.023711][T17965] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.4761: mark_inode_dirty error [ 318.037025][T17965] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.4761: corrupted inode contents [ 318.049084][T17965] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 318.062841][T17965] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.4761: corrupted inode contents [ 318.076241][T17965] EXT4-fs error (device loop6): ext4_truncate:4666: inode #13: comm syz.6.4761: mark_inode_dirty error [ 318.090423][T17965] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 318.094144][T17978] pimreg: entered allmulticast mode [ 318.108442][T17965] EXT4-fs (loop6): 1 truncate cleaned up [ 318.118223][T17965] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.121749][T17969] pimreg: left allmulticast mode [ 318.201080][T17469] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.329312][T17995] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4768'. [ 318.337224][T17988] lo speed is unknown, defaulting to 1000 [ 318.345946][T17988] lo speed is unknown, defaulting to 1000 [ 318.463997][T18003] loop6: detected capacity change from 0 to 8192 [ 318.504325][T18003] loop6: p1 p2[DM] p4 [ 318.508485][T18003] loop6: p1 size 196608 extends beyond EOD, truncated [ 318.516812][T18003] loop6: p2 start 4292936063 is beyond EOD, truncated [ 318.523676][T18003] loop6: p4 size 50331648 extends beyond EOD, truncated [ 318.631120][T18015] loop6: detected capacity change from 0 to 512 [ 318.765846][T18032] loop4: detected capacity change from 0 to 164 [ 318.773154][T18032] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 318.782030][T18032] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 318.792307][T18032] Symlink component flag not implemented [ 318.797961][T18032] Symlink component flag not implemented [ 318.803769][T18032] Symlink component flag not implemented (7) [ 318.809796][T18032] Symlink component flag not implemented (116) [ 318.889626][T18037] loop6: detected capacity change from 0 to 512 [ 318.901602][T18037] EXT4-fs: Ignoring removed mblk_io_submit option [ 318.908883][T18037] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 319.133589][T18041] loop6: detected capacity change from 0 to 1024 [ 319.232037][T18041] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.247689][T18041] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 319.468786][T18055] netlink: 'syz.0.4790': attribute type 13 has an invalid length. [ 319.493044][T18055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.513438][T18058] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 319.667940][ T4614] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.715864][ T4614] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.785694][T17469] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.801766][ T4614] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.868577][ T4614] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.879483][T18073] lo speed is unknown, defaulting to 1000 [ 319.888276][T18073] lo speed is unknown, defaulting to 1000 [ 319.926249][T18067] lo speed is unknown, defaulting to 1000 [ 319.956027][T18067] lo speed is unknown, defaulting to 1000 [ 319.975262][T18098] vhci_hcd: invalid port number 96 [ 319.980409][T18098] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 320.074567][T18073] chnl_net:caif_netlink_parms(): no params data found [ 320.081212][T18103] loop6: detected capacity change from 0 to 1024 [ 320.089850][T18103] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.4806: Failed to acquire dquot type 0 [ 320.102372][T18103] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 320.117219][T18103] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.4806: corrupted inode contents [ 320.130122][T18103] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #13: comm syz.6.4806: mark_inode_dirty error [ 320.141949][T18103] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.4806: corrupted inode contents [ 320.154741][T18103] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.4806: mark_inode_dirty error [ 320.166431][T18103] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.4806: corrupted inode contents [ 320.178751][T18103] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 320.187751][T18103] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.4806: corrupted inode contents [ 320.202087][T18103] EXT4-fs error (device loop6): ext4_truncate:4666: inode #13: comm syz.6.4806: mark_inode_dirty error [ 320.213943][T18103] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 320.216897][T18073] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.225112][T18103] EXT4-fs (loop6): 1 truncate cleaned up [ 320.230104][T18073] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.230748][T18073] bridge_slave_0: entered allmulticast mode [ 320.236289][T18103] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.244791][T18073] bridge_slave_0: entered promiscuous mode [ 320.268264][T18067] chnl_net:caif_netlink_parms(): no params data found [ 320.283238][T18073] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.290406][T18073] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.297784][T18073] bridge_slave_1: entered allmulticast mode [ 320.304575][T18073] bridge_slave_1: entered promiscuous mode [ 320.312122][T18112] FAULT_INJECTION: forcing a failure. [ 320.312122][T18112] name failslab, interval 1, probability 0, space 0, times 0 [ 320.324861][T18112] CPU: 0 UID: 0 PID: 18112 Comm: syz.1.4807 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 320.324890][T18112] Tainted: [W]=WARN [ 320.324897][T18112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.324920][T18112] Call Trace: [ 320.324926][T18112] [ 320.324934][T18112] __dump_stack+0x1d/0x30 [ 320.324955][T18112] dump_stack_lvl+0xe8/0x140 [ 320.324967][T18112] dump_stack+0x15/0x1b [ 320.324976][T18112] should_fail_ex+0x265/0x280 [ 320.325046][T18112] should_failslab+0x8c/0xb0 [ 320.325071][T18112] kmem_cache_alloc_noprof+0x50/0x310 [ 320.325087][T18112] ? __anon_vma_prepare+0x70/0x2f0 [ 320.325179][T18112] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 320.325198][T18112] __anon_vma_prepare+0x70/0x2f0 [ 320.325209][T18112] do_wp_page+0x1926/0x24e0 [ 320.325221][T18112] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 320.325282][T18112] ? css_rstat_updated+0xb7/0x240 [ 320.325298][T18112] ? __rcu_read_lock+0x37/0x50 [ 320.325311][T18112] handle_mm_fault+0x77d/0x2c20 [ 320.325341][T18112] do_user_addr_fault+0x636/0x1090 [ 320.325360][T18112] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 320.325378][T18112] exc_page_fault+0x62/0xa0 [ 320.325393][T18112] asm_exc_page_fault+0x26/0x30 [ 320.325415][T18112] RIP: 0033:0x7f76ad610ba3 [ 320.325425][T18112] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 320.325459][T18112] RSP: 002b:00007f76ac1ae4a0 EFLAGS: 00010202 [ 320.325469][T18112] RAX: 0000000000000400 RBX: 00007f76ac1ae540 RCX: 00007f76a3d8f000 [ 320.325476][T18112] RDX: 00007f76ac1ae6e0 RSI: 0000000000000019 RDI: 00007f76ac1ae5e0 [ 320.325561][T18112] RBP: 00000000000000f9 R08: 0000000000000008 R09: 000000000000009c [ 320.325568][T18112] R10: 00000000000000ba R11: 00007f76ac1ae540 R12: 0000000000000001 [ 320.325575][T18112] R13: 00007f76ad7eda00 R14: 0000000000000020 R15: 00007f76ac1ae5e0 [ 320.325586][T18112] [ 320.325593][T18112] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 320.527601][T17469] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.594841][T18073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.630191][ T4614] bridge_slave_1: left allmulticast mode [ 320.635859][ T4614] bridge_slave_1: left promiscuous mode [ 320.641762][ T4614] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.650270][ T4614] bridge_slave_0: left allmulticast mode [ 320.655938][ T4614] bridge_slave_0: left promiscuous mode [ 320.661645][ T4614] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.671719][ T4614] bridge_slave_1: left allmulticast mode [ 320.677400][ T4614] bridge_slave_1: left promiscuous mode [ 320.683056][ T4614] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.691117][ T4614] bridge_slave_0: left allmulticast mode [ 320.696829][ T4614] bridge_slave_0: left promiscuous mode [ 320.702625][ T4614] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.725618][T18141] loop6: detected capacity change from 0 to 164 [ 320.738512][T18141] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 320.758930][T18141] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 320.767701][T18141] Symlink component flag not implemented [ 320.773375][T18141] Symlink component flag not implemented [ 320.793257][T18141] Symlink component flag not implemented (7) [ 320.799331][T18141] Symlink component flag not implemented (116) [ 320.824762][T18147] tmpfs: Bad value for 'mpol' [ 320.829560][T18147] FAULT_INJECTION: forcing a failure. [ 320.829560][T18147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.842706][T18147] CPU: 1 UID: 0 PID: 18147 Comm: syz.0.4819 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 320.842736][T18147] Tainted: [W]=WARN [ 320.842792][T18147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.842804][T18147] Call Trace: [ 320.842810][T18147] [ 320.842818][T18147] __dump_stack+0x1d/0x30 [ 320.842839][T18147] dump_stack_lvl+0xe8/0x140 [ 320.842865][T18147] dump_stack+0x15/0x1b [ 320.842881][T18147] should_fail_ex+0x265/0x280 [ 320.842960][T18147] should_fail+0xb/0x20 [ 320.842981][T18147] should_fail_usercopy+0x1a/0x20 [ 320.843036][T18147] _copy_from_user+0x1c/0xb0 [ 320.843063][T18147] kstrtouint_from_user+0x69/0xf0 [ 320.843084][T18147] ? 0xffffffff81000000 [ 320.843098][T18147] ? selinux_file_permission+0x1e4/0x320 [ 320.843125][T18147] proc_fail_nth_write+0x50/0x160 [ 320.843151][T18147] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 320.843177][T18147] vfs_write+0x269/0x960 [ 320.843204][T18147] ? vfs_read+0x4e6/0x770 [ 320.843223][T18147] ? __rcu_read_unlock+0x4f/0x70 [ 320.843245][T18147] ? __fget_files+0x184/0x1c0 [ 320.843273][T18147] ksys_write+0xda/0x1a0 [ 320.843325][T18147] __x64_sys_write+0x40/0x50 [ 320.843344][T18147] x64_sys_call+0x27fe/0x2ff0 [ 320.843361][T18147] do_syscall_64+0xd2/0x200 [ 320.843440][T18147] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 320.843507][T18147] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 320.843538][T18147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.843558][T18147] RIP: 0033:0x7f1e183ed65f [ 320.843639][T18147] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 320.843657][T18147] RSP: 002b:00007f1e16e57030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 320.843749][T18147] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1e183ed65f [ 320.843761][T18147] RDX: 0000000000000001 RSI: 00007f1e16e570a0 RDI: 0000000000000003 [ 320.843804][T18147] RBP: 00007f1e16e57090 R08: 0000000000000000 R09: 0000000000000000 [ 320.843816][T18147] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 320.843826][T18147] R13: 00007f1e18636038 R14: 00007f1e18635fa0 R15: 00007ffe575961b8 [ 320.843896][T18147] [ 321.096417][ T4614] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.105923][ T4614] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.115271][ T4614] .` (unregistering): Released all slaves [ 321.211068][ T4614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.220422][ T4614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.229544][ T4614] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 321.238365][ T4614] bond0 (unregistering): Released all slaves [ 321.247303][T18073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.288107][T18067] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.295255][T18067] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.305779][T18067] bridge_slave_0: entered allmulticast mode [ 321.313449][T18067] bridge_slave_0: entered promiscuous mode [ 321.337817][T18067] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.345077][T18067] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.352995][T18067] bridge_slave_1: entered allmulticast mode [ 321.359436][T18067] bridge_slave_1: entered promiscuous mode [ 321.366883][T18073] team0: Port device team_slave_0 added [ 321.405033][T18073] team0: Port device team_slave_1 added [ 321.455267][T18161] loop6: detected capacity change from 0 to 1024 [ 321.455648][T18067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.466395][T18161] EXT4-fs: Ignoring removed orlov option [ 321.485558][T18073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.492607][T18073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.518604][T18073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.530834][T18161] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.551598][T18067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.599358][T18073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.606413][T18073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.632502][T18073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.643527][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 321.643543][ T29] audit: type=1326 audit(1757660001.678:7547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18169 comm="syz.1.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ad74eba9 code=0x7ffc0000 [ 321.647296][T18175] netlink: 'syz.0.4828': attribute type 2 has an invalid length. [ 321.649713][ T29] audit: type=1326 audit(1757660001.678:7548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18169 comm="syz.1.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ad74eba9 code=0x7ffc0000 [ 321.673176][T18175] netlink: 'syz.0.4828': attribute type 1 has an invalid length. [ 321.680968][ T29] audit: type=1326 audit(1757660001.678:7549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18169 comm="syz.1.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f76ad74eba9 code=0x7ffc0000 [ 321.704392][T18175] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.4828'. [ 321.712092][ T29] audit: type=1326 audit(1757660001.678:7550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18169 comm="syz.1.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ad74eba9 code=0x7ffc0000 [ 321.768392][ T29] audit: type=1326 audit(1757660001.678:7551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18169 comm="syz.1.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ad74eba9 code=0x7ffc0000 [ 321.792007][ T29] audit: type=1326 audit(1757660001.678:7552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18169 comm="syz.1.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f76ad74eba9 code=0x7ffc0000 [ 321.827833][ T29] audit: type=1400 audit(1757660001.920:7553): avc: denied { name_connect } for pid=18169 comm="syz.1.4827" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 321.854136][ T4614] hsr_slave_0: left promiscuous mode [ 321.858382][ T29] audit: type=1400 audit(1757660001.962:7554): avc: denied { create } for pid=18178 comm="syz.0.4829" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 321.861433][T18179] block device autoloading is deprecated and will be removed. [ 321.880267][ T29] audit: type=1400 audit(1757660001.962:7555): avc: denied { write } for pid=18178 comm="syz.0.4829" name="file0" dev="tmpfs" ino=2132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 321.910363][ T29] audit: type=1400 audit(1757660001.962:7556): avc: denied { open } for pid=18178 comm="syz.0.4829" path="/407/file0" dev="tmpfs" ino=2132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 321.942850][ T4614] hsr_slave_1: left promiscuous mode [ 321.948652][ T4614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.956208][ T4614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.983980][ T4614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.991449][ T4614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.999402][T17469] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.011938][ T4614] hsr_slave_0: left promiscuous mode [ 322.021540][ T4614] hsr_slave_1: left promiscuous mode [ 322.036487][ T4614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.046142][ T4614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.067591][ T4614] veth1_macvtap: left promiscuous mode [ 322.073157][ T4614] veth0_macvtap: left promiscuous mode [ 322.082248][ T4614] veth1_vlan: left promiscuous mode [ 322.087589][ T4614] veth0_vlan: left promiscuous mode [ 322.116731][T18188] loop6: detected capacity change from 0 to 164 [ 322.172927][T18188] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 322.182448][T18188] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 322.192883][T18188] Symlink component flag not implemented [ 322.198541][T18188] Symlink component flag not implemented [ 322.204662][ T4614] team0 (unregistering): Port device team_slave_1 removed [ 322.208246][T18188] Symlink component flag not implemented (7) [ 322.217769][T18188] Symlink component flag not implemented (116) [ 322.225710][ T4614] team0 (unregistering): Port device team_slave_0 removed [ 322.301925][ T4614] team0 (unregistering): Port device team_slave_1 removed [ 322.312677][ T4614] team0 (unregistering): Port device team_slave_0 removed [ 322.339497][T17407] smc: removing ib device sz1 [ 322.348975][T18067] team0: Port device team_slave_0 added [ 322.355800][T18067] team0: Port device team_slave_1 added [ 322.365495][ T3393] lo speed is unknown, defaulting to 1000 [ 322.371314][ T3393] sz1: Port: 1 Link DOWN [ 322.417272][T18073] hsr_slave_0: entered promiscuous mode [ 322.429013][T18073] hsr_slave_1: entered promiscuous mode [ 322.436283][T18067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.443272][T18067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.469239][T18067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.533622][T18067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.540604][T18067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.566546][T18067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.613896][T18067] hsr_slave_0: entered promiscuous mode [ 322.620121][T18067] hsr_slave_1: entered promiscuous mode [ 322.625925][T18067] debugfs: 'hsr0' already exists in 'hsr' [ 322.631856][T18067] Cannot create hsr debugfs directory [ 322.658363][T18211] tipc: Started in network mode [ 322.663352][T18211] tipc: Node identity ac14140f, cluster identity 4711 [ 322.670447][T18209] loop1: detected capacity change from 0 to 1024 [ 322.671196][T18211] tipc: New replicast peer: 255.255.255.255 [ 322.682947][T18211] tipc: Enabled bearer , priority 10 [ 322.687887][T18209] EXT4-fs: Ignoring removed orlov option [ 322.719165][T18209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.758280][T18073] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 322.769950][T18073] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 322.786946][T12485] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.787900][T18073] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 322.813942][T18073] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 322.827236][T18221] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xa1 [ 322.878795][T18067] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 322.898693][T18236] loop6: detected capacity change from 0 to 164 [ 322.899683][T18067] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 322.913214][T18236] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 322.914526][T18067] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 322.924721][T18236] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 322.936815][T18236] Symlink component flag not implemented [ 322.942450][T18236] Symlink component flag not implemented [ 322.945286][T18067] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 322.956226][T18236] Symlink component flag not implemented (7) [ 322.962295][T18236] Symlink component flag not implemented (116) [ 322.974315][ T4614] IPVS: stop unused estimator thread 0... [ 322.988082][T18073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.012191][T18073] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.034469][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.041578][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.075471][ T132] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.083350][ T132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.145546][T18067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.154424][T18249] loop6: detected capacity change from 0 to 1024 [ 323.162598][T18249] EXT4-fs: Ignoring removed orlov option [ 323.173993][T18249] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.176129][T18067] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.222520][ T4614] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.229672][ T4614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.243585][ T4614] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.250684][ T4614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.296073][T18073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.307922][T17469] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.377102][T18067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.529185][T18073] veth0_vlan: entered promiscuous mode [ 323.546792][T18073] veth1_vlan: entered promiscuous mode [ 323.572457][T18073] veth0_macvtap: entered promiscuous mode [ 323.585062][T18073] veth1_macvtap: entered promiscuous mode [ 323.601744][T18073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.611516][T18308] FAULT_INJECTION: forcing a failure. [ 323.611516][T18308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.624690][T18308] CPU: 1 UID: 0 PID: 18308 Comm: syz.0.4862 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 323.624852][T18308] Tainted: [W]=WARN [ 323.624858][T18308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 323.624868][T18308] Call Trace: [ 323.624873][T18308] [ 323.624881][T18308] __dump_stack+0x1d/0x30 [ 323.624936][T18308] dump_stack_lvl+0xe8/0x140 [ 323.624951][T18308] dump_stack+0x15/0x1b [ 323.624965][T18308] should_fail_ex+0x265/0x280 [ 323.624985][T18308] should_fail+0xb/0x20 [ 323.625083][T18308] should_fail_usercopy+0x1a/0x20 [ 323.625135][T18308] strncpy_from_user+0x25/0x230 [ 323.625164][T18308] ? kmem_cache_alloc_noprof+0x186/0x310 [ 323.625218][T18308] ? getname_flags+0x80/0x3b0 [ 323.625245][T18308] getname_flags+0xae/0x3b0 [ 323.625267][T18308] user_path_at+0x28/0x130 [ 323.625320][T18308] __se_sys_mount+0x25b/0x2e0 [ 323.625343][T18308] ? fput+0x8f/0xc0 [ 323.625374][T18308] __x64_sys_mount+0x67/0x80 [ 323.625442][T18308] x64_sys_call+0x2b4d/0x2ff0 [ 323.625460][T18308] do_syscall_64+0xd2/0x200 [ 323.625487][T18308] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 323.625596][T18308] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 323.625626][T18308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.625693][T18308] RIP: 0033:0x7f1e183eeba9 [ 323.625708][T18308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.625725][T18308] RSP: 002b:00007f1e16e57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 323.625741][T18308] RAX: ffffffffffffffda RBX: 00007f1e18635fa0 RCX: 00007f1e183eeba9 [ 323.625829][T18308] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 323.625840][T18308] RBP: 00007f1e16e57090 R08: 0000200000000280 R09: 0000000000000000 [ 323.625851][T18308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.625863][T18308] R13: 00007f1e18636038 R14: 00007f1e18635fa0 R15: 00007ffe575961b8 [ 323.625909][T18308] [ 323.626485][T18073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.638391][ T3453] tipc: Node number set to 2886997007 [ 323.842528][ T4614] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.856056][T18310] loop6: detected capacity change from 0 to 1024 [ 323.858748][ T4614] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.873134][T18310] EXT4-fs: Ignoring removed orlov option [ 323.893822][ T4614] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.909676][T18310] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.929073][ T4614] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.942170][T18067] veth0_vlan: entered promiscuous mode [ 323.957655][T18067] veth1_vlan: entered promiscuous mode [ 323.963620][T18329] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4799'. [ 323.994420][T18067] veth0_macvtap: entered promiscuous mode [ 324.002092][T18067] veth1_macvtap: entered promiscuous mode [ 324.012271][T18067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.020959][T18067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.028864][T17469] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.040595][ T41] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.077281][ T41] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.097445][ T41] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.111338][T18340] loop6: detected capacity change from 0 to 512 [ 324.126687][ T41] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.136466][T18340] EXT4-fs: Ignoring removed nobh option [ 324.155361][T18340] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.4871: corrupted inode contents [ 324.173356][T18340] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #3: comm syz.6.4871: mark_inode_dirty error [ 324.192948][T18340] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.4871: corrupted inode contents [ 324.206995][T18340] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.4871: mark_inode_dirty error [ 324.221245][T18340] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.4871: Failed to acquire dquot type 0 [ 324.233581][T18340] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.4871: corrupted inode contents [ 324.246865][T18340] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.4871: mark_inode_dirty error [ 324.259900][T18340] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.4871: corrupted inode contents [ 324.274792][T18340] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.4871: mark_inode_dirty error [ 324.309669][T18340] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.4871: corrupted inode contents [ 324.337726][T18340] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 324.356109][T18340] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.4871: corrupted inode contents [ 324.369477][T18340] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.4871: mark_inode_dirty error [ 324.382332][T18340] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 324.392364][T18340] EXT4-fs (loop6): 1 truncate cleaned up [ 324.398518][T18340] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.422605][T18340] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.591284][T18340] lo speed is unknown, defaulting to 1000 [ 324.611714][T18340] lo speed is unknown, defaulting to 1000 [ 324.619808][T18340] lo speed is unknown, defaulting to 1000 [ 324.773007][T18340] infiniband sz1: set active [ 324.777750][T18340] infiniband sz1: added lo [ 324.782657][ T3392] lo speed is unknown, defaulting to 1000 [ 324.821000][T18340] RDS/IB: sz1: added [ 324.826133][T18340] smc: adding ib device sz1 with port count 1 [ 324.837670][T18340] smc: ib device sz1 port 1 has pnetid [ 324.843743][ T3392] lo speed is unknown, defaulting to 1000 [ 324.850098][T18340] lo speed is unknown, defaulting to 1000 [ 324.882487][T18340] lo speed is unknown, defaulting to 1000 [ 324.921773][T18340] lo speed is unknown, defaulting to 1000 [ 324.956061][T18340] lo speed is unknown, defaulting to 1000 [ 325.007982][T18390] loop7: detected capacity change from 0 to 2048 [ 325.028345][T18340] lo speed is unknown, defaulting to 1000 [ 325.055970][T18390] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.110608][T18340] lo speed is unknown, defaulting to 1000 [ 325.411690][T17469] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.474407][T18401] loop6: detected capacity change from 0 to 512 [ 325.504374][T18067] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.513815][T18401] EXT4-fs: Ignoring removed mblk_io_submit option [ 325.521594][T18401] ext4: Unknown parameter 'euid<00000000000000000000' [ 325.562321][T18404] ipvlan2: entered promiscuous mode [ 325.568654][T18404] bridge0: port 3(ipvlan2) entered blocking state [ 325.575331][T18404] bridge0: port 3(ipvlan2) entered disabled state [ 325.599097][T18404] ipvlan2: entered allmulticast mode [ 325.604490][T18404] bridge0: entered allmulticast mode [ 325.624401][T18404] ipvlan2: left allmulticast mode [ 325.629539][T18404] bridge0: left allmulticast mode [ 325.645709][T18408] loop6: detected capacity change from 0 to 8192 [ 325.688253][T18408] loop6: p1 p2[DM] p4 [ 325.692521][T18408] loop6: p1 size 196608 extends beyond EOD, truncated [ 325.804646][T18408] loop6: p2 start 4292936063 is beyond EOD, truncated [ 325.811574][T18408] loop6: p4 size 50331648 extends beyond EOD, truncated [ 325.884290][T18428] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4904'. [ 325.983852][T18436] loop6: detected capacity change from 0 to 8192 [ 326.020015][T18436] loop6: p1 p2[DM] p4 [ 326.024351][T18436] loop6: p1 size 196608 extends beyond EOD, truncated [ 326.032397][T18436] loop6: p2 start 4292936063 is beyond EOD, truncated [ 326.039225][T18436] loop6: p4 size 50331648 extends beyond EOD, truncated [ 326.083641][T16348] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.135451][T16348] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.193285][T16348] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.243060][T16348] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.274450][T18447] lo speed is unknown, defaulting to 1000 [ 326.373987][T16348] .` (unregistering): Released all slaves [ 326.441044][T18466] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4917'. [ 326.442295][T18447] chnl_net:caif_netlink_parms(): no params data found [ 326.512246][T18468] netlink: 'syz.7.4918': attribute type 13 has an invalid length. [ 326.529403][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 326.529491][ T29] audit: type=1400 audit(1757660006.854:7715): avc: denied { ioctl } for pid=18469 comm="syz.6.4919" path="socket:[57205]" dev="sockfs" ino=57205 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 326.580003][T18472] loop7: detected capacity change from 0 to 512 [ 326.588285][T16348] hsr_slave_0: left promiscuous mode [ 326.594266][ T29] audit: type=1400 audit(1757660006.928:7716): avc: denied { mounton } for pid=18467 comm="+}[@" path="/5/file0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 326.618003][T16348] hsr_slave_1: left promiscuous mode [ 326.627400][T18472] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 326.641248][T16348] veth1_macvtap: left promiscuous mode [ 326.642018][T18472] EXT4-fs (loop7): Remounting filesystem read-only [ 326.647835][T16348] veth0_macvtap: left promiscuous mode [ 326.653322][T18472] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 326.658919][T16348] veth1_vlan: left promiscuous mode [ 326.674510][T16348] veth0_vlan: left promiscuous mode [ 326.676129][ T29] audit: type=1400 audit(1757660007.012:7717): avc: denied { create } for pid=18482 comm="syz.1.4924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 326.680101][T18472] EXT4-fs (loop7): 1 orphan inode deleted [ 326.699619][ T29] audit: type=1326 audit(1757660007.012:7718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.1.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ad74eba9 code=0x7ffc0000 [ 326.705773][T18472] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.728823][ T29] audit: type=1326 audit(1757660007.012:7719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.1.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ad74eba9 code=0x7ffc0000 [ 326.764377][ T29] audit: type=1326 audit(1757660007.012:7720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.1.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f76ad74eba9 code=0x7ffc0000 [ 326.765685][T18472] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.787822][ T29] audit: type=1400 audit(1757660007.012:7721): avc: denied { setopt } for pid=18482 comm="syz.1.4924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 326.816977][ T29] audit: type=1326 audit(1757660007.148:7722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.1.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ad74eba9 code=0x7ffc0000 [ 326.840521][ T29] audit: type=1326 audit(1757660007.148:7723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.1.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ad74eba9 code=0x7ffc0000 [ 326.864049][ T29] audit: type=1326 audit(1757660007.159:7724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.1.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f76ad74eba9 code=0x7ffc0000 [ 326.910815][T18481] loop6: detected capacity change from 0 to 512 [ 326.966017][T18481] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 326.975760][T18481] EXT4-fs (loop6): orphan cleanup on readonly fs [ 327.001823][T18481] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.4923: corrupted inode contents [ 327.007739][ T166] smc: removing ib device syz! [ 327.020677][T18481] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.4923: mark_inode_dirty error [ 327.032942][T18481] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.4923: corrupted inode contents [ 327.048569][T18481] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.4923: mark_inode_dirty error [ 327.060265][T18481] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.4923: corrupted inode contents [ 327.072730][T18481] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 327.081529][T18481] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.4923: corrupted inode contents [ 327.093716][T18481] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.4923: mark_inode_dirty error [ 327.105361][T18481] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 327.116016][T18481] EXT4-fs (loop6): 1 truncate cleaned up [ 327.122554][ T41] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 1 [ 327.134566][T18468] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 327.135890][T18481] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 327.230710][T18447] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.237834][T18447] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.248128][T17469] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.269834][T18495] rdma_rxe: rxe_newlink: failed to add lo [ 327.295567][T18447] bridge_slave_0: entered allmulticast mode [ 327.323160][T18447] bridge_slave_0: entered promiscuous mode [ 327.368292][T18447] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.375410][T18447] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.384282][T18447] bridge_slave_1: entered allmulticast mode [ 327.391376][T18447] bridge_slave_1: entered promiscuous mode [ 327.517900][T16348] IPVS: stop unused estimator thread 0... [ 327.572512][T16348] bridge_slave_1: left allmulticast mode [ 327.578184][T16348] bridge_slave_1: left promiscuous mode [ 327.583966][T16348] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.593209][T16348] bridge_slave_0: left allmulticast mode [ 327.598928][T16348] bridge_slave_0: left promiscuous mode [ 327.604735][T16348] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.677710][T16348] bond0 (unregistering): Released all slaves [ 327.771871][T18520] lo speed is unknown, defaulting to 1000 [ 327.783531][T18545] loop8: detected capacity change from 0 to 1024 [ 327.802422][T18545] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.4943: Failed to acquire dquot type 0 [ 327.822487][T18545] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 327.852423][T18545] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #13: comm syz.8.4943: corrupted inode contents [ 327.866564][T18533] lo speed is unknown, defaulting to 1000 [ 327.873928][T18545] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #13: comm syz.8.4943: mark_inode_dirty error [ 327.893793][T18545] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #13: comm syz.8.4943: corrupted inode contents [ 327.909147][T18545] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #13: comm syz.8.4943: mark_inode_dirty error [ 327.957687][T18545] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #13: comm syz.8.4943: corrupted inode contents [ 327.989893][T18545] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 328.014730][T18545] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #13: comm syz.8.4943: corrupted inode contents [ 328.038633][T18545] EXT4-fs error (device loop8): ext4_truncate:4666: inode #13: comm syz.8.4943: mark_inode_dirty error [ 328.056666][T18520] chnl_net:caif_netlink_parms(): no params data found [ 328.063929][T18545] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 328.081372][T18545] EXT4-fs (loop8): 1 truncate cleaned up [ 328.098489][T18545] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.127412][T18533] chnl_net:caif_netlink_parms(): no params data found [ 328.137021][T18073] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.180407][T18520] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.187606][T18520] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.198656][T18563] loop8: detected capacity change from 0 to 128 [ 328.208145][T18563] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 328.216700][T18563] FAT-fs (loop8): Filesystem has been set read-only [ 328.224708][T18520] bridge_slave_0: entered allmulticast mode [ 328.239449][T18520] bridge_slave_0: entered promiscuous mode [ 328.245472][T18567] loop7: detected capacity change from 0 to 1024 [ 328.256204][T18520] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.263445][T18520] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.271025][T18567] EXT4-fs: Ignoring removed orlov option [ 328.278566][T18520] bridge_slave_1: entered allmulticast mode [ 328.285124][T18520] bridge_slave_1: entered promiscuous mode [ 328.300033][T18567] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.323266][T16348] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.407245][T18577] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 328.413785][T18577] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 328.421516][T18577] vhci_hcd vhci_hcd.0: Device attached [ 328.666657][T18580] loop8: detected capacity change from 0 to 8192 [ 328.714513][ T36] usb 4-1: SetAddress Request (2) to port 0 [ 328.721087][T18580] loop8: p1 p2[DM] p4 [ 328.726854][T18580] loop8: p1 size 196608 extends beyond EOD, truncated [ 328.733793][ T36] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 328.738696][T18580] loop8: p2 start 4292936063 is beyond EOD, truncated [ 328.747941][T18580] loop8: p4 size 50331648 extends beyond EOD, truncated [ 328.758986][T16348] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.784625][T18520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.799915][T18520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.809282][T18533] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.816426][T18533] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.823665][T18533] bridge_slave_0: entered allmulticast mode [ 328.830482][T18533] bridge_slave_0: entered promiscuous mode [ 328.837195][T18533] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.844294][T18533] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.851714][T18533] bridge_slave_1: entered allmulticast mode [ 328.858280][T18533] bridge_slave_1: entered promiscuous mode [ 328.882478][T16348] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.895373][T18067] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.912151][T18520] team0: Port device team_slave_0 added [ 328.920150][T18520] team0: Port device team_slave_1 added [ 328.938640][T16348] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.951749][T18533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.967858][T18520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.974960][T18520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.000870][T18520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.010435][T18578] vhci_hcd: connection reset by peer [ 329.014491][T18520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.023660][T18520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.049682][T18520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.058536][T17407] vhci_hcd: stop threads [ 329.062472][T18533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.064509][T17407] vhci_hcd: release socket [ 329.078085][T17407] vhci_hcd: disconnect device [ 329.116609][T18520] hsr_slave_0: entered promiscuous mode [ 329.123750][T18520] hsr_slave_1: entered promiscuous mode [ 329.130759][T18520] debugfs: 'hsr0' already exists in 'hsr' [ 329.136490][T18520] Cannot create hsr debugfs directory [ 329.149237][T18533] team0: Port device team_slave_0 added [ 329.166234][T18533] team0: Port device team_slave_1 added [ 329.197312][T18533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.204310][T18533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.230241][T18533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.256839][T16348] bridge_slave_1: left allmulticast mode [ 329.262559][T16348] bridge_slave_1: left promiscuous mode [ 329.268321][T16348] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.276962][T16348] bridge_slave_0: left allmulticast mode [ 329.282671][T16348] bridge_slave_0: left promiscuous mode [ 329.288468][T16348] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.689593][T18600] Set syz1 is full, maxelem 65536 reached [ 329.747921][T16348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.774140][T16348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.791026][T18608] loop8: detected capacity change from 0 to 8192 [ 329.801725][T16348] bond0 (unregistering): Released all slaves [ 329.820140][T18608] loop8: p1 p2[DM] p4 [ 329.825922][T18533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.833010][T18533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.833455][T18608] loop8: p1 size 196608 extends beyond EOD, [ 329.858999][T18533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.875704][T18608] truncated [ 329.892032][T18608] loop8: p2 start 4292936063 is beyond EOD, truncated [ 329.898914][T18608] loop8: p4 size 50331648 extends beyond EOD, truncated [ 329.962813][T16348] tipc: Disabling bearer [ 329.967925][T16348] tipc: Left network mode [ 329.992556][T18533] hsr_slave_0: entered promiscuous mode [ 330.001399][T18619] loop8: detected capacity change from 0 to 164 [ 330.008701][T18533] hsr_slave_1: entered promiscuous mode [ 330.015107][T18619] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 330.015265][T18533] debugfs: 'hsr0' already exists in 'hsr' [ 330.025882][T18619] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 330.029426][T18533] Cannot create hsr debugfs directory [ 330.037817][T18619] Symlink component flag not implemented [ 330.048592][T18619] Symlink component flag not implemented [ 330.055966][T18619] Symlink component flag not implemented (7) [ 330.062025][T18619] Symlink component flag not implemented (116) [ 330.139818][T16348] hsr_slave_0: left promiscuous mode [ 330.146086][T16348] hsr_slave_1: left promiscuous mode [ 330.151805][T16348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.159225][T16348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.170894][T16348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.178321][T16348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.203872][T16348] veth1_macvtap: left promiscuous mode [ 330.209475][T16348] veth0_macvtap: left promiscuous mode [ 330.215321][T16348] veth1_vlan: left promiscuous mode [ 330.225988][T16348] veth0_vlan: left promiscuous mode [ 330.284291][T18635] loop8: detected capacity change from 0 to 1024 [ 330.307024][T18635] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.4969: Failed to acquire dquot type 0 [ 330.321407][T18635] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 330.337251][T18635] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #13: comm syz.8.4969: corrupted inode contents [ 330.353799][T18635] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #13: comm syz.8.4969: mark_inode_dirty error [ 330.366364][T18635] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #13: comm syz.8.4969: corrupted inode contents [ 330.379003][T18635] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #13: comm syz.8.4969: mark_inode_dirty error [ 330.390515][T18635] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #13: comm syz.8.4969: corrupted inode contents [ 330.402744][T16348] team0 (unregistering): Port device team_slave_1 removed [ 330.402764][T18635] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 330.418607][T18635] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #13: comm syz.8.4969: corrupted inode contents [ 330.418775][T16348] team0 (unregistering): Port device team_slave_0 removed [ 330.431912][T18635] EXT4-fs error (device loop8): ext4_truncate:4666: inode #13: comm syz.8.4969: mark_inode_dirty error [ 330.450270][T18635] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 330.460086][T18635] EXT4-fs (loop8): 1 truncate cleaned up [ 330.465582][ T4614] smc: removing ib device sz1 [ 330.466167][T18635] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.483426][ T23] lo speed is unknown, defaulting to 1000 [ 330.489189][ T23] sz1: Port: 1 Link DOWN [ 330.578365][T18073] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.691460][T18668] loop8: detected capacity change from 0 to 1024 [ 330.717925][T18668] EXT4-fs: Ignoring removed orlov option [ 330.749030][T18668] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.766670][T18675] FAULT_INJECTION: forcing a failure. [ 330.766670][T18675] name failslab, interval 1, probability 0, space 0, times 0 [ 330.779378][T18675] CPU: 1 UID: 0 PID: 18675 Comm: syz.1.4979 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 330.779408][T18675] Tainted: [W]=WARN [ 330.779414][T18675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 330.779425][T18675] Call Trace: [ 330.779431][T18675] [ 330.779440][T18675] __dump_stack+0x1d/0x30 [ 330.779465][T18675] dump_stack_lvl+0xe8/0x140 [ 330.779485][T18675] dump_stack+0x15/0x1b [ 330.779502][T18675] should_fail_ex+0x265/0x280 [ 330.779528][T18675] ? virtual_ncidev_open+0x34/0x140 [ 330.779612][T18675] should_failslab+0x8c/0xb0 [ 330.779637][T18675] __kmalloc_cache_noprof+0x4c/0x320 [ 330.779697][T18675] ? avc_has_perm+0xf7/0x180 [ 330.779717][T18675] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 330.779744][T18675] virtual_ncidev_open+0x34/0x140 [ 330.779772][T18675] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 330.779861][T18675] misc_open+0x1d6/0x200 [ 330.779889][T18675] chrdev_open+0x2eb/0x3a0 [ 330.779923][T18675] do_dentry_open+0x646/0xa20 [ 330.779946][T18675] ? __pfx_chrdev_open+0x10/0x10 [ 330.780037][T18675] vfs_open+0x37/0x1e0 [ 330.780065][T18675] path_openat+0x1c5e/0x2170 [ 330.780093][T18675] do_filp_open+0x109/0x230 [ 330.780161][T18675] do_sys_openat2+0xa6/0x110 [ 330.780194][T18675] __x64_sys_openat+0xf2/0x120 [ 330.780302][T18675] x64_sys_call+0x2e9c/0x2ff0 [ 330.780324][T18675] do_syscall_64+0xd2/0x200 [ 330.780406][T18675] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 330.780427][T18675] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 330.780508][T18675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.780574][T18675] RIP: 0033:0x7f76ad74eba9 [ 330.780590][T18675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.780659][T18675] RSP: 002b:00007f76ac1af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 330.780675][T18675] RAX: ffffffffffffffda RBX: 00007f76ad995fa0 RCX: 00007f76ad74eba9 [ 330.780687][T18675] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 330.780742][T18675] RBP: 00007f76ac1af090 R08: 0000000000000000 R09: 0000000000000000 [ 330.780755][T18675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 330.780768][T18675] R13: 00007f76ad996038 R14: 00007f76ad995fa0 R15: 00007ffc6fbe3da8 [ 330.780787][T18675] [ 331.041314][T18636] chnl_net:caif_netlink_parms(): no params data found [ 331.093937][T18073] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.132850][T18643] chnl_net:caif_netlink_parms(): no params data found [ 331.136616][T18690] 9pnet_fd: Insufficient options for proto=fd [ 331.155226][T16348] IPVS: stop unused estimator thread 0... [ 331.231847][T18636] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.239161][T18636] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.256751][T18636] bridge_slave_0: entered allmulticast mode [ 331.268938][T18636] bridge_slave_0: entered promiscuous mode [ 331.279504][T18700] sch_fq: defrate 4294967295 ignored. [ 331.287635][T18636] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.294722][T18636] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.303164][T18636] bridge_slave_1: entered allmulticast mode [ 331.310301][T18636] bridge_slave_1: entered promiscuous mode [ 331.311086][T18702] loop8: detected capacity change from 0 to 2048 [ 331.331806][T18636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.348629][T18702] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.366739][T16348] bridge_slave_1: left allmulticast mode [ 331.372602][T16348] bridge_slave_1: left promiscuous mode [ 331.378301][T16348] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.387349][T16348] bridge_slave_0: left allmulticast mode [ 331.393102][T16348] bridge_slave_0: left promiscuous mode [ 331.398743][T16348] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.408226][T16348] bridge_slave_1: left allmulticast mode [ 331.414005][T16348] bridge_slave_1: left promiscuous mode [ 331.419835][T16348] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.427954][T16348] bridge_slave_0: left allmulticast mode [ 331.433690][T16348] bridge_slave_0: left promiscuous mode [ 331.439516][T16348] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.450298][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 331.450311][ T29] audit: type=1400 audit(1757660012.030:7858): avc: denied { mounton } for pid=18701 comm="syz.8.4986" path="/24/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 331.526805][T16348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.537916][T16348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.547497][T16348] bond0 (unregistering): Released all slaves [ 331.612615][T16348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.623806][T16348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.633533][T16348] bond0 (unregistering): Released all slaves [ 331.642687][T18702] netlink: 'syz.8.4986': attribute type 3 has an invalid length. [ 331.650532][T18702] netlink: 'syz.8.4986': attribute type 3 has an invalid length. [ 331.660045][T18636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.669252][T18643] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.676316][T18643] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.683817][T18643] bridge_slave_0: entered allmulticast mode [ 331.700312][T18643] bridge_slave_0: entered promiscuous mode [ 331.707854][T18073] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.722219][T18643] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.729495][T18643] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.753717][T18643] bridge_slave_1: entered allmulticast mode [ 331.768370][T18643] bridge_slave_1: entered promiscuous mode [ 331.775341][ T29] audit: type=1400 audit(1757660012.366:7859): avc: denied { setopt } for pid=18709 comm="syz.8.4987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 331.791404][T18710] FAULT_INJECTION: forcing a failure. [ 331.791404][T18710] name failslab, interval 1, probability 0, space 0, times 0 [ 331.807625][T18710] CPU: 1 UID: 0 PID: 18710 Comm: syz.8.4987 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 331.807656][T18710] Tainted: [W]=WARN [ 331.807664][T18710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 331.807718][T18710] Call Trace: [ 331.807724][T18710] [ 331.807732][T18710] __dump_stack+0x1d/0x30 [ 331.807810][T18710] dump_stack_lvl+0xe8/0x140 [ 331.807841][T18710] dump_stack+0x15/0x1b [ 331.807858][T18710] should_fail_ex+0x265/0x280 [ 331.807920][T18710] should_failslab+0x8c/0xb0 [ 331.807985][T18710] kmem_cache_alloc_node_noprof+0x57/0x320 [ 331.808010][T18710] ? __alloc_skb+0x101/0x320 [ 331.808031][T18710] __alloc_skb+0x101/0x320 [ 331.808099][T18710] alloc_skb_with_frags+0x7d/0x470 [ 331.808175][T18710] ? xa_load+0xb1/0xe0 [ 331.808202][T18710] virtio_transport_alloc_skb+0x133/0x710 [ 331.808224][T18710] virtio_transport_send_pkt_info+0x434/0x860 [ 331.808334][T18710] ? __rcu_read_unlock+0x4f/0x70 [ 331.808353][T18710] virtio_transport_stream_enqueue+0x5a/0x80 [ 331.808399][T18710] vsock_connectible_sendmsg+0x778/0x980 [ 331.808483][T18710] ? __pfx_woken_wake_function+0x10/0x10 [ 331.808520][T18710] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 331.808546][T18710] __sock_sendmsg+0x142/0x180 [ 331.808578][T18710] sock_write_iter+0x165/0x1b0 [ 331.808643][T18710] do_iter_readv_writev+0x499/0x540 [ 331.808672][T18710] vfs_writev+0x2df/0x8b0 [ 331.808747][T18710] do_writev+0xe7/0x210 [ 331.808775][T18710] __x64_sys_writev+0x45/0x50 [ 331.808810][T18710] x64_sys_call+0x1e9a/0x2ff0 [ 331.808823][T18710] do_syscall_64+0xd2/0x200 [ 331.808839][T18710] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 331.808908][T18710] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 331.808924][T18710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.808981][T18710] RIP: 0033:0x7fcdb5c2eba9 [ 331.808991][T18710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.809021][T18710] RSP: 002b:00007fcdb4697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 331.809042][T18710] RAX: ffffffffffffffda RBX: 00007fcdb5e75fa0 RCX: 00007fcdb5c2eba9 [ 331.809049][T18710] RDX: 0000000000000003 RSI: 0000200000000500 RDI: 0000000000000004 [ 331.809057][T18710] RBP: 00007fcdb4697090 R08: 0000000000000000 R09: 0000000000000000 [ 331.809064][T18710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.809071][T18710] R13: 00007fcdb5e76038 R14: 00007fcdb5e75fa0 R15: 00007fffa12f0cd8 [ 331.809081][T18710] [ 331.810454][T18636] team0: Port device team_slave_0 added [ 332.010475][T18716] loop8: detected capacity change from 0 to 512 [ 332.017931][T18636] team0: Port device team_slave_1 added [ 332.087418][T18716] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.102798][T18716] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 332.127380][T18718] loop7: detected capacity change from 0 to 1024 [ 332.134060][T18718] EXT4-fs: Ignoring removed orlov option [ 332.139775][T16348] hsr_slave_0: left promiscuous mode [ 332.149889][T16348] hsr_slave_1: left promiscuous mode [ 332.162816][T16348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.180406][T16348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.210918][T18718] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.224442][T16348] hsr_slave_0: left promiscuous mode [ 332.248740][T18716] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #2: comm syz.8.4989: corrupted inode contents [ 332.265895][T16348] hsr_slave_1: left promiscuous mode [ 332.272408][ T29] audit: type=1400 audit(1757660012.860:7860): avc: denied { setattr } for pid=18714 comm="syz.8.4989" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 332.295713][T16348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.323041][T18716] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #2: comm syz.8.4989: mark_inode_dirty error [ 332.335841][T16348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.346817][T18716] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #2: comm syz.8.4989: corrupted inode contents [ 332.372253][T18716] FAULT_INJECTION: forcing a failure. [ 332.372253][T18716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.385399][T18716] CPU: 1 UID: 0 PID: 18716 Comm: syz.8.4989 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 332.385431][T18716] Tainted: [W]=WARN [ 332.385439][T18716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.385451][T18716] Call Trace: [ 332.385458][T18716] [ 332.385514][T18716] __dump_stack+0x1d/0x30 [ 332.385537][T18716] dump_stack_lvl+0xe8/0x140 [ 332.385592][T18716] dump_stack+0x15/0x1b [ 332.385606][T18716] should_fail_ex+0x265/0x280 [ 332.385627][T18716] should_fail+0xb/0x20 [ 332.385707][T18716] should_fail_usercopy+0x1a/0x20 [ 332.385729][T18716] strncpy_from_user+0x25/0x230 [ 332.385755][T18716] ? kmem_cache_alloc_noprof+0x186/0x310 [ 332.385779][T18716] ? getname_flags+0x80/0x3b0 [ 332.385808][T18716] getname_flags+0xae/0x3b0 [ 332.385836][T18716] user_path_at+0x28/0x130 [ 332.385889][T18716] do_fchmodat+0x9c/0x180 [ 332.385910][T18716] __x64_sys_fchmodat+0x42/0x50 [ 332.386019][T18716] x64_sys_call+0x288d/0x2ff0 [ 332.386037][T18716] do_syscall_64+0xd2/0x200 [ 332.386240][T18716] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 332.386291][T18716] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 332.386320][T18716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.386343][T18716] RIP: 0033:0x7fcdb5c2eba9 [ 332.386357][T18716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.386392][T18716] RSP: 002b:00007fcdb4676038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 332.386411][T18716] RAX: ffffffffffffffda RBX: 00007fcdb5e76090 RCX: 00007fcdb5c2eba9 [ 332.386422][T18716] RDX: 00000000fffffed3 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 332.386458][T18716] RBP: 00007fcdb4676090 R08: 0000000000000000 R09: 0000000000000000 [ 332.386470][T18716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.386481][T18716] R13: 00007fcdb5e76128 R14: 00007fcdb5e76090 R15: 00007fffa12f0cd8 [ 332.386497][T18716] [ 332.587554][ T29] audit: type=1400 audit(1757660013.217:7861): avc: denied { execute } for pid=18714 comm="syz.8.4989" path=2F6D656D66643A0B656DDA9952406DFCFE9B232AFF202864656C6574656429 dev="tmpfs" ino=1706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 332.622110][T16348] team0 (unregistering): Port device team_slave_1 removed [ 332.631732][T16348] team0 (unregistering): Port device team_slave_0 removed [ 332.684780][T16348] team0 (unregistering): Port device team_slave_1 removed [ 332.698109][T16348] team0 (unregistering): Port device team_slave_0 removed [ 332.732208][T18073] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.749749][ T29] audit: type=1400 audit(1757660013.385:7862): avc: denied { create } for pid=18732 comm="syz.8.4993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 332.770501][ T29] audit: type=1400 audit(1757660013.385:7863): avc: denied { ioctl } for pid=18732 comm="syz.8.4993" path="socket:[58214]" dev="sockfs" ino=58214 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 332.795328][ T29] audit: type=1400 audit(1757660013.385:7864): avc: denied { create } for pid=18732 comm="syz.8.4993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 332.823997][T18731] FAULT_INJECTION: forcing a failure. [ 332.823997][T18731] name failslab, interval 1, probability 0, space 0, times 0 [ 332.825510][ T29] audit: type=1400 audit(1757660013.469:7865): avc: denied { create } for pid=18732 comm="syz.8.4993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 332.836650][T18731] CPU: 0 UID: 0 PID: 18731 Comm: syz.1.4992 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 332.836676][T18731] Tainted: [W]=WARN [ 332.836681][T18731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.836691][T18731] Call Trace: [ 332.836697][T18731] [ 332.836705][T18731] __dump_stack+0x1d/0x30 [ 332.836785][T18731] dump_stack_lvl+0xe8/0x140 [ 332.836804][T18731] dump_stack+0x15/0x1b [ 332.836820][T18731] should_fail_ex+0x265/0x280 [ 332.836849][T18731] ? qdisc_get_rtab+0x1a5/0x2d0 [ 332.836875][T18731] should_failslab+0x8c/0xb0 [ 332.836965][T18731] __kmalloc_cache_noprof+0x4c/0x320 [ 332.836995][T18731] qdisc_get_rtab+0x1a5/0x2d0 [ 332.837021][T18731] tcf_police_init+0x38e/0xc70 [ 332.837066][T18731] tcf_action_init_1+0x367/0x4a0 [ 332.837164][T18731] tcf_action_init+0x267/0x6d0 [ 332.837192][T18731] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 332.837313][T18731] tc_ctl_action+0x291/0x830 [ 332.837420][T18731] ? __pfx_tc_ctl_action+0x10/0x10 [ 332.837448][T18731] rtnetlink_rcv_msg+0x65a/0x6d0 [ 332.837534][T18731] netlink_rcv_skb+0x123/0x220 [ 332.837557][T18731] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 332.837590][T18731] rtnetlink_rcv+0x1c/0x30 [ 332.837616][T18731] netlink_unicast+0x5bd/0x690 [ 332.837683][T18731] netlink_sendmsg+0x58b/0x6b0 [ 332.837742][T18731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.837774][T18731] __sock_sendmsg+0x142/0x180 [ 332.837805][T18731] ____sys_sendmsg+0x31e/0x4e0 [ 332.837893][T18731] ___sys_sendmsg+0x17b/0x1d0 [ 332.837957][T18731] __x64_sys_sendmsg+0xd4/0x160 [ 332.838064][T18731] x64_sys_call+0x191e/0x2ff0 [ 332.838085][T18731] do_syscall_64+0xd2/0x200 [ 332.838168][T18731] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 332.838194][T18731] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 332.838281][T18731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.838302][T18731] RIP: 0033:0x7f76ad74eba9 [ 332.838315][T18731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.838397][T18731] RSP: 002b:00007f76ac1af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.838416][T18731] RAX: ffffffffffffffda RBX: 00007f76ad995fa0 RCX: 00007f76ad74eba9 [ 332.838429][T18731] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000003 [ 332.838441][T18731] RBP: 00007f76ac1af090 R08: 0000000000000000 R09: 0000000000000000 [ 332.838454][T18731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.838467][T18731] R13: 00007f76ad996038 R14: 00007f76ad995fa0 R15: 00007ffc6fbe3da8 [ 332.838524][T18731] [ 332.857515][T18643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.120186][T18636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.127147][T18636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.153118][T18636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.164397][T18636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.171340][T18636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.197299][T18636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.220225][T18643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.237109][T18067] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.246618][ T29] audit: type=1326 audit(1757660013.899:7866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18744 comm="syz.8.4998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb5c2eba9 code=0x7ffc0000 [ 333.270179][ T29] audit: type=1326 audit(1757660013.899:7867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18744 comm="syz.8.4998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb5c2eba9 code=0x7ffc0000 [ 333.308760][T18643] team0: Port device team_slave_0 added [ 333.316433][T18643] team0: Port device team_slave_1 added [ 333.319560][T18748] loop8: detected capacity change from 0 to 512 [ 333.339259][T18748] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.5000: casefold flag without casefold feature [ 333.352181][T18748] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.5000: couldn't read orphan inode 15 (err -117) [ 333.364725][T18748] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.367436][T18636] hsr_slave_0: entered promiscuous mode [ 333.385120][T18636] hsr_slave_1: entered promiscuous mode [ 333.391013][T18636] debugfs: 'hsr0' already exists in 'hsr' [ 333.396795][T18636] Cannot create hsr debugfs directory [ 333.411285][T18643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.418263][T18643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.444391][T18643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.455881][T18073] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.466868][T18643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.473893][T18643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.499803][T18643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.545778][T18760] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5003'. [ 333.557760][T18760] hsr_slave_0: left promiscuous mode [ 333.563669][T18760] hsr_slave_1: left promiscuous mode [ 333.580684][T18643] hsr_slave_0: entered promiscuous mode [ 333.581807][ T36] usb 4-1: device descriptor read/8, error -110 [ 333.587820][T18643] hsr_slave_1: entered promiscuous mode [ 333.699609][ T36] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 333.720758][T18769] loop8: detected capacity change from 0 to 1024 [ 333.727831][T18769] EXT4-fs: Ignoring removed orlov option [ 333.735122][ T36] usb 4-1: enqueue for inactive port 0 [ 333.736555][T18769] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.740684][ T36] usb 4-1: enqueue for inactive port 0 [ 333.758974][ T36] usb 4-1: enqueue for inactive port 0 [ 333.820890][T18073] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.857506][T18775] loop8: detected capacity change from 0 to 1024 [ 333.865963][T18775] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.5009: Failed to acquire dquot type 0 [ 333.878140][T18775] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 333.892775][T18775] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #13: comm syz.8.5009: corrupted inode contents [ 333.905023][T18775] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #13: comm syz.8.5009: mark_inode_dirty error [ 333.916688][T18775] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #13: comm syz.8.5009: corrupted inode contents [ 333.929026][T18775] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #13: comm syz.8.5009: mark_inode_dirty error [ 333.940720][T18775] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #13: comm syz.8.5009: corrupted inode contents [ 333.953204][T18775] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 333.961949][T18775] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #13: comm syz.8.5009: corrupted inode contents [ 333.974190][T18775] EXT4-fs error (device loop8): ext4_truncate:4666: inode #13: comm syz.8.5009: mark_inode_dirty error [ 333.985667][T18775] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 333.995301][T18775] EXT4-fs (loop8): 1 truncate cleaned up [ 334.001170][T18636] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 334.001386][T18775] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.022774][T18636] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 334.031789][T18636] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 334.042898][T18636] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 334.053120][T18073] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.102147][T18636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.115753][T18636] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.127729][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.134839][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.182628][ T132] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.189794][ T132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.208859][T18636] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 334.219275][T18636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.290435][T18643] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 334.299524][T18643] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 334.309433][T18643] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 334.336281][T18636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.344409][T18643] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 334.697234][T18643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.712903][T18643] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.726584][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.733818][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.746943][ T4614] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.754093][ T4614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.764669][T18817] FAULT_INJECTION: forcing a failure. [ 334.764669][T18817] name failslab, interval 1, probability 0, space 0, times 0 [ 334.777344][T18817] CPU: 1 UID: 0 PID: 18817 Comm: syz.1.5016 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 334.777365][T18817] Tainted: [W]=WARN [ 334.777369][T18817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.777376][T18817] Call Trace: [ 334.777380][T18817] [ 334.777384][T18817] __dump_stack+0x1d/0x30 [ 334.777398][T18817] dump_stack_lvl+0xe8/0x140 [ 334.777413][T18817] dump_stack+0x15/0x1b [ 334.777428][T18817] should_fail_ex+0x265/0x280 [ 334.777451][T18817] should_failslab+0x8c/0xb0 [ 334.777468][T18817] kmem_cache_alloc_noprof+0x50/0x310 [ 334.777484][T18817] ? vm_area_alloc+0x2c/0xb0 [ 334.777500][T18817] vm_area_alloc+0x2c/0xb0 [ 334.777515][T18817] mmap_region+0xaa2/0x1630 [ 334.777540][T18817] do_mmap+0x9b3/0xbe0 [ 334.777559][T18817] vm_mmap_pgoff+0x17a/0x2e0 [ 334.777577][T18817] ksys_mmap_pgoff+0x2d0/0x310 [ 334.777588][T18817] x64_sys_call+0x14a3/0x2ff0 [ 334.777599][T18817] do_syscall_64+0xd2/0x200 [ 334.777616][T18817] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 334.777629][T18817] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 334.777644][T18817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.777665][T18817] RIP: 0033:0x7f76ad74eba9 [ 334.777675][T18817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.777685][T18817] RSP: 002b:00007f76ac1af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 334.777697][T18817] RAX: ffffffffffffffda RBX: 00007f76ad995fa0 RCX: 00007f76ad74eba9 [ 334.777704][T18817] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000200000000000 [ 334.777712][T18817] RBP: 00007f76ac1af090 R08: ffffffffffffffff R09: 0000000000000000 [ 334.777724][T18817] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000002 [ 334.777736][T18817] R13: 00007f76ad996038 R14: 00007f76ad995fa0 R15: 00007ffc6fbe3da8 [ 334.777753][T18817] [ 334.881157][T18643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.096371][ T36] usb usb4-port1: attempt power cycle [ 335.134603][T18636] veth0_vlan: entered promiscuous mode [ 335.149870][T18834] loop7: detected capacity change from 0 to 8192 [ 335.158925][T18636] veth1_vlan: entered promiscuous mode [ 335.185725][T18836] loop8: detected capacity change from 0 to 8192 [ 335.192505][T18643] veth0_vlan: entered promiscuous mode [ 335.203620][T18643] veth1_vlan: entered promiscuous mode [ 335.210912][T18834] loop7: p1 p2[DM] p4 [ 335.215026][T18834] loop7: p1 size 196608 extends beyond EOD, truncated [ 335.223705][T18836] loop8: p1 p2[DM] p4 [ 335.227890][T18836] loop8: p1 size 196608 extends beyond EOD, truncated [ 335.235683][T18636] veth0_macvtap: entered promiscuous mode [ 335.242087][T18836] loop8: p2 start 4292936063 is beyond EOD, truncated [ 335.248917][T18836] loop8: p4 size 50331648 extends beyond EOD, truncated [ 335.256384][T18834] loop7: p2 start 4292936063 is beyond EOD, truncated [ 335.258054][T18636] veth1_macvtap: entered promiscuous mode [ 335.263390][T18834] loop7: p4 size 50331648 extends beyond EOD, truncated [ 335.302642][T18643] veth0_macvtap: entered promiscuous mode [ 335.339587][T18643] veth1_macvtap: entered promiscuous mode [ 335.349655][T18636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.368141][T18643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.378493][T18636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.386480][T18643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.399328][T17407] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.430652][T17407] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.442717][T17407] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.454222][T17407] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.464979][T17407] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.474100][T17407] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.487912][T17407] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.497110][T17407] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.240595][T18901] loop8: detected capacity change from 0 to 256 [ 336.247538][T18901] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 336.263494][T18901] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 336.279934][T18903] loop7: detected capacity change from 0 to 8192 [ 336.293524][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 336.293559][ T29] audit: type=1400 audit(1757660017.112:7897): avc: denied { create } for pid=18900 comm="syz.8.5039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 336.320095][ T29] audit: type=1400 audit(1757660017.122:7898): avc: denied { getopt } for pid=18900 comm="syz.8.5039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 336.346410][T18903] loop7: p1 p2[DM] p4 [ 336.350675][T18903] loop7: p1 size 196608 extends beyond EOD, truncated [ 336.360569][T18903] loop7: p2 start 4292936063 is beyond EOD, truncated [ 336.367461][T18903] loop7: p4 size 50331648 extends beyond EOD, truncated [ 336.480946][T18924] loop4: detected capacity change from 0 to 1024 [ 336.492473][T18924] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 336.501568][T18924] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 336.511104][T18924] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5049: Failed to acquire dquot type 0 [ 336.523598][T18924] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 336.538516][T18924] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.5049: corrupted inode contents [ 336.551402][T18924] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.5049: mark_inode_dirty error [ 336.563064][T18924] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.5049: corrupted inode contents [ 336.575271][T18924] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.5049: mark_inode_dirty error [ 336.587807][T18924] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.5049: corrupted inode contents [ 336.600000][T18924] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 336.610283][T18924] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.5049: corrupted inode contents [ 336.622826][T18924] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.5049: mark_inode_dirty error [ 336.635358][T18924] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 336.645209][T18924] EXT4-fs (loop4): 1 truncate cleaned up [ 336.652792][T18924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.679120][T18636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.705331][T18933] loop4: detected capacity change from 0 to 1024 [ 336.726351][T18933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.766910][T18933] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.5051: Allocating blocks 449-513 which overlap fs metadata [ 336.783940][T18932] EXT4-fs (loop4): pa ffff888107160c40: logic 48, phys. 177, len 21 [ 336.792116][T18932] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 336.810027][T18636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.829135][ T29] audit: type=1400 audit(1757660017.668:7899): avc: denied { write } for pid=18939 comm="syz.4.5053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 336.849758][ T29] audit: type=1400 audit(1757660017.668:7900): avc: denied { nlmsg_write } for pid=18939 comm="syz.4.5053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 336.870998][ T36] usb usb4-port1: unable to enumerate USB device [ 336.886639][ T29] audit: type=1400 audit(1757660017.731:7901): avc: denied { cpu } for pid=18939 comm="syz.4.5053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 336.920168][ T29] audit: type=1400 audit(1757660017.763:7902): avc: denied { setopt } for pid=18942 comm="syz.1.5054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 336.921665][T18943] veth0: entered promiscuous mode [ 336.947938][ T29] audit: type=1400 audit(1757660017.763:7903): avc: denied { ioctl } for pid=18942 comm="syz.1.5054" path="socket:[60766]" dev="sockfs" ino=60766 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 336.973038][ T29] audit: type=1400 audit(1757660017.763:7904): avc: denied { setopt } for pid=18942 comm="syz.1.5054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 336.999754][T18943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5054'. [ 337.082944][T18947] loop4: detected capacity change from 0 to 8192 [ 337.115550][T18947] loop4: p1 p2[DM] p4 [ 337.119925][T18947] loop4: p1 size 196608 extends beyond EOD, truncated [ 337.128942][T18947] loop4: p2 start 4292936063 is beyond EOD, truncated [ 337.135856][T18947] loop4: p4 size 50331648 extends beyond EOD, truncated [ 337.226208][T18961] ALSA: seq fatal error: cannot create timer (-22) [ 337.232879][T18961] FAULT_INJECTION: forcing a failure. [ 337.232879][T18961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.245898][T18961] CPU: 1 UID: 0 PID: 18961 Comm: syz.1.5057 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 337.245972][T18961] Tainted: [W]=WARN [ 337.245975][T18961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 337.245982][T18961] Call Trace: [ 337.245986][T18961] [ 337.245991][T18961] __dump_stack+0x1d/0x30 [ 337.246005][T18961] dump_stack_lvl+0xe8/0x140 [ 337.246016][T18961] dump_stack+0x15/0x1b [ 337.246025][T18961] should_fail_ex+0x265/0x280 [ 337.246113][T18961] should_fail+0xb/0x20 [ 337.246132][T18961] should_fail_usercopy+0x1a/0x20 [ 337.246153][T18961] strncpy_from_user+0x25/0x230 [ 337.246170][T18961] ? _prb_read_valid+0x8c1/0x920 [ 337.246195][T18961] strncpy_from_user_nofault+0x68/0xf0 [ 337.246209][T18961] bpf_probe_read_user_str+0x2a/0x70 [ 337.246226][T18961] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 337.246235][T18961] bpf_trace_run4+0x117/0x1d0 [ 337.246271][T18961] __traceiter_sched_switch+0x3f/0x60 [ 337.246284][T18961] __schedule+0xa17/0xb30 [ 337.246301][T18961] ? snd_timer_instance_new+0x31/0x160 [ 337.246318][T18961] __cond_resched+0x4e/0x90 [ 337.246411][T18961] __kmalloc_cache_noprof+0x42/0x320 [ 337.246428][T18961] snd_timer_instance_new+0x31/0x160 [ 337.246459][T18961] snd_seq_timer_open+0x12b/0x360 [ 337.246532][T18961] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 337.246546][T18961] snd_seq_queue_timer_open+0x101/0x120 [ 337.246558][T18961] snd_seq_ioctl_set_queue_timer+0x14b/0x170 [ 337.246574][T18961] snd_seq_ioctl+0x17a/0x2e0 [ 337.246668][T18961] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 337.246683][T18961] __se_sys_ioctl+0xce/0x140 [ 337.246788][T18961] __x64_sys_ioctl+0x43/0x50 [ 337.246851][T18961] x64_sys_call+0x1816/0x2ff0 [ 337.246863][T18961] do_syscall_64+0xd2/0x200 [ 337.246879][T18961] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 337.246893][T18961] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 337.246926][T18961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.246938][T18961] RIP: 0033:0x7f76ad74eba9 [ 337.246948][T18961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.246958][T18961] RSP: 002b:00007f76ac16d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 337.246986][T18961] RAX: ffffffffffffffda RBX: 00007f76ad996180 RCX: 00007f76ad74eba9 [ 337.246993][T18961] RDX: 0000200000000100 RSI: 0000000040605346 RDI: 0000000000000003 [ 337.247000][T18961] RBP: 00007f76ac16d090 R08: 0000000000000000 R09: 0000000000000000 [ 337.247022][T18961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.247028][T18961] R13: 00007f76ad996218 R14: 00007f76ad996180 R15: 00007ffc6fbe3da8 [ 337.247051][T18961] [ 337.548654][T18966] FAULT_INJECTION: forcing a failure. [ 337.548654][T18966] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 337.562053][T18966] CPU: 0 UID: 0 PID: 18966 Comm: syz.8.5062 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 337.562084][T18966] Tainted: [W]=WARN [ 337.562089][T18966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 337.562100][T18966] Call Trace: [ 337.562112][T18966] [ 337.562118][T18966] __dump_stack+0x1d/0x30 [ 337.562139][T18966] dump_stack_lvl+0xe8/0x140 [ 337.562234][T18966] dump_stack+0x15/0x1b [ 337.562248][T18966] should_fail_ex+0x265/0x280 [ 337.562268][T18966] should_fail_alloc_page+0xf2/0x100 [ 337.562295][T18966] __alloc_frozen_pages_noprof+0xff/0x360 [ 337.562358][T18966] alloc_pages_mpol+0xb3/0x250 [ 337.562440][T18966] alloc_pages_noprof+0x90/0x130 [ 337.562525][T18966] kimage_alloc_control_pages+0x2ec/0x7d0 [ 337.562557][T18966] alloc_pgt_page+0x17/0x60 [ 337.562575][T18966] ident_pud_init+0x14a/0x320 [ 337.562627][T18966] ident_p4d_init+0xe0/0x240 [ 337.562685][T18966] ? kimage_alloc_control_pages+0x77b/0x7d0 [ 337.562713][T18966] kernel_ident_mapping_init+0x197/0x380 [ 337.562792][T18966] machine_kexec_prepare+0x197/0xaf0 [ 337.562813][T18966] ? __pfx_alloc_pgt_page+0x10/0x10 [ 337.562838][T18966] do_kexec_load+0x3c2/0x500 [ 337.562858][T18966] __se_sys_kexec_load+0x134/0x160 [ 337.562940][T18966] __x64_sys_kexec_load+0x55/0x70 [ 337.562958][T18966] x64_sys_call+0x2898/0x2ff0 [ 337.562979][T18966] do_syscall_64+0xd2/0x200 [ 337.563087][T18966] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 337.563118][T18966] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 337.563146][T18966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.563192][T18966] RIP: 0033:0x7fcdb5c2eba9 [ 337.563207][T18966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.563223][T18966] RSP: 002b:00007fcdb4697038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 337.563239][T18966] RAX: ffffffffffffffda RBX: 00007fcdb5e75fa0 RCX: 00007fcdb5c2eba9 [ 337.563290][T18966] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000003e00 [ 337.563303][T18966] RBP: 00007fcdb4697090 R08: 0000000000000000 R09: 0000000000000000 [ 337.563315][T18966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.563326][T18966] R13: 00007fcdb5e76038 R14: 00007fcdb5e75fa0 R15: 00007fffa12f0cd8 [ 337.563345][T18966] [ 337.847177][T18973] loop8: detected capacity change from 0 to 2048 [ 337.866325][T18975] loop5: detected capacity change from 0 to 2048 [ 337.877733][T18973] loop8: p3 p4 < > [ 337.881642][T18973] loop8: p3 size 57344 extends beyond EOD, truncated [ 337.897682][T18968] IPv6: NLM_F_CREATE should be specified when creating new route [ 337.901145][T18975] loop5: p2 p3 p7 [ 337.905608][T18968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 337.916437][T18968] IPv6: NLM_F_CREATE should be set when creating new route [ 337.922173][T18975] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5066'. [ 337.956281][T18982] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5068'. [ 338.110820][T19002] loop8: detected capacity change from 0 to 1024 [ 338.122440][T19002] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.5075: Failed to acquire dquot type 0 [ 338.137770][T19002] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 338.152672][T19002] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #13: comm syz.8.5075: corrupted inode contents [ 338.164967][T19002] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #13: comm syz.8.5075: mark_inode_dirty error [ 338.176751][T19002] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #13: comm syz.8.5075: corrupted inode contents [ 338.188904][T19002] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #13: comm syz.8.5075: mark_inode_dirty error [ 338.200428][T19002] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #13: comm syz.8.5075: corrupted inode contents [ 338.213634][T19002] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 338.222562][T19002] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #13: comm syz.8.5075: corrupted inode contents [ 338.234707][T19002] EXT4-fs error (device loop8): ext4_truncate:4666: inode #13: comm syz.8.5075: mark_inode_dirty error [ 338.246058][T19002] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 338.255516][T19002] EXT4-fs (loop8): 1 truncate cleaned up [ 338.261621][T19002] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.285701][T18073] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.320859][T19014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5080'. [ 338.332607][T19014] bridge1: entered promiscuous mode [ 338.337903][T19014] bridge1: entered allmulticast mode [ 338.373390][T19022] loop8: detected capacity change from 0 to 512 [ 338.380114][T19022] EXT4-fs: Ignoring removed nomblk_io_submit option [ 338.387190][T19022] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 338.398406][T19022] EXT4-fs (loop8): 1 truncate cleaned up [ 338.404696][T19022] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.460651][T18073] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.659802][T19036] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 338.742126][T19037] loop8: detected capacity change from 0 to 8192 [ 338.791711][T19037] loop8: p1 p2[DM] p4 [ 338.795953][T19037] loop8: p1 size 196608 extends beyond EOD, truncated [ 338.803118][T19037] loop8: p2 start 4292936063 is beyond EOD, truncated [ 338.809899][T19037] loop8: p4 size 50331648 extends beyond EOD, truncated [ 338.856606][T19044] loop8: detected capacity change from 0 to 1024 [ 338.865438][T19044] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.5089: Failed to acquire dquot type 0 [ 338.877805][T19044] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 338.893845][T19049] hub 9-0:1.0: USB hub found [ 338.894894][T19050] FAULT_INJECTION: forcing a failure. [ 338.894894][T19050] name failslab, interval 1, probability 0, space 0, times 0 [ 338.899128][T19049] hub 9-0:1.0: 8 ports detected [ 338.911246][T19050] CPU: 1 UID: 0 PID: 19050 Comm: syz.7.5092 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 338.911278][T19050] Tainted: [W]=WARN [ 338.911284][T19050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 338.911374][T19050] Call Trace: [ 338.911380][T19050] [ 338.911389][T19050] __dump_stack+0x1d/0x30 [ 338.911411][T19050] dump_stack_lvl+0xe8/0x140 [ 338.911456][T19050] dump_stack+0x15/0x1b [ 338.911472][T19050] should_fail_ex+0x265/0x280 [ 338.911495][T19050] ? tcf_action_init_1+0x11e/0x4a0 [ 338.911524][T19050] should_failslab+0x8c/0xb0 [ 338.911588][T19050] __kmalloc_cache_noprof+0x4c/0x320 [ 338.911614][T19050] tcf_action_init_1+0x11e/0x4a0 [ 338.911717][T19050] tcf_action_init+0x267/0x6d0 [ 338.911747][T19050] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 338.911791][T19050] tc_ctl_action+0x291/0x830 [ 338.911838][T19050] ? __pfx_tc_ctl_action+0x10/0x10 [ 338.911934][T19050] rtnetlink_rcv_msg+0x65a/0x6d0 [ 338.912032][T19050] netlink_rcv_skb+0x123/0x220 [ 338.912054][T19050] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 338.912135][T19050] rtnetlink_rcv+0x1c/0x30 [ 338.912161][T19050] netlink_unicast+0x5bd/0x690 [ 338.912184][T19050] netlink_sendmsg+0x58b/0x6b0 [ 338.912210][T19050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.912294][T19050] __sock_sendmsg+0x142/0x180 [ 338.912325][T19050] ____sys_sendmsg+0x31e/0x4e0 [ 338.912362][T19050] ___sys_sendmsg+0x17b/0x1d0 [ 338.912397][T19050] __x64_sys_sendmsg+0xd4/0x160 [ 338.912497][T19050] x64_sys_call+0x191e/0x2ff0 [ 338.912519][T19050] do_syscall_64+0xd2/0x200 [ 338.912549][T19050] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 338.912572][T19050] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 338.912638][T19050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.912659][T19050] RIP: 0033:0x7f88be67eba9 [ 338.912674][T19050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.912692][T19050] RSP: 002b:00007f88bd0e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.912747][T19050] RAX: ffffffffffffffda RBX: 00007f88be8c5fa0 RCX: 00007f88be67eba9 [ 338.912760][T19050] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000003 [ 338.912773][T19050] RBP: 00007f88bd0e7090 R08: 0000000000000000 R09: 0000000000000000 [ 338.912785][T19050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.912798][T19050] R13: 00007f88be8c6038 R14: 00007f88be8c5fa0 R15: 00007ffe8ae69368 [ 338.912816][T19050] [ 338.921831][T19044] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #13: comm syz.8.5089: corrupted inode contents [ 338.956200][T19052] loop7: detected capacity change from 0 to 128 [ 338.960235][T19044] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #13: comm syz.8.5089: mark_inode_dirty error [ 339.191808][T19044] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #13: comm syz.8.5089: corrupted inode contents [ 339.203829][T19044] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #13: comm syz.8.5089: mark_inode_dirty error [ 339.219140][T19044] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #13: comm syz.8.5089: corrupted inode contents [ 339.236825][T19044] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 339.245781][T19044] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #13: comm syz.8.5089: corrupted inode contents [ 339.268265][T19044] EXT4-fs error (device loop8): ext4_truncate:4666: inode #13: comm syz.8.5089: mark_inode_dirty error [ 339.288738][T19044] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 339.326527][T19044] EXT4-fs (loop8): 1 truncate cleaned up [ 339.336816][T19044] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.382107][T18073] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.403498][T19077] loop8: detected capacity change from 0 to 512 [ 339.410702][T19077] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 339.423099][T19077] EXT4-fs (loop8): 1 truncate cleaned up [ 339.430214][T19077] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.465533][T19077] netlink: 'syz.8.5102': attribute type 1 has an invalid length. [ 339.672659][T19090] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5105'. [ 339.750022][T19077] ================================================================== [ 339.758128][T19077] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 339.766365][T19077] [ 339.768680][T19077] write to 0xffff888119c7bb04 of 4 bytes by task 19086 on cpu 1: [ 339.776381][T19077] xas_set_mark+0x12b/0x140 [ 339.780884][T19077] __folio_start_writeback+0x1dd/0x440 [ 339.786337][T19077] ext4_bio_write_folio+0x5ad/0x9f0 [ 339.791534][T19077] mpage_process_page_bufs+0x4a1/0x620 [ 339.796981][T19077] mpage_prepare_extent_to_map+0x786/0xc00 [ 339.802773][T19077] ext4_do_writepages+0xa05/0x2750 [ 339.807878][T19077] ext4_writepages+0x176/0x300 [ 339.812625][T19077] do_writepages+0x1c6/0x310 [ 339.817208][T19077] file_write_and_wait_range+0x156/0x2c0 [ 339.822833][T19077] generic_buffers_fsync_noflush+0x45/0x120 [ 339.828713][T19077] ext4_sync_file+0x1ab/0x690 [ 339.833370][T19077] vfs_fsync_range+0x10d/0x130 [ 339.838121][T19077] ext4_buffered_write_iter+0x34f/0x3c0 [ 339.843665][T19077] ext4_file_write_iter+0xdbf/0xf00 [ 339.848859][T19077] iter_file_splice_write+0x663/0xa60 [ 339.854228][T19077] direct_splice_actor+0x153/0x2a0 [ 339.859326][T19077] splice_direct_to_actor+0x30f/0x680 [ 339.864683][T19077] do_splice_direct+0xda/0x150 [ 339.869432][T19077] do_sendfile+0x380/0x650 [ 339.873843][T19077] __x64_sys_sendfile64+0x105/0x150 [ 339.879034][T19077] x64_sys_call+0x2bb0/0x2ff0 [ 339.883697][T19077] do_syscall_64+0xd2/0x200 [ 339.888196][T19077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.894088][T19077] [ 339.896394][T19077] read to 0xffff888119c7bb04 of 4 bytes by task 19077 on cpu 0: [ 339.904005][T19077] filemap_write_and_wait_range+0xfc/0x340 [ 339.909809][T19077] filemap_invalidate_pages+0xa4/0x1a0 [ 339.915251][T19077] kiocb_invalidate_pages+0x6e/0x80 [ 339.920444][T19077] __iomap_dio_rw+0x5d4/0x1250 [ 339.925205][T19077] iomap_dio_rw+0x40/0x90 [ 339.929524][T19077] ext4_file_write_iter+0xad9/0xf00 [ 339.934720][T19077] iter_file_splice_write+0x663/0xa60 [ 339.940079][T19077] direct_splice_actor+0x153/0x2a0 [ 339.945176][T19077] splice_direct_to_actor+0x30f/0x680 [ 339.950536][T19077] do_splice_direct+0xda/0x150 [ 339.955285][T19077] do_sendfile+0x380/0x650 [ 339.959693][T19077] __x64_sys_sendfile64+0x105/0x150 [ 339.964890][T19077] x64_sys_call+0x2bb0/0x2ff0 [ 339.969568][T19077] do_syscall_64+0xd2/0x200 [ 339.974078][T19077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.979964][T19077] [ 339.982271][T19077] value changed: 0x0a000021 -> 0x04000021 [ 339.987969][T19077] [ 339.990273][T19077] Reported by Kernel Concurrency Sanitizer on: [ 339.996407][T19077] CPU: 0 UID: 0 PID: 19077 Comm: syz.8.5102 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 340.007761][T19077] Tainted: [W]=WARN [ 340.011543][T19077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 340.021581][T19077] ================================================================== [ 340.047011][T19093] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5106'. [ 340.217916][T18073] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.