last executing test programs: 1m31.382083307s ago: executing program 2 (id=1647): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000002000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r4], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1m31.338869252s ago: executing program 2 (id=1648): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500), 0x0, 0x99, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x28, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0c000000000000b7c949813afe461495b10be086fe39001314", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="00000000feff0700"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x194, 0x0, &(0x7f0000000780)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) sync_file_range(r5, 0x6, 0x9fd, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x100000e, 0x8, 0x1) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000c00)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec2, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r8, 0x0) socket$netlink(0x10, 0x3, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) pidfd_getfd(0xffffffffffffffff, r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioprio_set$pid(0x3, 0x0, 0x2007) creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)) 1m30.31779305s ago: executing program 2 (id=1664): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x9) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r5 = socket(0x10, 0x803, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000002c0)=[0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0xa5, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000580), &(0x7f0000000640), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) write(r5, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x1000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x17, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1m30.306039301s ago: executing program 2 (id=1665): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaafe86dd60742800000000000000000002ff02000000000000000000000000000103ef90788100000068de5e67000306ffff02000000000000000000005e3d4d3e7f8ac82386ae0000000100000000000000000000ffffac1414aa90285bfd13d65ce500"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x7f, @loopback, 0x1}, 0x1c) listen(r0, 0x2) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) bind$pptp(r2, &(0x7f0000000300)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x4000000000007, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000000c0)=@generic={0x2, 0x6, 0x5}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f0000000300)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@nombcache}]}, 0x12, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file5\x00', 0x2000, 0x56159817211d7953, &(0x7f0000002500)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r6, 0x0, 0x40008003}, 0x18) getdents(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0xfe9e, 0x12) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000580)={0x0, "f121173fb9462d3589e6ffe950cfed21fcad7ff0fbcb566a0982f893020052dd8d39af14c31e7c40d59342308cf000", 0x27}, 0x48, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 1m30.166055345s ago: executing program 2 (id=1666): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x40) mkdir(0x0, 0x0) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x160) rmdir(&(0x7f0000000000)='./file/file0/../\x00') ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000180)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000580000000400000005000000", @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000008fea00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) 1m29.871318573s ago: executing program 2 (id=1667): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r2) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40080, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x20, 0x8, 0x9, 0xf2d, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x68, 0x0, 0x9, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}, {[@end, @end]}}}}}) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) read$eventfd(r3, &(0x7f0000000080), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xf1c38fa000000000}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'\x00', @random="0003230c1100"}) 1m29.870906903s ago: executing program 32 (id=1667): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r2) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40080, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x20, 0x8, 0x9, 0xf2d, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x68, 0x0, 0x9, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}, {[@end, @end]}}}}}) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) read$eventfd(r3, &(0x7f0000000080), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xf1c38fa000000000}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'\x00', @random="0003230c1100"}) 1m27.062713005s ago: executing program 3 (id=1692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000001140)=0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r4}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r5, 0x0, 0x2}, 0x18) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=ANY=[@ANYBLOB="28e1ac7e79628c7898000000000000000200000008000000e00000020c00088008000c00dcba30995026f5068425fb535051260044a57522d54a12cf8ed9b521ad8874b1a2fe1cfe25fa904f9a01b5ee3f8be250236f1635e544ad31a939cbc44a595977f9305e4405dd927f0ec4ff07cc4e77bab8626e2582f89e3bf92213f588518acfadd17431177f82af061a6943ad8924992fb359cccf9549cf895d59a06d997993f4ef84208c9dc0f0fca2f94a3cddcb3a1f50bbeb26604203127424d922b07e369ebe6515b9441c9b44153e0c79b1c9", @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r8, 0x0, 0x1034}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 1m26.893916462s ago: executing program 3 (id=1693): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000100), 0x0, 0x0, 0x0, 0x402}, 0x38) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1m24.176815144s ago: executing program 1 (id=1719): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000140)='./file0\x00', r2, 0x4000, r0}, 0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 1m24.149802467s ago: executing program 3 (id=1721): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18181a865bee09bf46600000000000000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) unshare(0x28020480) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_io_uring_setup(0x43b5, &(0x7f0000000540)={0x0, 0xc50e, 0x10000, 0x2, 0x3e8}, &(0x7f0000000380), &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000040000000500000002"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 1m24.11575523s ago: executing program 3 (id=1722): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') 1m24.046233307s ago: executing program 4 (id=1724): r0 = memfd_secret(0x80000) fcntl$setlease(r0, 0x400, 0x0) close(r0) 1m24.009459001s ago: executing program 4 (id=1725): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={0x5, 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r6, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r3}, 0x0, 0x0}, 0x20) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffea) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 1m23.983781533s ago: executing program 4 (id=1726): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x40) mkdir(0x0, 0x0) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x160) rmdir(&(0x7f0000000000)='./file/file0/../\x00') ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000180)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000580000000400000005000000", @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000008fea00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) 1m23.890821392s ago: executing program 4 (id=1727): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') 1m23.869681034s ago: executing program 4 (id=1728): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$BPF_PROG_DETACH(0x25, &(0x7f0000000080)=ANY=[], 0x20) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8a101, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000400000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r2}, 0x18) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x190da) 1m23.429781456s ago: executing program 4 (id=1729): ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000010000", @ANYBLOB="07e0866821739a8549384219c23559701ff7ca01360125abff", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x800005, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfffe, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x13) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7d, 0x7527, 0x52, 0x80000001, 0x9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@user_xattr}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0x1, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="08000000020000000b"], 0x0) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x330b9072}, 0x94) unshare(0x6a040000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1m23.429509767s ago: executing program 33 (id=1729): ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000010000", @ANYBLOB="07e0866821739a8549384219c23559701ff7ca01360125abff", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x800005, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfffe, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x13) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7d, 0x7527, 0x52, 0x80000001, 0x9}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@user_xattr}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0x1, 0x573, &(0x7f0000000cc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="08000000020000000b"], 0x0) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x330b9072}, 0x94) unshare(0x6a040000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1m23.19326001s ago: executing program 3 (id=1733): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18181a865bee09bf46600000000000000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) unshare(0x28020480) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_io_uring_setup(0x43b5, &(0x7f0000000540)={0x0, 0xc50e, 0x10000, 0x2, 0x3e8}, &(0x7f0000000380), &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000040000000500000002"], 0x50) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 1m22.781786009s ago: executing program 3 (id=1735): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x40) mkdir(0x0, 0x0) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x160) rmdir(&(0x7f0000000000)='./file/file0/../\x00') ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000180)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000580000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000008fea00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x7, 0x9) write$P9_RWRITE(r7, &(0x7f0000000040)={0xb}, 0x11000) ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) r8 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) 1m22.781467749s ago: executing program 34 (id=1735): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x40) mkdir(0x0, 0x0) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x160) rmdir(&(0x7f0000000000)='./file/file0/../\x00') ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000180)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000580000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000008fea00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x7, 0x9) write$P9_RWRITE(r7, &(0x7f0000000040)={0xb}, 0x11000) ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) r8 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) 1m22.057285299s ago: executing program 1 (id=1739): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$BPF_PROG_DETACH(0x25, &(0x7f0000000080)=ANY=[], 0x20) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8a101, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000400000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r2}, 0x18) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x190da) 1m21.02112004s ago: executing program 1 (id=1742): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r10}, 0x10) dup3(r3, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) 1m19.617641495s ago: executing program 1 (id=1749): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') 1m19.557070411s ago: executing program 1 (id=1750): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r2}, 0x18) r3 = io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000480), 0x66) bind$inet(r0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRESOCT=r0, @ANYRES32=r5, @ANYRESHEX=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1a, 0xc, &(0x7f0000000540)=ANY=[@ANYRESOCT=r7, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r10, 0x0, 0xb}, 0x18) pipe(&(0x7f0000005880)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) signalfd4(r11, &(0x7f0000000380)={[0x3a51]}, 0x8, 0x80800) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcae32080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efe8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c70967feeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x3ee53089, 0x10003, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x2, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x94, 0x0}, 0x5}], 0x1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x3f}, 0x94) 1m19.26447854s ago: executing program 7 (id=1736): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaafe86dd60742800000000000000000002ff02000000000000000000000000000103ef90788100000068de5e67000306ffff02000000000000000000005e3d4d3e7f8ac82386ae0000000100000000000000000000ffffac1414aa90285bfd13d65ce500"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x7f, @loopback, 0x1}, 0x1c) listen(r0, 0x2) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m19.185745297s ago: executing program 7 (id=1752): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x5, 0x2, 0x0, 0x0, 0xfffffffd) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000000040), 0x840, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030c40b32302c73713d307830"]) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r2, 0x0, 0x2}, 0x18) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) bind$nfc_llcp(r3, &(0x7f00000002c0)={0x27, r4, 0x0, 0x3, 0x2, 0x6, "817e380947856e9114964369936bb69b89876d0f6e2d9b8b02f6d5e1ec8b90533f574ae0c7e2eaa74d1ab28889901011c88da7a0610a36079fea7d700a1cf1", 0x35}, 0x60) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_io_uring_setup(0x7962, &(0x7f0000000240)={0x0, 0x2be, 0x8000, 0x3, 0x2ce}, &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PROBE(r6, 0x8, &(0x7f0000000880)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1f) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x581180, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r8) lseek(0xffffffffffffffff, 0x7ff9, 0x1) 1m19.172540049s ago: executing program 7 (id=1753): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') 1m18.95133391s ago: executing program 1 (id=1756): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x14) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x6800, 0x20, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) r2 = dup(r1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0x8080) r3 = socket(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xa, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 1m18.929723612s ago: executing program 35 (id=1756): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x14) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x6800, 0x20, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) r2 = dup(r1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0x8080) r3 = socket(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xa, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 1m18.285013105s ago: executing program 7 (id=1765): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') 1m18.242601549s ago: executing program 7 (id=1766): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = epoll_create1(0x0) r3 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000b80)={0x60000012}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)={0x80002014}) 1m17.723587599s ago: executing program 7 (id=1767): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') 1m17.694276011s ago: executing program 36 (id=1767): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') 1.684733267s ago: executing program 5 (id=2654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="c00f86dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000000000000189"], 0xfce) 1.594503816s ago: executing program 0 (id=2657): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020703400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x2, 0x0, 0x0, 0x5, 0x1, 0xbea1e1}]}}, &(0x7f0000000680)=""/213, 0x26, 0xd5, 0x1, 0x9}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000320000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x9a88e000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240), 0x6aa502, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10, 0x0}, 0x2004c0c0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.584616017s ago: executing program 5 (id=2659): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a500000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) write(0xffffffffffffffff, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x17, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1.424196862s ago: executing program 9 (id=2661): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x4}, 0x18) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 1.378791606s ago: executing program 9 (id=2662): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) socket(0x1e, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) 1.288401865s ago: executing program 9 (id=2663): socket$kcm(0xa, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001300), 0x2, 0x101400) ioctl$BLKGETZONESZ(r0, 0x80041284, &(0x7f0000001340)=0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="d8000000180081084e81f782db44b904021d0800fd007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f9400e08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409001b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffec62070000cbee5de6ccd44a677575a62cef352a92954b43370e9701ee1b6ec75a526c5d5b5701cf8773", 0xd8}], 0x1}, 0x400c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000480)={@local, @empty, @dev={0xfe, 0x80, '\x00', 0x12}, 0xaea5, 0x4, 0x5, 0x400, 0x200, 0x1400002, r5}) write(r6, &(0x7f0000000040)="11000000140025000307f4f9002304000a9b93d618488e4f5f9119bfc13acdec8f6eb92b7925b94d46796fa1ee4fac22c8a825a130058bbb61ef40698d8a1a1da089b722bb7dbe98deaf8364567b679b9b6e5c86257e914d142cf4dff4f6050338741d05ec3cfac4dae7eceb1f391a5d5549c91ff8664db235e34de758", 0x6b) socket$inet6_sctp(0xa, 0x1, 0x84) link(0x0, 0x0) gettid() socket$netlink(0x10, 0x3, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000540)={0x7, 0x101, 0x401, 0xfff}) r7 = socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc87b4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f00000001c0), 0xe}, 0x10a000, 0x10000, 0x0, 0x6, 0x8, 0x20008, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0xa) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x40, 0x60) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) 1.287727826s ago: executing program 8 (id=2664): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r0}, 0x38) 1.258866398s ago: executing program 6 (id=2665): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f1", 0xcf}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 1.183116605s ago: executing program 6 (id=2666): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r3, r1, 0x80000) 1.154435248s ago: executing program 9 (id=2667): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x9) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) socket(0x10, 0x803, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.148800199s ago: executing program 8 (id=2668): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="85000000040000007f0f000500", @ANYRESHEX], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000000)={0x2a, 0x2, 0x7ffe}, 0xc) bind$qrtr(r3, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x33, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(r1, &(0x7f00000008c0)={&(0x7f0000000680)=@can, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)="62dc10f928112cbab7ba0680791ae5a3b196bb", 0x13}, {&(0x7f0000000f80)="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", 0xfa}, {&(0x7f0000000580)="b364522a38e8994941", 0x9}], 0x3}, 0x4000081) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x65, 0x0, 0x0, 0x3, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xd, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r7}, 0x10) setitimer(0x2, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000008000000040000000000001202000000050000000000000804000000070000000000001201000000040000000000000700000000040000000000000e0200000000000000002e30305f615f5f00000f1c8c24c3c4e8731594fc52c61c573e42f1c455523a8ab9b78456a008a2edd4a2b28eae296069c6b5549375242affaee56cd62814315d9d044f8280579bd0d4dbe083face0278b23aa1e66303fcec804447d15756f907c83f1a9878ed49fc42032ddf6ed916115b0534a483334b8af1260c"], 0x0, 0x61, 0x0, 0x1001}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000180)={[{@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0xf79}}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 1.018288292s ago: executing program 6 (id=2669): socket$can_j1939(0x1d, 0x2, 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x4}, 0x18) syz_io_uring_setup(0x16b4, &(0x7f0000000480)={0x0, 0x6758, 0x800, 0x1, 0x1da}, &(0x7f0000000280), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 963.125417ms ago: executing program 6 (id=2670): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0, 0x4}, 0x184071, 0xc8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r1, 0x0, 0xffffff48) 853.692027ms ago: executing program 6 (id=2671): r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1d, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095", @ANYRES8=r0, @ANYRES32=r3, @ANYRES64=r0, @ANYRES16=r4], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 707.768482ms ago: executing program 5 (id=2672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000010000)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000100005800a000100482e8b364d65"], 0x48}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f00000008c0)={0x0, 0xaee2, 0x80, 0x2, 0x41f9}, &(0x7f0000000280)=0x0, &(0x7f0000000680)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x2388, 0x0, 0x0, 0x0) 642.052768ms ago: executing program 0 (id=2673): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) socket(0x1e, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) 528.515639ms ago: executing program 0 (id=2674): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x1}, 0x18) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095", @ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x145) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, 0x0, 0x0) setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000080)=0x6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000007110b80000000000e5000500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 525.799759ms ago: executing program 8 (id=2675): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00001d0800005aa246210f091e4008299c25e478000c20ed829dfb801bbf"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000000)=0x1, 0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xadfd82f5f27d2a52, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r10}, 0x18) r11 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[], [], 0x6b}}) socket$nl_route(0x10, 0x3, 0x0) syz_read_part_table(0x5d6, &(0x7f0000000600)="$eJzs3LFrU1scB/CTIBEFETc3gxkiLilkDBE0xEsJmBB86CCiWx2y6OQQIxgQB+MSEVzqoAg1KA+dRARBxKRDIVNpad/SltLhUegSKCWPwu0f0PdI4cHnA2c4v/O993cPlzveE/hfS4a/x+NxIoQwPn74q/+YK1+dTtcu16+HkAi3QghTfxZm9lcSceLgrufj+Wo8z3871ng+Fz3tdE+d/ZLenU/G64/jsTF4ffs/b46Ju/Dg4o9zo+GZr5Xwpn+pXzjZuDnTy5ZavYXa5yvv0u8P3ntuQv0/FX+dftK+H3UeFu8tRs21aDO5sx1dezWbS71o1bNbU3HuzoT6N/ZupD68/Vlqr5/I/65Uq92Pyy8zzfL39qPhILM0enY3zq38i68LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjd+HBxR/nRsMzXyvhTf9Sv3CycXOmly21egu1z1fepd+fj3O5CfX/VPx1+kn7ftR5WLy3GDXXos3kznZ07dVsLvWiVc9uTcW5OxPq39i7kfrw9mepvX4i/7tSrXY/Lr/MNMvf24+Gg8zS6NndOLdyfEIPAAAAAAAAAAAAAAAAAAAAACGE8tXpdO1y/XoIiXArhFCYnV7er4/j/90Tce7gHIDVuJ7/dqzxfC562umeOvslvTv/V1x/HI+NwevbR74ZDu2fAAAA//9Dz4ow") fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 516.26688ms ago: executing program 0 (id=2676): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xfe, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x15, 0x6, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r5}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0xe8, 0x0, 0x1, 0x401, 0x0, 0x0, {0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_REPLY={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0xe8}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffdca, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x4}, {}, {0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x24060050}, 0x8000) 348.126646ms ago: executing program 0 (id=2677): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9c", 0xd1}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 264.340754ms ago: executing program 9 (id=2678): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r0}, 0x38) 263.863374ms ago: executing program 0 (id=2679): r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000003840)={&(0x7f00000000c0)=@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe1e6}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x29, 0x39}], 0x10}, 0x0) socket(0x2b, 0x80801, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) eventfd2(0x9, 0x0) io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) 257.779585ms ago: executing program 8 (id=2680): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r3, r1, 0x80000) 232.413808ms ago: executing program 5 (id=2681): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0, 0x4}, 0x184071, 0xc8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r1, 0x0, 0xffffff48) 141.695576ms ago: executing program 5 (id=2682): socket$kcm(0xa, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000001300), 0x2, 0x101400) ioctl$BLKGETZONESZ(r0, 0x80041284, &(0x7f0000001340)=0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="d8000000180081084e81f782db44b904021d0800fd007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f9400e08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409001b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffec62070000cbee5de6ccd44a677575a62cef352a92954b43370e9701ee1b6ec75a526c5d5b5701cf8773", 0xd8}], 0x1}, 0x400c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000480)={@local, @empty, @dev={0xfe, 0x80, '\x00', 0x12}, 0xaea5, 0x4, 0x5, 0x400, 0x200, 0x1400002, r5}) write(r6, &(0x7f0000000040)="11000000140025000307f4f9002304000a9b93d618488e4f5f9119bfc13acdec8f6eb92b7925b94d46796fa1ee4fac22c8a825a130058bbb61ef40698d8a1a1da089b722bb7dbe98deaf8364567b679b9b6e5c86257e914d142cf4dff4f6050338741d05ec3cfac4dae7eceb1f391a5d5549c91ff8664db235e34de758", 0x6b) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) link(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc87b4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f00000001c0), 0xe}, 0x10a000, 0x10000, 0x0, 0x6, 0x8, 0x20008, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0xa) 140.727046ms ago: executing program 9 (id=2683): sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{&(0x7f0000000040)=@phonet={0x23, 0x3, 0xf, 0x5}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000000c0)="57b5871507025669749e984ace9060eab5fb2ca638af4ab78f7aea63db5e4b3d4d8beed939e91ebdd1a48b78c1d7a412", 0x30}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000000140)="41b9d470a8df9799d20f8cb1c7057d4bfc48cf6312f5adbb45562da3e453d32873daadfe366891", 0x27}, {&(0x7f00000001c0)="332de610c91a70b887727bc5cfdcf77f671770c24979", 0x16}, {&(0x7f0000000380)="2cb778854d8d71324c52d4887e66052cee8b13aca10550ac64f32d07ed6db409b818c481cf3c403096fcb605f9a422b34da043161c7f4835ca0e9f64f5e3112f5606e33006010726b1f1f3bd3a3433b34d6f44455986af332e557235d45133f399a8fe216434b0577015b16687", 0x6d}, {&(0x7f0000000400)="b33fe65fd5b68e53f4cb5056a206fc66459ee48a22701e322965badfbd9a216a5e851ca5019cc0a3b383a08b4b0b241497ef1b359e2d1096c22d8ef589cb98f6dd521a2f4d71a1b9b853e64e0ba3cef7d23af6", 0x53}, {&(0x7f0000000480)="cae586f8b46cf62c733e11245650e2f98025945a7eb516f029054ebba7277b9f52607e5b940bcd3ed01956523bb8d881f7abec8dba631fbe1989ea604e75c0bb79eafd0d782a753ae8e81ad0b73743ce539d7d900c82e86bcda536950868f98c120aa1b8c99a29485eab65e5a7c642b983c34c142f34243b641eb832c5e34f5087179b9f736e07018cb4e3460daae1b090c457e243b68d", 0x97}, {&(0x7f0000000580)="2b13bedcc51aa3ee19f50bc66a15ff2071d5c48b430fb7b12a6fab45d06469c8f7fcee57ea6b2d8460d749057fc0d2bb59530fd7e58d9c0a17710f4c96e8840e00c09eff4699c00f76e49e1874de129cdf78a86d6ab76bff8025ff13158926c819b71edfdca4bb2e9271bf0cc814d9c25331221864ddc1aa23dada71476a", 0x7e}, {&(0x7f0000000600)="8110e569abae98eeb4fa8d293331a932bb04a0b0dbeba6b200a51b8221384486d2f882138ceb3eb37e8a4e543991d851b0ce98aafbcb2d632b77a06c2f0f5990fa68510a535b0464820e577e313b31b72b42c3ad4fbab5eef58cf20d04f65de2cd77698258edb0aa5cdd49a5dcc2d69a7e01a2dbceb89f885de9ecaeb86fb86c5bcb5b3852e3dc162b6ac21c93532e093fbf60e115c607e146fcf9331f1eb738", 0xa0}], 0x9, &(0x7f0000000780)=[{0xc8, 0x1, 0x800, "683a130bd733a1f793ff3b3fe990f028c13c8315d9edb34efc0b2f4a80c99cd27d4505f786f6cdee65e91a7369a8d2ab45dd9a0ca21a0fdb14318c86facadcd908ff57f3956af8affae2c86213c47a1f6137bb4488830fea0fdeb9970b68d5a319bd2612812a4f621c8e4045994d48c8994df1a3cec072add341f52fe61a181697a10246f4b446a3919acd96f22331631347dab93075e1512617986dccdf6d207de74b4a4a8b78ef5fe2382448a83689ed5f53be6200af"}, {0xc0, 0x29, 0x8, "1d854fea7a03da3e64bffc07bf66ac36e8f3c25d54b8b5ac00885f2796a08a8923930e2a8bf0606d23ae532eea3889c311a7b8edf42067c0abe0264192cb849ddffc994d4b478b62dd1698e14e10d0ea2d1e625c5f4a3c96066e43407545d36fcfe765c669b10b303fc1bd71c048c7e53c21ca1229e4e7e471af858968c844800969de1b59cc3a4ac0775cea6392d4d6f757425fc2ee588644e84822e580d372700fa1d2258d275b1f2a4f809076d6"}, {0x10, 0x113, 0xfffffffc}], 0x198}}, {{&(0x7f0000000940)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7}, 0x80, &(0x7f0000000240)=[{&(0x7f0000001a40)="310eb580deebafe3d91551a695aacbe6849535603e96f11f042b0088dfd812720ea18eccb5f6f92466a45a70625879516845f2ff049a4ea76139b59f837b6923a41fa8a098dcd6b9b759c8b314369997b75d04819ebd28821ce124a0f48e36ef3184f1759e61859054e37b7a2d85691bf0b506d55507a7aa0e5d4c9dee2a38efad5114497ef13bfcf1e83f27bc75a424aa4eeccff93014fed39a80f31dfbb02db22f3a2a1fb8aa45c7379b02dd50c4ee5107a59c03e0d831c62de06ae2a4a7200179d89d31615ba87b1cbe66614e021bfb0ee9022e7500ba8158c283d1d9130e4110f6", 0xe3}, {&(0x7f0000003f00)="857389328b69ab191c62f41b69af446379319fae612e105df7572f06db4e5d766b14d4245e594fd595e6eb3166a91648e35edebcdeb3ba5a25eb47bb507ae8c1a5db2fe2e4989448adb68cccc8a04edf455b40f5e59f09afa142ebb63696cdc50cfb7aa32fe4859d9380bb4521ee944d22794a51265ea53867fdabff37bdb1139e79a83379916dd4fc576d18d03c", 0x8e}], 0x2, &(0x7f0000001c00)=[{0x18, 0x73239db0d32b1c21, 0x81, "c43855b7e0bb925d"}, {0x1010, 0x110, 0x0, "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"}, {0xe8, 0x1, 0xfff, "02d29b164ff4fda72e52ec730f12927534227f76386f9993b1cba428432927130bc537c0685ea654b597bd5ab2a657030c69d9b6f9e8d84a281498d303004bf38d0815c5bc4579a871411a8dcea236667eddbd22f95657c4ccc7ea41b12b5b72258bb2eca57c3dbdf623279297d4055005084fb9715162c572b7ec4d8d53ff35f2345830721845046cd0b31b3b1f2d0dc843339c95c87fc91a0c3340fd60d26c76b7dd1278cfe1e42439c6ad7e8ff66cae0843540dbbeb7120c3761b8e6b216bae5aa66d3e3e5ce63f89b53c36964ba021a2fdf110"}], 0x1110}}, {{&(0x7f0000002d40)=@xdp={0x2c, 0x1, 0x0, 0x28}, 0x80, &(0x7f0000004340)=[{&(0x7f0000002dc0)="67a4e7f2ac8429ea97e265c248622735579827b5a7f880ce1884e34e4b40e725f924fcd35572f7b6025708b5b378c120783e12aa90e14c4a7af8ba559b44ad385bf83f2429fb7653a3ec5026f537bca366cad1bafd9e498b91be0b01e061075d7a9554f3d38fdbe2be138a3284fbbce40afe905173e272b20d887daf9e2a0a662daf36e813255d97ce128c96418355651887e8f839e94723e8beeff5a2970f621d94d34da022ceff9fe2dda24f88bcbc22c3991b", 0xb4}, {&(0x7f0000002e80)="f1f8cb2540155fb0000516523bcd870621082914e1955e0f2476fa361e96c45305e13e1b8f4708794ee0f8a546d9b7440438f0b84e718c331a38433502ddb988d17506726dba2499fdb0b0db958fca686aa32adcece5857a3f3d3655b0cf4142a41d8071a909f2f3fe873c8c07cec99ef6e9d92546d32b55bfb35e7f29afd3c41ee73baef43d67a04684837ec36fef75562fd2f25aed41d46427a4d032ced36ed952b9db6061614ca8e06c92cd7210d3415bf636de25ef02dc604d316b42c88c83111000fd42978e31192c7e078ae37c0564d82ca5f3c7521e71f3e7f65071cbb24c65d0e749e7db587281619ff121c1924bfd57c3f8a2e202ef26aa9909e59b7671e1fd6a71f1be233a0081bb15c5d577bec0b567f141bb232590c83fe149c4c4182b51a6786a64602a7e4aef90e8271877992a681d9b08ae411451d6b8f1fc497109a4d38a91ba41e27c77d298a53952ec823ab26b1bf60574678eee0d5fab4d8fddf08a6b757be7ed4679a9be8b2cb4c4e0f78c3774135eace1e2f9460c258535738e617d6977f5e0565c713afdd0a3b6467f369f2aa9f69e7ec46a2756529aae82078ca35bf63c090f977cb6f7be06bcb77b24c28896a34007223ac6f3dfecc53e44811e0d15fc015c2086dd3a7e8fda19c6b37604b706702cd70ee9d72ef6fe1e2dc7e9a0ffad17b11710f1c6c56f9f9d8bc61e058b4122433c5e3d3bac525057ff3824ff005d9844197d29e5c7598afb1382662dd6c821cb51f59e8777e2ff3b6f5391fca7e9d35b78dc643fe193d7a5c1932acecf7ce8127683d8d70b10d7668ecc002cfd25431562f1f887f09c2c4eacf35b474edc057c97e5514b97311d11c250121b1bfc1bc7a35c761480b377a3be85e97a9af2e12364106d11900ef2e06f3e95b1c3f3575228bcb18a115e75eec100eeb184b0391658392bc3cf45a929b3395a382859a77a1353348fc0f6c48b6eed111e9a33725ebf67bdf99bdb862d608416b6871edfcc0ff00364e9c8c6eb8418ad73ccc95a8086d059a25966cb890d041a164a3c8aeeef46fe5e2d5dc8f0791b09be042651e8e3e6e360a017297afded276aae6baeb511af6f117d07498736242727dc60aac9af5c46b569d86a8af85619f45feff59fd3dcd81a8ddcbb2ce1621be31a19dcba52c84d30f12df8a78c0a7b052641fe49b168a59a69570d2f2a866fe22fec4ceeae6bd794fe617d2ab91de51a6b89dd8637acaa27c355f1d378b491ce3f418ce40684a53bd898dfc84a37ef4ddac4702c13f5f8952a08a81c498cd99d600408a829e0adaed483671ac14c91a8f2672cb0e9f1de6415bbc8e4db1f54513e9dc1366920b2dfdc4fd4b416d9628d058879ec077df2eaad60bc7dba98f92a1534ffc2c655fd28e91f3b554d01822569ac1fb7f2c1cd29450fad4abfac2fc40de9ba4e58179d51f9dcdfd07c1d77fffa0e35e9649adda2675dcfa49fc076bd0eee72d0efd7a24efd43468e0954313d23ddbccb4f8d97c54544f2313e6f5ad1fbcf1bccaebcb306118bfbe9f4cb021a9032cbf4cb448f129f90ca846dab10064749843aa8efa351edbaae0c674e866f40c731666cd7519fee885c91ac1f4abbe28c542e7bd634220ac39161260ab039b7129c05c06ac387ceaf3ea15b7506becac2d6e7afeccd04a5026e36e949b9d7c3a41a6a9a22679d4a00d1130e1d94df85f7e3c4963a3d759533cd8b34ee3a704d59646492df34339353f392390053fc7fe7abdefc758f83f9a0402cbc504abc1e6d86287e77e00f875f0dfd553bb206d5a2c278f01d859c6fef3861831ae5571eb563cda28ca65d48bd684ebe8e3b12336d6df5512293797ded8a2f29b677fddbedbb82c1f33c8c16c42ecaa7b6c8fd067e5e439ba92ff02c10cdff355885a40d85bd0b13ac1be164da7c7404fe8a0740e21aafdaafa5302ac80bc8719416bf71f5ff95e9170021593742e4318f7662cfeb90e1c2b28dba78591355e7c613a9abd82c280b53f0c2ffc5ef73c442edcb5393cdefcd0e9ab4b4c656caacd77a2d00c80c88505486375bb33199bd582ce8c31092c8d571b766ffc82a8a31f337ff69627d1a71416100cb8706453fc5bc79b1da3e6ae8381a0dcc721c3eca294d2ec1ef13bfd3f50ab98ba1bd8ab896eeaac12616b0082c25b492ee79cf4ae7e4a56e0253ab69ce819b5838d31480d86c23f4e0ebccee546c83ad1c727e27201b419aad597573430d41da396b45c823e08c31dbb082d8be1b26ac52197bcc29db32aa2536500468d37500d95a8dac651d938dc7d31622b0fe14bd43abf9927bfd841676cc7f49b8510c8df96daa89e75224ade4c5ef6d8c65fe649fc64b3962cc9a3f8cb6e06e5977d2fe6a8a51c442970e78c7a4dbe4bf5a024dfaaee43fc65c7efd1e8798335d213a457f4bc475bdddc2768502b477f3a674f10abf98e743c76caff576fea02710a5ee5b5ad7aa7bae1a8bbd91f8f1a5636bc35ce92d4ff0ff748c4edfffd5acbfe9bd0a1478b3d0e817f198d7c3aba1f9b0bcfad8a6d3726db24fdb90b0d370c970b4640288eddec7699c51c6e9e6a64417ce25c30703bb49b97d59447eac238800d7a1afac7f7b1d9a29468c56ea02c707e11b65289612e0fffab8032ffab8cea385b9506fb77f30b1d46c9d266d8a054364393adea791bc3c49f19575a3c90e46d226916987cd8d31f2836c1da2dd31cffa1829976000e52d11696787e2a9197cc2936a6d020260d2199dcf518a9e4aa3e3cc6ac0aa4ae7a59436d2b888ffa0bedcca6fb2e2c9ce9d6118ce6248d88d4b035048bc588b7c4fb7761beccb781500ab34eff0285da6975740d638b02ee188ff01b1429dbe2559f3b8e59c4ce1676331b3d0ad6f3dbb52085a3ead0d6f6074b014d4c04f2efde8e0fe20271832d85563ed9395ff005a31c2e2a466228ad6c838dfef347b25dd30cb196c372a47a70f9fd56b03cdbf35fb94bbc32db6c6315473f3df79d5ccaadf8a3d05604bf5bc53a89ea51ebe84bda22510680c5b1f6c6091ff899a579b249eb3281807f5ef255e7b374ebbb714b5b11c35be83ca104cbc6344a5b98aa30f27de4bf8df61af1e0b09655df2ba418d1609c2eb3f46fecfc5cfdc0e3797de340af74feed4ba5d134a7d3e591625c7de746c684df56986135e0287c3012ee04ee4142d97171a99e41a4570fbd1a4aaaf29347c658878317679a0727f2953f4f8e6230e2145922801e0f38953758435cd9e219794ca5ca6e4b55edf970f74cbbcb9718ff2710a2faaa6f4fbd8497d2df0746de3b2981bbfa7ca6023867bd9c76d0a2638e1458d3330c52492b699af2a4069ee5d125ddd8eb36a6c8802bbf3cd34c14974bb98d975afee5f876b934abee49c776101b10144a5784d814579902c360d7eb5c13b7c259021c4948776781e05c0f07911fead3906f4843f3f517600ce320a61b36aa75210245d12f12435a73d396e6ba1e3e228b700276f8ef3049a4087ce0df1e5f714a1557f1f4bc6b7c88f097795755c5ebfa07784b71c01a8e204276602ddf1be77cde58594f04bcfbc114068804b39f54b69df326f085cd289d8c1939c04483292ae390c0adf822bb3c71184f35face3ddcbe4ad5d4afdc06bda61d5f3501cc9fd65c07fcd9279d842691dd13ff23a4a987badf63cb831d5f97ca7eb89cf7e1030bf53fe4f13aed9805ec54bfd7191736fbb2fc7d5d45457d5843321d4f95e3f44f2e41e3c3672f9af203c1b8721c8083aea5f023347bbc148a6c59a97881ae3d99a0866e116447aeb5ef9ef221be3c653eec900b3c8039b554fd0da5cb13c465549a6c9ef420d11abfb62eece8e6931d8a783173d8cc7f1df87c77773cbecd89e7b5f9ecc8e4c78c23d669837194d056474335408b9a262db6742318f9c6b4b841e1cafd273d4155d93205c2586a8010b33302a2a4e7aeedfe4f08b6160ace9145772449061c29e5fa0e1837edb4a4602577d151b4276605fbebf6072c81909f6284822077370c49ee047c922e9b9a3dd5c684843cfc05a26277d4b69570cd42fb3c01ef10e5cdb8423b124511148b087a95fc57d7867a3d16682d36c4204ba754fafb91a4b59892473a5cbb59f550523fa50c4b54baa3eb56991cc0ef92cf8b2e0de5bdb7dc5e8b2bd14a84c30a4d98ba3fa2cec5cf00be7f58531d068a816f619135bb74d782ddbbe3e2decb98ecbfabfb52fccab35da456d45d6a96668dfe1c6060a83d0d685d67bfe297824cc317d17c9e0e4461e79aecfbb1b59729672958539c8dc7e31c1679c57bc428e4aa45278a25bee23e9d5e38f9e810f8f2dfb122f91421c4e83222c19525b2d4442d5a0147ee1d283665ddee76eee7564d35ee757d79d61e2f93fef693554d5ce27d9aa6eac003f081b53c9c64649a713a73170c3e1fd398f9f7c6b668ffd96a24d583d0ee630264ee0e6b445b74d289944da5fc0b66aa4ffa41b6ae2ea76331925e18659fd0c03180cc4648648981bd268536ae47a1e562f23eca7d33ad1be4943c5735fd71a130c53bf6459a89d77cb40d499dea14a3f9b36706aac4082a362db17d225e1e8300ba44eb10ee012274af9d3bddfdef1653ea4e5fa8188cdf8726fa2c941c93a523e921f2c9b1596b29208a5cc867daaf728c00ad7a7bfdd373c38ea615e86ed91df1a86103877b36d7fd49fedf941929dfb3495d1467d6c1079c106a29547cecfe33f62aaf390c5261a1ce15000b34b6f1ffb289a457fa608c36a37d31aacdf560344d4a6329ac5f1401aabf8c71d7e74141e78e6e9226bd04f15b364a1ee0b4bb47e7e605cf2f05d438c61b0af527691e9ec408696c9352973df4632ddd6d1ac1b6004d929425c3e4d231c09ce7c047f74dcaaa4ab4f6b81d47546afd32cbeed17894914251ea429ca1e7278337ec9296fe8d7e3167ef9afc07cc87ef9a31fc3a73f07d6ec80adc5a81c516781defc348994c9c256d996b17d501ccd0da3943c0f7c5a4e8c4e97c6246a2183a79ca4b8182644dc404362c6566c9349c7b26a07e833a7005dd98f45e0532f0374ba3d3a090cf5454e66636dfb4acf5fa2280e3ed3d67902161d27d37859a2cca9a0ca9fa56815dda81d09eaf34c9af819e197918e99aaf85560d8199e36ffbc0ce2895d88c4ab71fdeedd533be56d249a220ba25de90208856b32fbfd4b27e3f6e30a59ced7aa98b3b81f35a0182c752f9125faf847cb27f5853f9afcd1c79e097a37b3a55a4f6d0e7e182b6626cd8ab6cfbc0d9bc7a570ebf5f67f2905e50a90d0664d8d94f5b0a423b54676225b805e64a41709569c1d9a63a793f39bdb893463481f67c2a9eac063b3c6eb89a2aa658ee214414ef84f0aeef5681ad0ba00472bfac35ffc242d885d0ce10aeadd815bc2afb10bd78b9d84ddbb2e072b0572ea11f2063e599e5440df7df221f82654e45deb48df58be0425618eae66ce08ae3d948d4ce2b8d0fb8be41599421b23e496e4f30831c594b1f33ecf9cf399182176c4d9c052987152b73398155288975e42fa7468780ed5e4e8b15b5c28dbd366662dc007d6f2ba4986f17cacbc03eebd2ac4b3ee9930819e2879df3a5181692c297a0045f621e210a79b8d030433a5e24ae8d13bf87a008107d36f5946111f95a73443d02c14ae8f9357c54694dc6a86f89b1b1acb0cf551a29580f9d2d7d20bd3d5f68d044add33e7cf8c1a7339cdb85f060f637f6c9bd32d1da200e907937127690e57f0ecf3a49f7670cadd61808e2d0619124da910494b2c87d6ff7c6211ff25eb1f99e3baa11c7e8d7caacfa9ff150ad5", 0x1000}, {&(0x7f0000003e80)="2f8ad4eea5250f735fa833e09175dda81a14debb130bfe839c1551d1d09cc93c065c4922ab3a03639fcb803a9d0b2f75a1d5f45605250887e2dfd3e1ccc1f3f999ce2c4779", 0x45}, {&(0x7f0000004640)="8c0b1980347e756d54244a4c1f57a7f73b768e746b94dd50f4d166adc4f5055fd0975ef4635856af0e29bb3163d286ec7a830ec00c8fdea11a377080b42b3904f0b2c5d3465900a4ebfe6fe427ab3fb335b9b8b3d6a1ba2e1d33fbc652c391bcbf606a03f5e9f276a4a80ac2ca2111ff4d019df9cfeed5cf71d2b8276a89ec3ad7f712cc2148c90241ac86162624eab44b202a3cf38b60232c94ebfbb7f892dfa3079377ee47918cbbee21a97945f2923511d64b1066c3fa1f7b77455da282dfdfa4734221d7d4749ddca022676c32d39af1f0f181889d32fe295d8c97dd1352738e6938f0cc037d2cff7ca60e1a8bd86571b181", 0xf4}, {&(0x7f0000003fc0)="bab5becfd9aa5145490827b7924941e376a91e965cde9996f59ad0c36b105e9353a7a64259b46c0173fdf95bfdc175a33df57536015405c31180178558de625e2a3d5cee30f0ee88b590afb21dc53615f4d3c3d6f82503d3232edcb983e4414c952f99ee698fba5603b524e1e4fb8e30eca9e2ba1226b3b0840c500ef9cdf1c6e70a1b924ed9aea93a9b7090d5716805c814d633727986", 0x97}, {&(0x7f0000004080)="26afa5780a1cc04e4cae4c7fb67b4606102943667c51fd941deb6002688acd576b9e0df148e7815e284ff3d26b089506b4d06333ac393cbe68d588d4afcb414f86121a9be678bbad947578a32477720fc77f7aea251df18e1a7314cc21e9fc1ca37b2c767c9e3ec50fb7df196e452a6ebd911c22bf04d2b22fbf50e17ec09f8f19464d397e85", 0x86}, {&(0x7f0000004140)="cc26f0365fdc89773a4964ab79ae1fb39c94fc49edfa46d5cc66d1966b31413f5269e82492dd84bae43eb8e572c2a9a9f8c15d0e90899f984323452e456ce5bfb67b979b749d018f5c47b1ea5b5ee2d9a937b5bc412d023187f2e420794f868d9d5c2fa4402c2edcfa0d0fd8c6602c504b1d23c853cf490ed0390952fa7aa6bdf047503599e4f809c2c5f74adab88a8a530b96a261b64a6ab0f4c4a11a5d2c09bfc155586db0d6de4e7ee1d214a97558c11e2019e581ff8840dc7cb3e1b7", 0xbe}, {&(0x7f0000004200)="fad320cf22e846c189a910520d99fd8847de50e96c786f9817d8de8976483d289dcffe85bb83081efe3a37882d1d6629ef509923716473ad44e2f6065dd3571bbdc0c6a56bde434f0005ed55266ed1db0021b689226e46379bb468a063a09557459ebe140f0c4522cd04ca655a0610b12522108e1bcabf92bb704f9f27807983a213a25798b0572a8c6528a5ee8b7c1c95142e900e6dc4fb6ca5453e020525325ea4b7303f265d2f4867875d6fc5bd8ef161f2b6c043b434d8706e02", 0xbc}, {&(0x7f00000042c0)}, {&(0x7f0000004300)="ab7ee37efb2c956f1e46cd", 0xb}], 0xa}}, {{0x0, 0x0, &(0x7f0000006840)=[{&(0x7f0000004400)="c8c1b28da70643df0a5278f4e3c5eca516da2b4fac82f48ec340e71ce57405dc7a01e5d81b6fa7ba1ec407a69bccca5480f18f5eb244817cf58de59f3680ab1b554897ec3a94c5d1a05a474a08fd5a97f07da1b3fe942adc1e", 0x59}, {&(0x7f0000007f80)="2a055acbdc2722150f4621b8e7556d5afb5a582f2a2634d6e1f11b32c5c5a9dff06d8b07f4f2f15eebe77ea902bae4497e25982999eaeec021c1d25a2f7d14a9236787bb30b28772994aa2092b69beefca94673afdd85cdcb47b752252573fc96420d342e7b2f7a4640beadd47ad58a30ccb740a1a85a80e60181ff35eb5a1b92ea892b17614f3c400ded3b99eae18267715f3d03b7a28f2edbee230abac", 0x9e}, {&(0x7f0000004540)="4a9b341d7bc11f71c3b58b2c8cf4f84db0bfc15a581ef93e9162a1c2e4fbb0aaa00719a848611d33ccfc441450dd434b8ab4310b56fcf3e8f43508e66f0f24ca631f999d8fc1c967043ffc23b27e2df06b1a90135e0b5ce3846f7e5b2bad52e0ab5e10e15a2d9677a0ae88092853f5f383730ba2bb75a0f6e25aca2d40168b7a153fd92eb267115395d2d3e5f282a3b2113caeef3bb47b07fb398b4200432b28cf0e05a108820599004b48a26da6b27922ed433f38d085acd1d3cf269293ad3f63b8d99e7086a0beab82d2f5a973fd8a2ac63f212a02f7a95160114c19", 0xdd}, {&(0x7f0000008040)="c354977960bc44c3c9b98394f30de758edbca1bdbc37c0c8ca442dc0af603e4887a40f9afa0de3633c5d0ab0242f57f080a234e574a54e859a68a417a9a88a0c7b40cd2f1f548b9f83d065a6e7165a5561d046400677aa85bb2a6b0ad1dfcea43e407575bf8ad46356f639c402ef4b2f75e1031899bb5739864b0c3aa068947814c4e352c5ebb26326647ad0d41f9118cd5174eb0da9da196c2e72c8f045396af85fed0d8793910f9e9c798e34e7b1584469c0cbbe101956d512c860ca91b8245e2c91f6", 0xc4}, {&(0x7f0000004740)="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", 0x1000}, {&(0x7f0000005740)="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", 0x1000}, {&(0x7f0000006740)}, {&(0x7f0000006780)="819bf76e9a4ad57f9b68e934d873ec9e2bf29596f633dca821e8f94ac606c686e0ca83960bb06a0bca6158225c99a6e47b55bcac2579220c2d1eff7c3ced83527c393e26e9a5c2a8352b453ca3785fba2bbc8d3b2202c85ea2ce11e2491c4953180db95af68c03a312c8c9f51706961c170d1bdd93605f08bca14638a6253c55f8216fe535c0b21bbb9924a5569e4657bd43659b820b", 0x96}], 0x8, &(0x7f00000068c0)=[{0xa8, 0x109, 0x6, "70124c989bfbe51ddab6d928d76eeebf4d1bf4676f69c89e9f1c2f9fd85921710e518e8bff50bdca59691093608e78d0d3b3981c5f9f1620c8f5694f2cf87e0cb54bf5fe77c20a654fe56a98cc190a3ff2c74f9cb9c8d302b77fca50e9f98c73d24c7a5dea95e5172bb6aa85c579f428ffb315e58b22c69abe6f40b98eec2b1eb41a03b4e9e5db80cc14494e814483aef09379"}], 0xa8}}, {{&(0x7f0000006980)=@rc={0x1f, @any, 0x6}, 0x80, &(0x7f0000006a00)}}, {{0x0, 0x0, &(0x7f0000006c80)=[{&(0x7f0000006a40)="30e2e398f68ce779da3d6c4324a2ce6c3950dfb4396455c70ccd2e55d958ae5a0a531426d0b4cd49973ab32d0588ea15fd48d25250", 0x35}, {&(0x7f0000006a80)="484edda919a361e5490241d46949fba288ac5c7c07e848b46ccc6aab4743aa54488f2cd0c26699df882928b9f3e25c1c4c63514394f727a61e220319e721ab7e5ae151d5456e67fa69d1390cdf94c63d1b23b29ce4b8671d92e3cbf89c4e77f69ec1e4ba764a72068cc3395b2ead83bc70e755f23cb2053fe548f7", 0x7b}, {&(0x7f0000008140)="f6211439e3ae0420a3ebb1a8a91f0c6aeb61981b20b226ef8d38e5cd21c8c27cc7bbd56bcf5fa4ec08e2046fb8c70cc710e29bda71e27ace360a100db3d55d87167b8ceec0a7b2ea0cbba4b3349ca5f726de691a1d6b72bbc0dee84378ca26bd31b1bf8e0b40a46eaeebdc4fee00d9da21f09dc3f732acf3249c1503aa06b84ab56b10e966c4e1be9ed8fe9942c8d90de3df5eb5cc35514941904154ee9bbc4535d14fde836017babd708071f1adb74436ad11123804f6a23ee7d0764643b404ae2df7327bf768402694b35329a51c3e9c76481d3036facb984d918f46a9787037699e053498e26e732195a2570dcead33d26d3fdf7c13cb569154201eb2522acae369e883ab692e3d1da877a0a58f9a19af56bc2b5777f10e5abd84a81a9d92cc8c11b9dd69a59871", 0x129}, {&(0x7f0000004480)="2a6306c2ffffffffffffa807000000fcc8f5b71158b1645d0000005513250400df8d8c0345ac3c7edf2bf9ecbd3faad676c102000000199b069b3763a1f1dae85e767ef48a5d2114abaa5f1c5448a5bff766e1", 0x53}, {&(0x7f0000006bc0)="efb6cda61fd7a0c270e9d737a2de2237859450a388228c2d6f05b2332e8558e52b24d704d0e5764b578a7291777b29a5727cd1019cb612d866f4555cc01cbd24b81f31f43c8912bb405991e7b5a0a08f0e8f050004ab73dbd6ce577ddd0d74312a22b5e0b31279a9b09f09624b7b6a4a408c9769ef3fd40358673fd44d01240322ae7b781e6510d387fea36c900db35048c6", 0x92}], 0x5, &(0x7f0000006d00)=[{0xf0, 0x0, 0x7ff, "5634a53f82f8c14ca7f92437ad3154f40860a78fbdd77945f915755d983ff6532f86cce887f674e308fe66e26f83a1df4857087ac7cb2b2c92ae0ce3c8249e56fd493c24c602c518afcadf6aabbe98bae617dcf4c4da2bab37d5a0dc2ee5551c7ce6033838395ba8072013ae1db33d8a0b29920d7e9dd86dd3c005cf7b20371d625ff87193a780a067d5389965882ccbdcb3a4a131e220eb82cf3ecb43309e4a33f0c6056b7d4071bd658f7609825d7085d7ef6459fdf3ccffa2e26378d800a28d58cf58deb6a03249d9dedd72666034fca2a5797305a242d3a5920433"}, {0x810, 0x118, 0x7cf97dd2, "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"}], 0x900}}], 0x6, 0x4000000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x5, 0x0, 0x4, 0xff, 0x6, "864ebbf6880046004028ce02191947d93528c1"}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000540)={0x0, 0x3}, 0xfffffffffffffc3e) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x1}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB], 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8002}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2000}, 0x4) 86.859652ms ago: executing program 8 (id=2684): sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 21.743738ms ago: executing program 8 (id=2685): r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000003840)={&(0x7f00000000c0)=@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe1e6}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x29, 0x39}], 0x10}, 0x0) r1 = socket(0x2b, 0x80801, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r4 = eventfd2(0x9, 0x0) io_pgetevents(r3, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) io_destroy(r3) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0xab, @loopback, 0x1}, 0x1c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x1}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000000000000008000000900000000080000", @ANYRES32=r6, @ANYBLOB="00000100603e9db9b4e500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000040000000500"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x2}, 0x18) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) socket$packet(0x11, 0xa, 0x300) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="c00f86dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000000000000189"], 0xfce) 21.236908ms ago: executing program 5 (id=2686): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="85000000040000007f0f000500", @ANYRESHEX], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000000)={0x2a, 0x2, 0x7ffe}, 0xc) bind$qrtr(r3, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x33, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(r1, &(0x7f00000008c0)={&(0x7f0000000680)=@can, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)="62dc10f928112cbab7ba0680791ae5a3b196bb", 0x13}, {&(0x7f0000000f80)="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", 0xfa}, {&(0x7f0000000580)="b364522a38e8994941", 0x9}], 0x3}, 0x4000081) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x65, 0x0, 0x0, 0x3, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xd, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r5}, 0x10) setitimer(0x2, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000008000000040000000000001202000000050000000000000804000000070000000000001201000000040000000000000700000000040000000000000e0200000000000000002e30305f615f5f00000f1c8c24c3c4e8731594fc52c61c573e42f1c455523a8ab9b78456a008a2edd4a2b28eae296069c6b5549375242affaee56cd62814315d9d044f8280579bd0d4dbe083face0278b23aa1e66303fcec804447d15756f907c83f1a9878ed49fc42032ddf6ed916115b0534a483334b8af1260c"], 0x0, 0x61, 0x0, 0x1001}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000180)={[{@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0xf79}}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 0s ago: executing program 6 (id=2687): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000002d80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, 0x0, 0x40) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20008054) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, r4, 0x1, 0x170bd2c, 0x8000, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}]}, 0x3c}}, 0x20000000) socket$inet_sctp(0x2, 0x5, 0x84) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000e80)=[{0x3, 0x7fffffffffffffff, {0x1, 0xff, 0x2}, {0x2, 0xf0, 0x3}, 0xfe, 0x2}, {0x3, 0x2, {0x2, 0x0, 0x2}, {0x2, 0xf0, 0x2}, 0x3}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x0, 0xff, 0x2}, 0xfd, 0xfd}, {0x4, 0x2, {0x2, 0x0, 0x4}, {0x0, 0xf0}, 0x2, 0xfe}], 0x80) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) syz_clone(0x1000, &(0x7f0000000200)="ae077a9b6e881e073a831f3c4d2d34828102e55ecffe12f5928c8975322c0e793bc8130da38c584e204ddd4cc0e40d63ec7cfe45f291330eef62d2444e7e6ae7c898b8df4ba5b730493ef4b36cfffbf397ad39020e462c4de14c54f9160bdafe1b08abed1efe19ceec973c7bac64fda00dd0fa948013a6dd2f38", 0x7a, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="d1efed210ceb0c1f65dd1d160f15747eec62c0cdb316a5c2a5d191dfe817535576327284fa155372c44c92c21e7d47c48926e78a2c8540397351f4a7209d9cfb44509d4c26fa5c7b4abe7b30de6985905e5b8259e6319989127d") syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) kernel console output (not intermixed with test programs): 81] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.010009][ T9781] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.035576][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.042720][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.092993][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.100122][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.259711][ T9781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.283011][ T9862] veth0_vlan: entered promiscuous mode [ 184.296374][ T9862] veth1_vlan: entered promiscuous mode [ 184.326365][ T9862] veth0_macvtap: entered promiscuous mode [ 184.342836][ T9862] veth1_macvtap: entered promiscuous mode [ 184.363877][ T9862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.375318][ T9862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.393935][ T342] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.403404][ T342] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.420418][ T342] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.446691][ T342] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.535151][ T9781] veth0_vlan: entered promiscuous mode [ 184.544909][ T9781] veth1_vlan: entered promiscuous mode [ 184.579220][ T9781] veth0_macvtap: entered promiscuous mode [ 184.588403][ T9781] veth1_macvtap: entered promiscuous mode [ 184.611537][ T9781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.647667][ T9781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.688924][ T9990] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.704030][T10078] hub 2-0:1.0: USB hub found [ 184.714480][T10078] hub 2-0:1.0: 8 ports detected [ 184.733150][ T9990] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.784380][ T9990] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.794287][ T3435] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.818441][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1805'. [ 184.849336][T10080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.856818][T10080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.870021][T10080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.877484][T10080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.021267][T10112] loop6: detected capacity change from 0 to 1024 [ 185.033156][T10112] EXT4-fs: Ignoring removed orlov option [ 185.057527][T10112] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 185.067754][T10112] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 185.086341][T10112] EXT4-fs (loop6): invalid journal inode [ 185.092037][T10112] EXT4-fs (loop6): can't get journal size [ 185.102831][T10112] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 185.133786][ T9497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.214713][T10136] loop9: detected capacity change from 0 to 2048 [ 185.247318][T10136] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.291189][T10136] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.424392][T10136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.488686][T10136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.528392][T10165] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1819'. [ 185.542624][T10136] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1815: bg 0: block 345: padding at end of block bitmap is not set [ 185.593541][T10136] EXT4-fs (loop9): Remounting filesystem read-only [ 185.662504][T10175] loop6: detected capacity change from 0 to 128 [ 185.686064][T10175] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 185.751766][T10175] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 185.866291][T10191] siw: device registration error -23 [ 185.936894][T10199] loop8: detected capacity change from 0 to 512 [ 185.947097][T10175] netlink: 'syz.6.1822': attribute type 11 has an invalid length. [ 185.954960][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1822'. [ 185.978565][T10199] EXT4-fs: Invalid want_extra_isize 7 [ 186.019578][T10203] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1829'. [ 186.040934][ T9497] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.484358][T10222] FAULT_INJECTION: forcing a failure. [ 186.484358][T10222] name failslab, interval 1, probability 0, space 0, times 0 [ 186.497052][T10222] CPU: 1 UID: 0 PID: 10222 Comm: syz.5.1831 Not tainted syzkaller #0 PREEMPT(voluntary) [ 186.497129][T10222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 186.497141][T10222] Call Trace: [ 186.497148][T10222] [ 186.497156][T10222] __dump_stack+0x1d/0x30 [ 186.497184][T10222] dump_stack_lvl+0xe8/0x140 [ 186.497210][T10222] dump_stack+0x15/0x1b [ 186.497261][T10222] should_fail_ex+0x265/0x280 [ 186.497315][T10222] should_failslab+0x8c/0xb0 [ 186.497428][T10222] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 186.497465][T10222] ? __alloc_skb+0x101/0x320 [ 186.497494][T10222] __alloc_skb+0x101/0x320 [ 186.497534][T10222] netlink_alloc_large_skb+0xbf/0xf0 [ 186.497610][T10222] netlink_sendmsg+0x3cf/0x6b0 [ 186.497637][T10222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.497663][T10222] __sock_sendmsg+0x145/0x180 [ 186.497696][T10222] ____sys_sendmsg+0x31e/0x4e0 [ 186.497796][T10222] ___sys_sendmsg+0x17b/0x1d0 [ 186.497833][T10222] __x64_sys_sendmsg+0xd4/0x160 [ 186.497856][T10222] x64_sys_call+0x191e/0x3000 [ 186.497947][T10222] do_syscall_64+0xd2/0x200 [ 186.497974][T10222] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 186.498084][T10222] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 186.498203][T10222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.498227][T10222] RIP: 0033:0x7fd001dbf6c9 [ 186.498246][T10222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.498270][T10222] RSP: 002b:00007fd0007dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.498368][T10222] RAX: ffffffffffffffda RBX: 00007fd002016180 RCX: 00007fd001dbf6c9 [ 186.498385][T10222] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000008 [ 186.498401][T10222] RBP: 00007fd0007dd090 R08: 0000000000000000 R09: 0000000000000000 [ 186.498415][T10222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.498430][T10222] R13: 00007fd002016218 R14: 00007fd002016180 R15: 00007ffcf33740e8 [ 186.498494][T10222] [ 187.660533][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 187.697171][ T9862] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.297033][ T29] kauditd_printk_skb: 521 callbacks suppressed [ 188.297050][ T29] audit: type=1326 audit(1763206876.339:10665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10228 comm="syz.9.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 188.419946][ T29] audit: type=1326 audit(1763206876.339:10666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10228 comm="syz.9.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 188.443773][ T29] audit: type=1326 audit(1763206876.339:10667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10228 comm="syz.9.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f255b62df10 code=0x7ffc0000 [ 188.467659][ T29] audit: type=1326 audit(1763206876.339:10668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10228 comm="syz.9.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 188.491429][ T29] audit: type=1326 audit(1763206876.339:10669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10228 comm="syz.9.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 188.515382][ T29] audit: type=1326 audit(1763206876.399:10670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10228 comm="syz.9.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 188.539153][ T29] audit: type=1326 audit(1763206876.399:10671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10228 comm="syz.9.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 188.550212][T10229] bridge_slave_0: left allmulticast mode [ 188.562820][ T29] audit: type=1326 audit(1763206876.399:10672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10228 comm="syz.9.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 188.568474][T10229] bridge_slave_0: left promiscuous mode [ 188.592037][ T29] audit: type=1326 audit(1763206876.399:10673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10228 comm="syz.9.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 188.597763][T10229] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.621088][ T29] audit: type=1326 audit(1763206876.399:10674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10228 comm="syz.9.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 188.836743][T10229] bridge_slave_1: left allmulticast mode [ 188.842451][T10229] bridge_slave_1: left promiscuous mode [ 188.848176][T10229] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.908080][T10229] bond0: (slave bond_slave_0): Releasing backup interface [ 188.934242][T10229] bond0: (slave bond_slave_1): Releasing backup interface [ 188.969085][T10229] team0: Port device team_slave_0 removed [ 189.005679][T10229] team0: Port device team_slave_1 removed [ 189.027367][T10229] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 189.203047][T10260] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 189.265921][T10260] SELinux: failed to load policy [ 189.669288][T10287] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10287 comm=syz.6.1845 [ 189.681894][T10287] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10287 comm=syz.6.1845 [ 189.706127][T10284] loop8: detected capacity change from 0 to 4096 [ 189.760774][T10284] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.998845][T10297] pim6reg: entered allmulticast mode [ 190.014331][T10297] pim6reg: left allmulticast mode [ 190.221235][T10305] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 190.307245][T10307] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 190.562698][ T9781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.938934][T10350] netlink: 'syz.8.1860': attribute type 39 has an invalid length. [ 191.220571][T10360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.239346][T10360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.488874][T10353] loop6: detected capacity change from 0 to 512 [ 191.506198][T10365] siw: device registration error -23 [ 191.524391][T10353] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.1861: bad orphan inode 15 [ 191.557587][T10353] ext4_test_bit(bit=14, block=5) = 0 [ 191.563525][T10353] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.598887][T10353] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 191.633908][T10353] EXT4-fs error (device loop6): ext4_free_inode:354: comm syz.6.1861: bit already cleared for inode 13 [ 191.655503][T10361] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.1861: inode has both inline data and extents flags [ 191.856540][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1868'. [ 191.873158][ T9497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.091675][T10402] loop9: detected capacity change from 0 to 2048 [ 192.112848][T10406] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10406 comm=syz.0.1873 [ 192.125530][T10406] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10406 comm=syz.0.1873 [ 192.205974][ T6913] loop9: p1 p2 p3 [ 192.265662][T10402] loop9: p1 p2 p3 [ 192.287395][ T3002] loop9: p1 p2 p3 [ 192.291620][T10416] loop8: detected capacity change from 0 to 512 [ 192.322081][T10416] EXT4-fs: Invalid want_extra_isize 7 [ 192.364990][ T3698] udevd[3698]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 192.367029][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 192.387158][ T6913] udevd[6913]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 192.499573][ T3698] udevd[3698]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 192.511348][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 192.531843][ T6913] udevd[6913]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 192.539904][T10429] loop9: detected capacity change from 0 to 2048 [ 192.621688][ T6913] loop9: p1 p2 p3 [ 192.660562][T10429] loop9: p1 p2 p3 [ 192.832875][ T3698] udevd[3698]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 192.832906][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 192.859523][ T6913] udevd[6913]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 192.929854][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 192.990125][T10458] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 193.035669][T10458] SELinux: failed to load policy [ 193.165955][T10471] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 193.432282][T10486] loop0: detected capacity change from 0 to 2048 [ 193.507508][ T6913] loop0: p1 p2 p3 [ 193.532088][T10486] loop0: p1 p2 p3 [ 193.629099][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 193.629114][ T29] audit: type=1326 audit(1763206881.669:10941): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10415 comm="syz.8.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83714f6c9 code=0x7ffc0000 [ 193.756875][ T29] audit: type=1326 audit(1763206881.799:10942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.9.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 193.780577][ T29] audit: type=1326 audit(1763206881.799:10943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.9.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 193.856895][T10504] loop9: detected capacity change from 0 to 2048 [ 193.890227][T10512] siw: device registration error -23 [ 193.935321][T10504] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.956152][ T29] audit: type=1326 audit(1763206881.849:10944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.9.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 193.979716][ T29] audit: type=1326 audit(1763206881.849:10945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.9.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 194.003318][ T29] audit: type=1326 audit(1763206881.849:10946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.9.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 194.015429][T10523] loop8: detected capacity change from 0 to 2048 [ 194.027001][ T29] audit: type=1326 audit(1763206881.859:10947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.9.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 194.033395][T10504] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.056914][ T29] audit: type=1326 audit(1763206881.859:10948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.9.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 194.091240][ T29] audit: type=1326 audit(1763206881.859:10949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.9.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 194.114835][ T29] audit: type=1326 audit(1763206881.859:10950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.9.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 194.156214][T10504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.172373][T10504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.184933][ T6913] loop8: p1 p2 p3 [ 194.206102][T10523] loop8: p1 p2 p3 [ 194.254047][T10504] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1885: bg 0: block 345: padding at end of block bitmap is not set [ 194.292673][T10504] EXT4-fs (loop9): Remounting filesystem read-only [ 194.386936][T10538] FAULT_INJECTION: forcing a failure. [ 194.386936][T10538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.400193][T10538] CPU: 1 UID: 0 PID: 10538 Comm: syz.8.1893 Not tainted syzkaller #0 PREEMPT(voluntary) [ 194.400252][T10538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.400270][T10538] Call Trace: [ 194.400278][T10538] [ 194.400294][T10538] __dump_stack+0x1d/0x30 [ 194.400321][T10538] dump_stack_lvl+0xe8/0x140 [ 194.400341][T10538] dump_stack+0x15/0x1b [ 194.400428][T10538] should_fail_ex+0x265/0x280 [ 194.400471][T10538] should_fail+0xb/0x20 [ 194.400510][T10538] should_fail_usercopy+0x1a/0x20 [ 194.400532][T10538] _copy_from_user+0x1c/0xb0 [ 194.400630][T10538] memdup_user_nul+0x5f/0xe0 [ 194.400666][T10538] sel_commit_bools_write+0xd2/0x270 [ 194.400695][T10538] vfs_writev+0x406/0x8b0 [ 194.400825][T10538] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 194.400900][T10538] ? mutex_lock+0xd/0x30 [ 194.400939][T10538] do_writev+0xe7/0x210 [ 194.401008][T10538] __x64_sys_writev+0x45/0x50 [ 194.401088][T10538] x64_sys_call+0x1e9a/0x3000 [ 194.401116][T10538] do_syscall_64+0xd2/0x200 [ 194.401181][T10538] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 194.401215][T10538] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 194.401256][T10538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.401356][T10538] RIP: 0033:0x7ff83714f6c9 [ 194.401370][T10538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.401393][T10538] RSP: 002b:00007ff835baf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 194.401414][T10538] RAX: ffffffffffffffda RBX: 00007ff8373a5fa0 RCX: 00007ff83714f6c9 [ 194.401426][T10538] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000006 [ 194.401439][T10538] RBP: 00007ff835baf090 R08: 0000000000000000 R09: 0000000000000000 [ 194.401521][T10538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.401534][T10538] R13: 00007ff8373a6038 R14: 00007ff8373a5fa0 R15: 00007ffe36941dd8 [ 194.401554][T10538] [ 194.602613][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1888'. [ 194.633437][T10541] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.640774][T10541] IPv6: NLM_F_CREATE should be set when creating new route [ 194.648031][T10541] IPv6: NLM_F_CREATE should be set when creating new route [ 194.655245][T10541] IPv6: NLM_F_CREATE should be set when creating new route [ 194.683845][T10546] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 194.712149][T10548] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 194.718696][T10548] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 194.726897][T10548] vhci_hcd vhci_hcd.0: Device attached [ 194.773263][T10550] vhci_hcd: connection closed [ 194.773419][ T9990] vhci_hcd: stop threads [ 194.782484][ T9990] vhci_hcd: release socket [ 194.786960][ T9990] vhci_hcd: disconnect device [ 194.928335][T10570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62443 sclass=netlink_route_socket pid=10570 comm=syz.0.1898 [ 194.948837][ T9862] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.058459][T10579] loop5: detected capacity change from 0 to 512 [ 195.082202][T10582] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1900'. [ 195.106130][T10579] EXT4-fs: Invalid want_extra_isize 7 [ 195.113062][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1900'. [ 195.136228][T10570] 9pnet: Could not find request transport: fd(rfdno=0x0000000000000006 [ 195.392866][T10595] bridge_slave_0: left allmulticast mode [ 195.398591][T10595] bridge_slave_0: left promiscuous mode [ 195.404446][T10595] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.496771][T10595] bridge_slave_1: left allmulticast mode [ 195.502508][T10595] bridge_slave_1: left promiscuous mode [ 195.508449][T10595] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.570084][T10604] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1908'. [ 195.581488][T10595] bond0: (slave bond_slave_0): Releasing backup interface [ 195.635392][T10595] bond0: (slave bond_slave_1): Releasing backup interface [ 195.690371][T10595] team0: Port device team_slave_0 removed [ 195.724842][T10595] team0: Port device team_slave_1 removed [ 195.746704][T10595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.754139][T10595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.776781][T10610] loop0: detected capacity change from 0 to 2048 [ 195.803109][T10595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.810578][T10595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.840226][T10595] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 195.906819][T10610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.995598][T10610] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.123543][T10610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.135227][T10610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.160276][T10610] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1910: bg 0: block 345: padding at end of block bitmap is not set [ 196.214588][T10632] siw: device registration error -23 [ 196.231761][T10610] EXT4-fs (loop0): Remounting filesystem read-only [ 196.522551][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1918'. [ 196.556749][T10656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.564252][T10656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.571500][T10661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62443 sclass=netlink_route_socket pid=10661 comm=syz.9.1919 [ 196.611567][T10656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.619032][T10656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.683472][T10654] 9pnet: Could not find request transport: fd(rfdno=0x0000000000000006 [ 196.859370][T10667] lo speed is unknown, defaulting to 1000 [ 196.955692][T10671] usb usb1: check_ctrlrecip: process 10671 (syz.6.1922) requesting ep 01 but needs 81 [ 196.965303][T10671] usb usb1: usbfs: process 10671 (syz.6.1922) did not claim interface 0 before use [ 196.981817][T10670] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.989093][T10670] IPv6: NLM_F_CREATE should be set when creating new route [ 196.996345][T10670] IPv6: NLM_F_CREATE should be set when creating new route [ 197.003574][T10670] IPv6: NLM_F_CREATE should be set when creating new route [ 197.011819][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.055725][T10675] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 197.176046][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1927'. [ 198.337613][T10713] loop5: detected capacity change from 0 to 128 [ 198.382025][T10713] FAT-fs (loop5): bogus number of directory entries (390) [ 198.389253][T10713] FAT-fs (loop5): Can't find a valid FAT filesystem [ 198.684549][ T29] kauditd_printk_skb: 669 callbacks suppressed [ 198.684571][ T29] audit: type=1326 audit(1763206886.719:11620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10712 comm="syz.5.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd001dbf6c9 code=0x7ffc0000 [ 198.714737][ T29] audit: type=1326 audit(1763206886.719:11621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10712 comm="syz.5.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd001dbf6c9 code=0x7ffc0000 [ 198.840521][ T29] audit: type=1326 audit(1763206886.809:11622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10712 comm="syz.5.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd001dbf6c9 code=0x7ffc0000 [ 198.864163][ T29] audit: type=1326 audit(1763206886.809:11623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10712 comm="syz.5.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd001dbf6c9 code=0x7ffc0000 [ 198.887932][ T29] audit: type=1326 audit(1763206886.809:11624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10712 comm="syz.5.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd001dbf6c9 code=0x7ffc0000 [ 198.911722][ T29] audit: type=1326 audit(1763206886.819:11625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10712 comm="syz.5.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd001dbf6c9 code=0x7ffc0000 [ 198.935375][ T29] audit: type=1326 audit(1763206886.819:11626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10712 comm="syz.5.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd001dbf6c9 code=0x7ffc0000 [ 198.959114][ T29] audit: type=1326 audit(1763206886.819:11627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10712 comm="syz.5.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd001dbf6c9 code=0x7ffc0000 [ 199.091638][T10741] loop9: detected capacity change from 0 to 2048 [ 199.177813][ T6913] loop9: p1 p2 p3 [ 199.235892][ T29] audit: type=1326 audit(1763206887.269:11628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.6.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4e1df6c9 code=0x7ffc0000 [ 199.259790][ T29] audit: type=1326 audit(1763206887.269:11629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.6.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4e1df6c9 code=0x7ffc0000 [ 199.284548][T10741] loop9: p1 p2 p3 [ 199.380098][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 199.397299][ T6913] udevd[6913]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 199.408741][ T3698] udevd[3698]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 199.471247][ T3698] udevd[3698]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 199.482855][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 199.493132][T10765] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 199.495730][ T6913] udevd[6913]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 199.511781][T10767] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 199.999788][T10799] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 200.006368][T10799] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 200.014582][T10799] vhci_hcd vhci_hcd.0: Device attached [ 200.038762][T10800] vhci_hcd: connection closed [ 200.038917][ T3468] vhci_hcd: stop threads [ 200.048028][ T3468] vhci_hcd: release socket [ 200.052454][ T3468] vhci_hcd: disconnect device [ 200.230238][T10808] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 200.258275][T10810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.265622][T10810] IPv6: NLM_F_CREATE should be set when creating new route [ 200.272926][T10810] IPv6: NLM_F_CREATE should be set when creating new route [ 200.280219][T10810] IPv6: NLM_F_CREATE should be set when creating new route [ 200.302950][T10808] SELinux: failed to load policy [ 200.426418][T10812] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.618944][T10818] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1959'. [ 201.284498][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1971'. [ 201.434422][T10854] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1973'. [ 201.467597][T10858] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.585043][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1982'. [ 201.635163][T10877] loop5: detected capacity change from 0 to 2048 [ 201.706291][ T6913] loop5: p1 p2 p3 [ 201.716567][T10879] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1984'. [ 201.716986][T10877] loop5: p1 p2 p3 [ 201.858110][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 201.862262][ T6913] udevd[6913]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 201.878110][T10889] batadv_slave_1: entered promiscuous mode [ 201.879777][ T7230] udevd[7230]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 201.976618][T10888] batadv_slave_1: left promiscuous mode [ 201.988185][T10895] siw: device registration error -23 [ 202.013785][ T6913] udevd[6913]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 202.163974][T10904] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.171235][T10904] IPv6: NLM_F_CREATE should be set when creating new route [ 202.178535][T10904] IPv6: NLM_F_CREATE should be set when creating new route [ 202.185768][T10904] IPv6: NLM_F_CREATE should be set when creating new route [ 202.221123][T10908] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 202.284179][T10911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.314856][T10914] loop5: detected capacity change from 0 to 2048 [ 202.388192][T10913] loop6: detected capacity change from 0 to 164 [ 202.472824][T10914] loop5: p1 p2 p3 [ 202.502143][T10920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62443 sclass=netlink_route_socket pid=10920 comm=syz.9.1997 [ 202.584423][T10920] 9pnet: Could not find request transport: fd(rfdno=0x0000000000000006 [ 202.991242][T10944] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 203.014823][T10949] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 203.183753][ T9990] Bluetooth: hci0: Frame reassembly failed (-84) [ 203.671943][T11014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62443 sclass=netlink_route_socket pid=11014 comm=syz.0.2012 [ 203.746092][T11014] 9pnet: Could not find request transport: fd(rfdno=0x0000000000000006 [ 204.095731][ T29] kauditd_printk_skb: 532 callbacks suppressed [ 204.095746][ T29] audit: type=1400 audit(1763206892.139:12162): avc: denied { lock } for pid=11031 comm="syz.6.2016" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=28363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 204.190763][T11034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.250079][ T29] audit: type=1400 audit(1763206892.289:12163): avc: denied { name_bind } for pid=11037 comm="syz.6.2020" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 204.317382][ T29] audit: type=1400 audit(1763206892.289:12164): avc: denied { node_bind } for pid=11037 comm="syz.6.2020" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 204.339249][ T29] audit: type=1400 audit(1763206892.289:12165): avc: denied { create } for pid=11037 comm="syz.6.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 204.359047][ T29] audit: type=1400 audit(1763206892.289:12166): avc: denied { connect } for pid=11037 comm="syz.6.2020" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 204.379864][ T29] audit: type=1400 audit(1763206892.329:12167): avc: denied { sys_module } for pid=11038 comm="syz.5.2019" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 204.401203][ T29] audit: type=1400 audit(1763206892.329:12168): avc: denied { module_load } for pid=11038 comm="syz.5.2019" path="/sys/power/wakeup_count" dev="sysfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 204.474709][ T29] audit: type=1400 audit(1763206892.509:12169): avc: denied { setopt } for pid=11041 comm="syz.5.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 204.513052][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 204.536811][ T29] audit: type=1400 audit(1763206892.579:12170): avc: denied { mounton } for pid=11051 comm="syz.5.2026" path="/78/file0" dev="tmpfs" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 204.559558][ T29] audit: type=1400 audit(1763206892.579:12171): avc: denied { unmount } for pid=11051 comm="syz.5.2026" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 205.255465][ T3598] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 205.255498][ T3674] Bluetooth: hci0: command 0x1003 tx timeout [ 205.420589][T11066] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.462636][T11071] loop5: detected capacity change from 0 to 1024 [ 205.472091][T11071] EXT4-fs: Ignoring removed orlov option [ 205.485527][T11071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.579401][T11084] loop8: detected capacity change from 0 to 512 [ 205.587502][T11084] EXT4-fs: Invalid want_extra_isize 7 [ 205.655245][T11085] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.234040][T11114] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.366388][T11119] batadv_slave_1: entered promiscuous mode [ 206.416482][T11118] batadv_slave_1: left promiscuous mode [ 206.447288][ T9219] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.475720][T11123] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.535455][ T3598] Bluetooth: hci1: command 0x1003 tx timeout [ 206.535916][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 206.634511][T11134] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 206.666108][T11134] SELinux: failed to load policy [ 206.771759][T11140] loop5: detected capacity change from 0 to 2048 [ 206.826610][T11140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.875630][T11140] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.886671][T11151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.963656][T11140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.981504][T11140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.025963][T11153] netlink: 'syz.9.2060': attribute type 13 has an invalid length. [ 207.035381][T11140] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2056: bg 0: block 345: padding at end of block bitmap is not set [ 207.070492][T11140] EXT4-fs (loop5): Remounting filesystem read-only [ 207.391123][ T31] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.417824][ T31] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.428762][T11165] netlink: 'syz.0.2064': attribute type 13 has an invalid length. [ 207.446399][ T31] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.485553][ T31] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.863338][ T9219] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.953016][T11182] Driver unsupported XDP return value 0 on prog (id 1248) dev N/A, expect packet loss! [ 208.042545][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2068'. [ 208.339703][T11195] loop0: detected capacity change from 0 to 2048 [ 208.360076][T11194] batadv_slave_1: entered promiscuous mode [ 208.458816][ T6913] loop0: p1 p2 p3 [ 208.464884][T11193] batadv_slave_1: left promiscuous mode [ 208.528067][T11195] loop0: p1 p2 p3 [ 208.566216][T11204] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.576949][T11204] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 208.626393][ T3002] loop0: p1 p2 p3 [ 208.713459][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 208.714438][ T3698] udevd[3698]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 208.735111][ T6913] udevd[6913]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 208.784121][ T3698] udevd[3698]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 208.796933][ T6913] udevd[6913]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 208.798245][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 208.915174][ T3698] udevd[3698]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 208.925169][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 208.927425][ T6913] udevd[6913]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 209.145411][ T29] kauditd_printk_skb: 473 callbacks suppressed [ 209.151694][ T29] audit: type=1326 audit(1763206897.179:12645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.5.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd001dbf6c9 code=0x7ffc0000 [ 209.186652][T11240] loop6: detected capacity change from 0 to 128 [ 209.225400][T11240] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 209.225937][ T6913] udevd[6913]: incorrect ext4 checksum on /dev/loop6 [ 209.265496][ T29] audit: type=1326 audit(1763206897.189:12646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.5.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd001dbf6c9 code=0x7ffc0000 [ 209.289332][ T29] audit: type=1326 audit(1763206897.189:12647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.5.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd001dbf6c9 code=0x7ffc0000 [ 209.305770][T11242] loop5: detected capacity change from 0 to 2048 [ 209.312839][ T29] audit: type=1326 audit(1763206897.189:12648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.5.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd001dbf6c9 code=0x7ffc0000 [ 209.342882][ T29] audit: type=1326 audit(1763206897.189:12649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.5.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd001dbf6c9 code=0x7ffc0000 [ 209.366739][ T29] audit: type=1326 audit(1763206897.189:12650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.5.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fd001dbf6c9 code=0x7ffc0000 [ 209.390437][ T29] audit: type=1326 audit(1763206897.189:12651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.5.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd001dbf6c9 code=0x7ffc0000 [ 209.414078][ T29] audit: type=1326 audit(1763206897.189:12652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.5.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd001dbf6c9 code=0x7ffc0000 [ 209.437813][ T29] audit: type=1326 audit(1763206897.189:12653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.5.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd001dbf6c9 code=0x7ffc0000 [ 209.461525][ T29] audit: type=1326 audit(1763206897.189:12654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.5.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd001dbf6c9 code=0x7ffc0000 [ 209.593915][T11242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.657667][T11242] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.689923][T11252] FAULT_INJECTION: forcing a failure. [ 209.689923][T11252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.703307][T11252] CPU: 0 UID: 0 PID: 11252 Comm: syz.9.2090 Not tainted syzkaller #0 PREEMPT(voluntary) [ 209.703341][T11252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 209.703355][T11252] Call Trace: [ 209.703362][T11252] [ 209.703370][T11252] __dump_stack+0x1d/0x30 [ 209.703394][T11252] dump_stack_lvl+0xe8/0x140 [ 209.703480][T11252] dump_stack+0x15/0x1b [ 209.703516][T11252] should_fail_ex+0x265/0x280 [ 209.703665][T11252] should_fail+0xb/0x20 [ 209.703733][T11252] should_fail_usercopy+0x1a/0x20 [ 209.703768][T11252] _copy_to_user+0x20/0xa0 [ 209.703800][T11252] simple_read_from_buffer+0xb5/0x130 [ 209.703833][T11252] proc_fail_nth_read+0x10e/0x150 [ 209.703874][T11252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.703935][T11252] vfs_read+0x1a8/0x770 [ 209.703960][T11252] ? __rcu_read_unlock+0x4f/0x70 [ 209.703993][T11252] ? __fget_files+0x184/0x1c0 [ 209.704092][T11252] ? __pfx_ep_autoremove_wake_function+0x10/0x10 [ 209.704124][T11252] ksys_read+0xda/0x1a0 [ 209.704222][T11252] __x64_sys_read+0x40/0x50 [ 209.704253][T11252] x64_sys_call+0x27c0/0x3000 [ 209.704281][T11252] do_syscall_64+0xd2/0x200 [ 209.704307][T11252] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 209.704337][T11252] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 209.704369][T11252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.704392][T11252] RIP: 0033:0x7f255b62e0dc [ 209.704411][T11252] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 209.704481][T11252] RSP: 002b:00007f255a097030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.704505][T11252] RAX: ffffffffffffffda RBX: 00007f255b885fa0 RCX: 00007f255b62e0dc [ 209.704517][T11252] RDX: 000000000000000f RSI: 00007f255a0970a0 RDI: 0000000000000005 [ 209.704528][T11252] RBP: 00007f255a097090 R08: 0000000000000000 R09: 0000000000000000 [ 209.704619][T11252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.704634][T11252] R13: 00007f255b886038 R14: 00007f255b885fa0 R15: 00007ffecb9ab408 [ 209.704654][T11252] [ 210.057333][T11239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.085307][T11239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.207548][T11239] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2087: bg 0: block 345: padding at end of block bitmap is not set [ 210.245549][T11251] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 210.250799][T11239] EXT4-fs (loop5): Remounting filesystem read-only [ 210.352745][T11271] lo: entered allmulticast mode [ 210.361191][T11271] tunl0: entered allmulticast mode [ 210.388521][T11271] gre0: entered allmulticast mode [ 210.405198][T11271] gretap0: entered allmulticast mode [ 210.424875][T11271] erspan0: entered allmulticast mode [ 210.476204][T11271] ip_vti0: entered allmulticast mode [ 210.498835][T11271] ip6_vti0: entered allmulticast mode [ 210.531369][T11271] sit0: entered allmulticast mode [ 210.552650][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 210.566768][T11271] ip6tnl0: entered allmulticast mode [ 210.593901][T11271] ip6gre0: entered allmulticast mode [ 210.618179][T11271] syz_tun: entered allmulticast mode [ 210.625987][T11274] netlink: 'syz.9.2096': attribute type 13 has an invalid length. [ 210.649337][T11271] ip6gretap0: entered allmulticast mode [ 210.676585][T11271] bridge0: entered allmulticast mode [ 210.682870][T11271] vcan0: entered allmulticast mode [ 210.707018][T11271] $Hÿ: entered allmulticast mode [ 210.712737][T11271] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 210.729533][T11271] team0: entered allmulticast mode [ 210.743016][T11271] dummy0: entered allmulticast mode [ 210.769650][T11271] nlmon0: entered allmulticast mode [ 210.786640][T11271] caif0: entered allmulticast mode [ 210.791835][T11271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.938268][T11286] netlink: 'syz.0.2101': attribute type 13 has an invalid length. [ 210.998198][ T9219] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.093146][T11297] siw: device registration error -23 [ 211.111368][T11300] loop9: detected capacity change from 0 to 512 [ 211.166098][T11300] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 211.184269][T11300] EXT4-fs (loop9): orphan cleanup on readonly fs [ 211.221597][T11300] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.2105: bad orphan inode 15 [ 211.265793][T11300] ext4_test_bit(bit=14, block=18) = 1 [ 211.271230][T11300] is_bad_inode(inode)=0 [ 211.275587][T11300] NEXT_ORPHAN(inode)=1023 [ 211.276155][T11299] syz.5.2106 uses obsolete (PF_INET,SOCK_PACKET) [ 211.279924][T11300] max_ino=32 [ 211.279934][T11300] i_nlink=0 [ 211.316622][T11300] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2105: bg 0: block 161: padding at end of block bitmap is not set [ 211.366208][T11300] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 211.396208][T11300] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 211.487569][ T9862] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.599011][T11314] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 211.616131][T11316] loop9: detected capacity change from 0 to 512 [ 211.635363][T11316] EXT4-fs: Invalid want_extra_isize 7 [ 211.656394][T11314] SELinux: failed to load policy [ 211.946876][T11319] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 212.594899][T11335] loop6: detected capacity change from 0 to 2048 [ 212.615702][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 212.627948][T11335] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.677566][T11335] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.786124][T11335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.801300][T11335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.881312][T11335] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2118: bg 0: block 345: padding at end of block bitmap is not set [ 212.925048][T11335] EXT4-fs (loop6): Remounting filesystem read-only [ 213.352838][T11359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2126'. [ 213.527373][ T9497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.604672][T11368] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 213.611221][T11368] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 213.618864][T11368] vhci_hcd vhci_hcd.0: Device attached [ 213.815746][ T9840] vhci_hcd: vhci_device speed not set [ 213.905528][ T9840] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 214.016337][T11370] vhci_hcd: connection reset by peer [ 214.026995][ T9990] vhci_hcd: stop threads [ 214.031267][ T9990] vhci_hcd: release socket [ 214.035761][ T9990] vhci_hcd: disconnect device [ 214.086606][T11376] loop9: detected capacity change from 0 to 1024 [ 214.101263][T11376] EXT4-fs: Ignoring removed orlov option [ 214.121267][T11376] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.168511][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 214.168527][ T29] audit: type=1400 audit(1763206902.209:12864): avc: denied { read write open } for pid=11375 comm="syz.9.2131" path="/66/bus/bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 214.282355][T11379] xt_CT: You must specify a L4 protocol and not use inversions on it [ 214.726072][T11398] netlink: 'syz.0.2139': attribute type 13 has an invalid length. [ 214.942617][ T9862] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.982937][T11408] siw: device registration error -23 [ 215.062879][ T29] audit: type=1326 audit(1763206903.099:12865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11413 comm="syz.9.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 215.086537][ T29] audit: type=1326 audit(1763206903.099:12866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11413 comm="syz.9.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 215.110174][ T29] audit: type=1326 audit(1763206903.099:12867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11413 comm="syz.9.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 215.133753][ T29] audit: type=1326 audit(1763206903.099:12868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11413 comm="syz.9.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f255b62f703 code=0x7ffc0000 [ 215.162929][T11414] loop9: detected capacity change from 0 to 1024 [ 215.170437][T11414] EXT4-fs: Ignoring removed orlov option [ 215.208669][T11420] loop0: detected capacity change from 0 to 1024 [ 215.215875][T11414] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.233266][ T29] audit: type=1326 audit(1763206903.199:12869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11413 comm="syz.9.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f255b62e17f code=0x7ffc0000 [ 215.256915][ T29] audit: type=1326 audit(1763206903.199:12870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11413 comm="syz.9.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f255b62f757 code=0x7ffc0000 [ 215.280515][ T29] audit: type=1326 audit(1763206903.199:12871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11413 comm="syz.9.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f255b62df10 code=0x7ffc0000 [ 215.304205][ T29] audit: type=1326 audit(1763206903.199:12872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11413 comm="syz.9.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f255b62f2cb code=0x7ffc0000 [ 215.327881][ T29] audit: type=1326 audit(1763206903.209:12873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11413 comm="syz.9.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f255b62e32a code=0x7ffc0000 [ 215.428821][T11420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.431395][T11425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.495990][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.529053][T11429] loop5: detected capacity change from 0 to 128 [ 215.595877][T11431] siw: device registration error -23 [ 215.627765][T11434] syz.5.2152: attempt to access beyond end of device [ 215.627765][T11434] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 215.658197][T11434] syz.5.2152: attempt to access beyond end of device [ 215.658197][T11434] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 215.714449][T11434] syz.5.2152: attempt to access beyond end of device [ 215.714449][T11434] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 215.780965][T11434] syz.5.2152: attempt to access beyond end of device [ 215.780965][T11434] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 215.839273][T11434] syz.5.2152: attempt to access beyond end of device [ 215.839273][T11434] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 215.885236][T11434] syz.5.2152: attempt to access beyond end of device [ 215.885236][T11434] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 215.925564][T11434] syz.5.2152: attempt to access beyond end of device [ 215.925564][T11434] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 215.961739][T11434] syz.5.2152: attempt to access beyond end of device [ 215.961739][T11434] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 215.980356][T11434] syz.5.2152: attempt to access beyond end of device [ 215.980356][T11434] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 215.994736][T11434] syz.5.2152: attempt to access beyond end of device [ 215.994736][T11434] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 216.009863][ T9862] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.108381][T11456] loop9: detected capacity change from 0 to 2048 [ 216.176011][T11466] loop9: detected capacity change from 0 to 128 [ 216.202071][T11466] FAT-fs (loop9): bogus number of directory entries (390) [ 216.209372][T11466] FAT-fs (loop9): Can't find a valid FAT filesystem [ 216.416694][T11477] netlink: 'syz.5.2167': attribute type 21 has an invalid length. [ 216.434545][T11477] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2167'. [ 216.443659][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2167'. [ 216.579888][T11478] syz.5.2167 (11478) used greatest stack depth: 8512 bytes left [ 216.709057][ T9990] Bluetooth: hci0: Frame reassembly failed (-84) [ 216.988487][T11493] batadv_slave_1: entered promiscuous mode [ 217.012919][T11492] batadv_slave_1: left promiscuous mode [ 217.664476][T11510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.712452][T11512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.777669][T11515] loop6: detected capacity change from 0 to 512 [ 217.811493][T11515] EXT4-fs: Invalid want_extra_isize 7 [ 218.048671][T11523] loop5: detected capacity change from 0 to 128 [ 218.095728][T11523] FAT-fs (loop5): bogus number of directory entries (390) [ 218.102917][T11523] FAT-fs (loop5): Can't find a valid FAT filesystem [ 218.181500][T11525] batadv_slave_1: entered promiscuous mode [ 218.210191][T11524] batadv_slave_1: left promiscuous mode [ 218.290892][ T9990] Bluetooth: hci1: Frame reassembly failed (-84) [ 218.330573][T11537] netlink: 'syz.9.2191': attribute type 13 has an invalid length. [ 218.579233][T11543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.589756][T11544] FAULT_INJECTION: forcing a failure. [ 218.589756][T11544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.603017][T11544] CPU: 1 UID: 0 PID: 11544 Comm: syz.9.2192 Not tainted syzkaller #0 PREEMPT(voluntary) [ 218.603054][T11544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 218.603096][T11544] Call Trace: [ 218.603105][T11544] [ 218.603115][T11544] __dump_stack+0x1d/0x30 [ 218.603143][T11544] dump_stack_lvl+0xe8/0x140 [ 218.603168][T11544] dump_stack+0x15/0x1b [ 218.603190][T11544] should_fail_ex+0x265/0x280 [ 218.603232][T11544] should_fail+0xb/0x20 [ 218.603321][T11544] should_fail_usercopy+0x1a/0x20 [ 218.603345][T11544] _copy_from_user+0x1c/0xb0 [ 218.603377][T11544] ___sys_sendmsg+0xc1/0x1d0 [ 218.603418][T11544] __x64_sys_sendmsg+0xd4/0x160 [ 218.603528][T11544] x64_sys_call+0x191e/0x3000 [ 218.603558][T11544] do_syscall_64+0xd2/0x200 [ 218.603583][T11544] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 218.603665][T11544] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 218.603776][T11544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.603804][T11544] RIP: 0033:0x7f255b62f6c9 [ 218.603831][T11544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.603863][T11544] RSP: 002b:00007f255a097038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.603888][T11544] RAX: ffffffffffffffda RBX: 00007f255b885fa0 RCX: 00007f255b62f6c9 [ 218.603901][T11544] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000007 [ 218.604023][T11544] RBP: 00007f255a097090 R08: 0000000000000000 R09: 0000000000000000 [ 218.604038][T11544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.604054][T11544] R13: 00007f255b886038 R14: 00007f255b885fa0 R15: 00007ffecb9ab408 [ 218.604080][T11544] [ 218.775496][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 218.937163][ T9840] usb 13-1: enqueue for inactive port 0 [ 218.942159][T11556] loop9: detected capacity change from 0 to 128 [ 218.942861][ T9840] usb 13-1: enqueue for inactive port 0 [ 218.975372][T11556] FAT-fs (loop9): bogus number of directory entries (390) [ 218.982666][T11556] FAT-fs (loop9): Can't find a valid FAT filesystem [ 218.999598][T11559] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 219.025656][ T9840] vhci_hcd: vhci_device speed not set [ 219.036338][T11561] siw: device registration error -23 [ 219.091327][T11565] loop6: detected capacity change from 0 to 1024 [ 219.110320][T11567] loop5: detected capacity change from 0 to 512 [ 219.111409][T11565] EXT4-fs: Ignoring removed orlov option [ 219.133916][T11567] EXT4-fs: Invalid want_extra_isize 7 [ 219.146389][T11563] batadv_slave_1: entered promiscuous mode [ 219.159200][T11565] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.173106][T11562] batadv_slave_1: left promiscuous mode [ 219.202919][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 219.202936][ T29] audit: type=1400 audit(1763206907.239:13072): avc: denied { mount } for pid=11564 comm="syz.6.2202" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 219.252042][ T29] audit: type=1400 audit(1763206907.269:13073): avc: denied { add_name } for pid=11564 comm="syz.6.2202" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.269320][T11571] netlink: 'syz.9.2204': attribute type 13 has an invalid length. [ 219.272910][ T29] audit: type=1400 audit(1763206907.269:13074): avc: denied { create } for pid=11564 comm="syz.6.2202" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 219.300880][ T29] audit: type=1400 audit(1763206907.269:13075): avc: denied { read write open } for pid=11564 comm="syz.6.2202" path="/102/bus/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 219.362873][T11574] xt_CT: You must specify a L4 protocol and not use inversions on it [ 219.709655][T11580] loop5: detected capacity change from 0 to 512 [ 219.747982][T11580] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002] [ 219.773047][T11580] System zones: 1-3, 19-19, 35-38 [ 219.794809][T11580] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.854766][T11580] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.879042][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2208'. [ 219.888172][ T29] audit: type=1400 audit(1763206907.909:13076): avc: denied { ioctl } for pid=11585 comm="syz.0.2208" path="socket:[30748]" dev="sockfs" ino=30748 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 219.955760][T11580] can0: slcan on ttyS3. [ 219.984891][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2208'. [ 220.024246][ T29] audit: type=1400 audit(1763206908.009:13077): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 220.045479][ T29] audit: type=1400 audit(1763206908.009:13078): avc: denied { search } for pid=3041 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.066906][ T29] audit: type=1400 audit(1763206908.009:13079): avc: denied { search } for pid=3041 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.088694][ T29] audit: type=1400 audit(1763206908.009:13080): avc: denied { search } for pid=3041 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.110554][ T29] audit: type=1400 audit(1763206908.009:13081): avc: denied { read } for pid=3041 comm="dhcpcd" name="n94" dev="tmpfs" ino=14424 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 220.241904][ T9497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.299490][T11579] can0 (unregistered): slcan off ttyS3. [ 220.308241][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 220.314279][ T3598] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 220.416240][ T9219] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.549076][T11617] netlink: 'syz.6.2215': attribute type 13 has an invalid length. [ 220.734806][T11627] 9pnet: Could not find request transport: rdmaÊð [ 220.874367][T11632] batadv_slave_1: entered promiscuous mode [ 220.881074][ T9990] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.953282][ T9990] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.072571][ T9990] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.097318][ T9990] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.108595][T11621] batadv_slave_1: left promiscuous mode [ 221.437708][ T3435] Bluetooth: hci0: Frame reassembly failed (-84) [ 221.587790][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2226'. [ 221.698808][T11679] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2226'. [ 221.747970][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2229'. [ 221.860819][T11684] netlink: 'syz.0.2230': attribute type 13 has an invalid length. [ 222.027493][T11688] netlink: 'syz.0.2232': attribute type 21 has an invalid length. [ 222.047102][T11688] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2232'. [ 222.056386][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2232'. [ 222.230268][T11698] FAULT_INJECTION: forcing a failure. [ 222.230268][T11698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.243517][T11698] CPU: 1 UID: 0 PID: 11698 Comm: syz.0.2236 Not tainted syzkaller #0 PREEMPT(voluntary) [ 222.243601][T11698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 222.243617][T11698] Call Trace: [ 222.243625][T11698] [ 222.243688][T11698] __dump_stack+0x1d/0x30 [ 222.243716][T11698] dump_stack_lvl+0xe8/0x140 [ 222.243743][T11698] dump_stack+0x15/0x1b [ 222.243766][T11698] should_fail_ex+0x265/0x280 [ 222.243826][T11698] should_fail+0xb/0x20 [ 222.243878][T11698] should_fail_usercopy+0x1a/0x20 [ 222.243897][T11698] _copy_from_user+0x1c/0xb0 [ 222.243922][T11698] do_fcntl+0x5a3/0xdf0 [ 222.243946][T11698] ? selinux_file_fcntl+0x1cb/0x1e0 [ 222.244005][T11698] __se_sys_fcntl+0xb1/0x120 [ 222.244042][T11698] __x64_sys_fcntl+0x43/0x50 [ 222.244086][T11698] x64_sys_call+0x29a4/0x3000 [ 222.244108][T11698] do_syscall_64+0xd2/0x200 [ 222.244133][T11698] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 222.244166][T11698] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 222.244284][T11698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.244312][T11698] RIP: 0033:0x7f2da0b8f6c9 [ 222.244329][T11698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.244404][T11698] RSP: 002b:00007f2d9f5ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 222.244422][T11698] RAX: ffffffffffffffda RBX: 00007f2da0de5fa0 RCX: 00007f2da0b8f6c9 [ 222.244436][T11698] RDX: 0000200000000000 RSI: 0000000000000026 RDI: 0000000000000003 [ 222.244447][T11698] RBP: 00007f2d9f5ef090 R08: 0000000000000000 R09: 0000000000000000 [ 222.244514][T11698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.244529][T11698] R13: 00007f2da0de6038 R14: 00007f2da0de5fa0 R15: 00007fff1af49cd8 [ 222.244553][T11698] [ 222.296149][T11701] futex_wake_op: syz.5.2237 tries to shift op by -1; fix this program [ 222.661615][T11711] netlink: 'syz.0.2241': attribute type 21 has an invalid length. [ 222.714346][T11711] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2241'. [ 222.723550][T11711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2241'. [ 222.919978][T11723] loop0: detected capacity change from 0 to 128 [ 222.956489][T11723] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2246'. [ 222.971928][T11723] 0ªX¹¦À: renamed from caif0 [ 223.028420][T11723] 0ªX¹¦À: entered allmulticast mode [ 223.033657][T11723] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 223.152154][T11723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.160737][T11723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.198420][T11744] FAULT_INJECTION: forcing a failure. [ 223.198420][T11744] name failslab, interval 1, probability 0, space 0, times 0 [ 223.211210][T11744] CPU: 0 UID: 0 PID: 11744 Comm: syz.6.2253 Not tainted syzkaller #0 PREEMPT(voluntary) [ 223.211244][T11744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 223.211297][T11744] Call Trace: [ 223.211304][T11744] [ 223.211311][T11744] __dump_stack+0x1d/0x30 [ 223.211333][T11744] dump_stack_lvl+0xe8/0x140 [ 223.211354][T11744] dump_stack+0x15/0x1b [ 223.211376][T11744] should_fail_ex+0x265/0x280 [ 223.211417][T11744] should_failslab+0x8c/0xb0 [ 223.211510][T11744] __kvmalloc_node_noprof+0x12e/0x670 [ 223.211542][T11744] ? xt_alloc_table_info+0x40/0x80 [ 223.211562][T11744] xt_alloc_table_info+0x40/0x80 [ 223.211639][T11744] do_arpt_set_ctl+0x5ae/0x9a0 [ 223.211743][T11744] ? lock_sock_nested+0x112/0x140 [ 223.211772][T11744] ? _raw_spin_unlock_bh+0x36/0x40 [ 223.211812][T11744] nf_setsockopt+0x199/0x1b0 [ 223.211840][T11744] ip_setsockopt+0x102/0x110 [ 223.211899][T11744] udp_setsockopt+0x99/0xb0 [ 223.211928][T11744] sock_common_setsockopt+0x69/0x80 [ 223.212010][T11744] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 223.212035][T11744] __sys_setsockopt+0x184/0x200 [ 223.212075][T11744] __x64_sys_setsockopt+0x64/0x80 [ 223.212189][T11744] x64_sys_call+0x20ec/0x3000 [ 223.212217][T11744] do_syscall_64+0xd2/0x200 [ 223.212241][T11744] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 223.212267][T11744] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 223.212345][T11744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.212447][T11744] RIP: 0033:0x7f3b4e1df6c9 [ 223.212465][T11744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.212487][T11744] RSP: 002b:00007f3b4cc3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 223.212554][T11744] RAX: ffffffffffffffda RBX: 00007f3b4e435fa0 RCX: 00007f3b4e1df6c9 [ 223.212566][T11744] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000006 [ 223.212580][T11744] RBP: 00007f3b4cc3f090 R08: 0000000000000418 R09: 0000000000000000 [ 223.212595][T11744] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000001 [ 223.212615][T11744] R13: 00007f3b4e436038 R14: 00007f3b4e435fa0 R15: 00007ffe876ca7a8 [ 223.212645][T11744] [ 223.436153][T11742] tipc: Enabling of bearer rejected, failed to enable media [ 223.449803][T11745] loop8: detected capacity change from 0 to 1024 [ 223.461080][T11745] EXT4-fs: inline encryption not supported [ 223.470443][T11745] EXT4-fs (loop8): unable to read superblock [ 223.478041][T11742] loop8: detected capacity change from 0 to 128 [ 223.487670][T11742] EXT4-fs: Ignoring removed nobh option [ 223.493604][T11742] /dev/loop8: Can't open blockdev [ 223.505554][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 223.511640][ T3598] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 223.678495][T11753] netlink: 'syz.8.2256': attribute type 13 has an invalid length. [ 223.686438][T11753] netlink: 'syz.8.2256': attribute type 27 has an invalid length. [ 223.923828][T11760] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 223.951474][T11761] 9pnet: Could not find request transport: fd(rfdno=0x0000000000000006 [ 224.189691][T11770] vlan2: entered allmulticast mode [ 224.194928][T11770] bridge_slave_0: entered allmulticast mode [ 224.236328][T11777] loop8: detected capacity change from 0 to 512 [ 224.277112][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 224.277217][ T29] audit: type=1326 audit(1763206912.319:13377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.0.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da0b8f6c9 code=0x7ffc0000 [ 224.309397][T11777] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.2261: corrupted inode contents [ 224.337796][T11784] siw: device registration error -23 [ 224.342145][ T29] audit: type=1326 audit(1763206912.319:13378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.0.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da0b8f6c9 code=0x7ffc0000 [ 224.343227][T11777] EXT4-fs (loop8): Remounting filesystem read-only [ 224.366782][ T29] audit: type=1326 audit(1763206912.319:13379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.0.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2da0b8f6c9 code=0x7ffc0000 [ 224.366810][ T29] audit: type=1326 audit(1763206912.319:13380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.0.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da0b8f6c9 code=0x7ffc0000 [ 224.420492][ T29] audit: type=1326 audit(1763206912.319:13381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.0.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2da0b8f6c9 code=0x7ffc0000 [ 224.444082][ T29] audit: type=1326 audit(1763206912.319:13382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.0.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da0b8f6c9 code=0x7ffc0000 [ 224.455771][T11777] Quota error (device loop8): write_blk: dquota write failed [ 224.467791][ T29] audit: type=1326 audit(1763206912.319:13383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.0.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2da0b8f6c9 code=0x7ffc0000 [ 224.477413][T11777] Quota error (device loop8): qtree_write_dquot: Error -30 occurred while creating quota [ 224.498536][ T29] audit: type=1326 audit(1763206912.319:13384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.0.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da0b8f6c9 code=0x7ffc0000 [ 224.508470][T11777] EXT4-fs (loop8): 1 truncate cleaned up [ 224.539253][T11777] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.554173][T11777] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.565880][T11777] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.607960][T11788] netlink: '+}[@': attribute type 10 has an invalid length. [ 224.624715][T11786] siw: device registration error -23 [ 224.780281][T11798] netlink: 'syz.8.2271': attribute type 21 has an invalid length. [ 225.494330][T11800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 225.507271][T11798] __nla_validate_parse: 1 callbacks suppressed [ 225.507286][T11798] netlink: 156 bytes leftover after parsing attributes in process `syz.8.2271'. [ 225.522590][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2271'. [ 226.406638][T11837] siw: device registration error -23 [ 226.633524][T11849] netlink: 'syz.5.2290': attribute type 21 has an invalid length. [ 226.667519][T11849] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2290'. [ 226.676691][T11849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2290'. [ 226.697113][T11848] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2289'. [ 226.713334][T11846] loop9: detected capacity change from 0 to 128 [ 226.745473][T11846] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 227.083941][T11872] loop6: detected capacity change from 0 to 512 [ 227.134509][T11872] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 227.155574][T11872] EXT4-fs (loop6): orphan cleanup on readonly fs [ 227.217194][T11872] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #13: comm syz.6.2299: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 227.322428][T11872] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2299: couldn't read orphan inode 13 (err -117) [ 227.361196][T11885] netlink: 'syz.5.2302': attribute type 21 has an invalid length. [ 227.380654][T11872] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 227.395488][T11885] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2302'. [ 227.404638][T11885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2302'. [ 227.474938][T11872] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 227.506086][T11872] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 227.532477][T11890] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2299'. [ 227.562995][T11872] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 227.598804][T11872] ext4 filesystem being remounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.703609][ T9497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.745850][T11898] netlink: 'syz.5.2306': attribute type 21 has an invalid length. [ 227.753756][T11898] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2306'. [ 227.763033][T11898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2306'. [ 228.139148][T11924] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 228.180113][T11930] siw: device registration error -23 [ 228.188000][T11924] SELinux: failed to load policy [ 228.211265][T11927] netlink: 'syz.6.2318': attribute type 13 has an invalid length. [ 228.406527][T11943] netlink: 'syz.6.2324': attribute type 21 has an invalid length. [ 229.235262][T11969] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 229.289375][T11969] SELinux: failed to load policy [ 229.355917][T11971] siw: device registration error -23 [ 229.515787][T11973] netlink: 'syz.8.2334': attribute type 13 has an invalid length. [ 229.547986][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 229.548004][ T29] audit: type=1326 audit(1763206917.589:13634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.9.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 229.735578][ T29] audit: type=1326 audit(1763206917.589:13635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.9.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 229.759272][ T29] audit: type=1326 audit(1763206917.629:13636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.9.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 229.782725][ T29] audit: type=1326 audit(1763206917.629:13637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.9.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 229.806446][ T29] audit: type=1326 audit(1763206917.629:13638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.9.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 229.830115][ T29] audit: type=1326 audit(1763206917.629:13639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.9.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 229.853545][ T29] audit: type=1326 audit(1763206917.629:13640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.9.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 229.877176][ T29] audit: type=1326 audit(1763206917.629:13641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.9.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 229.900913][ T29] audit: type=1326 audit(1763206917.629:13642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.9.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 229.924609][ T29] audit: type=1326 audit(1763206917.629:13643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.9.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 230.441218][T11975] kthread_run failed with err -4 [ 230.503884][ T31] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.557091][ T31] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.614028][ T31] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.674020][ T31] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.716770][T12001] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 230.771301][T12001] SELinux: failed to load policy [ 230.796107][T12004] loop6: detected capacity change from 0 to 512 [ 230.843913][T12004] EXT4-fs: Invalid want_extra_isize 7 [ 231.137260][T12015] GUP no longer grows the stack in syz.8.2347 (12015): 200000004000-20000000a000 (200000002000) [ 231.147797][T12015] CPU: 1 UID: 0 PID: 12015 Comm: syz.8.2347 Not tainted syzkaller #0 PREEMPT(voluntary) [ 231.147892][T12015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 231.147905][T12015] Call Trace: [ 231.147979][T12015] [ 231.147994][T12015] __dump_stack+0x1d/0x30 [ 231.148017][T12015] dump_stack_lvl+0xe8/0x140 [ 231.148038][T12015] dump_stack+0x15/0x1b [ 231.148057][T12015] __get_user_pages+0x1968/0x1ed0 [ 231.148103][T12015] get_user_pages_remote+0x1d5/0x6c0 [ 231.148179][T12015] __access_remote_vm+0x15c/0x590 [ 231.148232][T12015] access_remote_vm+0x32/0x40 [ 231.148255][T12015] proc_pid_cmdline_read+0x32b/0x6c0 [ 231.148300][T12015] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 231.148338][T12015] vfs_readv+0x3fb/0x690 [ 231.148465][T12015] __x64_sys_preadv+0xfd/0x1c0 [ 231.148548][T12015] x64_sys_call+0x282e/0x3000 [ 231.148577][T12015] do_syscall_64+0xd2/0x200 [ 231.148604][T12015] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 231.148642][T12015] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 231.148719][T12015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.148748][T12015] RIP: 0033:0x7ff83714f6c9 [ 231.148767][T12015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.148790][T12015] RSP: 002b:00007ff835b6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 231.148810][T12015] RAX: ffffffffffffffda RBX: 00007ff8373a6180 RCX: 00007ff83714f6c9 [ 231.148822][T12015] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006 [ 231.148837][T12015] RBP: 00007ff8371d1f91 R08: 0000000000000000 R09: 0000000000000000 [ 231.148924][T12015] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 231.148940][T12015] R13: 00007ff8373a6218 R14: 00007ff8373a6180 R15: 00007ffe36941dd8 [ 231.148965][T12015] [ 231.749189][T12022] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 232.377432][T12030] netlink: 'syz.9.2352': attribute type 13 has an invalid length. [ 232.749915][T12038] netlink: 'syz.9.2356': attribute type 13 has an invalid length. [ 233.033710][T12048] __nla_validate_parse: 2 callbacks suppressed [ 233.033724][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2357'. [ 233.120419][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2360'. [ 233.129361][T12052] netlink: 'syz.8.2360': attribute type 5 has an invalid length. [ 233.137129][T12052] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2360'. [ 233.237392][T12052] geneve2: entered promiscuous mode [ 233.242729][T12052] geneve2: entered allmulticast mode [ 233.273781][T12058] netlink: 'syz.6.2363': attribute type 21 has an invalid length. [ 233.312466][T12058] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2363'. [ 233.321601][T12058] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2363'. [ 233.368478][T12063] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2365'. [ 233.426585][T12065] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 233.459336][T12067] netlink: 'syz.6.2367': attribute type 21 has an invalid length. [ 233.467402][T12065] SELinux: failed to load policy [ 233.497885][T12067] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2367'. [ 233.507124][T12067] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2367'. [ 233.630693][T12075] loop0: detected capacity change from 0 to 2048 [ 233.712693][ T3698] loop0: p1 p2 p3 [ 233.724665][T12079] netlink: 'syz.6.2371': attribute type 21 has an invalid length. [ 233.740902][T12075] loop0: p1 p2 p3 [ 233.749241][T12079] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2371'. [ 233.758438][T12079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2371'. [ 233.914441][T12090] netlink: 'syz.0.2374': attribute type 21 has an invalid length. [ 233.969202][ T6913] udevd[6913]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 233.980515][ T3698] udevd[3698]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 233.999684][T12095] netlink: 'syz.5.2376': attribute type 21 has an invalid length. [ 234.042128][ T9990] Bluetooth: hci1: Frame reassembly failed (-84) [ 234.053679][T12100] loop6: detected capacity change from 0 to 512 [ 234.083202][T12100] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2373: bg 0: block 248: padding at end of block bitmap is not set [ 234.098544][T12100] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.2373: Failed to acquire dquot type 1 [ 234.099813][T12105] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 234.110631][T12100] EXT4-fs (loop6): 1 truncate cleaned up [ 234.127936][T12100] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.130576][T12105] SELinux: failed to load policy [ 234.151094][T12100] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.198666][ T9497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.362970][T12123] loop5: detected capacity change from 0 to 2048 [ 234.486939][T12123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.544278][T12123] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.585681][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 234.585698][ T29] audit: type=1326 audit(1763206922.629:13842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12116 comm="syz.5.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd001dbdf10 code=0x7ffc0000 [ 234.670746][T12123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.693722][ T29] audit: type=1326 audit(1763206922.629:13843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12116 comm="syz.5.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fd001dbe417 code=0x7ffc0000 [ 234.709987][T12123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.717424][ T29] audit: type=1326 audit(1763206922.629:13844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12116 comm="syz.5.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd001dbdf10 code=0x7ffc0000 [ 234.748727][ T29] audit: type=1326 audit(1763206922.629:13845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12116 comm="syz.5.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd001dbf6c9 code=0x7ffc0000 [ 234.766982][T12136] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 234.772384][ T29] audit: type=1326 audit(1763206922.629:13846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12116 comm="syz.5.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd001dbf6c9 code=0x7ffc0000 [ 234.806352][ T29] audit: type=1400 audit(1763206922.659:13847): avc: denied { add_name } for pid=12116 comm="syz.5.2384" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.827278][ T29] audit: type=1400 audit(1763206922.659:13848): avc: denied { create } for pid=12116 comm="syz.5.2384" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 234.847757][ T29] audit: type=1400 audit(1763206922.659:13849): avc: denied { read write } for pid=12116 comm="syz.5.2384" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 234.870659][ T29] audit: type=1400 audit(1763206922.659:13850): avc: denied { open } for pid=12116 comm="syz.5.2384" path="/143/file0/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 234.894068][ T29] audit: type=1326 audit(1763206922.709:13851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12116 comm="syz.5.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd001dbdf10 code=0x7ffc0000 [ 234.905503][T12123] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2384: bg 0: block 345: padding at end of block bitmap is not set [ 234.959076][T12123] EXT4-fs (loop5): Remounting filesystem read-only [ 235.337230][ T3674] Bluetooth: hci0: command 0x1003 tx timeout [ 235.343329][ T3598] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 235.524395][T12153] loop9: detected capacity change from 0 to 2048 [ 235.582052][T12153] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.651803][T12153] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.673836][ T9219] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.706668][T12161] loop6: detected capacity change from 0 to 512 [ 235.808395][T12153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.847510][T12153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.899907][T12161] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.905476][T12153] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2393: bg 0: block 345: padding at end of block bitmap is not set [ 235.929253][T12161] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.962693][T12153] EXT4-fs (loop9): Remounting filesystem read-only [ 235.983273][T12161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.065555][ T3598] Bluetooth: hci1: command 0x1003 tx timeout [ 236.071926][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 236.151558][T12172] netlink: 'syz.8.2398': attribute type 21 has an invalid length. [ 236.253676][ T3468] Bluetooth: hci0: Frame reassembly failed (-84) [ 236.401856][T12180] siw: device registration error -23 [ 236.793279][ T9862] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.046106][T12197] loop5: detected capacity change from 0 to 2048 [ 237.055554][T12192] loop0: detected capacity change from 0 to 8192 [ 237.086198][T12192] FAT-fs (loop0): bogus logical sector size 659 [ 237.092524][T12192] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 237.101885][T12192] FAT-fs (loop0): Can't find a valid FAT filesystem [ 237.117415][T12197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.134147][T12197] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.212427][T12197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.231057][T12197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.255421][T12197] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2407: bg 0: block 345: padding at end of block bitmap is not set [ 237.270932][T12197] EXT4-fs (loop5): Remounting filesystem read-only [ 237.518192][T12215] netlink: 'syz.0.2412': attribute type 21 has an invalid length. [ 237.595849][T12216] loop8: detected capacity change from 0 to 2048 [ 237.635909][T12216] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.684021][T12216] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.793833][T12216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.847372][T12216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.898439][ T9219] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.926167][T12216] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2413: bg 0: block 345: padding at end of block bitmap is not set [ 238.001199][T12232] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 238.013882][T12216] EXT4-fs (loop8): Remounting filesystem read-only [ 238.049646][T12232] SELinux: failed to load policy [ 238.295456][ T3598] Bluetooth: hci0: command 0x1003 tx timeout [ 238.301553][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 238.428098][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 238.657468][T12259] loop9: detected capacity change from 0 to 2048 [ 238.690014][T12259] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.725013][T12259] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.777220][ T9781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.826761][T12259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.835224][T12259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.932265][T12259] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2428: bg 0: block 345: padding at end of block bitmap is not set [ 238.965738][T12259] EXT4-fs (loop9): Remounting filesystem read-only [ 239.302183][T12279] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 239.302147][T12278] netlink: 'syz.5.2434': attribute type 13 has an invalid length. [ 239.454967][T12278] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.462265][T12278] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.575358][ T9862] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.679058][T12283] __nla_validate_parse: 10 callbacks suppressed [ 239.679077][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2436'. [ 239.694359][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2436'. [ 239.767241][ T342] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.817998][ T342] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.852608][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 239.852625][ T29] audit: type=1400 audit(1763206927.889:14145): avc: denied { create } for pid=12285 comm="syz.8.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 239.855149][ T342] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.955602][ T342] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.046013][ T29] audit: type=1400 audit(1763206928.089:14146): avc: denied { append } for pid=12290 comm="syz.5.2439" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.085616][T12291] netlink: 'syz.5.2439': attribute type 21 has an invalid length. [ 240.106641][T12291] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2439'. [ 240.115742][T12291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2439'. [ 240.148965][ T29] audit: type=1400 audit(1763206928.179:14147): avc: denied { getopt } for pid=12290 comm="syz.5.2439" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 240.169639][ T29] audit: type=1400 audit(1763206928.179:14148): avc: denied { setopt } for pid=12290 comm="syz.5.2439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 240.189508][ T29] audit: type=1400 audit(1763206928.179:14149): avc: denied { write } for pid=12290 comm="syz.5.2439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 240.209226][ T29] audit: type=1400 audit(1763206928.179:14150): avc: denied { connect } for pid=12290 comm="syz.5.2439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 240.228999][ T29] audit: type=1400 audit(1763206928.179:14151): avc: denied { name_connect } for pid=12290 comm="syz.5.2439" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 240.264364][ T29] audit: type=1400 audit(1763206928.219:14152): avc: denied { tracepoint } for pid=12290 comm="syz.5.2439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 240.356496][ T29] audit: type=1326 audit(1763206928.399:14153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12293 comm="syz.9.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 240.380284][ T29] audit: type=1326 audit(1763206928.399:14154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12293 comm="syz.9.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 240.455488][ T3598] Bluetooth: hci0: command 0x1003 tx timeout [ 240.461534][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 240.561419][T12309] FAULT_INJECTION: forcing a failure. [ 240.561419][T12309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.574684][T12309] CPU: 0 UID: 0 PID: 12309 Comm: syz.0.2445 Not tainted syzkaller #0 PREEMPT(voluntary) [ 240.574783][T12309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 240.574796][T12309] Call Trace: [ 240.574804][T12309] [ 240.574813][T12309] __dump_stack+0x1d/0x30 [ 240.574839][T12309] dump_stack_lvl+0xe8/0x140 [ 240.574862][T12309] dump_stack+0x15/0x1b [ 240.574878][T12309] should_fail_ex+0x265/0x280 [ 240.574919][T12309] should_fail+0xb/0x20 [ 240.575005][T12309] should_fail_usercopy+0x1a/0x20 [ 240.575029][T12309] _copy_from_user+0x1c/0xb0 [ 240.575059][T12309] ucma_write+0xd9/0x250 [ 240.575084][T12309] vfs_writev+0x406/0x8b0 [ 240.575214][T12309] ? __pfx_ucma_write+0x10/0x10 [ 240.575280][T12309] do_writev+0xe7/0x210 [ 240.575315][T12309] __x64_sys_writev+0x45/0x50 [ 240.575346][T12309] x64_sys_call+0x1e9a/0x3000 [ 240.575470][T12309] do_syscall_64+0xd2/0x200 [ 240.575490][T12309] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 240.575516][T12309] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 240.575621][T12309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.575647][T12309] RIP: 0033:0x7f2da0b8f6c9 [ 240.575666][T12309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.575687][T12309] RSP: 002b:00007f2d9f5ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 240.575761][T12309] RAX: ffffffffffffffda RBX: 00007f2da0de5fa0 RCX: 00007f2da0b8f6c9 [ 240.575776][T12309] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 000000000000000d [ 240.575790][T12309] RBP: 00007f2d9f5ef090 R08: 0000000000000000 R09: 0000000000000000 [ 240.575805][T12309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.575820][T12309] R13: 00007f2da0de6038 R14: 00007f2da0de5fa0 R15: 00007fff1af49cd8 [ 240.575840][T12309] [ 240.828087][T12318] loop6: detected capacity change from 0 to 512 [ 240.854587][T12318] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 240.889259][T12318] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 240.915852][T12318] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2449: bg 0: block 248: padding at end of block bitmap is not set [ 240.961228][T12318] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.2449: Failed to acquire dquot type 1 [ 240.984906][T12318] EXT4-fs (loop6): 1 truncate cleaned up [ 240.993183][T12318] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 241.048867][T12318] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.2449: Failed to acquire dquot type 1 [ 241.082136][T12339] loop0: detected capacity change from 0 to 2048 [ 241.114705][T12341] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.2449: Failed to acquire dquot type 1 [ 241.177030][ T3698] loop0: p1 p2 p3 [ 241.183752][ T9497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 241.202016][T12339] loop0: p1 p2 p3 [ 241.635192][ T6913] udevd[6913]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 241.646850][ T3698] udevd[3698]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 241.648842][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 241.684275][T12359] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 241.699214][ T3698] udevd[3698]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 241.711018][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 241.722267][ T6913] udevd[6913]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 241.732277][T12359] SELinux: failed to load policy [ 241.775333][T12364] netlink: 'syz.0.2464': attribute type 13 has an invalid length. [ 242.073737][T12381] loop9: detected capacity change from 0 to 2048 [ 242.116307][T12381] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.151692][T12381] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.186933][T12388] netlink: 'syz.0.2472': attribute type 21 has an invalid length. [ 242.217663][T12388] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2472'. [ 242.226777][T12388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2472'. [ 242.261303][T12381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.290875][T12381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.336605][T12381] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2470: bg 0: block 345: padding at end of block bitmap is not set [ 242.351411][T12381] EXT4-fs (loop9): Remounting filesystem read-only [ 242.712288][T12405] netlink: 'syz.0.2479': attribute type 13 has an invalid length. [ 242.802113][T12409] siw: device registration error -23 [ 242.842989][T12412] loop5: detected capacity change from 0 to 2048 [ 242.879309][T12418] loop6: detected capacity change from 0 to 1024 [ 242.890611][T12418] EXT4-fs: Ignoring removed orlov option [ 242.900557][T12418] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.922017][T12412] loop5: p1 p2 p3 [ 242.966982][ T9862] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.133929][T12433] netlink: 'syz.5.2491': attribute type 13 has an invalid length. [ 243.413243][T12437] 9pnet: Could not find request transport: fd(rfdno=0x0000000000000006 [ 243.651219][T12450] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2497'. [ 243.715220][T12458] loop8: detected capacity change from 0 to 2048 [ 243.757447][T12458] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.780526][ T9497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.790131][T12458] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.807661][T12466] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 243.824691][T12464] loop9: detected capacity change from 0 to 2048 [ 243.846048][T12466] SELinux: failed to load policy [ 243.887956][ T3698] loop9: p1 p2 p3 [ 243.898341][T12458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.940683][T12458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.956500][T12472] netlink: 'syz.0.2502': attribute type 13 has an invalid length. [ 243.976369][T12464] loop9: p1 p2 p3 [ 244.005430][T12458] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2498: bg 0: block 345: padding at end of block bitmap is not set [ 244.033766][ T3002] loop9: p1 p2 p3 [ 244.047756][T12458] EXT4-fs (loop8): Remounting filesystem read-only [ 244.113122][ T6913] udevd[6913]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 244.146984][ T3698] udevd[3698]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 244.160680][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 244.233062][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 244.473927][T12493] 9pnet: Could not find request transport: fd(rfdno=0x0000000000000006 [ 244.924017][ T9781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.678890][ T29] kauditd_printk_skb: 515 callbacks suppressed [ 245.678904][ T29] audit: type=1400 audit(1763206933.719:14664): avc: denied { create } for pid=12513 comm="syz.5.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 245.708574][T12515] siw: device registration error -23 [ 246.415424][ T29] audit: type=1400 audit(1763206933.819:14665): avc: denied { allowed } for pid=12513 comm="syz.5.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 246.435071][ T29] audit: type=1400 audit(1763206933.819:14666): avc: denied { create } for pid=12513 comm="syz.5.2516" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 246.456555][ T29] audit: type=1400 audit(1763206933.819:14667): avc: denied { map } for pid=12513 comm="syz.5.2516" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 246.481057][ T29] audit: type=1400 audit(1763206933.819:14668): avc: denied { read write } for pid=12513 comm="syz.5.2516" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 246.718663][ T29] audit: type=1326 audit(1763206934.729:14669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12535 comm="syz.8.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83714f6c9 code=0x7ffc0000 [ 246.742407][ T29] audit: type=1326 audit(1763206934.729:14670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12535 comm="syz.8.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83714f6c9 code=0x7ffc0000 [ 246.766069][ T29] audit: type=1326 audit(1763206934.739:14671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12535 comm="syz.8.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff83714f6c9 code=0x7ffc0000 [ 246.789569][ T29] audit: type=1326 audit(1763206934.739:14672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12535 comm="syz.8.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83714f6c9 code=0x7ffc0000 [ 246.813176][ T29] audit: type=1326 audit(1763206934.739:14673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12535 comm="syz.8.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83714f6c9 code=0x7ffc0000 [ 247.073950][T12540] loop8: detected capacity change from 0 to 1024 [ 247.094513][T12540] EXT4-fs: Ignoring removed orlov option [ 247.127433][T12540] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.259299][T12552] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 248.020591][ T9781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.615609][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 249.286956][T12592] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 249.325578][T12592] SELinux: failed to load policy [ 249.466387][T12599] netlink: 'syz.9.2545': attribute type 13 has an invalid length. [ 249.483700][T12602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2546'. [ 249.650391][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 249.680981][T12610] loop9: detected capacity change from 0 to 2048 [ 249.718969][ T6913] loop9: p1 p2 p3 [ 249.732375][T12610] loop9: p1 p2 p3 [ 249.824097][ T6913] udevd[6913]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 249.834112][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 249.843985][ T3698] udevd[3698]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 249.869421][ T3698] udevd[3698]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 249.879988][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 249.890055][ T6913] udevd[6913]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 250.111649][T12631] 9pnet: Could not find request transport: fd(rfdno=0x0000000000000006 [ 250.167765][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2558'. [ 250.250295][T12644] loop5: detected capacity change from 0 to 2048 [ 250.298090][ T6913] loop5: p1 p2 p3 [ 250.313958][T12644] loop5: p1 p2 p3 [ 250.397136][ T6913] udevd[6913]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 250.401438][ T3698] udevd[3698]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 250.417125][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 250.543342][T12666] siw: device registration error -23 [ 250.682932][T12671] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2572'. [ 250.758674][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 250.758691][ T29] audit: type=1326 audit(1763206938.799:14852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.9.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 250.791727][ T29] audit: type=1326 audit(1763206938.799:14853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.9.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 250.815277][ T29] audit: type=1326 audit(1763206938.799:14854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.9.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 250.838982][ T29] audit: type=1326 audit(1763206938.799:14855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.9.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 250.862511][ T29] audit: type=1326 audit(1763206938.799:14856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.9.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 250.886204][ T29] audit: type=1326 audit(1763206938.799:14857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.9.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 250.909885][ T29] audit: type=1326 audit(1763206938.799:14858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.9.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255b62f6c9 code=0x7ffc0000 [ 250.949832][ T29] audit: type=1400 audit(1763206938.989:14859): avc: denied { read write } for pid=9862 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 250.974199][ T29] audit: type=1400 audit(1763206938.989:14860): avc: denied { open } for pid=9862 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 250.998524][ T29] audit: type=1400 audit(1763206938.989:14861): avc: denied { ioctl } for pid=9862 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 251.138801][T12690] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2578'. [ 251.147880][T12690] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2578'. [ 251.209702][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2579'. [ 251.627524][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2584'. [ 251.663232][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 251.669416][ T3598] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 251.739983][T12719] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 251.776370][T12719] SELinux: failed to load policy [ 251.922508][T12736] netlink: 'syz.9.2594': attribute type 21 has an invalid length. [ 251.947201][T12736] netlink: 156 bytes leftover after parsing attributes in process `syz.9.2594'. [ 251.956296][T12736] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2594'. [ 252.586394][T12768] netlink: 'syz.5.2606': attribute type 21 has an invalid length. [ 252.602539][T12768] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2606'. [ 253.013010][T12775] loop0: detected capacity change from 0 to 2048 [ 253.198473][T12775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.211279][T12775] ext4 filesystem being mounted at /517/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.283435][T12775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.310613][T12798] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 253.362865][T12775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.514188][T12775] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2607: bg 0: block 345: padding at end of block bitmap is not set [ 253.701729][T12775] EXT4-fs (loop0): Remounting filesystem read-only [ 254.010169][T12811] loop6: detected capacity change from 0 to 128 [ 254.034053][T12811] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 254.273605][T12818] siw: device registration error -23 [ 254.487290][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.637828][T12828] loop9: detected capacity change from 0 to 2048 [ 254.678059][ T3698] loop9: p1 p2 p3 [ 254.815627][T12828] loop9: p1 p2 p3 [ 254.974979][ T3698] udevd[3698]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 254.981011][ T6913] udevd[6913]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 254.996414][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 255.057015][ T3698] udevd[3698]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 255.068313][ T6913] udevd[6913]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 255.068437][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 255.240441][T12847] __nla_validate_parse: 1 callbacks suppressed [ 255.240503][T12847] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2633'. [ 255.326632][T12852] netlink: 'syz.5.2634': attribute type 13 has an invalid length. [ 255.671009][T12872] loop5: detected capacity change from 0 to 2048 [ 255.737307][T12872] loop5: p1 p2 p3 [ 255.765796][ T29] kauditd_printk_skb: 502 callbacks suppressed [ 255.765823][ T29] audit: type=1326 audit(1763206943.809:15364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12876 comm="syz.6.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4e1df6c9 code=0x7ffc0000 [ 255.818286][T12877] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2644'. [ 255.856538][ T7230] udevd[7230]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 255.868774][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 255.880139][ T6913] udevd[6913]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 255.895620][ T29] audit: type=1326 audit(1763206943.809:15365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12876 comm="syz.6.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4e1df6c9 code=0x7ffc0000 [ 255.919304][ T29] audit: type=1326 audit(1763206943.839:15366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12876 comm="syz.6.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4e1df6c9 code=0x7ffc0000 [ 255.942982][ T29] audit: type=1326 audit(1763206943.839:15367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12876 comm="syz.6.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4e1df6c9 code=0x7ffc0000 [ 255.966670][ T29] audit: type=1326 audit(1763206943.849:15368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12876 comm="syz.6.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b4e1df6c9 code=0x7ffc0000 [ 255.990420][ T29] audit: type=1326 audit(1763206943.849:15369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12876 comm="syz.6.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4e1df6c9 code=0x7ffc0000 [ 256.014013][ T29] audit: type=1326 audit(1763206943.849:15370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12876 comm="syz.6.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4e1df6c9 code=0x7ffc0000 [ 256.037650][ T29] audit: type=1326 audit(1763206943.849:15371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12876 comm="syz.6.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4e1df6c9 code=0x7ffc0000 [ 256.061287][ T29] audit: type=1326 audit(1763206943.849:15372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12876 comm="syz.6.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4e1df6c9 code=0x7ffc0000 [ 256.084954][ T29] audit: type=1326 audit(1763206943.849:15373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12876 comm="syz.6.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b4e1df6c9 code=0x7ffc0000 [ 256.548470][T12919] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2660'. [ 256.550141][T12918] loop8: detected capacity change from 0 to 2048 [ 256.557644][T12919] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2660'. [ 256.677860][ T6913] loop8: p1 p2 p3 [ 256.688281][T12918] loop8: p1 p2 p3 [ 256.777028][T12929] netlink: 'syz.9.2663': attribute type 21 has an invalid length. [ 256.796458][ T3698] udevd[3698]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 256.823353][T12929] netlink: 156 bytes leftover after parsing attributes in process `syz.9.2663'. [ 256.832527][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2663'. [ 257.018853][T12941] vlan2: entered allmulticast mode [ 257.069408][T12947] loop8: detected capacity change from 0 to 512 [ 257.100486][T12947] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.2668: corrupted inode contents [ 257.169762][T12947] EXT4-fs (loop8): Remounting filesystem read-only [ 257.206522][T12947] EXT4-fs (loop8): 1 truncate cleaned up [ 257.217748][T12953] loop6: detected capacity change from 0 to 1024 [ 257.233094][T12947] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.255808][T12953] EXT4-fs: Ignoring removed orlov option [ 257.289380][T12953] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.312331][T12947] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.383849][T12947] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.440653][T12957] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.639540][T12965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2676'. [ 257.649340][T12968] loop8: detected capacity change from 0 to 2048 [ 257.722345][ T6913] loop8: p1 p2 p3 [ 257.733778][T12968] loop8: p1 p2 p3 [ 257.915750][T12982] netlink: 'syz.5.2682': attribute type 21 has an invalid length. [ 257.938850][T12982] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2682'. [ 257.948033][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2682'. [ 258.069609][T12990] loop5: detected capacity change from 0 to 512 [ 258.076676][ T9497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.106844][T12990] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.2686: corrupted inode contents [ 258.127934][T12990] EXT4-fs (loop5): Remounting filesystem read-only [ 258.145244][T12990] EXT4-fs (loop5): 1 truncate cleaned up [ 258.156983][T12990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.174421][T12990] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.192819][T12990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.234939][ T9497] ================================================================== [ 258.243088][ T9497] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 258.250594][ T9497] [ 258.252932][ T9497] read-write to 0xffff88811a7c1278 of 8 bytes by task 12998 on cpu 1: [ 258.261101][ T9497] inode_add_bytes+0x47/0xe0 [ 258.265716][ T9497] __dquot_alloc_space+0x180/0x8a0 [ 258.270858][ T9497] shmem_inode_acct_blocks+0x129/0x240 [ 258.276356][ T9497] shmem_get_folio_gfp+0x5a7/0xd60 [ 258.281501][ T9497] shmem_write_begin+0xa8/0x190 [ 258.286398][ T9497] generic_perform_write+0x184/0x490 [ 258.291717][ T9497] shmem_file_write_iter+0xc5/0xf0 [ 258.296851][ T9497] __kernel_write_iter+0x2d6/0x540 [ 258.301992][ T9497] dump_user_range+0x61e/0x8f0 [ 258.306797][ T9497] elf_core_dump+0x1de7/0x1f80 [ 258.311605][ T9497] coredump_write+0xb12/0xe30 [ 258.316343][ T9497] vfs_coredump+0x143a/0x20d0 [ 258.321079][ T9497] get_signal+0xd84/0xf70 [ 258.325447][ T9497] arch_do_signal_or_restart+0x96/0x440 [ 258.331015][ T9497] irqentry_exit_to_user_mode+0x5b/0xa0 [ 258.336594][ T9497] irqentry_exit+0x12/0x50 [ 258.341039][ T9497] exc_general_protection+0x15b/0x1f0 [ 258.346433][ T9497] asm_exc_general_protection+0x26/0x30 [ 258.351984][ T9497] [ 258.354310][ T9497] read to 0xffff88811a7c1278 of 8 bytes by task 9497 on cpu 0: [ 258.361881][ T9497] generic_fillattr+0x27d/0x340 [ 258.366754][ T9497] shmem_getattr+0x181/0x200 [ 258.371361][ T9497] vfs_getattr_nosec+0x146/0x1e0 [ 258.376406][ T9497] vfs_statx+0x113/0x390 [ 258.380674][ T9497] vfs_fstatat+0x115/0x170 [ 258.385107][ T9497] __se_sys_newfstatat+0x55/0x260 [ 258.390153][ T9497] __x64_sys_newfstatat+0x55/0x70 [ 258.395194][ T9497] x64_sys_call+0x135a/0x3000 [ 258.399876][ T9497] do_syscall_64+0xd2/0x200 [ 258.404385][ T9497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.410293][ T9497] [ 258.412617][ T9497] value changed: 0x0000000000002a20 -> 0x0000000000002a40 [ 258.419721][ T9497] [ 258.422043][ T9497] Reported by Kernel Concurrency Sanitizer on: [ 258.428205][ T9497] CPU: 0 UID: 0 PID: 9497 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 258.438112][ T9497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 258.448172][ T9497] ================================================================== [ 258.473586][T13001] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2688'.