last executing test programs: 6.125932093s ago: executing program 3 (id=1320): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x44f0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 6.091197925s ago: executing program 3 (id=1322): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, 0x1}}, 0x18) 6.025758857s ago: executing program 3 (id=1323): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000006c0)={{0x2, 0x4e21, @multicast1}, {0x6, @local}, 0x28, {0x2, 0x4e23, @empty}}) r1 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, {0x2}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000010, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf6, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffbf7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0x0, 0x1f0, 0x2d8, 0x2d8, 0xe8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x1, 0x0, {@mac=@local}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r8, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r8, &(0x7f0000000040), 0x0, 0x0, 0x0) 5.97615809s ago: executing program 3 (id=1325): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) write$UHID_CREATE(r1, &(0x7f0000000740)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x1, 0x3, 0x7, 0x3, 0xd2}}, 0x120) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") (async) creat(&(0x7f0000000380)='./bus\x00', 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) write$UHID_CREATE(r1, &(0x7f0000000740)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x1, 0x3, 0x7, 0x3, 0xd2}}, 0x120) (async) 5.648622013s ago: executing program 3 (id=1328): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) syz_io_uring_setup(0x646, &(0x7f0000000180)={0x0, 0x3256, 0x20, 0x3, 0xb8}, &(0x7f0000000000), &(0x7f0000000080)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r5, 0x0, 0x7fffffffffffffff}, 0x18) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x11}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x202599ca) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r7, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) r8 = inotify_init() inotify_add_watch(r8, &(0x7f0000000000)='./file0\x00', 0x4200004b) mq_unlink(&(0x7f0000000ac0)='kfree\x00') execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 5.170136593s ago: executing program 3 (id=1336): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/88) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x10002, 0xffffffff, 0xd7c4, 0xfffffff9}, 0x10) write(r1, &(0x7f0000000100)="240000001e005f0214fffffffffffff8070600001d00000000000000080009000d000000", 0x24) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x5, 0x81, 0x1, 0x1a56b8c1, 0x1, 0x2, 0x10000, 0x3}, &(0x7f00000000c0)=0x20) socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1d, 0x0, 0x0, 0x20066}]}) socket$netlink(0x10, 0x3, 0xf) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r5, 0x2) flock(r5, 0x5) 5.169730803s ago: executing program 32 (id=1336): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/88) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x10002, 0xffffffff, 0xd7c4, 0xfffffff9}, 0x10) write(r1, &(0x7f0000000100)="240000001e005f0214fffffffffffff8070600001d00000000000000080009000d000000", 0x24) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x5, 0x81, 0x1, 0x1a56b8c1, 0x1, 0x2, 0x10000, 0x3}, &(0x7f00000000c0)=0x20) socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1d, 0x0, 0x0, 0x20066}]}) socket$netlink(0x10, 0x3, 0xf) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r5, 0x2) flock(r5, 0x5) 3.051549822s ago: executing program 2 (id=1374): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000003c0)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000680)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095", @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2003, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) dup3(r7, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='sched_process_fork\x00', r9}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @mcast1, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x33}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r10, 0x0) 2.493700495s ago: executing program 0 (id=1378): socket$packet(0x11, 0xa, 0x300) read$nci(0xffffffffffffffff, &(0x7f0000000300)=""/198, 0xc6) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x40000000, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_open_dev$vcsa(&(0x7f0000000040), 0x20a, 0x101000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r8, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.182353698s ago: executing program 2 (id=1382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1}, {0x300, 0x7000, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0xce1300d54c3818a3, @val=0xe0000001}}}}}}}}, 0x36) 2.034975205s ago: executing program 2 (id=1385): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x97a3}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102070103ff48c84a81c0b804020240000102030109021b00010103a02509040060020000030509050102"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchownat(r3, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40041}, 0x20020800) r4 = socket$kcm(0x11, 0x200000000000003, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = gettid() sigaltstack(&(0x7f0000001040)={&(0x7f0000004500)=""/4104, 0x1, 0x1008}, 0x0) rt_sigqueueinfo(r6, 0x21, &(0x7f00000002c0)={0x8000a, 0x4}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c80)=[{0x0}, {&(0x7f0000000400)=""/245, 0xf5}], 0x2}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@usrjquota}]}, 0xfe, 0x563, &(0x7f00000007c0)="$eJzs3c9rHFUcAPDvbHbbpK02BSnoQQI9WKndtIk/KnioR9FiQe91SaahZNMt2U1pYsH2oBcvUgQRC+If4N1j8R/wryhooUgJevASmWQ22Ta7m1/bZHU/H5j2vZnZefPmzXv5vp1dNoCBNZb9U4h4OSK+SSKOt2wrRr5xbG2/5Se3p7IliZWVT/5MIsnXNfdP8v+PNjPFiF+/jDhT2FxufXFptlKtpvN5frwxd2O8vrh09tpcZSadSa9PTE5eeGty4t133u5ZXV+//Pf3Hz/44MLXp5a/+/nRiXtJXIxj+bbWeuzBndbMWIzl16QUF5/Z8XwPCusnyUGfALsylPfzUmRjwPEYyns98P/3RUSsAANpJBL9HwZUMw5ozu035sHDBxiV7J/H769NgDbXv7j23kgMr86NjiwnT82MsvnuaA/Kz8r45Y/797Ilevc+BMCW7tyNiHPF4ubxL8nHv907t419ni3D+Af750EW/7zRLv4prMc/0Sb+Odqm7+7G1v2/8KgHxXSUxX/vtY1/1x9ajQ7luRciRkajlFy9Vk2zse3FiDgdpcNZvtvznAvLD1c6bWuN/7IlK78ZC+bn8ah4+OnXTFcalb3UudXjuxGvtI1/k/X2T9q0f3Y9Lm+zjJPp/Vc7bdu6/s/Xyk8Rr7Vt/40nWkn355Pjq/fDePOu2Oyvr07+1qn8g65/1v5Hutd/NGl9XlvfeRk/Dv+Tdtq22/v/UPLpavpQvu5WpdGYPx9xKPlo8/qJjdc28839s/qfPtV9/Gt3/49ExGfbrH+3mXQ/tP/0jtp/54mHH37+Q6fy8/qXomv7v7maOp2v2c74t90T3Mu1AwAAAAAAgH5TiIhjkRTK6+lCoVxe+3zHS3GkUK3VG2eu1hauT8fqd2VHo1RoPuk+vpZPmp9/GG3JTzyTn4yIExHx7dDIar48VatOH3TlAQAAAAAAAAAAAAAAAAAAoE8c7fD9/8zvQwd9dsBz5ye/YXBt2f978UtPQF/a7d//+R6fB7D/xP8wuPR/GFz6Pwwu/R8Gl/4Pg0v/h8Gl/wMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXb50KVtWlp/cnsry0zcXF2ZrN89Op/XZ8tzCVHmqNn+jPFOrzVTT8lRtbqvjVWu1G+cnYuHWeCOtN8bri0tX5moL1xtXrs1VZtIraWlfagUAAAAAAAAAAAAAAAAAAAD/LfXFpdlKtZrOS/RzYvg5HfnO3o9T7IfrI7HjRBLd9znokQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANvwbAAD//+f9MzI=") chdir(&(0x7f0000000140)='./file0\x00') unlink(&(0x7f0000000000)='./file1\x00') 1.790020895s ago: executing program 1 (id=1388): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x44f0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 1.720607528s ago: executing program 0 (id=1390): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x0, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003a80)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) read(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000bc0)={0x230, r7, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x1, 0x11, 0x7f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x98c}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0x1e, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1}}, {{@pci, {0x0, 0x3, 0x1}}, {0x0, 0xb, 0x7}, {0x0, 0x11, 0x8}}]}, 0x230}, 0x1, 0x0, 0x0, 0xc910}, 0xc40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) lsm_set_self_attr(0x66, &(0x7f0000000000)={0x65, 0x3, 0x43, 0x23, "d7b8fddf5837aade64b91d51ac8959497b4317b4a87055e8d21b9668d9bb8cd00b723a"}, 0x43, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, 0x0) 1.66788977s ago: executing program 1 (id=1391): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffeff}, 0x18) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r1, @ANYRES8=r1], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r8 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYRES8=r1, @ANYRES64=r3, @ANYRES32=r1, @ANYRES64=r5, @ANYRES8, @ANYRES32=r0, @ANYBLOB="b8713e8a7aaa442f41fc13b4548b4dbee19f2d5a3095f76ca68170438453532a8b6b9b5995e6c64734f739d17d6035e9b7b3d3baafd3adadec819fce5aa43a74e82005bd644d6524589903f70ad82b4a0fac062482128e6081299734584a15036a544dc5450dd37247293465eda311ba15e479b2390bf6b457d21489bc7495abf2e773870dd570ee255456d4e75552cee431c4e0ff7fc63aec86afbf864299b12f94b74fba8da0cea7573c", @ANYRES8=r8, @ANYRES16=r6], 0x48}, 0x1, 0x0, 0x0, 0x24040801}, 0x20000000) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="a80000001200080029bd7000fbdbdf25010300084e234e22010000000a000000750000000700000006000000080200000004000168ebfffff58a9f75ad3ea5c419a2f650772c24c300", @ANYRES32=0x0, @ANYBLOB="09000000f9ffffff0c000000ba0c0000580001003160cf8228b3c21869bc1e293e2b782c69836972b1b37c998d508bbbb68e32bb054afadcd76ced199a654b84fb3eb69e2df6abc426d824caadc7441aeb057c485f95ea61816acf247da86bd365ecfc49004e6db504000100"], 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r9 = fsmount(r6, 0x0, 0x2) openat(r9, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702b7030000000800008500000083000400bf0900000000000055090100000000009500000000010000008500000084000000b7000000000000009500000000000082f65e9018c77e80de8fa3"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x18) syslog(0x9, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) sigaltstack(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000003c0), 0xff, 0x4a1, &(0x7f00000004c0)="$eJzs3MtvVFUYAPDvTh+8aUVEQdAqGomPlhZUFi7UaOJCExNd4LK2BZGBGloTIY0WY3BpSNwblyb+Be7cGHVhTNxq4tKQEG1MKK5q7gum02mZlpYpnd8vmc45c1/nu+eemXPv6b0BtK2+9E8SsT0ifo+Injw7f4a+/G12Zmrk+szUSBJzc2/9nWTzXZuZGilnLZfbVmQOVSIqnyXxYrJwuxPnL5werlbHzhX5gckzHwxMnL/wzKkzwyfHTo6dHTp27OiRweefG3p2VeJM47q27+Px/Xtfe+fyGyPHL7/707dpsfYcyKfXxnFL1xsE1EBfutf+mcvUT3t8GWW/G+yoSSedLSwIy9IREWl1dWXtvyc64mbl9cSrn7a0cMCaSn+bNi0+eXoO2MCSaHUJgNYof+jT89/ydYe6HuvC1Zciuov07MzUyOyN+DujUnzetYbb74uI49P/fZW+YrnXIQAAViDr2zzdqP9XiT3Zez7WsbMYQ+mNiHsiYldE3BsRuyPivohs3vujOx7IF57raXL7fXX5hf2fypWGZV4laf/vhZq+32xN/MVbb0eR25HF35WcOFUdO1zsk0PRtSnNDy6xje9f+e2LxabV9v/SV7r9si9YFOBKZ90FutHhyeHV2glXL0bs62wUf3JjJCA9AvZGxL7lrXpnmTj15Df7F5vp1vEvYRXGmea+jngir//pqIu/lCw9PjmwOapjhwfKo2Khn3+99GaR7K6fdlvxr4K0/rfOP/6LKReL955/k3y8tiuq1bFzE8vfxqU/Pl/0nGalx3938nY2Zv3Le/lnHw1PTp4bjOhOXs/y5Y7OPh+6uWyZL+dP4z90sHH731Usk8b/YESkB/GBiHgoIh4uyv5IRDwaEQeXiP/Hlx97f4n4k0iipfU/2vD7L4nYnCV6k9rx+hUkOk7/8N1iI+bN1f/RmM6+a3PZ998tNFvA29+DAAAAsP5VImJ7JJX+PN23PSqV/v78f/h3x9ZKdXxi8qkT4x+eHc3vEeiNrkp5paun5nroYDJdrDHPDxXXisvpR4rrxl92bMny/SPj1dEWxw7tbtv89h9l+0/91dHq0gFrzv1a0L7q23+lReUA7rxmfv+dC8DG1KD9b2lFOYA7z/k/tK9G7f+Turz+P2xMC9v/nw0eWQdsRPr/0L60f2hf2j+0pWbv4i+fp7DihwDMS5Q3C6x8PZubvsN//SX61mTNZQ2tZeG3xM1PorJqa55eB5WyzhNpi1nJ4rGz+WdhzE80eFgNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXej/AAAA//+q8eIl") r11 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x8) pwritev2(r11, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) fcntl$lock(r10, 0x7, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x2}) r12 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r12, r12) ftruncate(0xffffffffffffffff, 0x2007ffc) 1.600981613s ago: executing program 0 (id=1393): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0xb7b73000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$inet6(0xa, 0x80001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000640)='GPL\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000080), 0x1040) syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xedb0, 0x10100, 0x2, 0x1fe}, &(0x7f0000000200)=0x0, &(0x7f00000006c0)=0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) r5 = syz_io_uring_setup(0x508f, &(0x7f00000002c0)={0x0, 0xf59b, 0x800, 0x10003, 0x0, 0x0, r4}, &(0x7f0000000140), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB]) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r6}, 0x18) r7 = syz_io_uring_setup(0x6f52, &(0x7f0000000000)={0x0, 0xbd60, 0x8, 0x80007, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r10, 0x4b47, &(0x7f00000002c0)={0x0, 0xb, 0x8}) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) io_uring_enter(r7, 0x1c39, 0x106a, 0x22, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1}, 0x0, 0x80002101}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="000006248f2653dec46f0000000000007b8af8ff00000000bfa200ffff07020000f8ffffffb703000008000000b70400000820000085000000c3000000950000009545c548735559d5cd40a469a84c51cb06b68a6577b8940eebf2ac90b2954404"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r12}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) 1.541022345s ago: executing program 4 (id=1394): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61154f000000000061136c0000000000bfa000000000000014000000ee0016055e03010000000000160500000001000069163e0000000000bf07000000000000260507000fff07206706000020000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', r0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRESDEC=0x0], 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000f00000a64000000060a0b1600000000000000000200000838000480340001800b0001006e756d67656e00002400028008000340000000000800014000000003080003400000000008000240000000500900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_CONNECT={0x10, 0x55, 0x0, r5, 0x80, &(0x7f00000000c0)=@l2={0x1f, 0x0, @none, 0x1, 0x1}, 0x0, 0x0, 0x1, {0x0, r7}}) io_uring_enter(r2, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000007c0)={0xa, 0x2, 0x8, @mcast1, 0x80000000}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f00000001c0)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008e00)=[{{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000001780)="19", 0x1}], 0x1}}], 0x1, 0xc0c4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r9 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) ftruncate(r9, 0x2007ffc) sendfile(r9, r9, 0x0, 0x100000000) 1.486372708s ago: executing program 2 (id=1395): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) syz_io_uring_setup(0x646, &(0x7f0000000180)={0x0, 0x3256, 0x20, 0x3, 0xb8}, &(0x7f0000000000), &(0x7f0000000080)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r5, 0x0, 0x7fffffffffffffff}, 0x18) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x11}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x202599ca) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r7, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) r8 = inotify_init() inotify_add_watch(r8, &(0x7f0000000000)='./file0\x00', 0x4200004b) close(r7) mq_unlink(&(0x7f0000000ac0)='kfree\x00') execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 1.334411454s ago: executing program 0 (id=1396): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0xb7b73000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$inet6(0xa, 0x80001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000640)='GPL\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000080), 0x1040) syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xedb0, 0x10100, 0x2, 0x1fe}, &(0x7f0000000200)=0x0, &(0x7f00000006c0)=0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) r5 = syz_io_uring_setup(0x508f, &(0x7f00000002c0)={0x0, 0xf59b, 0x800, 0x10003, 0x0, 0x0, r4}, &(0x7f0000000140), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB]) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r6}, 0x18) r7 = syz_io_uring_setup(0x6f52, &(0x7f0000000000)={0x0, 0xbd60, 0x8, 0x80007, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r10, 0x4b47, &(0x7f00000002c0)={0x0, 0xb, 0x8}) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) io_uring_enter(r7, 0x1c39, 0x106a, 0x22, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1}, 0x0, 0x80002101}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="000006248f2653dec46f0000000000007b8af8ff00000000bfa200ffff07020000f8ffffffb703000008000000b70400000820000085000000c3000000950000009545c548735559d5cd40a469a84c51cb06b68a6577b8940eebf2ac90b2954404"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r12}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001800)=@base={0xd, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x40000}, 0x50) 1.316061755s ago: executing program 2 (id=1397): socket$kcm(0x11, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xa, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f28bd421850000008200000095"], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 1.209918789s ago: executing program 2 (id=1398): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x4, 0x0, 0x4b, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x10, 0x7, 0x40000004, 0x4}}) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x100) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000040)=0x8000000000000000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r6, &(0x7f0000000280)="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"/428, 0xfffffff7) ioctl$TIOCL_UNBLANKSCREEN(r6, 0x541c, &(0x7f00000001c0)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 1.142965132s ago: executing program 1 (id=1399): r0 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73e, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvbJOmb9vXpODBimCgBwulu3ZbSwWRih6kWCnqzUO73d2Gkt1uyW5KEypaUQRPIsWzP07e/AdEEfTmUfDsSQpFSr0IQmS2s3Hb7KabNJtV9/OBCc8zM5tnvjszz/Mkz8NMAGNrNv2Ri9gfER8lEdPZ+iQiJtupiYiTd/e7c/taOV2SWFl5/bekvU+aj67PpPZkmcci4rv3Iw7l1pbbXFqeL9Vq1YUsX2jVLxeaS8uHL9ZLc9W56qXi8WePFk8UnzlR3LJY/3jv1fOnvnrpixvv/vjLa2+dejKJk7E329Ydx1aZjdnsO5lMv8J7vLjVhY1YMuoDYFPSW3PH3bs89sd07GinAID/srcjYgUAGDOJ9h8Axkzn/wCdsb1hjIP9k916ISJ29Yp/Ihuz29UeB919J7lnZCSJiJktKH82Iq6++cHX6RJDGocE6OWd6xFxbmZ2bf2XrJmzsFFPD7DP7H159R9sn2/T/s+JXv2f3Gr/J3r0f6Z63Lub8eD7P3dzC4rpK+3/Pdez/7s6aW1mR5b7f7vPN5lcuFirpnXbIxFxMCan0vyRdco49vHzP/Tb1t3/S5e0/E5fMDuOmxNT936mUmqVHibmbreuRzw+0Sv+ZPX8J336v2cGLKP1/ROf99v24PiHa+WziKd6nv+/Z7Ql689PLLSvh0Lnqlgr/+H0vn7ljzr+9PzvXj/+maR7vmZz42X89MmfL/fbttnrf2fyRju9M1t3tdRqLRyJ2Jm8snZ91xTSTr6zfxr/wQPr13+9rv/0b8JzA8Y//+mX5zcf/3Cl8Vc2dP43njjw8zd94xns/B9rpw5mawap/wY9wIf57gAAAAAAAAAAAAAAAAAAAAAAAABgULmI2BtJLr+azuXy+bvv8H40dudqjWbr0IXG4qVKtN+VPROTuc6TLqe7nod6JHsefidfvC9/NCL2RcSNqf+18/lyo1YZdfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkNnT5/3/qV+nRn10AMDQ7Br1AQAA2077DwDjR/sPAONH+w8A40f7DwDjR/sPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAkJ05fTpdVn6/fa2c5itXlhbnG1cOV6rN+Xx9sZwvNxYu5+cajblaNV9u1B/0+2qNxuXi8Vi8WmhVm61Cc2n5bL2xeKl19mK9NFc9W53clqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYGOaS8vzpVqtuiAhISGxmhh1zQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw7/BXAAAA///R4B8B") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x40020, &(0x7f00000001c0), 0x1, 0x4ce, &(0x7f0000000f40)="$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") r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x385240, 0x158) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x4, 0x6, 0x0, 0xfffffffffdffffff}) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) recvmmsg$unix(r3, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000006c0)=""/75, 0x4b}], 0x1, &(0x7f0000000540)}}], 0x1, 0x2020, 0x0) shutdown(r3, 0x2) fallocate(r0, 0x22, 0x1fc, 0x13) fallocate(r2, 0x3, 0x4, 0x11600) 940.74402ms ago: executing program 1 (id=1402): r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x103}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) shutdown(0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="000080f3000000000000aaaaaaaaaabb88a8260081000b008848"], 0xbb) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xfffffff4}, 0x0) 886.463362ms ago: executing program 0 (id=1404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0x3, &(0x7f00000028c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x18) setitimer(0x2, 0x0, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x11, &(0x7f0000000300)={0x35, 0x676, 0xff}) r4 = socket$nl_route(0x10, 0x3, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000340)=0xc) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000004c0)={[], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@uid_lt={'uid<', r5}}, {@subj_type={'subj_type', 0x3d, ',$:@'}}, {@hash}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}, 0x0, 0x4ec, &(0x7f0000000880)="$eJzs3MFvFNUfAPDvbLu0wI8fFZEERC2gsTGxhYLCwQsmJh40MeJBjk1bSGUBQ3sQ0siSGDyTeDcejTdNvOrRePIPwIMHE0NClAvgaczszmy3291ut5Q2bT+fZNv3ZubNe29m3uybeTsTwLY1nP1JIv4XEXcjYm89uniB4fq/Rw/mJx8/mJ+Mapqe+zupLfcwi+eKdLvzyEgpovRF0rLCutnrNy5NVCrT16Jai4/NXf50bPb6jddnLk9cnL44fWX8zJlTJ0+cfnP8jdakg10r1Sa/rF4PD31+9fDBd8/feX+yv3VlzfXoqEj1T7XrolFs2w5eaV7fFrCnKZwsrdfNdS0MKzaYH4blrP3PV46e3+gCAesmTdN0oPPsatrq1pIpwKaVxEaXANgYxRd9dv1bfOpTyuvR/dhw98/WL4AePphPb0ZMPmrUvz9K+TLlluvbzDJ9pp4MR8TH1X+/zj6x3H2IP9YoQwBg2/v5bN4NTKKl/1eKA03L/T8fQxmKiGciYl9EPBsR+yPiuYhFyy6SRKTL5L+/dUIj/x/yUYTSvdXWbSWy/t9b+dhW8cnzLRYZ6stjeyKKDvP08XybjER54MJMZfpEh/Xv6JJ/c/8v+2T5F33BvBz3+ls6m1MTcxOrq+1S929FHOpvrX/Sn+24YhgniYiDEXGoh/UONYVnXvv2cCPSclnRvf41aZshvTUZP0u/iXi1vv+rsWj/L+SYNI9PlpaMT44NRmX6+Fh2FBxvm8evv93+oFP+Xev/45+tSd45/dO5J612Q7b/dzUd/1GM3y7UfyiJSBrjtbMRaV9vedz+/cvaeoePLZ232uN/R/JRLVy0r88mHtdOYzuS91qmz81dG19IW8Rr/0/U6z9yrH3735enybbE8xGRHcQvRMSLEX1F2Y9ExNGIaFO1hl/efvmTTvNWePw/NVn9p9qe/xbt/4Xx+hUGaikHI7IpfZeO3H3c4eSR13/v8vv/VC00kk9pf/5LFp0iVlrSJ96AAAAAsAmUovbb/9JoI1wqjY7W7wHtj12lytXZuZci4spU/RmBoSiXLsxUposbckNRTor7n0NN8fGW+Mn8vvFXfTtr8dHJq5Wpja48bHO7a20+WdL+M3/1eJ8X2IS20HNoQI+6tf8Dd9apIMC68/0P21dT++/0ZouqX8rA1uT7H7avdu3/Zny37LMLzhmw+aXaMmxry7f/7u/bBDav/viwEa499tz2aVtgK9L/h22p1+f6ewukA+1nDUabNwYMPp1i7GyT14YEsp7VGq6wHBErW3jnarIouoCd3/BQ6m2FA7F0Vl8slypp/x6HiKh2TJVtla7luXhgzQ/+4p0oa33YfL/QTssr3N1PGnC9DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbCn/BQAA//94f9B3") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000380)={'#! ', './file0'}, 0xb) write$binfmt_elf64(r6, &(0x7f0000001bc0)=ANY=[], 0x11b0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4841}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000034782be3236bd11aa08a68d2e2628a8f000007020000f8ffffffb703000008000000b70400000000000085000000030000009500540000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) alarm(0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={0xffffffffffffffff, 0x0, &(0x7f0000001780)=""/4096}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x8}, 0x18) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 872.639423ms ago: executing program 1 (id=1405): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) shutdown(0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="000080f3000000000000aaaaaaaaaabb88a8260081000b008848"], 0xbb) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xfffffff4}, 0x0) 841.071625ms ago: executing program 0 (id=1406): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0xb7b73000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$inet6(0xa, 0x80001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000640)='GPL\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000080), 0x1040) syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xedb0, 0x10100, 0x2, 0x1fe}, &(0x7f0000000200)=0x0, &(0x7f00000006c0)=0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) r5 = syz_io_uring_setup(0x508f, &(0x7f00000002c0)={0x0, 0xf59b, 0x800, 0x10003, 0x0, 0x0, r4}, &(0x7f0000000140), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB]) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r6}, 0x18) r7 = syz_io_uring_setup(0x6f52, &(0x7f0000000000)={0x0, 0xbd60, 0x8, 0x80007, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r10, 0x4b47, &(0x7f00000002c0)={0x0, 0xb, 0x8}) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) io_uring_enter(r7, 0x1c39, 0x106a, 0x22, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1}, 0x0, 0x80002101}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="000006248f2653dec46f0000000000007b8af8ff00000000bfa200ffff07020000f8ffffffb703000008000000b70400000820000085000000c3000000950000009545c548735559d5cd40a469a84c51cb06b68a6577b8940eebf2ac90b2954404"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=@base={0xd, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x40000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r12}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) 678.298671ms ago: executing program 4 (id=1408): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 569.999236ms ago: executing program 4 (id=1410): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x1, 0x20002f5}) (fail_nth: 2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xc, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) 471.21797ms ago: executing program 4 (id=1411): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000001c0)={&(0x7f0000000000)="ae26272f81a541cc05a5265797694a1930dcf5c068", &(0x7f0000000240)=""/172, &(0x7f0000000040)="c3266d8922c93436fbb9a0f1e5b157b18b48acd81ac81a6e116f236cca9761ec5668d08206c4aac6c69f5828f321c81f33d1298da11004cfcab578e6d25dfd85948bb3d46cf6737b87b46dcab0517d502a96652e21fe597ecb73e319de1a455eb8daae02becd0cbd4feca21d1141aaf4f763df613d", &(0x7f0000000300)="5a4802f13147573382a47c066ae74340abbfee1e1df4546d2e38ed03bf20bd8712eb0d9b9f44bbce817d6429a835bbeff0a97c7dbdd5d0e242ff00ca93005a5bd2de4ec90e1db40ff9b64c8ea23f2139c92881a7a7af878e700bdd34b0b3bdc04ef94efc1923e63b2cad774f82af47b158fbda11e911c08bb6a9a3fc78261a53c0feefcc6759323f835c22bf3c9dd9b42d2b2b66dd088e13e3cca8c45ff3b30be1212d5304b69c9d4146ea4e513b3b325f0bf23958b27c7e88a7edc54eae900f211cf0bd64ab469b31", 0xffffffff, r0, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x17, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000400)='syzkaller\x00', 0x800, 0x26, &(0x7f0000000580)=""/38, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x9, 0x2c00000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000640)=[r0, r0], &(0x7f0000000680)=[{0x3, 0x5, 0x0, 0x9}, {0x4, 0x3, 0xc, 0x2}], 0x10, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800500030000f50000080002400000000108000140000000010900010073797a300000000014000000110001"], 0xe0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x25, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=r5, @ANYRES16=r3, @ANYRES64=r6], 0x24}}, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r7, 0x528, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x40) 468.85371ms ago: executing program 4 (id=1412): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') 424.787852ms ago: executing program 4 (id=1414): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x103}, 0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) shutdown(0xffffffffffffffff, 0x0) dup(r4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r3, 0x0, 0xbb) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xfffffff4}, 0x0) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x100, 0x0) 377.298624ms ago: executing program 5 (id=1415): r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x103}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) shutdown(0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="000080f3000000000000aaaaaaaaaabb88a8260081000b008848"], 0xbb) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xfffffff4}, 0x0) 376.501174ms ago: executing program 5 (id=1416): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0x3, &(0x7f00000028c0)=ANY=[@ANYBLOB="180000000000000000181100002d0941fcdc7d577ba9a7cd3d57b3d98dd97af157728fb240cdaefcbc98ba63e0f6f695c391256e7c374011fd3494e57f217e6dc12eefb23c07e291d3299960ee9a595bff7c75cc6758de68b59bf6e1e55b9939541827ed2924b1ee678ecff29b86fc33618defb3d7c03535dd031e7197c32e3896177c1af0b619a8eb77e41bb9aedd73d626f19cd5e59dbc70b27f8f3d71216690874c154da5b18b6a32d1377257179ddb0543e6700718c79717ef8a61c3cac2747e7b348c543ebf9dabc0cb894b53f54139b869c1bd4b67ecb2f154618bff74d0a052ced2ebd041086fa0076c0e943946a634c294cf40bd59f01eb0125cced6d0ac5c95ba1f007b98d06c8fccf43ab0877b41a9f7acd399739ba10627c33c2a03683699a30614b151e754dc1db6b9b90f", @ANYRES32=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x18) setitimer(0x2, 0x0, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x11, &(0x7f0000000300)={0x35, 0x676, 0xff}) r4 = socket$nl_route(0x10, 0x3, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000340)=0xc) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000004c0)={[], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@uid_lt={'uid<', r5}}, {@subj_type={'subj_type', 0x3d, ',$:@'}}, {@hash}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}, 0x0, 0x4ec, &(0x7f0000000880)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000380)={'#! ', './file0'}, 0xb) write$binfmt_elf64(r6, &(0x7f0000001bc0)=ANY=[], 0x11b0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4841}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000034782be3236bd11aa08a68d2e2628a8f000007020000f8ffffffb703000008000000b70400000000000085000000030000009500540000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) alarm(0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={0xffffffffffffffff, 0x0, &(0x7f0000001780)=""/4096}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x8}, 0x18) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 323.889546ms ago: executing program 5 (id=1417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0x3, &(0x7f00000028c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x18) setitimer(0x2, 0x0, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x11, &(0x7f0000000300)={0x35, 0x676, 0xff}) r4 = socket$nl_route(0x10, 0x3, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000340)=0xc) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000004c0)={[], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@uid_lt={'uid<', r5}}, {@subj_type={'subj_type', 0x3d, ',$:@'}}, {@hash}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}, 0x0, 0x4ec, &(0x7f0000000880)="$eJzs3MFvFNUfAPDvbLu0wI8fFZEERC2gsTGxhYLCwQsmJh40MeJBjk1bSGUBQ3sQ0siSGDyTeDcejTdNvOrRePIPwIMHE0NClAvgaczszmy3291ut5Q2bT+fZNv3ZubNe29m3uybeTsTwLY1nP1JIv4XEXcjYm89uniB4fq/Rw/mJx8/mJ+Mapqe+zupLfcwi+eKdLvzyEgpovRF0rLCutnrNy5NVCrT16Jai4/NXf50bPb6jddnLk9cnL44fWX8zJlTJ0+cfnP8jdakg10r1Sa/rF4PD31+9fDBd8/feX+yv3VlzfXoqEj1T7XrolFs2w5eaV7fFrCnKZwsrdfNdS0MKzaYH4blrP3PV46e3+gCAesmTdN0oPPsatrq1pIpwKaVxEaXANgYxRd9dv1bfOpTyuvR/dhw98/WL4AePphPb0ZMPmrUvz9K+TLlluvbzDJ9pp4MR8TH1X+/zj6x3H2IP9YoQwBg2/v5bN4NTKKl/1eKA03L/T8fQxmKiGciYl9EPBsR+yPiuYhFyy6SRKTL5L+/dUIj/x/yUYTSvdXWbSWy/t9b+dhW8cnzLRYZ6stjeyKKDvP08XybjER54MJMZfpEh/Xv6JJ/c/8v+2T5F33BvBz3+ls6m1MTcxOrq+1S929FHOpvrX/Sn+24YhgniYiDEXGoh/UONYVnXvv2cCPSclnRvf41aZshvTUZP0u/iXi1vv+rsWj/L+SYNI9PlpaMT44NRmX6+Fh2FBxvm8evv93+oFP+Xev/45+tSd45/dO5J612Q7b/dzUd/1GM3y7UfyiJSBrjtbMRaV9vedz+/cvaeoePLZ232uN/R/JRLVy0r88mHtdOYzuS91qmz81dG19IW8Rr/0/U6z9yrH3735enybbE8xGRHcQvRMSLEX1F2Y9ExNGIaFO1hl/efvmTTvNWePw/NVn9p9qe/xbt/4Xx+hUGaikHI7IpfZeO3H3c4eSR13/v8vv/VC00kk9pf/5LFp0iVlrSJ96AAAAAsAmUovbb/9JoI1wqjY7W7wHtj12lytXZuZci4spU/RmBoSiXLsxUposbckNRTor7n0NN8fGW+Mn8vvFXfTtr8dHJq5Wpja48bHO7a20+WdL+M3/1eJ8X2IS20HNoQI+6tf8Dd9apIMC68/0P21dT++/0ZouqX8rA1uT7H7avdu3/Zny37LMLzhmw+aXaMmxry7f/7u/bBDav/viwEa499tz2aVtgK9L/h22p1+f6ewukA+1nDUabNwYMPp1i7GyT14YEsp7VGq6wHBErW3jnarIouoCd3/BQ6m2FA7F0Vl8slypp/x6HiKh2TJVtla7luXhgzQ/+4p0oa33YfL/QTssr3N1PGnC9DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbCn/BQAA//94f9B3") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000380)={'#! ', './file0'}, 0xb) write$binfmt_elf64(r6, &(0x7f0000001bc0)=ANY=[], 0x11b0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4841}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000034782be3236bd11aa08a68d2e2628a8f000007020000f8ffffffb703000008000000b70400000000000085000000030000009500540000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) alarm(0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={0xffffffffffffffff, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448cb, 0x0) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 281.542808ms ago: executing program 5 (id=1418): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x1, 0x8f, 0x20000}, 0x20) 233.13709ms ago: executing program 5 (id=1419): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) (fail_nth: 2) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x1, 0x8f, 0x20000}, 0x20) 129.964755ms ago: executing program 5 (id=1420): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 0s ago: executing program 1 (id=1421): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) kernel console output (not intermixed with test programs): nactive_file 0 [ 73.292564][ T5962] active_file 0 [ 73.292571][ T5962] unevictable 0 [ 73.324426][ T5999] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 73.326317][ T5962] hierarchical_memory_limit 314572800 [ 73.533750][ T5962] hierarchical_memsw_limit 9223372036854771712 [ 73.539904][ T5962] total_cache 0 [ 73.543371][ T5962] total_rss 0 [ 73.546643][ T5962] total_shmem 0 [ 73.550077][ T5962] total_mapped_file 0 [ 73.554066][ T5962] total_dirty 0 [ 73.557506][ T5962] total_writeback 0 [ 73.561380][ T5962] total_workingset_refault_anon 48 [ 73.566504][ T5962] total_workingset_refault_file 415 [ 73.571756][ T5962] total_swap 1462272 [ 73.575633][ T5962] total_swapcached 0 [ 73.579502][ T5962] total_pgpgin 112495 [ 73.583485][ T5962] total_pgpgout 112495 [ 73.587542][ T5962] total_pgfault 133881 [ 73.591628][ T5962] total_pgmajfault 32 [ 73.595597][ T5962] total_inactive_anon 0 [ 73.599728][ T5962] total_active_anon 0 [ 73.603897][ T5962] total_inactive_file 0 [ 73.608037][ T5962] total_active_file 0 [ 73.612040][ T5962] total_unevictable 0 [ 73.616010][ T5962] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.851,pid=5962,uid=0 [ 73.630997][ T5962] Memory cgroup out of memory: Killed process 5962 (syz.1.851) total-vm:95884kB, anon-rss:1136kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 73.667968][ T5962] syz.1.851 (5962) used greatest stack depth: 10088 bytes left [ 73.766573][ T5963] syz.1.851 (5963) used greatest stack depth: 6328 bytes left [ 73.810529][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.894457][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.865'. [ 73.906535][ T6016] loop3: detected capacity change from 0 to 128 [ 73.931356][ T6016] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 73.939229][ T6016] FAT-fs (loop3): Filesystem has been set read-only [ 73.950027][ T6016] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 74.069376][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.868'. [ 74.114651][ T6035] loop1: detected capacity change from 0 to 128 [ 74.135578][ T6035] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 74.143499][ T6035] FAT-fs (loop1): Filesystem has been set read-only [ 74.155995][ T6035] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 74.171505][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.873'. [ 74.220894][ T6039] loop0: detected capacity change from 0 to 128 [ 74.255615][ T6039] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 74.263535][ T6039] FAT-fs (loop0): Filesystem has been set read-only [ 74.282849][ T6039] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 74.352180][ T6032] loop2: detected capacity change from 0 to 512 [ 74.378621][ T6032] EXT4-fs: Ignoring removed bh option [ 74.395081][ T6032] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.404187][ T6032] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 74.440610][ T6032] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 74.452390][ T6049] loop0: detected capacity change from 0 to 128 [ 74.466743][ T6049] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 74.474648][ T6049] FAT-fs (loop0): Filesystem has been set read-only [ 74.488884][ T6049] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 74.501002][ T6032] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 74.509636][ T6032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.704933][ T6052] loop3: detected capacity change from 0 to 128 [ 74.720087][ T6052] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 74.728157][ T6052] FAT-fs (loop3): Filesystem has been set read-only [ 74.735155][ T6052] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 74.794018][ T6054] SELinux: ebitmap: truncated map [ 74.799512][ T6054] SELinux: failed to load policy [ 74.929695][ T6061] loop1: detected capacity change from 0 to 128 [ 74.941172][ T6061] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 74.949034][ T6061] FAT-fs (loop1): Filesystem has been set read-only [ 74.972728][ T6061] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 75.120096][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.211789][ T6077] loop3: detected capacity change from 0 to 128 [ 75.232732][ T6077] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 75.240577][ T6077] FAT-fs (loop3): Filesystem has been set read-only [ 75.286866][ T6077] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 75.313670][ T6089] loop2: detected capacity change from 0 to 128 [ 75.327736][ T6089] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 75.334293][ T6091] loop4: detected capacity change from 0 to 512 [ 75.335626][ T6089] FAT-fs (loop2): Filesystem has been set read-only [ 75.350948][ T6092] loop0: detected capacity change from 0 to 128 [ 75.362639][ T6092] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 75.370493][ T6092] FAT-fs (loop0): Filesystem has been set read-only [ 75.378289][ T6089] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 75.386862][ T6092] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 75.419434][ T6095] SELinux: ebitmap: truncated map [ 75.424921][ T6095] SELinux: failed to load policy [ 75.460521][ T6097] veth0: entered promiscuous mode [ 75.467422][ T6096] veth0: left promiscuous mode [ 75.559820][ T6104] loop4: detected capacity change from 0 to 128 [ 75.571163][ T6104] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 75.579125][ T6104] FAT-fs (loop4): Filesystem has been set read-only [ 75.586927][ T6104] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 76.155568][ T6116] loop2: detected capacity change from 0 to 128 [ 76.171975][ T6116] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 76.179850][ T6116] FAT-fs (loop2): Filesystem has been set read-only [ 76.186889][ T6116] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 76.215460][ T6120] loop0: detected capacity change from 0 to 128 [ 76.230790][ T6120] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 76.238685][ T6120] FAT-fs (loop0): Filesystem has been set read-only [ 76.246111][ T6120] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 76.430731][ T6127] loop4: detected capacity change from 0 to 128 [ 76.444474][ T6127] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 76.452382][ T6127] FAT-fs (loop4): Filesystem has been set read-only [ 76.459439][ T6127] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 76.677357][ T6132] SELinux: ebitmap: truncated map [ 76.683395][ T6132] SELinux: failed to load policy [ 76.761591][ T6137] loop1: detected capacity change from 0 to 128 [ 76.778333][ T6137] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 76.786221][ T6137] FAT-fs (loop1): Filesystem has been set read-only [ 76.793393][ T6137] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 76.940402][ T6142] loop3: detected capacity change from 0 to 128 [ 76.961405][ T6142] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 76.969283][ T6142] FAT-fs (loop3): Filesystem has been set read-only [ 76.976654][ T6142] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 76.985321][ T29] kauditd_printk_skb: 1180 callbacks suppressed [ 76.985414][ T29] audit: type=1326 audit(1763765613.061:49195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6138 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dcbd8f749 code=0x7ffc0000 [ 77.015566][ T29] audit: type=1326 audit(1763765613.061:49196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6138 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dcbd8f749 code=0x7ffc0000 [ 77.038971][ T29] audit: type=1326 audit(1763765613.061:49197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6138 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f2dcbd8f749 code=0x7ffc0000 [ 77.039478][ T6147] loop2: detected capacity change from 0 to 128 [ 77.062262][ T29] audit: type=1326 audit(1763765613.071:49198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6138 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dcbd8f749 code=0x7ffc0000 [ 77.062292][ T29] audit: type=1326 audit(1763765613.071:49199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6138 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dcbd8f749 code=0x7ffc0000 [ 77.081330][ T6147] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 77.123214][ T6147] FAT-fs (loop2): Filesystem has been set read-only [ 77.125556][ T29] audit: type=1326 audit(1763765613.101:49200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6143 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17795cf749 code=0x7ffc0000 [ 77.144317][ T6147] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 77.153347][ T29] audit: type=1326 audit(1763765613.101:49201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6143 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f17795cf749 code=0x7ffc0000 [ 77.184587][ T29] audit: type=1326 audit(1763765613.101:49202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6143 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f17795cf783 code=0x7ffc0000 [ 77.207879][ T29] audit: type=1326 audit(1763765613.101:49203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6143 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f17795ce1ff code=0x7ffc0000 [ 77.231184][ T29] audit: type=1326 audit(1763765613.101:49204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6143 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f17795cf7d7 code=0x7ffc0000 [ 77.282832][ T6152] loop4: detected capacity change from 0 to 512 [ 77.289510][ T6152] EXT4-fs: Ignoring removed bh option [ 77.290269][ T6149] loop0: detected capacity change from 0 to 512 [ 77.302379][ T6152] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.311548][ T6152] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 77.327976][ T6152] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 77.337544][ T6152] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 77.346310][ T6152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.371308][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.392297][ T6157] loop4: detected capacity change from 0 to 512 [ 77.399608][ T6157] EXT4-fs: Ignoring removed bh option [ 77.407745][ T6157] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.417107][ T6157] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 77.426127][ T6157] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 77.435805][ T6157] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 77.444324][ T6157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.468783][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.612362][ T6173] __nla_validate_parse: 15 callbacks suppressed [ 77.612373][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'. [ 77.630218][ T6173] loop4: detected capacity change from 0 to 128 [ 77.636769][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.912'. [ 77.648595][ T6173] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 77.656509][ T6173] FAT-fs (loop4): Filesystem has been set read-only [ 77.656891][ T6174] loop1: detected capacity change from 0 to 128 [ 77.665744][ T6173] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 77.675668][ T6174] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 77.685123][ T6174] FAT-fs (loop1): Filesystem has been set read-only [ 77.692171][ T6174] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 77.756773][ T6176] SELinux: ebitmap: truncated map [ 77.763330][ T6176] SELinux: failed to load policy [ 77.867413][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.917'. [ 77.878545][ T6184] loop2: detected capacity change from 0 to 128 [ 77.894269][ T6184] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 77.902238][ T6184] FAT-fs (loop2): Filesystem has been set read-only [ 77.909276][ T6184] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 78.056843][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.920'. [ 78.072064][ T6201] loop2: detected capacity change from 0 to 128 [ 78.085320][ T6201] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 78.093212][ T6201] FAT-fs (loop2): Filesystem has been set read-only [ 78.102050][ T6201] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 78.110900][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.922'. [ 78.123230][ T6204] loop3: detected capacity change from 0 to 128 [ 78.135743][ T6204] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 78.143702][ T6204] FAT-fs (loop3): Filesystem has been set read-only [ 78.150623][ T6204] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 78.590095][ T6209] SELinux: ebitmap: truncated map [ 78.608727][ T6209] SELinux: failed to load policy [ 78.649877][ T6214] netlink: 16 bytes leftover after parsing attributes in process `syz.1.926'. [ 78.707888][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.716460][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.775644][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.927'. [ 78.787257][ T6219] loop4: detected capacity change from 0 to 128 [ 78.801378][ T6219] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 78.809215][ T6219] FAT-fs (loop4): Filesystem has been set read-only [ 78.818733][ T6219] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 78.869087][ T6223] loop2: detected capacity change from 0 to 512 [ 78.940045][ T6225] loop0: detected capacity change from 0 to 512 [ 79.077366][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'. [ 79.088936][ T6240] loop0: detected capacity change from 0 to 128 [ 79.099957][ T6240] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 79.107886][ T6240] FAT-fs (loop0): Filesystem has been set read-only [ 79.115219][ T6240] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 79.116180][ T6241] loop2: detected capacity change from 0 to 512 [ 79.172255][ T6243] SELinux: ebitmap: truncated map [ 79.178979][ T6243] SELinux: failed to load policy [ 79.334658][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.942'. [ 79.349454][ T6260] loop3: detected capacity change from 0 to 128 [ 79.357918][ T6258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.366579][ T6258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.388595][ T6260] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 79.396483][ T6260] FAT-fs (loop3): Filesystem has been set read-only [ 79.407470][ T6260] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 79.676770][ T6275] SELinux: ebitmap: truncated map [ 79.685249][ T6275] SELinux: failed to load policy [ 79.975544][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.955'. [ 79.987231][ T6296] loop2: detected capacity change from 0 to 128 [ 79.998765][ T6296] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 80.006205][ T6299] unsupported nlmsg_type 40 [ 80.006659][ T6296] FAT-fs (loop2): Filesystem has been set read-only [ 80.018364][ T6296] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 80.089873][ T6304] loop4: detected capacity change from 0 to 128 [ 80.103303][ T6304] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 80.111166][ T6304] FAT-fs (loop4): Filesystem has been set read-only [ 80.123883][ T6304] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 80.191915][ T6310] SELinux: ebitmap: truncated map [ 80.200279][ T6310] SELinux: failed to load policy [ 80.283088][ T6314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.292899][ T6314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.822627][ T6334] loop2: detected capacity change from 0 to 128 [ 80.845332][ T6334] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 80.853287][ T6334] FAT-fs (loop2): Filesystem has been set read-only [ 80.873006][ T6334] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 80.886787][ T6341] loop3: detected capacity change from 0 to 128 [ 80.916226][ T6341] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 80.924269][ T6341] FAT-fs (loop3): Filesystem has been set read-only [ 80.950995][ T6341] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 80.961624][ T6348] loop1: detected capacity change from 0 to 128 [ 80.996436][ T6348] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 81.004346][ T6348] FAT-fs (loop1): Filesystem has been set read-only [ 81.012306][ T6348] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 81.065332][ T6361] SELinux: ebitmap: truncated map [ 81.073068][ T6361] SELinux: failed to load policy [ 81.081698][ T6362] loop0: detected capacity change from 0 to 128 [ 81.094726][ T6362] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 81.100574][ T6361] syz!: rxe_newlink: already configured on team_slave_0 [ 81.102583][ T6362] FAT-fs (loop0): Filesystem has been set read-only [ 81.116870][ T6362] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 81.149849][ T6365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.158602][ T6365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.833017][ T6380] loop1: detected capacity change from 0 to 128 [ 82.161056][ T29] kauditd_printk_skb: 1732 callbacks suppressed [ 82.161119][ T29] audit: type=1326 audit(1763765618.201:50937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.1.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7baeb5df90 code=0x7ffc0000 [ 82.190775][ T29] audit: type=1326 audit(1763765618.201:50938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.1.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f7baeb5e497 code=0x7ffc0000 [ 82.214091][ T29] audit: type=1326 audit(1763765618.201:50939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.1.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7baeb5df90 code=0x7ffc0000 [ 82.237502][ T29] audit: type=1326 audit(1763765618.201:50940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.1.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7baeb5f749 code=0x7ffc0000 [ 82.261010][ T29] audit: type=1326 audit(1763765618.201:50941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.1.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7baeb5f749 code=0x7ffc0000 [ 82.337063][ T6380] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 82.344992][ T6380] FAT-fs (loop1): Filesystem has been set read-only [ 82.424067][ T6380] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 82.459552][ T6395] loop3: detected capacity change from 0 to 128 [ 82.531949][ T29] audit: type=1326 audit(1763765618.361:50942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.1.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7baeb5f749 code=0x7ffc0000 [ 82.555500][ T29] audit: type=1326 audit(1763765618.361:50943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.1.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7baeb5f749 code=0x7ffc0000 [ 82.578941][ T29] audit: type=1326 audit(1763765618.361:50944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.1.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7baeb5f749 code=0x7ffc0000 [ 82.602491][ T29] audit: type=1326 audit(1763765618.361:50945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.1.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f7baeb5f749 code=0x7ffc0000 [ 82.623593][ T6395] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 82.625869][ T29] audit: type=1326 audit(1763765618.511:50946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6391 comm="syz.2.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17795cf749 code=0x7ffc0000 [ 82.657472][ T6395] FAT-fs (loop3): Filesystem has been set read-only [ 82.713711][ T6401] veth0: entered promiscuous mode [ 82.729738][ T6395] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 82.768869][ T6405] loop2: detected capacity change from 0 to 512 [ 82.785519][ T6397] veth0: left promiscuous mode [ 82.810677][ T6416] __nla_validate_parse: 8 callbacks suppressed [ 82.810690][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.994'. [ 82.831116][ T6407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.845274][ T6407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.873850][ T6416] loop4: detected capacity change from 0 to 128 [ 82.878684][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'. [ 82.892058][ T6423] loop2: detected capacity change from 0 to 128 [ 82.894726][ T6416] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 82.906300][ T6416] FAT-fs (loop4): Filesystem has been set read-only [ 82.914039][ T6423] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 82.915606][ T6416] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 82.921958][ T6423] FAT-fs (loop2): Filesystem has been set read-only [ 82.939163][ T6423] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 83.096937][ T6436] veth0: entered promiscuous mode [ 83.104787][ T6435] veth0: left promiscuous mode [ 83.120477][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1002'. [ 83.132362][ T6439] loop3: detected capacity change from 0 to 128 [ 83.152512][ T6439] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 83.160368][ T6439] FAT-fs (loop3): Filesystem has been set read-only [ 83.167754][ T6439] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 83.394809][ T6456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1010'. [ 83.402510][ T6452] veth0: entered promiscuous mode [ 83.413093][ T6451] veth0: left promiscuous mode [ 83.439996][ T6458] loop1: detected capacity change from 0 to 512 [ 83.490106][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 83.502018][ T6465] loop0: detected capacity change from 0 to 128 [ 83.524000][ T6465] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 83.531915][ T6465] FAT-fs (loop0): Filesystem has been set read-only [ 83.539064][ T6465] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 83.634442][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1014'. [ 83.646685][ T6474] loop1: detected capacity change from 0 to 128 [ 83.667413][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1015'. [ 83.678107][ T6474] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 83.684802][ T6476] veth0: entered promiscuous mode [ 83.686153][ T6474] FAT-fs (loop1): Filesystem has been set read-only [ 83.695155][ T6475] veth0: left promiscuous mode [ 83.698398][ T6474] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 83.715422][ T6478] loop4: detected capacity change from 0 to 128 [ 83.739469][ T6478] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 83.747373][ T6478] FAT-fs (loop4): Filesystem has been set read-only [ 83.754630][ T6478] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 83.757488][ T6481] veth0: entered promiscuous mode [ 83.770523][ T6480] veth0: left promiscuous mode [ 83.857408][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1019'. [ 83.868932][ T6490] loop2: detected capacity change from 0 to 128 [ 83.886557][ T6490] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 83.894438][ T6490] FAT-fs (loop2): Filesystem has been set read-only [ 83.901571][ T6490] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 83.939190][ T6492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.947796][ T6492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.307691][ T6498] loop0: detected capacity change from 0 to 512 [ 84.336284][ T6500] loop0: detected capacity change from 0 to 1024 [ 84.343152][ T6500] EXT4-fs: Ignoring removed oldalloc option [ 84.349228][ T6500] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.372319][ T6500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.519597][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1024'. [ 84.547949][ T6515] loop1: detected capacity change from 0 to 128 [ 84.563420][ T6515] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 84.571340][ T6515] FAT-fs (loop1): Filesystem has been set read-only [ 84.578856][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1025'. [ 84.579098][ T6515] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 84.599444][ T6518] loop3: detected capacity change from 0 to 128 [ 84.621990][ T6518] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 84.629958][ T6518] FAT-fs (loop3): Filesystem has been set read-only [ 84.638988][ T6519] loop4: detected capacity change from 0 to 128 [ 84.649329][ T6519] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 84.657207][ T6519] FAT-fs (loop4): Filesystem has been set read-only [ 84.687009][ T6519] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 84.695608][ T6518] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 84.763085][ T6526] loop2: detected capacity change from 0 to 128 [ 84.783781][ T6526] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 84.791720][ T6526] FAT-fs (loop2): Filesystem has been set read-only [ 84.798715][ T6526] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 85.192516][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.213288][ T6528] loop0: detected capacity change from 0 to 764 [ 85.225308][ T6528] Symlink component flag not implemented [ 85.231008][ T6528] Symlink component flag not implemented [ 85.237382][ T6528] Symlink component flag not implemented (129) [ 85.243698][ T6528] Symlink component flag not implemented (6) [ 85.250277][ T6528] rock: directory entry would overflow storage [ 85.256484][ T6528] rock: sig=0x4f50, size=4, remaining=3 [ 85.262083][ T6528] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 85.377913][ T6534] loop1: detected capacity change from 0 to 128 [ 85.396805][ T6534] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 85.404718][ T6534] FAT-fs (loop1): Filesystem has been set read-only [ 85.418439][ T6534] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 85.431987][ T6541] loop4: detected capacity change from 0 to 764 [ 85.448951][ T6542] loop3: detected capacity change from 0 to 128 [ 85.462178][ T6535] SELinux: ebitmap: truncated map [ 85.473345][ T6542] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 85.481229][ T6542] FAT-fs (loop3): Filesystem has been set read-only [ 85.488112][ T6535] SELinux: failed to load policy [ 85.494522][ T6542] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 85.562515][ T6551] loop2: detected capacity change from 0 to 764 [ 85.586046][ T6552] loop0: detected capacity change from 0 to 128 [ 85.594074][ T6551] Symlink component flag not implemented [ 85.599722][ T6551] Symlink component flag not implemented [ 85.606812][ T6551] Symlink component flag not implemented (129) [ 85.613112][ T6551] Symlink component flag not implemented (6) [ 85.620458][ T6552] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 85.628354][ T6552] FAT-fs (loop0): Filesystem has been set read-only [ 85.637941][ T6552] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 85.646636][ T6551] rock: directory entry would overflow storage [ 85.652841][ T6551] rock: sig=0x4f50, size=4, remaining=3 [ 85.658409][ T6551] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 85.869878][ T6568] loop2: detected capacity change from 0 to 128 [ 85.882126][ T6568] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 85.889989][ T6568] FAT-fs (loop2): Filesystem has been set read-only [ 85.897042][ T6568] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 85.905196][ T6569] loop4: detected capacity change from 0 to 128 [ 85.916807][ T6569] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 85.924812][ T6569] FAT-fs (loop4): Filesystem has been set read-only [ 85.931780][ T6569] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 86.229576][ T6574] loop1: detected capacity change from 0 to 128 [ 86.240941][ T6574] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 86.248808][ T6574] FAT-fs (loop1): Filesystem has been set read-only [ 86.257072][ T6574] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 86.264496][ T6576] loop3: detected capacity change from 0 to 512 [ 86.372550][ T6583] loop3: detected capacity change from 0 to 128 [ 86.387384][ T6583] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 86.395468][ T6583] FAT-fs (loop3): Filesystem has been set read-only [ 86.403060][ T6583] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 86.404202][ T6585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.420155][ T6585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.717442][ T6593] loop2: detected capacity change from 0 to 764 [ 86.727998][ T6593] Symlink component flag not implemented [ 86.733702][ T6593] Symlink component flag not implemented [ 86.739457][ T6593] Symlink component flag not implemented (129) [ 86.745639][ T6593] Symlink component flag not implemented (6) [ 86.752368][ T6593] rock: directory entry would overflow storage [ 86.758517][ T6593] rock: sig=0x4f50, size=4, remaining=3 [ 86.764146][ T6593] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 86.862114][ T6601] loop4: detected capacity change from 0 to 764 [ 86.932224][ T6601] Symlink component flag not implemented [ 86.937896][ T6601] Symlink component flag not implemented [ 86.943646][ T6601] Symlink component flag not implemented (129) [ 86.949863][ T6601] Symlink component flag not implemented (6) [ 86.956377][ T6601] rock: directory entry would overflow storage [ 86.962562][ T6601] rock: sig=0x4f50, size=4, remaining=3 [ 86.968222][ T6601] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 87.090520][ T6612] loop1: detected capacity change from 0 to 128 [ 87.128207][ T6612] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 87.136074][ T6612] FAT-fs (loop1): Filesystem has been set read-only [ 87.159558][ T6612] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 87.173870][ T29] kauditd_printk_skb: 935 callbacks suppressed [ 87.173884][ T29] audit: type=1326 audit(1763765623.251:51882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6605 comm="syz.1.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7baeb5f749 code=0x7ffc0000 [ 87.204057][ T29] audit: type=1326 audit(1763765623.251:51883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6605 comm="syz.1.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7baeb5f749 code=0x7ffc0000 [ 87.284890][ T29] audit: type=1326 audit(1763765623.361:51884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76f89f749 code=0x7ffc0000 [ 87.308447][ T29] audit: type=1326 audit(1763765623.361:51885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76f89f749 code=0x7ffc0000 [ 87.332198][ T29] audit: type=1326 audit(1763765623.361:51886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa76f89f749 code=0x7ffc0000 [ 87.355948][ T29] audit: type=1326 audit(1763765623.361:51887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76f89f749 code=0x7ffc0000 [ 87.379493][ T29] audit: type=1326 audit(1763765623.361:51888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76f89f749 code=0x7ffc0000 [ 87.465799][ T6618] SELinux: ebitmap: truncated map [ 87.477502][ T6618] SELinux: failed to load policy [ 87.501920][ T29] audit: type=1326 audit(1763765623.501:51889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa76f89f749 code=0x7ffc0000 [ 87.525490][ T29] audit: type=1326 audit(1763765623.501:51890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76f89f749 code=0x7ffc0000 [ 87.548995][ T29] audit: type=1326 audit(1763765623.501:51891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.4.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76f89f749 code=0x7ffc0000 [ 87.937411][ T6647] __nla_validate_parse: 14 callbacks suppressed [ 87.937426][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1063'. [ 87.963099][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1065'. [ 87.976017][ T6650] loop3: detected capacity change from 0 to 128 [ 87.977331][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1064'. [ 87.994095][ T6647] loop4: detected capacity change from 0 to 128 [ 88.003383][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1066'. [ 88.003787][ T6650] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 88.020124][ T6650] FAT-fs (loop3): Filesystem has been set read-only [ 88.040132][ T6647] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 88.047977][ T6647] FAT-fs (loop4): Filesystem has been set read-only [ 88.056878][ T6653] loop0: detected capacity change from 0 to 128 [ 88.080433][ T6654] loop1: detected capacity change from 0 to 128 [ 88.095033][ T6653] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 88.102883][ T6653] FAT-fs (loop0): Filesystem has been set read-only [ 88.121585][ T6650] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 88.131867][ T6647] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 88.157616][ T6653] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 88.160224][ T6652] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 88.173401][ T6652] FAT-fs (loop1): Filesystem has been set read-only [ 88.201024][ T6652] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 88.479399][ T6658] loop2: detected capacity change from 0 to 1024 [ 88.486097][ T6658] EXT4-fs: Ignoring removed oldalloc option [ 88.492411][ T6658] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.502685][ T6658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.525966][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.548770][ T6663] loop2: detected capacity change from 0 to 1024 [ 88.555833][ T6663] EXT4-fs: Ignoring removed oldalloc option [ 88.561894][ T6663] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.572612][ T6663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.743508][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.783622][ T6674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1070'. [ 88.810416][ T6679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1069'. [ 88.814603][ T6678] loop1: detected capacity change from 0 to 764 [ 88.839298][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1070'. [ 88.857223][ T6679] loop4: detected capacity change from 0 to 128 [ 88.894995][ T6683] veth0: entered promiscuous mode [ 88.902724][ T6682] veth0: left promiscuous mode [ 88.930203][ T6679] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 88.938067][ T6679] FAT-fs (loop4): Filesystem has been set read-only [ 88.950475][ T6689] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 88.962836][ T6679] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 88.980077][ T6689] SELinux: failed to load policy [ 89.007347][ T6691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1077'. [ 89.018978][ T6691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.027849][ T6691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.074808][ T6687] SELinux: policydb magic number 0x4c0 does not match expected magic number 0xf97cff8c [ 89.087688][ T6687] SELinux: failed to load policy [ 89.094060][ T6697] SELinux: ebitmap: truncated map [ 89.105612][ T6697] SELinux: failed to load policy [ 89.223200][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'. [ 89.242166][ T6706] SELinux: ebitmap: truncated map [ 89.247471][ T6707] loop0: detected capacity change from 0 to 128 [ 89.263079][ T6706] SELinux: failed to load policy [ 89.279074][ T6707] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 89.284923][ T6706] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 89.287031][ T6707] FAT-fs (loop0): Filesystem has been set read-only [ 89.313496][ T6707] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 89.337175][ T6712] SELinux: policydb magic number 0x4c0 does not match expected magic number 0xf97cff8c [ 89.347270][ T6712] SELinux: failed to load policy [ 89.418277][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1085'. [ 89.435309][ T6722] loop2: detected capacity change from 0 to 128 [ 89.447446][ T6722] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 89.455353][ T6722] FAT-fs (loop2): Filesystem has been set read-only [ 89.462518][ T6722] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 89.537798][ T6727] loop1: detected capacity change from 0 to 128 [ 89.550386][ T6727] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 89.558349][ T6727] FAT-fs (loop1): Filesystem has been set read-only [ 89.568728][ T6727] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 89.675685][ T6737] loop4: detected capacity change from 0 to 1024 [ 89.682627][ T6737] EXT4-fs: Ignoring removed oldalloc option [ 89.688996][ T6737] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.722218][ T6737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.749537][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.781838][ T6744] loop4: detected capacity change from 0 to 512 [ 89.899719][ T6755] loop3: detected capacity change from 0 to 128 [ 89.912011][ T6756] loop4: detected capacity change from 0 to 128 [ 89.914276][ T6755] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 89.926179][ T6755] FAT-fs (loop3): Filesystem has been set read-only [ 89.927635][ T6756] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 89.933491][ T6755] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 89.940592][ T6756] FAT-fs (loop4): Filesystem has been set read-only [ 89.940870][ T6756] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 90.273693][ T6763] loop2: detected capacity change from 0 to 128 [ 90.284834][ T6763] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 90.292682][ T6763] FAT-fs (loop2): Filesystem has been set read-only [ 90.299759][ T6763] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 90.336302][ T6765] FAULT_INJECTION: forcing a failure. [ 90.336302][ T6765] name failslab, interval 1, probability 0, space 0, times 1 [ 90.348947][ T6765] CPU: 1 UID: 0 PID: 6765 Comm: syz.1.1101 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.349026][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.349080][ T6765] Call Trace: [ 90.349085][ T6765] [ 90.349090][ T6765] __dump_stack+0x1d/0x30 [ 90.349106][ T6765] dump_stack_lvl+0xe8/0x140 [ 90.349117][ T6765] dump_stack+0x15/0x1b [ 90.349188][ T6765] should_fail_ex+0x265/0x280 [ 90.349205][ T6765] ? __se_sys_memfd_create+0x1cc/0x590 [ 90.349218][ T6765] should_failslab+0x8c/0xb0 [ 90.349259][ T6765] __kmalloc_cache_noprof+0x4c/0x4a0 [ 90.349275][ T6765] ? fput+0x8f/0xc0 [ 90.349285][ T6765] __se_sys_memfd_create+0x1cc/0x590 [ 90.349301][ T6765] __x64_sys_memfd_create+0x31/0x40 [ 90.349338][ T6765] x64_sys_call+0x2ac2/0x3000 [ 90.349350][ T6765] do_syscall_64+0xd2/0x200 [ 90.349361][ T6765] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.349448][ T6765] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 90.349474][ T6765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.349494][ T6765] RIP: 0033:0x7f7baeb5f749 [ 90.349508][ T6765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.349523][ T6765] RSP: 002b:00007f7bad5bee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 90.349571][ T6765] RAX: ffffffffffffffda RBX: 000000000000022d RCX: 00007f7baeb5f749 [ 90.349578][ T6765] RDX: 00007f7bad5beef0 RSI: 0000000000000000 RDI: 00007f7baebe4960 [ 90.349585][ T6765] RBP: 0000200000000300 R08: 00007f7bad5bebb7 R09: 00007f7bad5bee40 [ 90.349591][ T6765] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000280 [ 90.349665][ T6765] R13: 00007f7bad5beef0 R14: 00007f7bad5beeb0 R15: 00002000000002c0 [ 90.349676][ T6765] [ 90.548008][ T6768] loop1: detected capacity change from 0 to 512 [ 90.555199][ T6768] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.564935][ T6768] EXT4-fs (loop1): orphan cleanup on readonly fs [ 90.572158][ T6768] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1102: bg 0: block 248: padding at end of block bitmap is not set [ 90.587131][ T6768] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1102: Failed to acquire dquot type 1 [ 90.598984][ T6768] EXT4-fs (loop1): 1 truncate cleaned up [ 90.605370][ T6768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.624853][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.647448][ T6772] loop1: detected capacity change from 0 to 512 [ 90.677284][ T6774] netlink: 'syz.1.1104': attribute type 46 has an invalid length. [ 90.726934][ T6778] loop3: detected capacity change from 0 to 512 [ 90.749379][ T6778] EXT4-fs (loop3): invalid journal inode [ 90.843871][ T6792] FAULT_INJECTION: forcing a failure. [ 90.843871][ T6792] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 90.857017][ T6792] CPU: 0 UID: 0 PID: 6792 Comm: syz.1.1111 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.857049][ T6792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.857062][ T6792] Call Trace: [ 90.857068][ T6792] [ 90.857076][ T6792] __dump_stack+0x1d/0x30 [ 90.857156][ T6792] dump_stack_lvl+0xe8/0x140 [ 90.857213][ T6792] dump_stack+0x15/0x1b [ 90.857233][ T6792] should_fail_ex+0x265/0x280 [ 90.857322][ T6792] should_fail+0xb/0x20 [ 90.857339][ T6792] should_fail_usercopy+0x1a/0x20 [ 90.857360][ T6792] _copy_to_user+0x20/0xa0 [ 90.857385][ T6792] simple_read_from_buffer+0xb5/0x130 [ 90.857414][ T6792] proc_fail_nth_read+0x10e/0x150 [ 90.857446][ T6792] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.857515][ T6792] vfs_read+0x1a8/0x770 [ 90.857536][ T6792] ? __rcu_read_unlock+0x4f/0x70 [ 90.857558][ T6792] ? __fget_files+0x184/0x1c0 [ 90.857600][ T6792] ksys_read+0xda/0x1a0 [ 90.857630][ T6792] __x64_sys_read+0x40/0x50 [ 90.857714][ T6792] x64_sys_call+0x27c0/0x3000 [ 90.857740][ T6792] do_syscall_64+0xd2/0x200 [ 90.857759][ T6792] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.857784][ T6792] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 90.857884][ T6792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.857904][ T6792] RIP: 0033:0x7f7baeb5e15c [ 90.857919][ T6792] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 90.857933][ T6792] RSP: 002b:00007f7bad5bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 90.857949][ T6792] RAX: ffffffffffffffda RBX: 00007f7baedb5fa0 RCX: 00007f7baeb5e15c [ 90.857990][ T6792] RDX: 000000000000000f RSI: 00007f7bad5bf0a0 RDI: 0000000000000004 [ 90.858001][ T6792] RBP: 00007f7bad5bf090 R08: 0000000000000000 R09: 0000000000000000 [ 90.858013][ T6792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.858023][ T6792] R13: 00007f7baedb6038 R14: 00007f7baedb5fa0 R15: 00007ffeab2433f8 [ 90.858042][ T6792] [ 91.066313][ T6795] IPv6: sit1: Disabled Multicast RS [ 91.072770][ T6797] loop4: detected capacity change from 0 to 128 [ 91.080493][ T6795] sit1: entered allmulticast mode [ 91.105810][ T6793] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 91.113694][ T6793] FAT-fs (loop4): Filesystem has been set read-only [ 91.132101][ T6803] loop0: detected capacity change from 0 to 1024 [ 91.138994][ T6793] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 91.192275][ T6803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.207496][ T6814] loop1: detected capacity change from 0 to 128 [ 91.224227][ T6814] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 91.238652][ T6814] FAT-fs (loop1): Filesystem has been set read-only [ 91.275447][ T6803] EXT4-fs error (device loop0): ext4_generic_delete_entry:2668: inode #12: block 7: comm syz.0.1115: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 91.279819][ T6818] loop3: detected capacity change from 0 to 1024 [ 91.299737][ T6803] EXT4-fs error (device loop0) in ext4_delete_inline_entry:1687: Corrupt filesystem [ 91.306729][ T6814] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 91.330169][ T6818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.342962][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.343111][ T6818] FAULT_INJECTION: forcing a failure. [ 91.343111][ T6818] name failslab, interval 1, probability 0, space 0, times 0 [ 91.364640][ T6818] CPU: 0 UID: 0 PID: 6818 Comm: syz.3.1120 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.364666][ T6818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 91.364677][ T6818] Call Trace: [ 91.364684][ T6818] [ 91.364692][ T6818] __dump_stack+0x1d/0x30 [ 91.364766][ T6818] dump_stack_lvl+0xe8/0x140 [ 91.364807][ T6818] dump_stack+0x15/0x1b [ 91.364873][ T6818] should_fail_ex+0x265/0x280 [ 91.364918][ T6818] should_failslab+0x8c/0xb0 [ 91.364940][ T6818] kmem_cache_alloc_noprof+0x50/0x480 [ 91.364965][ T6818] ? getname_flags+0x80/0x3b0 [ 91.365154][ T6818] getname_flags+0x80/0x3b0 [ 91.365251][ T6818] __x64_sys_unlink+0x21/0x40 [ 91.365302][ T6818] x64_sys_call+0x2dcf/0x3000 [ 91.365324][ T6818] do_syscall_64+0xd2/0x200 [ 91.365341][ T6818] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 91.365416][ T6818] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 91.365512][ T6818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.365532][ T6818] RIP: 0033:0x7f2dcbd8f749 [ 91.365562][ T6818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.365578][ T6818] RSP: 002b:00007f2dca7f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 91.365593][ T6818] RAX: ffffffffffffffda RBX: 00007f2dcbfe5fa0 RCX: 00007f2dcbd8f749 [ 91.365683][ T6818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 91.365694][ T6818] RBP: 00007f2dca7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 91.365706][ T6818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.365718][ T6818] R13: 00007f2dcbfe6038 R14: 00007f2dcbfe5fa0 R15: 00007fff75ae2e98 [ 91.365738][ T6818] [ 91.543231][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.604584][ T6827] SELinux: ebitmap: truncated map [ 91.614531][ T6827] SELinux: failed to load policy [ 91.636247][ T6831] loop3: detected capacity change from 0 to 128 [ 91.644875][ T6827] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 91.657832][ T6831] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 91.666177][ T6831] FAT-fs (loop3): Filesystem has been set read-only [ 91.676688][ T6831] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 91.739129][ T2968] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 91.746950][ T2968] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 91.761472][ T2968] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 91.769124][ T2968] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 91.776861][ T2968] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 91.784539][ T2968] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 91.792208][ T2968] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 91.799852][ T2968] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 91.808076][ T2968] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 91.848679][ T6844] fido_id[6844]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 91.896737][ T6846] syz.0.1128 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 92.015751][ T6858] FAULT_INJECTION: forcing a failure. [ 92.015751][ T6858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.028878][ T6858] CPU: 1 UID: 0 PID: 6858 Comm: syz.1.1134 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.028906][ T6858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.028918][ T6858] Call Trace: [ 92.028925][ T6858] [ 92.028933][ T6858] __dump_stack+0x1d/0x30 [ 92.029013][ T6858] dump_stack_lvl+0xe8/0x140 [ 92.029030][ T6858] dump_stack+0x15/0x1b [ 92.029044][ T6858] should_fail_ex+0x265/0x280 [ 92.029115][ T6858] should_fail+0xb/0x20 [ 92.029138][ T6858] should_fail_usercopy+0x1a/0x20 [ 92.029156][ T6858] _copy_from_user+0x1c/0xb0 [ 92.029184][ T6858] ___sys_sendmsg+0xc1/0x1d0 [ 92.029215][ T6858] __x64_sys_sendmsg+0xd4/0x160 [ 92.029273][ T6858] x64_sys_call+0x191e/0x3000 [ 92.029292][ T6858] do_syscall_64+0xd2/0x200 [ 92.029330][ T6858] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 92.029390][ T6858] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 92.029461][ T6858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.029473][ T6858] RIP: 0033:0x7f7baeb5f749 [ 92.029482][ T6858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.029492][ T6858] RSP: 002b:00007f7bad5bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.029534][ T6858] RAX: ffffffffffffffda RBX: 00007f7baedb5fa0 RCX: 00007f7baeb5f749 [ 92.029541][ T6858] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000006 [ 92.029547][ T6858] RBP: 00007f7bad5bf090 R08: 0000000000000000 R09: 0000000000000000 [ 92.029554][ T6858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.029561][ T6858] R13: 00007f7baedb6038 R14: 00007f7baedb5fa0 R15: 00007ffeab2433f8 [ 92.029572][ T6858] [ 92.217785][ T29] kauditd_printk_skb: 953 callbacks suppressed [ 92.217798][ T29] audit: type=1400 audit(1763765628.291:52843): avc: denied { create } for pid=6860 comm="syz.2.1135" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.255994][ T29] audit: type=1400 audit(1763765628.291:52844): avc: denied { mount } for pid=6860 comm="syz.2.1135" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 92.278057][ T29] audit: type=1400 audit(1763765628.301:52845): avc: denied { unlink } for pid=3321 comm="syz-executor" name="file0" dev="tmpfs" ino=1234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.308218][ T29] audit: type=1400 audit(1763765628.381:52846): avc: denied { wake_alarm } for pid=6870 comm="syz.0.1138" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.358551][ T29] audit: type=1400 audit(1763765628.431:52847): avc: denied { create } for pid=6874 comm="syz.0.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.401013][ T29] audit: type=1400 audit(1763765628.461:52848): avc: denied { getopt } for pid=6874 comm="syz.0.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.415462][ T6877] FAULT_INJECTION: forcing a failure. [ 92.415462][ T6877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.420558][ T29] audit: type=1400 audit(1763765628.461:52849): avc: denied { ioctl } for pid=6874 comm="syz.0.1140" path="socket:[16747]" dev="sockfs" ino=16747 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.433605][ T6877] CPU: 1 UID: 0 PID: 6877 Comm: syz.2.1141 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.433698][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.433709][ T6877] Call Trace: [ 92.433716][ T6877] [ 92.433725][ T6877] __dump_stack+0x1d/0x30 [ 92.433746][ T6877] dump_stack_lvl+0xe8/0x140 [ 92.433784][ T6877] dump_stack+0x15/0x1b [ 92.433801][ T6877] should_fail_ex+0x265/0x280 [ 92.433832][ T6877] should_fail+0xb/0x20 [ 92.433927][ T6877] should_fail_usercopy+0x1a/0x20 [ 92.433947][ T6877] _copy_from_user+0x1c/0xb0 [ 92.433971][ T6877] do_seccomp+0x118/0xa40 [ 92.434103][ T6877] ? fput+0x8f/0xc0 [ 92.434121][ T6877] ? ksys_write+0x192/0x1a0 [ 92.434148][ T6877] __x64_sys_seccomp+0x40/0x50 [ 92.434184][ T6877] x64_sys_call+0x2ad8/0x3000 [ 92.434206][ T6877] do_syscall_64+0xd2/0x200 [ 92.434226][ T6877] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 92.434294][ T6877] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 92.434397][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.434419][ T6877] RIP: 0033:0x7f17795cf749 [ 92.434434][ T6877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.434451][ T6877] RSP: 002b:00007f177802f038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 92.434506][ T6877] RAX: ffffffffffffffda RBX: 00007f1779825fa0 RCX: 00007f17795cf749 [ 92.434518][ T6877] RDX: 0000200000000000 RSI: 0000000000000008 RDI: 0000000000000001 [ 92.434531][ T6877] RBP: 00007f177802f090 R08: 0000000000000000 R09: 0000000000000000 [ 92.434542][ T6877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.434553][ T6877] R13: 00007f1779826038 R14: 00007f1779825fa0 R15: 00007ffee60e26b8 [ 92.434573][ T6877] [ 92.613760][ T6882] loop2: detected capacity change from 0 to 4096 [ 92.705674][ T6894] loop3: detected capacity change from 0 to 128 [ 92.727029][ T6894] EXT4-fs: dax option not supported [ 92.738590][ T6886] loop4: detected capacity change from 0 to 2048 [ 92.748470][ T6897] netlink: 'syz.1.1148': attribute type 1 has an invalid length. [ 92.757577][ T6882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.778141][ T29] audit: type=1400 audit(1763765628.841:52850): avc: denied { create } for pid=6896 comm="syz.1.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 92.798151][ T29] audit: type=1400 audit(1763765628.851:52851): avc: denied { sys_admin } for pid=6896 comm="syz.1.1148" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 92.877624][ T4284] Alternate GPT is invalid, using primary GPT. [ 92.884012][ T4284] loop4: p2 p3 p7 [ 92.894409][ T29] audit: type=1400 audit(1763765628.921:52852): avc: denied { sys_nice } for pid=6896 comm="syz.1.1148" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 92.930232][ T6886] Alternate GPT is invalid, using primary GPT. [ 92.930440][ T6886] loop4: p2 p3 p7 [ 92.931278][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.984711][ T4284] udevd[4284]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 93.001268][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 93.009702][ T3530] udevd[3530]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 93.045884][ T4284] udevd[4284]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 93.093681][ T6910] __nla_validate_parse: 12 callbacks suppressed [ 93.093697][ T6910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1151'. [ 93.102504][ T6912] SELinux: Context ׸ýßX7ªÞd¹Q¬‰YI{C´¨pUèÒ–hÙ»ŒÐ r: is not valid (left unmapped). [ 93.239994][ T6921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1155'. [ 93.256324][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1151'. [ 93.335326][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1155'. [ 93.486577][ T6928] loop3: detected capacity change from 0 to 512 [ 93.567461][ T6928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.615555][ T6936] veth24: entered promiscuous mode [ 93.620333][ T6928] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.620723][ T6936] veth24: entered allmulticast mode [ 93.802423][ T6939] SELinux: policydb magic number 0x4c0 does not match expected magic number 0xf97cff8c [ 93.914213][ T6939] SELinux: failed to load policy [ 93.949632][ T6947] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 94.081324][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1165'. [ 94.098990][ T6952] loop0: detected capacity change from 0 to 128 [ 94.124582][ T6952] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 94.132449][ T6952] FAT-fs (loop0): Filesystem has been set read-only [ 94.148258][ T6952] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 94.379149][ T6959] capability: warning: `syz.2.1168' uses deprecated v2 capabilities in a way that may be insecure [ 94.459310][ T6961] SELinux: ebitmap: truncated map [ 94.473605][ T6961] SELinux: failed to load policy [ 94.493609][ T6963] loop4: detected capacity change from 0 to 764 [ 94.550114][ T6963] Symlink component flag not implemented [ 94.555919][ T6963] Symlink component flag not implemented [ 94.562161][ T6963] Symlink component flag not implemented (129) [ 94.568330][ T6963] Symlink component flag not implemented (6) [ 94.576497][ T6965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.576651][ T6963] rock: directory entry would overflow storage [ 94.591084][ T6963] rock: sig=0x4f50, size=4, remaining=3 [ 94.596629][ T6963] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 94.616141][ T6965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.693444][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1172'. [ 94.705982][ T6973] loop1: detected capacity change from 0 to 128 [ 94.748125][ T6973] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 94.756015][ T6973] FAT-fs (loop1): Filesystem has been set read-only [ 94.764068][ T6973] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 94.823755][ T6977] loop0: detected capacity change from 0 to 764 [ 94.844591][ T6977] Symlink component flag not implemented [ 94.850242][ T6977] Symlink component flag not implemented [ 94.890938][ T6977] Symlink component flag not implemented (129) [ 94.897151][ T6977] Symlink component flag not implemented (6) [ 94.932064][ T6977] rock: directory entry would overflow storage [ 94.938242][ T6977] rock: sig=0x4f50, size=4, remaining=3 [ 94.943828][ T6977] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 94.951915][ T6981] FAULT_INJECTION: forcing a failure. [ 94.951915][ T6981] name failslab, interval 1, probability 0, space 0, times 0 [ 94.964738][ T6981] CPU: 1 UID: 0 PID: 6981 Comm: syz.4.1175 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.964821][ T6981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 94.964936][ T6981] Call Trace: [ 94.964943][ T6981] [ 94.964952][ T6981] __dump_stack+0x1d/0x30 [ 94.964974][ T6981] dump_stack_lvl+0xe8/0x140 [ 94.964994][ T6981] dump_stack+0x15/0x1b [ 94.965023][ T6981] should_fail_ex+0x265/0x280 [ 94.965108][ T6981] should_failslab+0x8c/0xb0 [ 94.965134][ T6981] kmem_cache_alloc_noprof+0x50/0x480 [ 94.965199][ T6981] ? audit_log_start+0x342/0x720 [ 94.965219][ T6981] audit_log_start+0x342/0x720 [ 94.965285][ T6981] ? kstrtouint+0x76/0xc0 [ 94.965313][ T6981] audit_seccomp+0x48/0x100 [ 94.965392][ T6981] ? __seccomp_filter+0x82d/0x1250 [ 94.965417][ T6981] __seccomp_filter+0x83e/0x1250 [ 94.965443][ T6981] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 94.965546][ T6981] ? vfs_write+0x7e8/0x960 [ 94.965570][ T6981] ? __rcu_read_unlock+0x4f/0x70 [ 94.965597][ T6981] ? __fget_files+0x184/0x1c0 [ 94.965742][ T6981] __secure_computing+0x82/0x150 [ 94.965765][ T6981] syscall_trace_enter+0xcf/0x1e0 [ 94.965790][ T6981] do_syscall_64+0xac/0x200 [ 94.965858][ T6981] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 94.965883][ T6981] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 94.965959][ T6981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.965977][ T6981] RIP: 0033:0x7fa76f89f749 [ 94.965989][ T6981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.966060][ T6981] RSP: 002b:00007fa76e307038 EFLAGS: 00000246 ORIG_RAX: 000000000000014d [ 94.966078][ T6981] RAX: ffffffffffffffda RBX: 00007fa76faf5fa0 RCX: 00007fa76f89f749 [ 94.966088][ T6981] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 94.966099][ T6981] RBP: 00007fa76e307090 R08: 0000000000000000 R09: 0000000000000000 [ 94.966109][ T6981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.966119][ T6981] R13: 00007fa76faf6038 R14: 00007fa76faf5fa0 R15: 00007ffdb7fd9498 [ 94.966180][ T6981] [ 95.271250][ T6983] IPv6: NLM_F_CREATE should be specified when creating new route [ 95.444288][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.471548][ T6988] 9pnet_fd: Insufficient options for proto=fd [ 95.976346][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1187'. [ 95.987322][ T7027] loop3: detected capacity change from 0 to 128 [ 96.002406][ T7027] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 96.010206][ T7027] FAT-fs (loop3): Filesystem has been set read-only [ 96.019417][ T7027] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 96.167741][ T7032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.176354][ T7032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.432517][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1191'. [ 96.443766][ T7044] loop1: detected capacity change from 0 to 128 [ 96.455248][ T7044] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 96.463137][ T7044] FAT-fs (loop1): Filesystem has been set read-only [ 96.470072][ T7044] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 96.729926][ T7053] SELinux: ebitmap: truncated map [ 96.744413][ T7053] SELinux: failed to load policy [ 96.750532][ T7058] SELinux: policydb magic number 0x4c0 does not match expected magic number 0xf97cff8c [ 96.770736][ T7058] SELinux: failed to load policy [ 96.835563][ T7068] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 96.853602][ T7058] syz!: rxe_newlink: already configured on team_slave_0 [ 96.864224][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1202'. [ 96.892038][ T7072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1203'. [ 96.928391][ T7072] loop4: detected capacity change from 0 to 512 [ 96.941150][ T7072] EXT4-fs: Ignoring removed bh option [ 96.959710][ T7081] FAULT_INJECTION: forcing a failure. [ 96.959710][ T7081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.972896][ T7081] CPU: 1 UID: 0 PID: 7081 Comm: syz.3.1206 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.972925][ T7081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.973009][ T7081] Call Trace: [ 96.973014][ T7081] [ 96.973021][ T7081] __dump_stack+0x1d/0x30 [ 96.973042][ T7081] dump_stack_lvl+0xe8/0x140 [ 96.973091][ T7081] dump_stack+0x15/0x1b [ 96.973108][ T7081] should_fail_ex+0x265/0x280 [ 96.973137][ T7081] should_fail+0xb/0x20 [ 96.973152][ T7081] should_fail_usercopy+0x1a/0x20 [ 96.973224][ T7081] _copy_from_user+0x1c/0xb0 [ 96.973246][ T7081] io_submit_one+0x52/0x11d0 [ 96.973285][ T7081] __se_sys_io_submit+0xfb/0x280 [ 96.973312][ T7081] __x64_sys_io_submit+0x43/0x50 [ 96.973396][ T7081] x64_sys_call+0x2d6c/0x3000 [ 96.973416][ T7081] do_syscall_64+0xd2/0x200 [ 96.973435][ T7081] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.973480][ T7081] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 96.973512][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.973533][ T7081] RIP: 0033:0x7f2dcbd8f749 [ 96.973588][ T7081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.973603][ T7081] RSP: 002b:00007f2dca7f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 96.973619][ T7081] RAX: ffffffffffffffda RBX: 00007f2dcbfe5fa0 RCX: 00007f2dcbd8f749 [ 96.973631][ T7081] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007f2dca7b3000 [ 96.973644][ T7081] RBP: 00007f2dca7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 96.973687][ T7081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.973699][ T7081] R13: 00007f2dcbfe6038 R14: 00007f2dcbfe5fa0 R15: 00007fff75ae2e98 [ 96.973721][ T7081] [ 96.989388][ T7083] loop2: detected capacity change from 0 to 1024 [ 97.001198][ T7072] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.005443][ T7083] EXT4-fs: Ignoring removed orlov option [ 97.007010][ T7072] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 97.078207][ T7072] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 97.093968][ T7083] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 97.105126][ T7072] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=8002e01c, mo2=0006] [ 97.113840][ T7083] System zones: [ 97.122142][ T7072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.128849][ T7083] 0-1 [ 97.220732][ T7094] SELinux: ebitmap: truncated map [ 97.225639][ T7083] , 3-12 [ 97.236957][ T7083] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.247012][ T7094] SELinux: failed to load policy [ 97.249358][ T29] kauditd_printk_skb: 434 callbacks suppressed [ 97.249369][ T29] audit: type=1326 audit(1763765633.331:53285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7082 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17795cdf90 code=0x7ffc0000 [ 97.292272][ T29] audit: type=1326 audit(1763765633.361:53286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7082 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f17795ce497 code=0x7ffc0000 [ 97.315818][ T29] audit: type=1326 audit(1763765633.361:53287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7082 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17795cdf90 code=0x7ffc0000 [ 97.339296][ T29] audit: type=1326 audit(1763765633.361:53288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7082 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17795cf749 code=0x7ffc0000 [ 97.362775][ T29] audit: type=1326 audit(1763765633.361:53289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7082 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17795cf749 code=0x7ffc0000 [ 97.386423][ T29] audit: type=1326 audit(1763765633.361:53290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7082 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17795cf749 code=0x7ffc0000 [ 97.409920][ T29] audit: type=1326 audit(1763765633.361:53291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7082 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17795cf749 code=0x7ffc0000 [ 97.433426][ T29] audit: type=1326 audit(1763765633.361:53292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7082 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17795cf749 code=0x7ffc0000 [ 97.435501][ T7100] FAULT_INJECTION: forcing a failure. [ 97.435501][ T7100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.456920][ T29] audit: type=1326 audit(1763765633.361:53293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7082 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17795cf749 code=0x7ffc0000 [ 97.456949][ T29] audit: type=1326 audit(1763765633.361:53294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7082 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17795cf749 code=0x7ffc0000 [ 97.499622][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.517205][ T7100] CPU: 1 UID: 0 PID: 7100 Comm: syz.0.1213 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.517293][ T7100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.517305][ T7100] Call Trace: [ 97.517387][ T7100] [ 97.517395][ T7100] __dump_stack+0x1d/0x30 [ 97.517417][ T7100] dump_stack_lvl+0xe8/0x140 [ 97.517436][ T7100] dump_stack+0x15/0x1b [ 97.517453][ T7100] should_fail_ex+0x265/0x280 [ 97.517526][ T7100] should_fail+0xb/0x20 [ 97.517541][ T7100] should_fail_usercopy+0x1a/0x20 [ 97.517560][ T7100] _copy_from_user+0x1c/0xb0 [ 97.517585][ T7100] __sys_bpf+0x183/0x7c0 [ 97.517611][ T7100] __x64_sys_bpf+0x41/0x50 [ 97.517687][ T7100] x64_sys_call+0x2aee/0x3000 [ 97.517707][ T7100] do_syscall_64+0xd2/0x200 [ 97.517732][ T7100] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 97.517759][ T7100] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 97.517866][ T7100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.517886][ T7100] RIP: 0033:0x7f3de31cf749 [ 97.517955][ T7100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.518048][ T7100] RSP: 002b:00007f3de1c37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.518066][ T7100] RAX: ffffffffffffffda RBX: 00007f3de3425fa0 RCX: 00007f3de31cf749 [ 97.518078][ T7100] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000002 [ 97.518090][ T7100] RBP: 00007f3de1c37090 R08: 0000000000000000 R09: 0000000000000000 [ 97.518102][ T7100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.518132][ T7100] R13: 00007f3de3426038 R14: 00007f3de3425fa0 R15: 00007ffce7305548 [ 97.518153][ T7100] [ 97.696645][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 97.835422][ T7123] FAULT_INJECTION: forcing a failure. [ 97.835422][ T7123] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 97.848759][ T7123] CPU: 0 UID: 0 PID: 7123 Comm: syz.4.1222 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.848868][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.848881][ T7123] Call Trace: [ 97.848921][ T7123] [ 97.848928][ T7123] __dump_stack+0x1d/0x30 [ 97.848947][ T7123] dump_stack_lvl+0xe8/0x140 [ 97.849019][ T7123] dump_stack+0x15/0x1b [ 97.849033][ T7123] should_fail_ex+0x265/0x280 [ 97.849106][ T7123] should_fail_alloc_page+0xf2/0x100 [ 97.849198][ T7123] __alloc_frozen_pages_noprof+0xff/0x360 [ 97.849285][ T7123] alloc_pages_mpol+0xb3/0x260 [ 97.849304][ T7123] vma_alloc_folio_noprof+0x1aa/0x300 [ 97.849326][ T7123] handle_mm_fault+0xec2/0x2be0 [ 97.849353][ T7123] ? vma_start_read+0x141/0x1f0 [ 97.849460][ T7123] do_user_addr_fault+0x630/0x1080 [ 97.849483][ T7123] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 97.849506][ T7123] exc_page_fault+0x62/0xa0 [ 97.849593][ T7123] asm_exc_page_fault+0x26/0x30 [ 97.849613][ T7123] RIP: 0033:0x7fa76f84cc5b [ 97.849662][ T7123] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 97.849680][ T7123] RSP: 002b:00007fa76e304e10 EFLAGS: 00010246 [ 97.849734][ T7123] RAX: 00007fa76e306f30 RBX: 00007fa76faca640 RCX: 0000000000000000 [ 97.849747][ T7123] RDX: 00007fa76e306f78 RSI: 00007fa76f900df8 RDI: 00007fa76e304e30 [ 97.849760][ T7123] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 97.849773][ T7123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.849786][ T7123] R13: 00007fa76faf6038 R14: 00007fa76faf5fa0 R15: 00007ffdb7fd9498 [ 97.849804][ T7123] [ 97.849814][ T7123] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 98.015024][ T7127] SELinux: ebitmap: truncated map [ 98.076498][ T7133] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 98.101270][ T7127] SELinux: failed to load policy [ 98.108405][ T7140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.117405][ T7140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.172748][ T7144] __nla_validate_parse: 6 callbacks suppressed [ 98.172764][ T7144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1230'. [ 98.203674][ T7146] loop1: detected capacity change from 0 to 512 [ 98.223923][ T7146] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 98.237537][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1230'. [ 98.268281][ T7150] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1233'. [ 98.316052][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1234'. [ 98.347762][ T7159] loop2: detected capacity change from 0 to 1024 [ 98.361691][ T7161] FAULT_INJECTION: forcing a failure. [ 98.361691][ T7161] name failslab, interval 1, probability 0, space 0, times 0 [ 98.374407][ T7161] CPU: 1 UID: 0 PID: 7161 Comm: syz.1.1238 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.374475][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.374485][ T7161] Call Trace: [ 98.374491][ T7161] [ 98.374498][ T7161] __dump_stack+0x1d/0x30 [ 98.374517][ T7161] dump_stack_lvl+0xe8/0x140 [ 98.374595][ T7161] dump_stack+0x15/0x1b [ 98.374611][ T7161] should_fail_ex+0x265/0x280 [ 98.374645][ T7161] should_failslab+0x8c/0xb0 [ 98.374670][ T7161] kmem_cache_alloc_noprof+0x50/0x480 [ 98.374753][ T7161] ? getname_flags+0x80/0x3b0 [ 98.374851][ T7161] ? fput+0x8f/0xc0 [ 98.374868][ T7161] getname_flags+0x80/0x3b0 [ 98.374943][ T7161] __x64_sys_execve+0x42/0x70 [ 98.375001][ T7161] x64_sys_call+0x271a/0x3000 [ 98.375020][ T7161] do_syscall_64+0xd2/0x200 [ 98.375040][ T7161] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 98.375066][ T7161] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 98.375162][ T7161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.375181][ T7161] RIP: 0033:0x7f7baeb5f749 [ 98.375227][ T7161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.375245][ T7161] RSP: 002b:00007f7bad5bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 98.375293][ T7161] RAX: ffffffffffffffda RBX: 00007f7baedb5fa0 RCX: 00007f7baeb5f749 [ 98.375306][ T7161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 98.375318][ T7161] RBP: 00007f7bad5bf090 R08: 0000000000000000 R09: 0000000000000000 [ 98.375331][ T7161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.375343][ T7161] R13: 00007f7baedb6038 R14: 00007f7baedb5fa0 R15: 00007ffeab2433f8 [ 98.375405][ T7161] [ 98.376549][ T7159] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1237: Failed to acquire dquot type 0 [ 98.528862][ T7173] SELinux: ebitmap: truncated map [ 98.534491][ T7159] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, [ 98.551267][ T7173] SELinux: failed to load policy [ 98.551870][ T7159] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 98.590108][ T7159] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.1237: corrupted inode contents [ 98.602362][ T7159] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #13: comm syz.2.1237: mark_inode_dirty error [ 98.614326][ T7159] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.1237: corrupted inode contents [ 98.626966][ T7159] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.1237: mark_inode_dirty error [ 98.638574][ T7159] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.1237: corrupted inode contents [ 98.650705][ T7159] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 98.660374][ T7159] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.1237: corrupted inode contents [ 98.684651][ T7178] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1245'. [ 98.694465][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1243'. [ 98.699260][ T7181] loop3: detected capacity change from 0 to 764 [ 98.712576][ T7180] loop0: detected capacity change from 0 to 128 [ 98.714945][ T7159] EXT4-fs error (device loop2): ext4_truncate:4637: inode #13: comm syz.2.1237: mark_inode_dirty error [ 98.734636][ T7180] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 98.735289][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'. [ 98.742537][ T7180] FAT-fs (loop0): Filesystem has been set read-only [ 98.759172][ T7159] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 98.772028][ T7181] Symlink component flag not implemented [ 98.777721][ T7181] Symlink component flag not implemented [ 98.782322][ T7159] EXT4-fs (loop2): 1 truncate cleaned up [ 98.787262][ T7180] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 98.797879][ T7159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.800983][ T7181] Symlink component flag not implemented (129) [ 98.817849][ T7181] Symlink component flag not implemented (6) [ 98.825206][ T7181] rock: directory entry would overflow storage [ 98.831493][ T7181] rock: sig=0x4f50, size=4, remaining=3 [ 98.837063][ T7181] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 98.847748][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.903795][ T7190] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1248'. [ 99.049393][ T7201] SELinux: ebitmap: truncated map [ 99.063251][ T7201] SELinux: failed to load policy [ 99.085335][ T7201] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 99.198019][ T7208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.207268][ T7208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.251529][ T7217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1259'. [ 99.268651][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1259'. [ 99.298635][ T7219] loop4: detected capacity change from 0 to 764 [ 99.308661][ T7219] Symlink component flag not implemented [ 99.314397][ T7219] Symlink component flag not implemented [ 99.322497][ T7219] Symlink component flag not implemented (129) [ 99.328653][ T7219] Symlink component flag not implemented (6) [ 99.351787][ T7219] rock: directory entry would overflow storage [ 99.357976][ T7219] rock: sig=0x4f50, size=4, remaining=3 [ 99.363600][ T7219] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 99.475141][ T7227] FAULT_INJECTION: forcing a failure. [ 99.475141][ T7227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.488255][ T7227] CPU: 1 UID: 0 PID: 7227 Comm: syz.4.1263 Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.488279][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 99.488289][ T7227] Call Trace: [ 99.488294][ T7227] [ 99.488300][ T7227] __dump_stack+0x1d/0x30 [ 99.488336][ T7227] dump_stack_lvl+0xe8/0x140 [ 99.488356][ T7227] dump_stack+0x15/0x1b [ 99.488373][ T7227] should_fail_ex+0x265/0x280 [ 99.488403][ T7227] should_fail+0xb/0x20 [ 99.488416][ T7227] should_fail_usercopy+0x1a/0x20 [ 99.488438][ T7227] _copy_from_user+0x1c/0xb0 [ 99.488536][ T7227] ___sys_sendmsg+0xc1/0x1d0 [ 99.488568][ T7227] __sys_sendmmsg+0x178/0x300 [ 99.488597][ T7227] __x64_sys_sendmmsg+0x57/0x70 [ 99.488682][ T7227] x64_sys_call+0x1c4a/0x3000 [ 99.488701][ T7227] do_syscall_64+0xd2/0x200 [ 99.488722][ T7227] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 99.488745][ T7227] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 99.488848][ T7227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.488868][ T7227] RIP: 0033:0x7fa76f89f749 [ 99.488945][ T7227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.488980][ T7227] RSP: 002b:00007fa76e307038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 99.488996][ T7227] RAX: ffffffffffffffda RBX: 00007fa76faf5fa0 RCX: 00007fa76f89f749 [ 99.489007][ T7227] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 99.489019][ T7227] RBP: 00007fa76e307090 R08: 0000000000000000 R09: 0000000000000000 [ 99.489030][ T7227] R10: 0000000020080058 R11: 0000000000000246 R12: 0000000000000001 [ 99.489115][ T7227] R13: 00007fa76faf6038 R14: 00007fa76faf5fa0 R15: 00007ffdb7fd9498 [ 99.489215][ T7227] [ 99.696108][ T7233] FAULT_INJECTION: forcing a failure. [ 99.696108][ T7233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.709199][ T7233] CPU: 0 UID: 0 PID: 7233 Comm: syz.0.1265 Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.709225][ T7233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 99.709249][ T7233] Call Trace: [ 99.709255][ T7233] [ 99.709262][ T7233] __dump_stack+0x1d/0x30 [ 99.709285][ T7233] dump_stack_lvl+0xe8/0x140 [ 99.709304][ T7233] dump_stack+0x15/0x1b [ 99.709370][ T7233] should_fail_ex+0x265/0x280 [ 99.709398][ T7233] should_fail+0xb/0x20 [ 99.709485][ T7233] should_fail_usercopy+0x1a/0x20 [ 99.709569][ T7233] _copy_from_user+0x1c/0xb0 [ 99.709594][ T7233] ___sys_sendmsg+0xc1/0x1d0 [ 99.709648][ T7233] __sys_sendmmsg+0x178/0x300 [ 99.709684][ T7233] __x64_sys_sendmmsg+0x57/0x70 [ 99.709708][ T7233] x64_sys_call+0x1c4a/0x3000 [ 99.709839][ T7233] do_syscall_64+0xd2/0x200 [ 99.709864][ T7233] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 99.709894][ T7233] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 99.709926][ T7233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.709951][ T7233] RIP: 0033:0x7f3de31cf749 [ 99.709964][ T7233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.709983][ T7233] RSP: 002b:00007f3de1c37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 99.710003][ T7233] RAX: ffffffffffffffda RBX: 00007f3de3425fa0 RCX: 00007f3de31cf749 [ 99.710016][ T7233] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000004 [ 99.710027][ T7233] RBP: 00007f3de1c37090 R08: 0000000000000000 R09: 0000000000000000 [ 99.710037][ T7233] R10: 0000000020080058 R11: 0000000000000246 R12: 0000000000000001 [ 99.710126][ T7233] R13: 00007f3de3426038 R14: 00007f3de3425fa0 R15: 00007ffce7305548 [ 99.710144][ T7233] [ 99.973752][ T7244] SELinux: ebitmap: truncated map [ 99.983727][ T7244] SELinux: failed to load policy [ 100.015152][ T7244] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 100.078603][ T7255] loop4: detected capacity change from 0 to 128 [ 100.085987][ T7255] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 100.124285][ T7255] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.148756][ T7255] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 100.176614][ C1] hrtimer: interrupt took 37732 ns [ 100.180680][ T7255] netlink: 'wÞ£ÿ': attribute type 4 has an invalid length. [ 100.251810][ T7269] FAULT_INJECTION: forcing a failure. [ 100.251810][ T7269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.264931][ T7269] CPU: 1 UID: 0 PID: 7269 Comm: syz.4.1279 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.264956][ T7269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 100.264968][ T7269] Call Trace: [ 100.264974][ T7269] [ 100.265044][ T7269] __dump_stack+0x1d/0x30 [ 100.265066][ T7269] dump_stack_lvl+0xe8/0x140 [ 100.265090][ T7269] dump_stack+0x15/0x1b [ 100.265106][ T7269] should_fail_ex+0x265/0x280 [ 100.265196][ T7269] should_fail+0xb/0x20 [ 100.265209][ T7269] should_fail_usercopy+0x1a/0x20 [ 100.265226][ T7269] _copy_from_user+0x1c/0xb0 [ 100.265264][ T7269] __sys_bpf+0x183/0x7c0 [ 100.265310][ T7269] __x64_sys_bpf+0x41/0x50 [ 100.265340][ T7269] x64_sys_call+0x2aee/0x3000 [ 100.265360][ T7269] do_syscall_64+0xd2/0x200 [ 100.265451][ T7269] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 100.265514][ T7269] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 100.265579][ T7269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.265600][ T7269] RIP: 0033:0x7fa76f89f749 [ 100.265614][ T7269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.265670][ T7269] RSP: 002b:00007fa76e307038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.265690][ T7269] RAX: ffffffffffffffda RBX: 00007fa76faf5fa0 RCX: 00007fa76f89f749 [ 100.265702][ T7269] RDX: 0000000000000050 RSI: 0000200000000840 RDI: 0000000000000000 [ 100.265713][ T7269] RBP: 00007fa76e307090 R08: 0000000000000000 R09: 0000000000000000 [ 100.265726][ T7269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.265815][ T7269] R13: 00007fa76faf6038 R14: 00007fa76faf5fa0 R15: 00007ffdb7fd9498 [ 100.265836][ T7269] [ 100.515358][ T7277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.559498][ T7277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.573520][ T7288] IPv6: sit1: Disabled Multicast RS [ 100.593983][ T7288] sit1: entered allmulticast mode [ 100.677363][ T7299] loop2: detected capacity change from 0 to 764 [ 100.695071][ T7299] Symlink component flag not implemented [ 100.700752][ T7299] Symlink component flag not implemented [ 100.706763][ T7299] Symlink component flag not implemented (129) [ 100.713008][ T7299] Symlink component flag not implemented (6) [ 100.719861][ T7299] rock: directory entry would overflow storage [ 100.726134][ T7299] rock: sig=0x4f50, size=4, remaining=3 [ 100.731743][ T7299] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 100.788485][ T7305] loop3: detected capacity change from 0 to 512 [ 100.808326][ T7305] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.831819][ T7305] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 100.845120][ T7305] EXT4-fs (loop3): 1 truncate cleaned up [ 100.851259][ T7305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.881349][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.123500][ T7335] FAULT_INJECTION: forcing a failure. [ 101.123500][ T7335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.136735][ T7335] CPU: 0 UID: 0 PID: 7335 Comm: syz.3.1306 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.136763][ T7335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 101.136776][ T7335] Call Trace: [ 101.136782][ T7335] [ 101.136789][ T7335] __dump_stack+0x1d/0x30 [ 101.136812][ T7335] dump_stack_lvl+0xe8/0x140 [ 101.136900][ T7335] dump_stack+0x15/0x1b [ 101.136917][ T7335] should_fail_ex+0x265/0x280 [ 101.136948][ T7335] should_fail+0xb/0x20 [ 101.136964][ T7335] should_fail_usercopy+0x1a/0x20 [ 101.136984][ T7335] _copy_from_user+0x1c/0xb0 [ 101.137057][ T7335] __sys_bpf+0x183/0x7c0 [ 101.137086][ T7335] __x64_sys_bpf+0x41/0x50 [ 101.137114][ T7335] x64_sys_call+0x2aee/0x3000 [ 101.137178][ T7335] do_syscall_64+0xd2/0x200 [ 101.137195][ T7335] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 101.137282][ T7335] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 101.137314][ T7335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.137410][ T7335] RIP: 0033:0x7f2dcbd8f749 [ 101.137425][ T7335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.137441][ T7335] RSP: 002b:00007f2dca7f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 101.137458][ T7335] RAX: ffffffffffffffda RBX: 00007f2dcbfe5fa0 RCX: 00007f2dcbd8f749 [ 101.137470][ T7335] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 101.137481][ T7335] RBP: 00007f2dca7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 101.137501][ T7335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.137513][ T7335] R13: 00007f2dcbfe6038 R14: 00007f2dcbfe5fa0 R15: 00007fff75ae2e98 [ 101.137531][ T7335] [ 101.584488][ T7363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.596265][ T7363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.621531][ T3409] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 101.638109][ T3409] hid-generic 0000:FFFFFFFF:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 101.667897][ T7369] SELinux: ebitmap: truncated map [ 101.674547][ T7370] fido_id[7370]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 101.680043][ T7369] SELinux: failed to load policy [ 101.711022][ T7372] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 101.721290][ T7372] SELinux: failed to load policy [ 101.764239][ T7374] SELinux: policydb magic number 0x4c0 does not match expected magic number 0xf97cff8c [ 101.774740][ T7374] SELinux: failed to load policy [ 101.807178][ T7374] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 101.861581][ T7387] loop3: detected capacity change from 0 to 512 [ 101.873818][ T7387] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1325: inode has both inline data and extents flags [ 101.889185][ T7387] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1325: couldn't read orphan inode 15 (err -117) [ 101.901571][ T7387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.915328][ T7390] loop1: detected capacity change from 0 to 128 [ 101.932968][ T7390] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 101.940878][ T7390] FAT-fs (loop1): Filesystem has been set read-only [ 101.944070][ T7392] FAULT_INJECTION: forcing a failure. [ 101.944070][ T7392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.949502][ T7390] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 101.960688][ T7392] CPU: 1 UID: 0 PID: 7392 Comm: syz.2.1326 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.960781][ T7392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 101.960798][ T7392] Call Trace: [ 101.960806][ T7392] [ 101.960894][ T7392] __dump_stack+0x1d/0x30 [ 101.960916][ T7392] dump_stack_lvl+0xe8/0x140 [ 101.960936][ T7392] dump_stack+0x15/0x1b [ 101.960957][ T7392] should_fail_ex+0x265/0x280 [ 101.960988][ T7392] should_fail+0xb/0x20 [ 101.961049][ T7392] should_fail_usercopy+0x1a/0x20 [ 101.961069][ T7392] _copy_from_user+0x1c/0xb0 [ 101.961092][ T7392] ___sys_sendmsg+0xc1/0x1d0 [ 101.961127][ T7392] __x64_sys_sendmsg+0xd4/0x160 [ 101.961151][ T7392] x64_sys_call+0x191e/0x3000 [ 101.961247][ T7392] do_syscall_64+0xd2/0x200 [ 101.961267][ T7392] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 101.961352][ T7392] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 101.961391][ T7392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.961466][ T7392] RIP: 0033:0x7f17795cf749 [ 101.961486][ T7392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.961503][ T7392] RSP: 002b:00007f177802f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.961521][ T7392] RAX: ffffffffffffffda RBX: 00007f1779825fa0 RCX: 00007f17795cf749 [ 101.961534][ T7392] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 101.961545][ T7392] RBP: 00007f177802f090 R08: 0000000000000000 R09: 0000000000000000 [ 101.961556][ T7392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.961568][ T7392] R13: 00007f1779826038 R14: 00007f1779825fa0 R15: 00007ffee60e26b8 [ 101.961588][ T7392] [ 101.961646][ T7387] loop3: detected capacity change from 512 to 64 [ 102.008570][ T7393] syz.3.1325: attempt to access beyond end of device [ 102.008570][ T7393] loop3: rw=2049, sector=74, nr_sectors = 2 limit=64 [ 102.157794][ T7393] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 37) [ 102.168914][ T7393] Buffer I/O error on device loop3, logical block 37 [ 102.183365][ T3316] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 102.271864][ T4666] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.313505][ T29] kauditd_printk_skb: 1277 callbacks suppressed [ 102.313518][ T29] audit: type=1326 audit(1763765638.391:54570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7401 comm="syz.2.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17795cf749 code=0x7ffc0000 [ 102.341292][ T7408] SELinux: ebitmap: truncated map [ 102.343325][ T29] audit: type=1326 audit(1763765638.391:54571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7401 comm="syz.2.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17795cf749 code=0x7ffc0000 [ 102.355494][ T7408] SELinux: failed to load policy [ 102.371726][ T29] audit: type=1326 audit(1763765638.391:54572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7401 comm="syz.2.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17795cf749 code=0x7ffc0000 [ 102.400411][ T29] audit: type=1326 audit(1763765638.391:54573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7401 comm="syz.2.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17795cf749 code=0x7ffc0000 [ 102.424029][ T29] audit: type=1326 audit(1763765638.391:54574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7401 comm="syz.2.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f17795cf749 code=0x7ffc0000 [ 102.447603][ T29] audit: type=1326 audit(1763765638.391:54575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7401 comm="syz.2.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17795cf749 code=0x7ffc0000 [ 102.473645][ T29] audit: type=1326 audit(1763765638.481:54576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7401 comm="syz.2.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17795cf749 code=0x7ffc0000 [ 102.497137][ T29] audit: type=1326 audit(1763765638.481:54577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7401 comm="syz.2.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17795cf749 code=0x7ffc0000 [ 102.521012][ T29] audit: type=1326 audit(1763765638.481:54578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7401 comm="syz.2.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f17795cf749 code=0x7ffc0000 [ 102.544471][ T29] audit: type=1326 audit(1763765638.481:54579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7401 comm="syz.2.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17795cf749 code=0x7ffc0000 [ 102.587726][ T7413] SELinux: policydb magic number 0x4c0 does not match expected magic number 0xf97cff8c [ 102.608303][ T7413] SELinux: failed to load policy [ 102.618306][ T381] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.646161][ T7413] syz!: rxe_newlink: already configured on team_slave_0 [ 102.696617][ T381] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.762952][ T7424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.771729][ T7424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.826630][ T381] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.856830][ T7441] SELinux: Context Ü is not valid (left unmapped). [ 102.866265][ T7441] loop0: detected capacity change from 0 to 512 [ 102.894875][ T381] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.999860][ T381] bridge_slave_1: left allmulticast mode [ 103.005585][ T381] bridge_slave_1: left promiscuous mode [ 103.011314][ T381] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.032249][ T381] bridge_slave_0: left allmulticast mode [ 103.037896][ T381] bridge_slave_0: left promiscuous mode [ 103.043694][ T381] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.057507][ T7452] SELinux: ebitmap: truncated map [ 103.070092][ T7452] SELinux: failed to load policy [ 103.147044][ T381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.171764][ T381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.184691][ T381] bond0 (unregistering): Released all slaves [ 103.210683][ T7454] netlink: 'syz.2.1349': attribute type 1 has an invalid length. [ 103.218477][ T7454] netlink: 'syz.2.1349': attribute type 2 has an invalid length. [ 103.250284][ T7470] veth0: entered promiscuous mode [ 103.258450][ T7426] chnl_net:caif_netlink_parms(): no params data found [ 103.270518][ T7469] veth0: left promiscuous mode [ 103.354654][ T381] hsr_slave_0: left promiscuous mode [ 103.371332][ T381] hsr_slave_1: left promiscuous mode [ 103.377168][ T381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.384569][ T381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.396891][ T381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.404303][ T381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.412043][ T7490] loop4: detected capacity change from 0 to 1024 [ 103.423685][ T381] veth1_vlan: left promiscuous mode [ 103.453257][ T7490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.455539][ T381] veth0_vlan: left promiscuous mode [ 103.485438][ T7490] EXT4-fs error (device loop4): ext4_generic_delete_entry:2668: inode #12: block 7: comm syz.4.1357: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 103.529827][ T7490] EXT4-fs error (device loop4) in ext4_delete_inline_entry:1687: Corrupt filesystem [ 103.542420][ T7498] SELinux: ebitmap: truncated map [ 103.554694][ T7498] SELinux: failed to load policy [ 103.576179][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.717363][ T7523] loop4: detected capacity change from 0 to 512 [ 103.747724][ T7523] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 103.800901][ T7526] FAULT_INJECTION: forcing a failure. [ 103.800901][ T7526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.814093][ T7526] CPU: 0 UID: 0 PID: 7526 Comm: syz.2.1364 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.814116][ T7526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 103.814126][ T7526] Call Trace: [ 103.814131][ T7526] [ 103.814144][ T7526] __dump_stack+0x1d/0x30 [ 103.814162][ T7526] dump_stack_lvl+0xe8/0x140 [ 103.814190][ T7526] dump_stack+0x15/0x1b [ 103.814206][ T7526] should_fail_ex+0x265/0x280 [ 103.814234][ T7526] should_fail+0xb/0x20 [ 103.814260][ T7526] should_fail_usercopy+0x1a/0x20 [ 103.814389][ T7526] _copy_to_user+0x20/0xa0 [ 103.814475][ T7526] simple_read_from_buffer+0xb5/0x130 [ 103.814568][ T7526] proc_fail_nth_read+0x10e/0x150 [ 103.814600][ T7526] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.814629][ T7526] vfs_read+0x1a8/0x770 [ 103.814729][ T7526] ? __rcu_read_unlock+0x4f/0x70 [ 103.814785][ T7526] ? __fget_files+0x184/0x1c0 [ 103.814815][ T7526] ksys_read+0xda/0x1a0 [ 103.814842][ T7526] __x64_sys_read+0x40/0x50 [ 103.814867][ T7526] x64_sys_call+0x27c0/0x3000 [ 103.814972][ T7526] do_syscall_64+0xd2/0x200 [ 103.814989][ T7526] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 103.815081][ T7526] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 103.815115][ T7526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.815145][ T7526] RIP: 0033:0x7f17795ce15c [ 103.815231][ T7526] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 103.815246][ T7526] RSP: 002b:00007f177802f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.815263][ T7526] RAX: ffffffffffffffda RBX: 00007f1779825fa0 RCX: 00007f17795ce15c [ 103.815275][ T7526] RDX: 000000000000000f RSI: 00007f177802f0a0 RDI: 0000000000000005 [ 103.815287][ T7526] RBP: 00007f177802f090 R08: 0000000000000000 R09: 0000000000000000 [ 103.815299][ T7526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.815314][ T7526] R13: 00007f1779826038 R14: 00007f1779825fa0 R15: 00007ffee60e26b8 [ 103.815331][ T7526] [ 104.027253][ T381] team0 (unregistering): Port device team_slave_1 removed [ 104.054731][ T381] team0 (unregistering): Port device team_slave_0 removed [ 104.058408][ T7529] SELinux: policydb magic number 0x4c0 does not match expected magic number 0xf97cff8c [ 104.078613][ T7529] SELinux: failed to load policy [ 104.121798][ T7529] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 104.154516][ T7532] FAULT_INJECTION: forcing a failure. [ 104.154516][ T7532] name failslab, interval 1, probability 0, space 0, times 0 [ 104.167418][ T7532] CPU: 0 UID: 0 PID: 7532 Comm: syz.2.1366 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.167446][ T7532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.167458][ T7532] Call Trace: [ 104.167534][ T7532] [ 104.167541][ T7532] __dump_stack+0x1d/0x30 [ 104.167564][ T7532] dump_stack_lvl+0xe8/0x140 [ 104.167585][ T7532] dump_stack+0x15/0x1b [ 104.167604][ T7532] should_fail_ex+0x265/0x280 [ 104.167670][ T7532] should_failslab+0x8c/0xb0 [ 104.167693][ T7532] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 104.167725][ T7532] ? __alloc_skb+0x101/0x320 [ 104.167756][ T7532] __alloc_skb+0x101/0x320 [ 104.167781][ T7532] netlink_alloc_large_skb+0xbf/0xf0 [ 104.167877][ T7532] netlink_sendmsg+0x3cf/0x6b0 [ 104.167959][ T7532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.167977][ T7532] __sock_sendmsg+0x145/0x180 [ 104.168003][ T7532] ____sys_sendmsg+0x31e/0x4e0 [ 104.168027][ T7532] ___sys_sendmsg+0x17b/0x1d0 [ 104.168059][ T7532] __x64_sys_sendmsg+0xd4/0x160 [ 104.168156][ T7532] x64_sys_call+0x191e/0x3000 [ 104.168174][ T7532] do_syscall_64+0xd2/0x200 [ 104.168194][ T7532] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 104.168223][ T7532] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 104.168337][ T7532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.168412][ T7532] RIP: 0033:0x7f17795cf749 [ 104.168428][ T7532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.168445][ T7532] RSP: 002b:00007f177802f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.168462][ T7532] RAX: ffffffffffffffda RBX: 00007f1779825fa0 RCX: 00007f17795cf749 [ 104.168472][ T7532] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 104.168536][ T7532] RBP: 00007f177802f090 R08: 0000000000000000 R09: 0000000000000000 [ 104.168546][ T7532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.168556][ T7532] R13: 00007f1779826038 R14: 00007f1779825fa0 R15: 00007ffee60e26b8 [ 104.168573][ T7532] [ 104.388714][ T7534] FAULT_INJECTION: forcing a failure. [ 104.388714][ T7534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.401816][ T7534] CPU: 1 UID: 0 PID: 7534 Comm: syz.1.1367 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.401892][ T7534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.401928][ T7534] Call Trace: [ 104.401935][ T7534] [ 104.401942][ T7534] __dump_stack+0x1d/0x30 [ 104.401964][ T7534] dump_stack_lvl+0xe8/0x140 [ 104.401981][ T7534] dump_stack+0x15/0x1b [ 104.401995][ T7534] should_fail_ex+0x265/0x280 [ 104.402030][ T7534] should_fail+0xb/0x20 [ 104.402121][ T7534] should_fail_usercopy+0x1a/0x20 [ 104.402141][ T7534] _copy_from_user+0x1c/0xb0 [ 104.402164][ T7534] sctp_getsockopt_enable_strreset+0x71/0x330 [ 104.402192][ T7534] sctp_getsockopt+0x9d4/0xaa0 [ 104.402217][ T7534] sock_common_getsockopt+0x60/0x70 [ 104.402345][ T7534] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 104.402371][ T7534] do_sock_getsockopt+0x200/0x240 [ 104.402405][ T7534] __x64_sys_getsockopt+0x11e/0x1a0 [ 104.402487][ T7534] x64_sys_call+0x2bca/0x3000 [ 104.402509][ T7534] do_syscall_64+0xd2/0x200 [ 104.402530][ T7534] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 104.402553][ T7534] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 104.402657][ T7534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.402679][ T7534] RIP: 0033:0x7f7baeb5f749 [ 104.402694][ T7534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.402712][ T7534] RSP: 002b:00007f7bad5bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 104.402728][ T7534] RAX: ffffffffffffffda RBX: 00007f7baedb5fa0 RCX: 00007f7baeb5f749 [ 104.402739][ T7534] RDX: 0000000000000076 RSI: 0000000000000084 RDI: 0000000000000003 [ 104.402804][ T7534] RBP: 00007f7bad5bf090 R08: 0000200000000180 R09: 0000000000000000 [ 104.402817][ T7534] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 104.402830][ T7534] R13: 00007f7baedb6038 R14: 00007f7baedb5fa0 R15: 00007ffeab2433f8 [ 104.402847][ T7534] [ 104.639780][ T7426] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.646891][ T7426] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.654432][ T7426] bridge_slave_0: entered allmulticast mode [ 104.668808][ T7426] bridge_slave_0: entered promiscuous mode [ 104.685293][ T7541] __nla_validate_parse: 12 callbacks suppressed [ 104.685306][ T7541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1370'. [ 104.701983][ T7536] can0: slcan on ptm0. [ 104.705818][ T7426] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.713248][ T7426] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.744814][ T7426] bridge_slave_1: entered allmulticast mode [ 104.755436][ T7426] bridge_slave_1: entered promiscuous mode [ 104.789504][ T7543] mmap: syz.0.1371 (7543) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.810390][ T7426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.819620][ T7543] lo: entered allmulticast mode [ 104.824911][ T7539] can0 (unregistered): slcan off ptm0. [ 104.837284][ T7543] tunl0: entered allmulticast mode [ 104.844725][ T7543] gre0: entered allmulticast mode [ 104.852044][ T7543] gretap0: entered allmulticast mode [ 104.860860][ T7543] erspan0: entered allmulticast mode [ 104.875595][ T7548] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1371'. [ 104.886012][ T7543] ip_vti0: entered allmulticast mode [ 104.902012][ T7543] ip6_vti0: entered allmulticast mode [ 104.909719][ T7543] sit0: entered allmulticast mode [ 104.916326][ T7543] ip6tnl0: entered allmulticast mode [ 104.932199][ T7543] ip6gre0: entered allmulticast mode [ 104.939405][ T7543] syz_tun: entered allmulticast mode [ 104.947330][ T7543] ip6gretap0: entered allmulticast mode [ 104.953814][ T7543] bridge0: entered allmulticast mode [ 104.959926][ T7543] vcan0: entered allmulticast mode [ 104.966702][ T7543] bond0: entered allmulticast mode [ 104.971855][ T7543] bond_slave_0: entered allmulticast mode [ 104.977589][ T7543] bond_slave_1: entered allmulticast mode [ 104.985587][ T7543] team0: entered allmulticast mode [ 104.990739][ T7543] team_slave_0: entered allmulticast mode [ 104.996630][ T7543] team_slave_1: entered allmulticast mode [ 105.004267][ T7543] dummy0: entered allmulticast mode [ 105.010499][ T7543] nlmon0: entered allmulticast mode [ 105.017696][ T7543] caif0: entered allmulticast mode [ 105.022883][ T7543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.040045][ T7426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.071181][ T7426] team0: Port device team_slave_0 added [ 105.080282][ T7426] team0: Port device team_slave_1 added [ 105.110058][ T7426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.117120][ T7426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.132754][ T7570] SELinux: policydb magic number 0x4c0 does not match expected magic number 0xf97cff8c [ 105.143087][ T7426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.161701][ T7570] SELinux: failed to load policy [ 105.165741][ T7426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.175276][ T7426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.201293][ T7426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.232036][ T7574] loop4: detected capacity change from 0 to 128 [ 105.288273][ T7577] loop4: detected capacity change from 0 to 512 [ 105.304133][ T7426] hsr_slave_0: entered promiscuous mode [ 105.309894][ T7577] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 105.318892][ T7570] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 105.347462][ T7426] hsr_slave_1: entered promiscuous mode [ 105.356989][ T7426] debugfs: 'hsr0' already exists in 'hsr' [ 105.362790][ T7426] Cannot create hsr debugfs directory [ 105.518389][ T7426] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.546436][ T7426] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.564162][ T7426] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.592176][ T7426] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.777625][ T7426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.823435][ T7633] loop4: detected capacity change from 0 to 764 [ 105.836292][ T7426] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.849699][ T7633] Symlink component flag not implemented [ 105.855502][ T7633] Symlink component flag not implemented [ 105.862311][ T7633] Symlink component flag not implemented (129) [ 105.868485][ T7633] Symlink component flag not implemented (6) [ 105.873094][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.881603][ T381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.882302][ T7633] rock: directory entry would overflow storage [ 105.895190][ T7633] rock: sig=0x4f50, size=4, remaining=3 [ 105.900840][ T7633] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 105.901831][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.915356][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.936691][ T7426] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.947090][ T7426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.099934][ T7426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.123649][ T7646] SELinux: ebitmap: truncated map [ 106.147552][ T7646] SELinux: failed to load policy [ 106.313767][ T7426] veth0_vlan: entered promiscuous mode [ 106.338389][ T7426] veth1_vlan: entered promiscuous mode [ 106.349887][ T7655] loop1: detected capacity change from 0 to 512 [ 106.356348][ T7426] veth0_macvtap: entered promiscuous mode [ 106.381433][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1394'. [ 106.407356][ T7655] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1391: inode has both inline data and extents flags [ 106.421864][ T7678] loop4: detected capacity change from 0 to 128 [ 106.438860][ T7655] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1391: couldn't read orphan inode 15 (err -117) [ 106.443682][ T7678] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 106.458562][ T7678] FAT-fs (loop4): Filesystem has been set read-only [ 106.461999][ T7426] veth1_macvtap: entered promiscuous mode [ 106.473115][ T7678] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 106.497600][ T7655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.513126][ T7426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.522460][ T7426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.531946][ T412] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.559349][ T412] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.578656][ T412] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.600260][ T412] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.652233][ T7691] loop5: detected capacity change from 0 to 512 [ 106.689114][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.702262][ T7691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.702347][ T7691] ext4 filesystem being mounted at /0/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.731159][ T7426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.781454][ T7697] loop1: detected capacity change from 0 to 2048 [ 106.801229][ T7698] SELinux: ebitmap: truncated map [ 106.811965][ T7697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.813395][ T7698] SELinux: failed to load policy [ 106.891556][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.966158][ T7710] loop0: detected capacity change from 0 to 512 [ 106.973252][ T7710] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 107.277793][ T7726] FAULT_INJECTION: forcing a failure. [ 107.277793][ T7726] name failslab, interval 1, probability 0, space 0, times 0 [ 107.277818][ T7726] CPU: 1 UID: 0 PID: 7726 Comm: syz.4.1410 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.277843][ T7726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.277856][ T7726] Call Trace: [ 107.277863][ T7726] [ 107.277872][ T7726] __dump_stack+0x1d/0x30 [ 107.277892][ T7726] dump_stack_lvl+0xe8/0x140 [ 107.277916][ T7726] dump_stack+0x15/0x1b [ 107.277930][ T7726] should_fail_ex+0x265/0x280 [ 107.278022][ T7726] ? io_ring_ctx_alloc+0x38/0x670 [ 107.278052][ T7726] should_failslab+0x8c/0xb0 [ 107.278080][ T7726] __kmalloc_cache_noprof+0x4c/0x4a0 [ 107.278153][ T7726] io_ring_ctx_alloc+0x38/0x670 [ 107.278328][ T7726] ? io_uring_fill_params+0x27f/0x300 [ 107.278360][ T7726] io_uring_create+0x134/0x630 [ 107.278463][ T7726] __se_sys_io_uring_setup+0x1f7/0x210 [ 107.278525][ T7726] __x64_sys_io_uring_setup+0x31/0x40 [ 107.278554][ T7726] x64_sys_call+0x2b25/0x3000 [ 107.278575][ T7726] do_syscall_64+0xd2/0x200 [ 107.278595][ T7726] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 107.278699][ T7726] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 107.278733][ T7726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.278773][ T7726] RIP: 0033:0x7fa76f89f749 [ 107.278788][ T7726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.278805][ T7726] RSP: 002b:00007fa76e307038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 107.278823][ T7726] RAX: ffffffffffffffda RBX: 00007fa76faf5fa0 RCX: 00007fa76f89f749 [ 107.278835][ T7726] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000001b7b [ 107.278847][ T7726] RBP: 00007fa76e307090 R08: 0000000000000000 R09: 0000000000000000 [ 107.278868][ T7726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.278879][ T7726] R13: 00007fa76faf6038 R14: 00007fa76faf5fa0 R15: 00007ffdb7fd9498 [ 107.278900][ T7726] [ 107.408280][ T29] kauditd_printk_skb: 1153 callbacks suppressed [ 107.408294][ T29] audit: type=1400 audit(1763765643.481:55733): avc: denied { bind } for pid=7731 comm="syz.5.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.494504][ T29] audit: type=1326 audit(1763765643.571:55734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7738 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d349ff749 code=0x7ffc0000 [ 107.495169][ T29] audit: type=1326 audit(1763765643.571:55735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7738 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d349ff749 code=0x7ffc0000 [ 107.495205][ T29] audit: type=1326 audit(1763765643.571:55736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7738 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f1d349ff749 code=0x7ffc0000 [ 107.495260][ T29] audit: type=1326 audit(1763765643.571:55737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7738 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d349ff749 code=0x7ffc0000 [ 107.495571][ T29] audit: type=1326 audit(1763765643.571:55738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7738 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d349ff749 code=0x7ffc0000 [ 107.495605][ T29] audit: type=1326 audit(1763765643.571:55739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7738 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d349ff749 code=0x7ffc0000 [ 107.496681][ T29] audit: type=1326 audit(1763765643.571:55740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7738 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d349ff749 code=0x7ffc0000 [ 107.496731][ T29] audit: type=1326 audit(1763765643.571:55741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7738 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d349ff749 code=0x7ffc0000 [ 107.496760][ T29] audit: type=1326 audit(1763765643.571:55742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7738 comm="syz.5.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1d349ff749 code=0x7ffc0000 [ 107.518584][ T3005] ================================================================== [ 107.518607][ T3005] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 107.518629][ T3005] [ 107.518634][ T3005] write to 0xffff88810234c218 of 8 bytes by task 7688 on cpu 0: [ 107.518649][ T3005] inc_diskseq+0x2d/0x40 [ 107.518668][ T3005] disk_force_media_change+0x9e/0xe0 [ 107.518687][ T3005] lo_release+0x2cb/0x400 [ 107.518709][ T3005] bdev_release+0x373/0x3d0 [ 107.518729][ T3005] blkdev_release+0x15/0x20 [ 107.518749][ T3005] __fput+0x29b/0x650 [ 107.518762][ T3005] ____fput+0x1c/0x30 [ 107.518775][ T3005] task_work_run+0x131/0x1a0 [ 107.518797][ T3005] exit_to_user_mode_loop+0xed/0x110 [ 107.518821][ T3005] do_syscall_64+0x1d6/0x200 [ 107.518838][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.518855][ T3005] [ 107.518860][ T3005] read to 0xffff88810234c218 of 8 bytes by task 3005 on cpu 1: [ 107.518875][ T3005] block_uevent+0x31/0x50 [ 107.518895][ T3005] dev_uevent+0x375/0x400 [ 107.518920][ T3005] uevent_show+0x11a/0x200 [ 107.518943][ T3005] dev_attr_show+0x3f/0xa0 [ 107.518961][ T3005] sysfs_kf_seq_show+0x1a3/0x280 [ 107.518980][ T3005] kernfs_seq_show+0x82/0xa0 [ 107.518995][ T3005] seq_read_iter+0x31e/0x950 [ 107.519009][ T3005] kernfs_fop_read_iter+0xc1/0x330 [ 107.519027][ T3005] vfs_read+0x64c/0x770 [ 107.519049][ T3005] ksys_read+0xda/0x1a0 [ 107.519070][ T3005] __x64_sys_read+0x40/0x50 [ 107.519093][ T3005] x64_sys_call+0x27c0/0x3000 [ 107.519122][ T3005] do_syscall_64+0xd2/0x200 [ 107.519141][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.519160][ T3005] [ 107.519163][ T3005] value changed: 0x0000000000000190 -> 0x0000000000000197 [ 107.519172][ T3005] [ 107.519175][ T3005] Reported by Kernel Concurrency Sanitizer on: [ 107.519184][ T3005] CPU: 1 UID: 0 PID: 3005 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.519205][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.519218][ T3005] ================================================================== [ 107.524978][ T7741] loop5: detected capacity change from 0 to 512 [ 107.525476][ T7741] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 107.625502][ T7746] FAULT_INJECTION: forcing a failure. [ 107.625502][ T7746] name failslab, interval 1, probability 0, space 0, times 0 [ 107.625530][ T7746] CPU: 1 UID: 0 PID: 7746 Comm: syz.5.1419 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.625615][ T7746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.625624][ T7746] Call Trace: [ 107.625630][ T7746] [ 107.625643][ T7746] __dump_stack+0x1d/0x30 [ 107.625671][ T7746] dump_stack_lvl+0xe8/0x140 [ 107.625692][ T7746] dump_stack+0x15/0x1b [ 107.625737][ T7746] should_fail_ex+0x265/0x280 [ 107.625770][ T7746] should_failslab+0x8c/0xb0 [ 107.625834][ T7746] kmem_cache_alloc_noprof+0x50/0x480 [ 107.625861][ T7746] ? copy_fs_struct+0x31/0x110 [ 107.625889][ T7746] copy_fs_struct+0x31/0x110 [ 107.625915][ T7746] __se_sys_setns+0x314/0xef0 [ 107.625952][ T7746] __x64_sys_setns+0x31/0x40 [ 107.625970][ T7746] x64_sys_call+0x2b1a/0x3000 [ 107.625996][ T7746] do_syscall_64+0xd2/0x200 [ 107.626017][ T7746] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 107.626044][ T7746] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 107.626124][ T7746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.626143][ T7746] RIP: 0033:0x7f1d349ff749 [ 107.626184][ T7746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.626202][ T7746] RSP: 002b:00007f1d3345f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 107.626221][ T7746] RAX: ffffffffffffffda RBX: 00007f1d34c55fa0 RCX: 00007f1d349ff749 [ 107.626234][ T7746] RDX: 0000000000000000 RSI: 0000000024020000 RDI: 0000000000000003 [ 107.626246][ T7746] RBP: 00007f1d3345f090 R08: 0000000000000000 R09: 0000000000000000 [ 107.626256][ T7746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.626266][ T7746] R13: 00007f1d34c56038 R14: 00007f1d34c55fa0 R15: 00007ffd99f855a8 [ 107.626332][ T7746]