last executing test programs: 8m6.059274795s ago: executing program 4 (id=1256): socket(0x11, 0x800000003, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1b) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) getrandom(0x0, 0x0, 0x0) clock_getres(0x0, &(0x7f0000005640)) 8m6.030909786s ago: executing program 4 (id=1257): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='kfree\x00', r4, 0x0, 0x3}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) (fail_nth: 3) 8m5.890447448s ago: executing program 4 (id=1261): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000000)={'sit0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x700, 0x1, 0x5, 0x7, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x64, 0x0, 0x7, 0x29, 0x0, @empty, @empty}}}}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/sockstat\x00') ioctl$PTP_ENABLE_PPS(r4, 0x40043d04, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r0}, 0x18) r6 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) preadv2(r6, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) 8m5.740638742s ago: executing program 4 (id=1264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r3}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x5, 0x0}, 0x8) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000600), 0x400000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @netfilter=0x2d, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r7, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x603}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x488, &(0x7f0000001f80)="$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") r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x184) getdents(r9, 0x0, 0x40) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020f0000000000000000000a18c8000000000cb34ecc4931e0ca54f54070a2ff9d3773bddf949090ccd5ae70c93de4e396ae5b2e3c5556a5a3da87e5628397ff9893a049baffb7da69c2be421c61bf3770936795aa5237db89815e03ae51ada217526505cf6dcd2d308b"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r10, 0x20, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/149, 0x95}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x20000000000000d3, &(0x7f0000000540)=ANY=[@ANYRESOCT=r8, @ANYRES32, @ANYRESHEX=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r12}, 0x10) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) 8m5.237573821s ago: executing program 4 (id=1267): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1, 0x5, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 8m4.28078121s ago: executing program 4 (id=1283): r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000700224c5b481e0000000000001801000030207b1af8ff00000000bfa100000000000007ecfffff7ffffffb702000000000000b70300000000010085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) 8m4.213552691s ago: executing program 32 (id=1283): r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000700224c5b481e0000000000001801000030207b1af8ff00000000bfa100000000000007ecfffff7ffffffb702000000000000b70300000000010085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) 7m48.852480239s ago: executing program 2 (id=1532): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000007c577e1700000000dace", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xa, 0x200, 0x7, 0x1}, 0x50) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r1) r9 = memfd_secret(0x80000) socket(0x1, 0x1, 0x0) fchownat(r9, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) getsockopt$IP_VS_SO_GET_TIMEOUT(r9, 0x0, 0x486, &(0x7f0000000540), &(0x7f0000000680)=0xc) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r8, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080d4}, 0x4000004) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r7, &(0x7f0000000a40), &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r7, &(0x7f00000005c0)="6e5b1a61c4f70800a5c05ce29f6c5ed701000000227cd046e0ba0800b8", &(0x7f0000000600)=""/61}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, &(0x7f0000000300)=""/239, &(0x7f0000000400), &(0x7f0000000480), 0x2, r7}, 0x38) semtimedop(0x0, &(0x7f00000003c0), 0x0, 0x0) 7m48.565908545s ago: executing program 2 (id=1538): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) futex(&(0x7f000000cffc)=0x1, 0x6, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x4000001, 0x0, &(0x7f0000048000)=0x1, 0x4000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) socket(0x2, 0x80805, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 7m47.612437993s ago: executing program 2 (id=1541): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e6576653100000000000000000008001000"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000007c577e1700000000dace", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xa, 0x200, 0x7, 0x1}, 0x50) r8 = memfd_secret(0x80000) r9 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r9, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_settings={0x6, 0x8, @sync=0x0}}) fchownat(r8, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, &(0x7f0000000540), &(0x7f0000000680)=0xc) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080d4}, 0x4000004) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r7, &(0x7f0000000a40), &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r7, &(0x7f00000005c0)="6e5b1a61c4f70800a5c05ce29f6c5ed701000000227cd046e0ba0800b8", &(0x7f0000000600)=""/61}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, &(0x7f0000000300)=""/239, &(0x7f0000000400), &(0x7f0000000480), 0x2, r7}, 0x38) semtimedop(0x0, &(0x7f00000003c0), 0x0, 0x0) 7m47.026851454s ago: executing program 2 (id=1550): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@printk={@ld}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00I\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r3 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="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", @ANYRESHEX, @ANYRESDEC, @ANYRESOCT=r3, @ANYRESOCT, @ANYRESOCT, @ANYRES8=0x0], 0x5, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) socket$packet(0x11, 0xa, 0x300) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000004000000", @ANYRES32=r5, @ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r9}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000001140)={0x80, 0xfffffffd, 0x80000000, 0x0, 0x2, 0x89b}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x3, &(0x7f0000000080)=0x5, 0xff) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7m46.598609953s ago: executing program 2 (id=1554): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000000000185"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES64, @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001700000085000000860000008500000023000000bf"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r10}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) r12 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ce7256e4d2069c98995edfbc7e6366f1b801a2ef84b281b0450eb58b6c40ce0cba3c570ee8a1e7c8e0f85dfc42f28ade9fb80c5906652012471ef619fcd066fe8a76a4a4eaff254ad78a2ecaa9be03c603", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001a00000000000000e74d371a1afe10", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x10) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) 7m46.272681889s ago: executing program 2 (id=1560): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e6576653100000000000000000008001000"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000007c577e1700000000dace", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xa, 0x200, 0x7, 0x1}, 0x50) r8 = memfd_secret(0x80000) r9 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r9, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_settings={0x6, 0x8, @sync=0x0}}) fchownat(r8, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, &(0x7f0000000540), &(0x7f0000000680)=0xc) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080d4}, 0x4000004) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r7, &(0x7f0000000a40), &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r7, &(0x7f00000005c0)="6e5b1a61c4f70800a5c05ce29f6c5ed701000000227cd046e0ba0800b8", &(0x7f0000000600)=""/61}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, &(0x7f0000000300)=""/239, &(0x7f0000000400), &(0x7f0000000480), 0x2, r7}, 0x38) semtimedop(0x0, &(0x7f00000003c0), 0x0, 0x0) 7m46.272226969s ago: executing program 33 (id=1560): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e6576653100000000000000000008001000"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000007c577e1700000000dace", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xa, 0x200, 0x7, 0x1}, 0x50) r8 = memfd_secret(0x80000) r9 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r9, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_settings={0x6, 0x8, @sync=0x0}}) fchownat(r8, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, &(0x7f0000000540), &(0x7f0000000680)=0xc) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080d4}, 0x4000004) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r7, &(0x7f0000000a40), &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r7, &(0x7f00000005c0)="6e5b1a61c4f70800a5c05ce29f6c5ed701000000227cd046e0ba0800b8", &(0x7f0000000600)=""/61}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, &(0x7f0000000300)=""/239, &(0x7f0000000400), &(0x7f0000000480), 0x2, r7}, 0x38) semtimedop(0x0, &(0x7f00000003c0), 0x0, 0x0) 6m22.709085771s ago: executing program 6 (id=3034): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x19, 0x35}, [@call]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x23) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) unshare(0x20000400) pwrite64(r2, &(0x7f0000000100)="360612d05ebdd2557f56b8c301a6a46968df2443db83387055", 0x19, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x150, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x60, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xa0, 0x80, "bed40c8022674b0ecf0153d786cfc67c1aa8a9bb"}}]}, 0x150}}, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r1, 0x5, 0x4) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x10000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, 0xffffffffffffffff}, './file0\x00'}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast1, @loopback}, &(0x7f0000000300)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x5, 0x20, r5, 0x400, '\x00', r6, r1, 0x0, 0x5, 0x3, 0x9}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) openat$incfs(r5, &(0x7f0000000040)='.pending_reads\x00', 0x208800, 0x9a3f2d175629c5d0) 6m22.176587732s ago: executing program 6 (id=3047): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000000000185"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES64, @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001700000085000000860000008500000023000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r10}, 0x18) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) r12 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ce7256e4d2069c98995edfbc7e6366f1b801a2ef84b281b0450eb58b6c40ce0cba3c570ee8a1e7c8e0f85dfc42f28ade9fb80c5906652012471ef619fcd066fe8a76a4a4eaff254ad78a2ecaa9be03c603", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001a00000000000000e74d371a1afe10", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x10) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) 6m20.368761126s ago: executing program 6 (id=3055): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff19181200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) readahead(0xffffffffffffffff, 0x7, 0x0) 6m20.368043827s ago: executing program 6 (id=3056): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x7f59, 0x1, 0x0, 0x3, {{0x1a, 0x4, 0x1, 0x1, 0x68, 0x67, 0x3ff, 0x8b, 0x4, 0x0, @loopback, @multicast2, {[@rr={0x7, 0xf, 0x90, [@multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}]}, @ssrr={0x89, 0xb, 0x52, [@multicast1, @broadcast]}, @cipso={0x86, 0x23, 0x3, [{0x5, 0xb, "384c0be9a6944b11f6"}, {0x6, 0x12, "052ef08123cf0d6226842fce3c60542f"}]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xe8, 0x3, 0x1, [{@rand_addr=0x64010100, 0xfffffffc}]}]}}}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYRESDEC], &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r5, 0x0, 0x5}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@debug}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount(0x0, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x42010, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f0000"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) setns(r2, 0x66020000) syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0) 6m19.67369368s ago: executing program 6 (id=3060): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xf1c38fa000000000}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900100000000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bbace806069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0) io_uring_setup(0x37b0, &(0x7f00000009c0)={0x0, 0x800000, 0x400, 0x2, 0x400022a}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r5, &(0x7f00000007c0)}, 0x20) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 6m18.727860768s ago: executing program 6 (id=3069): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002940)='.', 0x1}], 0x1}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec00000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b37a120", @ANYRESOCT], 0x8, 0x2f6, &(0x7f0000000880)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = inotify_init() creat(&(0x7f00000000c0)='./file0\x00', 0x80) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x4000cdd) close_range(r1, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) get_mempolicy(0x0, 0x0, 0x400, &(0x7f00000ce000/0x1000)=nil, 0x3) 6m18.722363759s ago: executing program 34 (id=3069): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002940)='.', 0x1}], 0x1}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2f6, &(0x7f0000000880)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = inotify_init() creat(&(0x7f00000000c0)='./file0\x00', 0x80) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x4000cdd) close_range(r1, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) get_mempolicy(0x0, 0x0, 0x400, &(0x7f00000ce000/0x1000)=nil, 0x3) 4m48.030712049s ago: executing program 5 (id=4440): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000007c577e1700000000dace", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000005c0)="6e5b1a61c4f70800a5c05ce29f6c5ed701000000227cd046e0ba0800b8", &(0x7f0000000600)=""/61}, 0x20) semtimedop(0x0, &(0x7f00000003c0), 0x0, 0x0) 4m48.008246069s ago: executing program 5 (id=4441): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3a) 4m47.992596629s ago: executing program 5 (id=4442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d6163767461700004000280080005", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000009080002400000000408000b40000000000900010073797a3000"], 0xd4}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) 4m47.96495542s ago: executing program 5 (id=4443): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f00000002c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@bsdgroups}, {@norecovery}]}, 0x9, 0x458, &(0x7f0000002240)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0xa8) acct(&(0x7f0000000100)='./file0/bus\x00') close(r2) umount2(0x0, 0x0) 4m47.388251931s ago: executing program 5 (id=4444): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) 4m44.339988671s ago: executing program 5 (id=4481): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0xffffffffffffff24, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 4m44.266757492s ago: executing program 35 (id=4481): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0xffffffffffffff24, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 1m26.507086791s ago: executing program 1 (id=7242): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20200006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) setresgid(0x0, 0x0, 0xee01) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x15, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000001495"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="2800ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1m26.374540923s ago: executing program 1 (id=7245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) 1m26.298462375s ago: executing program 1 (id=7246): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0x11b, 0x880, 0x0, 0x0) 1m26.136021098s ago: executing program 1 (id=7249): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c09, &(0x7f0000000400)={0x0, 0xace1, 0x1, 0x0, 0x3ca}, 0x0, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000000180), 0xfffffffffffffcb0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25ff02000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x30}], 0x1}, 0xb00) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e0209095c0005003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYRESHEX, @ANYRESOCT=0x0], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) getsockopt(r4, 0xff, 0x7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x80000, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r7}, 0x10) 1m25.981006601s ago: executing program 1 (id=7251): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="09000000040000000800000010"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) 1m24.612365727s ago: executing program 1 (id=7261): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x14, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRES16=0x0, @ANYRES16, @ANYBLOB="5a4cd0b09479af4cdff160155bd637e75e9b4cdffe9223fe89c5f022d30e5d44576bcec5696de6829fda06d1f940acb081d31ee65e0da26d60e77fc4ddc0c42f0f12ae65013115b028a6affb21f37c0f0be72bf140bc89c221b98d636b", @ANYRESOCT=r1], 0x0, 0x4000000, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) ioctl$FIOCLEX(r2, 0x5451) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r4, &(0x7f0000001700)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) splice(r3, 0x0, r5, 0x0, 0x1, 0xb) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r1, r3, 0x10, 0x0, @void}, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r9, @ANYBLOB="0100000000000000130003000000ec0001802c00040014000100020000007f00000100230000000000001400020002000000e000000100000000000000000d0001007564703a73797a32000000000d0001007564703a73797a3000000000080003000000c000340002800800020000050000080004000600000008000300010000800800020009000000080003000800000008000400fcffffff3400028008000400ffffff7f080001000900000008000400000800000800030003000000080001001f0038"], 0x100}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000c000000200001801400020073797a5f74756e000000000000000000080003000300000014000380100003"], 0x48}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x18) stat(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)) membarrier(0x40, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) 1m24.523224039s ago: executing program 36 (id=7261): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x14, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRES16=0x0, @ANYRES16, @ANYBLOB="5a4cd0b09479af4cdff160155bd637e75e9b4cdffe9223fe89c5f022d30e5d44576bcec5696de6829fda06d1f940acb081d31ee65e0da26d60e77fc4ddc0c42f0f12ae65013115b028a6affb21f37c0f0be72bf140bc89c221b98d636b", @ANYRESOCT=r1], 0x0, 0x4000000, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) ioctl$FIOCLEX(r2, 0x5451) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r4, &(0x7f0000001700)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) splice(r3, 0x0, r5, 0x0, 0x1, 0xb) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r1, r3, 0x10, 0x0, @void}, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r9, @ANYBLOB="0100000000000000130003000000ec0001802c00040014000100020000007f00000100230000000000001400020002000000e000000100000000000000000d0001007564703a73797a32000000000d0001007564703a73797a3000000000080003000000c000340002800800020000050000080004000600000008000300010000800800020009000000080003000800000008000400fcffffff3400028008000400ffffff7f080001000900000008000400000800000800030003000000080001001f0038"], 0x100}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000c000000200001801400020073797a5f74756e000000000000000000080003000300000014000380100003"], 0x48}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x18) stat(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)) membarrier(0x40, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) 9.575453194s ago: executing program 7 (id=8146): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 8.634954332s ago: executing program 7 (id=8154): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x20, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000800), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x52}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4840) 4.528453472s ago: executing program 8 (id=8207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000000)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@private0, @in=@loopback}}, {{@in=@multicast1}, 0x0, @in6=@private0}}, &(0x7f0000000180)=0x5b) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5100, 0x0, 0x0, 0x0, 0x0, 0xfee, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) 4.506832233s ago: executing program 8 (id=8208): memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000144c59f12a1e0382af6eed6ccbb6cb90b33bdf74bfed110d5fa447fb1e928aab164eb1f94fc9e973a066810945cd34b6fd563534a729bb426851ac2c799d537526d670dc619cb03ac327eeadeab7916451a3af6820ed824cf93eace6a66a8ad1b92de7cda159ce490fc87827dfe6a6f8bc717df8a2b56805549f72ab17d0d44d846a6f9f78de8bde00f86f637e0c07e8484e134bc55fc7e345423772eebd95447e34845a402ecd73df1508f12b8e8e54988b628077acf117b1807fdadb5e0decdf0056"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r7, @ANYRES32=r10, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f00000005c0)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 4.492196803s ago: executing program 9 (id=8209): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0xffffffff}, 0xfe89) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000240)=0x8a, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f00000002c0)) r5 = socket$netlink(0x10, 0x3, 0x0) sendfile(r5, r4, 0x0, 0x7ffff088) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read(r6, &(0x7f0000000040)=""/181, 0xb5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000080)='./file0\x00', 0x40000022) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@resuid}, {@noblock_validity}, {@bh}, {@grpjquota}, {@grpquota}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000300)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r8 = timerfd_create(0x8, 0x0) timerfd_settime(r8, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 4.219202408s ago: executing program 8 (id=8211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 3.959547963s ago: executing program 7 (id=8215): syz_usb_connect$cdc_ncm(0x3, 0x140, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12e, 0x2, 0x1, 0x0, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "a728"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x10, 0x2, 0x7}, {0x6, 0x24, 0x1a, 0xd, 0x10}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0xda, 0xc, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x6, 0x6}, @mdlm_detail={0xc1, 0x24, 0x13, 0x1, "038a8337f3ef3fa1c830cada13275c226ceef491529521112fab0dae8f42992467697cc50d314ac336fa21cc3b1d9530ee92f8c52f9e3855ee699d1c2df907f8324bcd6540cfdab3d6be2bf258b98ce940316aadcd96f12801cda471ba2cbf204bf5672185a53e34f41bb219680435b9bcc6c20db8753083f9789c904a889442a99d04327b76819fc0be13f7f2467de9da7bfdd073f1325eb67548b5c6fda1c2c1a7602924e852f22d18f9c8bad65c0a1feebf8a9257c18fdd160d2827"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x4, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6e, 0xc9, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x10, 0x7f, 0x4}}}}}}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0xf, &(0x7f0000000900)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2, 0x3, 0x1}]}, 0x4, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x444}}]}) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000001c0)=0x2, 0x10000, 0x0) syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x904c01, &(0x7f0000000a40), 0x2, 0x5b1, &(0x7f0000000180)="$eJzs3c9vVEUcAPDv290WStVWYlQ8mEZDIFFaWsDgjwPcCcEfNy9WWgiy/Ait0aKJJcGLifHigcSTB/G/UKJXTyYePHjxZEjQGC4ao2ve7tvt2u6229Ll1b7PJ3ndmTe7nXnQb2f2zUw3gMIaS7+UIvZExOUkYqStrBJZ4VjjeXd/f/90eiRRq736WxJJdq75/CR7HM5e/PdIxPffJLG7vLLeuYWr56er1dkrWX5i/sLlibmFqwfOXZg+O3t29uLUc1NHjxw+cnTy4D1dX6ktfeL6W++MfHTy9S8++yuZ/PKnk0kci1/PNMrar2OzjMVY/FGrfbD8fPrvenSzK8tJufVzsiRZfoItq5LFyGBEPBYjUW773xyJD1/OtXFAX9WSiBpQUIn4h4JqjgOa7+17ex9c6vOoBLgf7hxPvw50iP9K495gjMZAROxd9roOt/Q2JK3ju29PXk+P6NN9OKCzxWs7stTy+E/qsTkaO+u5XXdLrfv7kY0ATmWPlYh4ZYP1jy3Li3+4fxavRcTjncb/K+O/fVonjfs32uL/zQ3WL/4BAAAAAABg89w6HhHPdpr/K2Vzczvjqfr8X9KY//thaYfgsU2of+35v9LtTagG6ODO8YiXOq7/ba3xHS1nuQcbqwGTM+eqswcj4qGI2B8DO9L85Cp1HPh4941uZe3r/9Ijrb+5FjBrx+3Kjv++ZmZ6fvperhlouHMt4olK9/U/af+ftPf/mfT3weUe69i99+apbmVrxz/QL7XPI/Z17P+XVvsmq/99jon6eGCiOSpY6cn3PvmqW/3iH/KT9v+7Vo//0aT97/XMre/7D0bEoYVKrVv5Rsf/g8lr5eb3T707PT9/ZTJiMDmx8vzU+toM21UzHprxksb//qdXv//XGv+3xeFQRCz2WOej/wz/3K1M/w/5SeN/Zl39//oTUzdHv+5Wf2/9/+F6n74/O+P+H6yu1wDNu50AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8H9UiogHIimNt9Kl0vh4xHBEPBK7StVLc/PPnLn09sWZtKz++f+l5if9jjTySfPz/0fb8lPL8oci4uGI+LQ8VM+Pn75Uncn74gEAAAAAAAAAAAAAAAAAAGCLGO6y/z/1Sznv1gF9V8kexTsUTyXvBgC5Ef9QXOIfikv8Q3GJfyiuDca/6QLYBvT/UFQDvT1tZ7/bAeRB/w8AAAAAANvKrRefv5FExOILQ/UjNZiVtSYGh/JqHdBPpbwbAOTGGl4oLkt/oLh6XPwLbGNJK/VnrVN599X/SX8aBAAAAAAAAAAAAACssG/PrR/X3P8PbEv2/0Nx2f8PxWX/PxSX9/jAWrv47f8HAAAAAAAAAAAAgPzNLVw9P12tzl6RkNhqiYGI2ALNyCExmH945vyLCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaPk3AAD//54nJPo=") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31"], 0x25c}}, 0x0) getpid() bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000940)={r5, &(0x7f0000000c00)="b8286d8bef4a67af9f76371c9d83ab95f8368685cacb7f6737a06b84d4fcc8badbc5cf8aaf74004a0627670fd1b603bc4903c10e587b59c384888dfb72219e7de141f56b1da303de7d6caf4c30ba8f38e8c2958331678a2090b00080fdd934d56c85480ff8047acc745cddbaba3398ada520e3ddecc6adc0a1c82c9a4bc2879c57d3c183e7dfbca3742908cffa41"}, 0x20) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000600)="300e3080b734830aaffdd7338895c834", 0x10, r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r9 = signalfd(r8, &(0x7f0000000000), 0x8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_BLKTRACETEARDOWN(r9, 0x1276, 0x0) 2.162702768s ago: executing program 9 (id=8220): r0 = shmget(0x3, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 2.162055658s ago: executing program 8 (id=8221): inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01080000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797330000000000900030073797a310000000058000000060a010400000000000000000100000308000b4000000000300004802c000180090001007866726d000000001c0002800800014000000009050003000000000008000240000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_pidfd_open(r2, 0x0) setns(r8, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 2.127942529s ago: executing program 9 (id=8222): memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000144c59f12a1e0382af6eed6ccbb6cb90b33bdf74bfed110d5fa447fb1e928aab164eb1f94fc9e973a066810945cd34b6fd563534a729bb426851ac2c799d537526d670dc619cb03ac327eeadeab7916451a3af6820ed824cf93eace6a66a8ad1b92de7cda159ce490fc87827dfe6a6f8bc717df8a2b56805549f72ab17d0d44d846a6f9f78de8bde00f86f637e0c07e8484e134bc55fc7e345423772eebd95447e34845a402ecd73df1508f12b8e8e54988b628077acf117b1807fdadb5e0decdf0056"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r7, @ANYRES32=r10, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f00000005c0)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.265310625s ago: executing program 8 (id=8226): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x20, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000800), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x52}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4840) 968.424691ms ago: executing program 9 (id=8227): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="2800ffff0000", 0x6, 0x0, 0x0, 0x2}]) 967.368501ms ago: executing program 3 (id=8228): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x6c, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) 930.140852ms ago: executing program 3 (id=8230): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000000900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237720ff520100000000000000699c74e891a0c708000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 880.670863ms ago: executing program 7 (id=8232): shmctl$SHM_UNLOCK(0x0, 0xc) 822.042554ms ago: executing program 7 (id=8233): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x107, 0x1, &(0x7f0000000080), 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="09000000040000000800000010"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) close(r2) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000040)='./file0\x00', 0x2000010, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c666c7573682c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00dc5e6e02a2c7cc484d0c"], 0xf8, 0x31f, &(0x7f00000004c0)="$eJzs3UtrG1cUwPGjt2TXlRellELh4kJpKR4sQXdd1BQbSgUttlWoA4FxLCdCY8lYwqAQIi0C2WadhRdZhkAIZJdNCNl6k0+Q184bLwIxxPiGeUgeSWPJjiM/yP+3sK7n3jPnzEuWR6PR9u93VksrVeODjsphmvLL881XP8w/+8r9XanZ6YVMVqmwiFy68WDiaW30v8dfP0nI1vjl7Z3s262kiOwvXJOwKlZVWWut1VKlUgvZwcvFaslQ6l+rYFZDXgJlOv3mklVQK1Zlba2uzPLy2MjaeqFaVWa5rkqFuqpVVG29rsyrZrGsDMNQYyOH1vxFGW+3wj197ipOBgfm7+9qLTv2Bko0RWsd6h3TbDVi3uO+PnnFOCe6tn/fsT07R2SYleE07Opoe/vHB2z/TtozxOIwdLvaPohf33WP/8ZZl4NTNv//4t/TudzMnFJJkdXbG/mNvPvo9r8claJYUpDNuV8X9w6Oeq0lZP+c/Ss3M6Uc4/LTasOLb2zk3T8O0ytefEbS9usUX7y04jMJdwad8TEZ8cdnJS3fBMdnlRcvYV98XH7+0RdvSFpeXJGKWLLsPHsdxN/MKPXnP7mu/L5XVQAAAAAAAAAAXDCGajs4fx9qv9WbMoyEc8VHuz9lT3bOjzva59enJC3O+wMp6T4/P6WCzu9H5fvDLzkBAAAAAACfUbV+vWRaVmH9hA0dEQnoitxL9UkRExG7IXJrwi6mb4pvvYoDx0Sla0pcvHri/sGR/im8RkLsRuo3N9/DOa+w7hQDGiLSPOlaHdgIi4h/ivthDXvhrUetMSkJigofaweYjAeu+eTQF9DfkKMMbn3U5bgpEs4CpqRx7MJCe60p3wWO0aHB89GmFWvvNo6OMe96o/7odzjUY0crfk9r3dU1+cadr9XnSeM9l/4DAAAAF5HvHycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBGPulObK379nd2ifcV8V23iAtIyn3/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxDHwMAAP//mPGsew==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305829, &(0x7f0000000040)=0x4000000) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_batadv\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000002}, 0xc0) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) 538.705469ms ago: executing program 0 (id=8234): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x0, 0xe, 0x2059d3aee23a4719, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x1, 0x5, 0x6}}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000005c0)={0x0, @multicast1, @dev}, &(0x7f0000000600)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x8, 0x400000, 0x4b1, {{0x1f, 0x4, 0x0, 0x3f, 0x7c, 0x66, 0x0, 0xc4, 0x29, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x44, 0x24, 0x58, 0x1, 0x5, [{@local, 0xa}, {@broadcast, 0x3}, {@remote, 0x8}, {@private=0xa010100, 0x810}]}, @rr={0x7, 0x1b, 0xa, [@dev={0xac, 0x14, 0x14, 0xd}, @local, @multicast1, @empty, @broadcast, @broadcast]}, @ssrr={0x89, 0x1b, 0x65, [@empty, @local, @local, @broadcast, @remote, @multicast2]}, @noop, @timestamp={0x44, 0xc, 0xc, 0x0, 0x8, [0x8, 0x400]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000780)={'gretap0\x00', 0x0, 0x10, 0x7800, 0x5, 0x1, {{0xb, 0x4, 0x0, 0x3a, 0x2c, 0x67, 0x0, 0x7, 0x2f, 0x0, @empty, @local, {[@cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "aa030832"}]}, @timestamp_prespec={0x44, 0xc, 0xda, 0x3, 0x2, [{@empty, 0x1}]}]}}}}}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f031c0003021400e73506001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c560c43e78b4be846c5cf9435e3f", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x5d) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x12, r6, {0x0, 0x11}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x4, 0xfffe, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 538.547439ms ago: executing program 3 (id=8235): prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000000900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237720ff520100000000000000699c74e891a0c708000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 537.90361ms ago: executing program 7 (id=8236): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ufshcd_command\x00', 0xffffffffffffffff, 0x0, 0x80000000}, 0x18) r1 = gettid() tkill(r1, 0x7) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000100000000000000000000000000004419976fdaaad8c68e6cc310a5e554022a03a5d623ef30d0e79a2274ebe583f9405b700ff2e940e61398be92ad7294241bfef8adeafd98c931a7499fca42de934a567a3ce256f80eb3805dedc994d98c5b573aec5dca1a458dbe5b83e00d73c22bb1c4395607a7213b7fc2e999c2c5bf7d950488f4e921e3bcb5494cb05d86b27aa65569c716e5e91c02e449f89f45521c3ac6641d83bec105823b8e574778a41af64f4371a77c16f4ed506f0a6dabdb3b5d95d2c76caedabc3a06254377fbdcda166f5a", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRESDEC=r2, @ANYRESHEX, @ANYRES32=r4, @ANYRES8=r1, @ANYRESDEC=r0, @ANYRESDEC=r2, @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000080000000000000000000000001000000", @ANYRESDEC=r6, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"], 0x50) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r8 = syz_open_pts(r7, 0x20800) r9 = dup3(r8, r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r9, 0x28, 0x1, &(0x7f00000000c0)=0x8, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x7) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 529.47367ms ago: executing program 9 (id=8237): memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000144c59f12a1e0382af6eed6ccbb6cb90b33bdf74bfed110d5fa447fb1e928aab164eb1f94fc9e973a066810945cd34b6fd563534a729bb426851ac2c799d537526d670dc619cb03ac327eeadeab7916451a3af6820ed824cf93eace6a66a8ad1b92de7cda159ce490fc87827dfe6a6f8bc717df8a2b56805549f72ab17d0d44d846a6f9f78de8bde00f86f637e0c07e8484e134bc55fc7e345423772eebd95447e34845a402ecd73df1508f12b8e8e54988b628077acf117b1807fdadb5e0decdf0056"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r7, @ANYRES32=r10, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f00000005c0)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 527.44604ms ago: executing program 3 (id=8238): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x2000) 513.88079ms ago: executing program 0 (id=8239): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x0, 0xe, 0x2059d3aee23a4719, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x1, 0x5, 0x6}}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000005c0)={0x0, @multicast1, @dev}, &(0x7f0000000600)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x8, 0x400000, 0x4b1, {{0x1f, 0x4, 0x0, 0x3f, 0x7c, 0x66, 0x0, 0xc4, 0x29, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x44, 0x24, 0x58, 0x1, 0x5, [{@local, 0xa}, {@broadcast, 0x3}, {@remote, 0x8}, {@private=0xa010100, 0x810}]}, @rr={0x7, 0x1b, 0xa, [@dev={0xac, 0x14, 0x14, 0xd}, @local, @multicast1, @empty, @broadcast, @broadcast]}, @ssrr={0x89, 0x1b, 0x65, [@empty, @local, @local, @broadcast, @remote, @multicast2]}, @noop, @timestamp={0x44, 0xc, 0xc, 0x0, 0x8, [0x8, 0x400]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000780)={'gretap0\x00', 0x0, 0x10, 0x7800, 0x5, 0x1, {{0xb, 0x4, 0x0, 0x3a, 0x2c, 0x67, 0x0, 0x7, 0x2f, 0x0, @empty, @local, {[@cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "aa030832"}]}, @timestamp_prespec={0x44, 0xc, 0xda, 0x3, 0x2, [{@empty, 0x1}]}]}}}}}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f031c0003021400e73506001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c560c43e78b4be846c5cf9435e3f", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x5d) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000840)={0x0, @dev, @remote}, &(0x7f0000000880)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000900)={'erspan0\x00', 0x0, 0x8, 0x8000, 0x9, 0x7, {{0x6, 0x4, 0x0, 0x25, 0x18, 0x64, 0x0, 0x8, 0x4, 0x0, @loopback, @empty, {[@end]}}}}}) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x12, r6, {0x0, 0x11}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x4, 0xfffe, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000980)={'wg0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 452.784251ms ago: executing program 3 (id=8240): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) chroot(&(0x7f0000000000)='./file0/../file0\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r8}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46040700030700000000000000020003"], 0x58) close(r10) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0x12) fremovexattr(r7, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') r11 = inotify_init() ioctl$F2FS_IOC_DEFRAGMENT(r11, 0xc010f508, &(0x7f0000000240)={0x2, 0x10001}) 256.115575ms ago: executing program 0 (id=8241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000000)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@private0, @in=@loopback}}, {{@in=@multicast1}, 0x0, @in6=@private0}}, &(0x7f0000000180)=0x5b) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5100, 0x0, 0x0, 0x0, 0x0, 0xfee, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) 208.746696ms ago: executing program 0 (id=8242): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, 0xffffffffffffffff, 0x0, 0x7ffffffe, 0x4000}}, 0x20) 193.777506ms ago: executing program 8 (id=8243): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) eventfd2(0xb0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000001812000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = syz_io_uring_setup(0x1c44, &(0x7f0000000240)={0x0, 0x859fc, 0x80, 0x3, 0xbd7f7fff}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x5535, 0x3acd, 0x22, 0x0, 0x0) 128.605958ms ago: executing program 0 (id=8244): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000000900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237720ff520100000000000000699c74e891a0c708000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 128.261078ms ago: executing program 0 (id=8245): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) io_setup(0x5, &(0x7f0000000540)=0x0) io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f0000000340)={0x0, 0x300, 0x0, 0x5, 0x0, r4, 0x0}]) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r7 = socket$inet6(0xa, 0x3, 0x84) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/mcfilter6\x00') writev(r8, &(0x7f0000000740), 0x0) write$cgroup_devices(r8, &(0x7f0000000080)={'b', ' *:* ', 'r\x00'}, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x7, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x3, 0x2}, {{@in=@broadcast, 0x1, 0x32}, 0xa, @in=@private=0xa010100, 0x1502, 0x4, 0x0, 0x0, 0xc36, 0xfffffffd}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_usb_disconnect(r3) r9 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r9, 0x2284, &(0x7f0000000080)) r10 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x1, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r10, 0x847bd, 0x2000, 0xde, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x185100, 0x0) 36.859589ms ago: executing program 9 (id=8246): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x107, 0x1, &(0x7f0000000080), 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="09000000040000000800000010"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) close(r2) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000040)='./file0\x00', 0x2000010, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c666c7573682c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00dc5e6e02a2c7cc484d0c"], 0xf8, 0x31f, &(0x7f00000004c0)="$eJzs3UtrG1cUwPGjt2TXlRellELh4kJpKR4sQXdd1BQbSgUttlWoA4FxLCdCY8lYwqAQIi0C2WadhRdZhkAIZJdNCNl6k0+Q184bLwIxxPiGeUgeSWPJjiM/yP+3sK7n3jPnzEuWR6PR9u93VksrVeODjsphmvLL881XP8w/+8r9XanZ6YVMVqmwiFy68WDiaW30v8dfP0nI1vjl7Z3s262kiOwvXJOwKlZVWWut1VKlUgvZwcvFaslQ6l+rYFZDXgJlOv3mklVQK1Zlba2uzPLy2MjaeqFaVWa5rkqFuqpVVG29rsyrZrGsDMNQYyOH1vxFGW+3wj197ipOBgfm7+9qLTv2Bko0RWsd6h3TbDVi3uO+PnnFOCe6tn/fsT07R2SYleE07Opoe/vHB2z/TtozxOIwdLvaPohf33WP/8ZZl4NTNv//4t/TudzMnFJJkdXbG/mNvPvo9r8claJYUpDNuV8X9w6Oeq0lZP+c/Ss3M6Uc4/LTasOLb2zk3T8O0ytefEbS9usUX7y04jMJdwad8TEZ8cdnJS3fBMdnlRcvYV98XH7+0RdvSFpeXJGKWLLsPHsdxN/MKPXnP7mu/L5XVQAAAAAAAAAAXDCGajs4fx9qv9WbMoyEc8VHuz9lT3bOjzva59enJC3O+wMp6T4/P6WCzu9H5fvDLzkBAAAAAACfUbV+vWRaVmH9hA0dEQnoitxL9UkRExG7IXJrwi6mb4pvvYoDx0Sla0pcvHri/sGR/im8RkLsRuo3N9/DOa+w7hQDGiLSPOlaHdgIi4h/ivthDXvhrUetMSkJigofaweYjAeu+eTQF9DfkKMMbn3U5bgpEs4CpqRx7MJCe60p3wWO0aHB89GmFWvvNo6OMe96o/7odzjUY0crfk9r3dU1+cadr9XnSeM9l/4DAAAAF5HvHycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBGPulObK379nd2ifcV8V23iAtIyn3/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxDHwMAAP//mPGsew==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305829, &(0x7f0000000040)=0x4000000) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_batadv\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000002}, 0xc0) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) 0s ago: executing program 3 (id=8247): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="2800ffff0000", 0x6, 0x0, 0x0, 0x2}]) kernel console output (not intermixed with test programs): (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 534.961716][T24495] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.7367: corrupted inode contents [ 534.974857][T24523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1296 sclass=netlink_route_socket pid=24523 comm='@,'[ [ 534.988256][T24495] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.7367: mark_inode_dirty error [ 535.002669][T24495] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 535.015432][T24495] EXT4-fs (loop7): 1 truncate cleaned up [ 535.021406][T24495] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.034056][T24495] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.045618][T24495] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.070550][T24529] loop8: detected capacity change from 0 to 1024 [ 535.118471][T24529] EXT4-fs: inline encryption not supported [ 535.129400][T24529] EXT4-fs (loop8): orphan cleanup on readonly fs [ 535.143598][T24529] EXT4-fs (loop8): 1 truncate cleaned up [ 535.161671][T24529] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 535.270964][T24529] netlink: 60 bytes leftover after parsing attributes in process `syz.8.7382'. [ 535.291788][T24566] loop7: detected capacity change from 0 to 1024 [ 535.300350][T24566] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 535.322626][T24566] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7399'. [ 535.345861][T16396] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.371560][T24566] FAULT_INJECTION: forcing a failure. [ 535.371560][T24566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.384751][T24566] CPU: 1 UID: 0 PID: 24566 Comm: syz.7.7399 Not tainted syzkaller #0 PREEMPT(voluntary) [ 535.384785][T24566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.384873][T24566] Call Trace: [ 535.384881][T24566] [ 535.384891][T24566] __dump_stack+0x1d/0x30 [ 535.385072][T24566] dump_stack_lvl+0xe8/0x140 [ 535.385097][T24566] dump_stack+0x15/0x1b [ 535.385118][T24566] should_fail_ex+0x265/0x280 [ 535.385148][T24566] should_fail+0xb/0x20 [ 535.385240][T24566] should_fail_usercopy+0x1a/0x20 [ 535.385417][T24566] strncpy_from_user+0x25/0x230 [ 535.385468][T24566] ? kmem_cache_alloc_noprof+0x186/0x310 [ 535.385501][T24566] ? getname_flags+0x80/0x3b0 [ 535.385534][T24566] getname_flags+0xae/0x3b0 [ 535.385614][T24566] do_sys_openat2+0x60/0x110 [ 535.385663][T24566] __x64_sys_openat+0xf2/0x120 [ 535.385714][T24566] x64_sys_call+0x2e9c/0x2ff0 [ 535.385800][T24566] do_syscall_64+0xd2/0x200 [ 535.385869][T24566] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 535.385902][T24566] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 535.385939][T24566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.385968][T24566] RIP: 0033:0x7f084d92d550 [ 535.385987][T24566] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 535.386069][T24566] RSP: 002b:00007f084c38eb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 535.386092][T24566] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f084d92d550 [ 535.386106][T24566] RDX: 0000000000000002 RSI: 00007f084c38ec10 RDI: 00000000ffffff9c [ 535.386122][T24566] RBP: 00007f084c38ec10 R08: 0000000000000000 R09: 00007f084c38e987 [ 535.386138][T24566] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 535.386153][T24566] R13: 00007f084db66038 R14: 00007f084db65fa0 R15: 00007ffe65077a78 [ 535.386177][T24566] [ 535.579459][T24566] loop7: detected capacity change from 0 to 512 [ 535.589382][T24566] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 535.602261][T24566] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 535.605670][T24583] loop8: detected capacity change from 0 to 128 [ 535.619806][T24566] System zones: 1-12 [ 535.624373][T24566] EXT4-fs (loop7): orphan cleanup on readonly fs [ 535.630974][T24566] EXT4-fs error (device loop7): ext4_read_inode_bitmap:167: comm syz.7.7399: Inode bitmap for bg 0 marked uninitialized [ 535.646230][T24566] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 535.647541][T24585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7407'. [ 535.670528][T24585] netlink: 'syz.3.7407': attribute type 1 has an invalid length. [ 535.711434][T24585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 535.722033][T24590] loop9: detected capacity change from 0 to 512 [ 535.730273][T22051] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.730471][T24590] EXT4-fs: Ignoring removed nobh option [ 535.746066][T24585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 535.757018][T24585] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 535.769069][T24585] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 535.785090][T24590] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.7408: corrupted inode contents [ 535.798250][T24590] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #3: comm syz.9.7408: mark_inode_dirty error [ 535.810773][T24590] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.7408: corrupted inode contents [ 535.823983][T24590] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #3: comm syz.9.7408: mark_inode_dirty error [ 535.837133][T24590] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.7408: Failed to acquire dquot type 0 [ 535.849755][T24590] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.7408: corrupted inode contents [ 535.862461][T24590] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #16: comm syz.9.7408: mark_inode_dirty error [ 535.887937][T24590] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.7408: corrupted inode contents [ 535.888430][T24599] macvlan2: entered promiscuous mode [ 535.900143][T24590] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.7408: mark_inode_dirty error [ 535.905268][T24599] macvlan2: entered allmulticast mode [ 535.918213][T24590] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.7408: corrupted inode contents [ 535.925662][T24599] bond1: entered promiscuous mode [ 535.935337][T24590] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 535.948333][T24599] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 535.959467][T24590] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.7408: corrupted inode contents [ 535.982340][T24603] loop7: detected capacity change from 0 to 512 [ 535.993935][T24590] EXT4-fs error (device loop9): ext4_truncate:4666: inode #16: comm syz.9.7408: mark_inode_dirty error [ 536.018019][T24590] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 536.018052][T24599] bond1: left promiscuous mode [ 536.027767][T24603] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.066364][T24590] EXT4-fs (loop9): 1 truncate cleaned up [ 536.074196][T24590] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.088555][T24590] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.100252][T24590] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.113561][T24596] gretap1: entered promiscuous mode [ 536.130269][T24596] bond1: (slave gretap1): making interface the new active one [ 536.158773][T24596] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 536.193144][T24613] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7412'. [ 536.340366][T24630] FAULT_INJECTION: forcing a failure. [ 536.340366][T24630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.353582][T24630] CPU: 1 UID: 0 PID: 24630 Comm: syz.9.7420 Not tainted syzkaller #0 PREEMPT(voluntary) [ 536.353609][T24630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 536.353624][T24630] Call Trace: [ 536.353633][T24630] [ 536.353642][T24630] __dump_stack+0x1d/0x30 [ 536.353720][T24630] dump_stack_lvl+0xe8/0x140 [ 536.353742][T24630] dump_stack+0x15/0x1b [ 536.353759][T24630] should_fail_ex+0x265/0x280 [ 536.353783][T24630] should_fail+0xb/0x20 [ 536.353804][T24630] should_fail_usercopy+0x1a/0x20 [ 536.353848][T24630] _copy_from_user+0x1c/0xb0 [ 536.353906][T24630] vmemdup_user+0x59/0xd0 [ 536.353932][T24630] path_setxattrat+0x1b6/0x310 [ 536.353987][T24630] __x64_sys_fsetxattr+0x6b/0x80 [ 536.354050][T24630] x64_sys_call+0x1ced/0x2ff0 [ 536.354071][T24630] do_syscall_64+0xd2/0x200 [ 536.354113][T24630] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 536.354169][T24630] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 536.354208][T24630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.354286][T24630] RIP: 0033:0x7ff939a8ebe9 [ 536.354363][T24630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.354380][T24630] RSP: 002b:00007ff9384ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 536.354397][T24630] RAX: ffffffffffffffda RBX: 00007ff939cc5fa0 RCX: 00007ff939a8ebe9 [ 536.354477][T24630] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000007 [ 536.354507][T24630] RBP: 00007ff9384ef090 R08: 0000000000000000 R09: 0000000000000000 [ 536.354518][T24630] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000001 [ 536.354592][T24630] R13: 00007ff939cc6038 R14: 00007ff939cc5fa0 R15: 00007fff9038ce08 [ 536.354615][T24630] [ 536.755892][T24633] loop9: detected capacity change from 0 to 512 [ 536.776155][T24633] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.792410][T24637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.813109][T24637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.024492][T24641] netlink: 404 bytes leftover after parsing attributes in process `syz.0.7423'. [ 537.037834][T24640] FAULT_INJECTION: forcing a failure. [ 537.037834][T24640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.050977][T24640] CPU: 0 UID: 0 PID: 24640 Comm: syz.9.7422 Not tainted syzkaller #0 PREEMPT(voluntary) [ 537.051084][T24640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.051101][T24640] Call Trace: [ 537.051110][T24640] [ 537.051120][T24640] __dump_stack+0x1d/0x30 [ 537.051164][T24640] dump_stack_lvl+0xe8/0x140 [ 537.051185][T24640] dump_stack+0x15/0x1b [ 537.051273][T24640] should_fail_ex+0x265/0x280 [ 537.051300][T24640] should_fail+0xb/0x20 [ 537.051325][T24640] should_fail_usercopy+0x1a/0x20 [ 537.051358][T24640] _copy_from_iter+0xd2/0xe80 [ 537.051541][T24640] ? mntput_no_expire+0x6f/0x460 [ 537.051585][T24640] ? mntput+0x4b/0x80 [ 537.051621][T24640] tun_get_user+0x3d0/0x2680 [ 537.051644][T24640] ? _parse_integer_limit+0x170/0x190 [ 537.051704][T24640] ? ref_tracker_alloc+0x1f2/0x2f0 [ 537.051736][T24640] ? selinux_file_permission+0x1e4/0x320 [ 537.051837][T24640] tun_chr_write_iter+0x15e/0x210 [ 537.051880][T24640] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 537.051920][T24640] vfs_write+0x527/0x960 [ 537.051955][T24640] ksys_write+0xda/0x1a0 [ 537.052011][T24640] __x64_sys_write+0x40/0x50 [ 537.052084][T24640] x64_sys_call+0x27fe/0x2ff0 [ 537.052112][T24640] do_syscall_64+0xd2/0x200 [ 537.052153][T24640] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 537.052184][T24640] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 537.052220][T24640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.052326][T24640] RIP: 0033:0x7ff939a8ebe9 [ 537.052345][T24640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.052362][T24640] RSP: 002b:00007ff9384ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 537.052381][T24640] RAX: ffffffffffffffda RBX: 00007ff939cc6180 RCX: 00007ff939a8ebe9 [ 537.052393][T24640] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 537.052405][T24640] RBP: 00007ff9384ad090 R08: 0000000000000000 R09: 0000000000000000 [ 537.052416][T24640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.052501][T24640] R13: 00007ff939cc6218 R14: 00007ff939cc6180 R15: 00007fff9038ce08 [ 537.052523][T24640] [ 537.396285][T24645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.405936][T24645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.891358][T24655] netlink: 60 bytes leftover after parsing attributes in process `syz.8.7427'. [ 538.076105][T24143] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.249078][T24675] 9pnet_fd: Insufficient options for proto=fd [ 539.056594][T24681] netlink: 60 bytes leftover after parsing attributes in process `syz.8.7438'. [ 539.155247][ T29] kauditd_printk_skb: 326 callbacks suppressed [ 539.155264][ T29] audit: type=1326 audit(1757330848.088:40367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24686 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 539.184923][ T29] audit: type=1326 audit(1757330848.118:40368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24686 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 539.208304][ T29] audit: type=1326 audit(1757330848.148:40369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24686 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 539.231228][ T29] audit: type=1326 audit(1757330848.148:40370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24686 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 539.254390][ T29] audit: type=1326 audit(1757330848.148:40371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24686 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 539.283279][T24691] serio: Serial port ptm0 [ 539.398426][ T29] audit: type=1326 audit(1757330848.328:40372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24701 comm="syz.9.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 539.422102][ T29] audit: type=1326 audit(1757330848.328:40373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24701 comm="syz.9.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 539.450585][ T29] audit: type=1326 audit(1757330848.348:40374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24703 comm="syz.8.7449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d6d5ebe9 code=0x7ffc0000 [ 539.474288][ T29] audit: type=1326 audit(1757330848.348:40375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24703 comm="syz.8.7449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59d6d5ebe9 code=0x7ffc0000 [ 539.498032][ T29] audit: type=1326 audit(1757330848.348:40376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24703 comm="syz.8.7449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d6d5ebe9 code=0x7ffc0000 [ 539.564815][T24706] netlink: 60 bytes leftover after parsing attributes in process `syz.8.7450'. [ 539.916261][T22051] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.273971][T24738] lo speed is unknown, defaulting to 1000 [ 540.772924][T24770] netlink: 60 bytes leftover after parsing attributes in process `syz.8.7476'. [ 540.796330][T24774] : renamed from wg2 (while UP) [ 541.617609][T24788] lo speed is unknown, defaulting to 1000 [ 542.413443][T24819] netlink: 'syz.0.7493': attribute type 12 has an invalid length. [ 542.421320][T24819] netlink: 'syz.0.7493': attribute type 29 has an invalid length. [ 542.429202][T24819] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7493'. [ 542.438309][T24819] netlink: 'syz.0.7493': attribute type 1 has an invalid length. [ 542.446063][T24819] netlink: 47 bytes leftover after parsing attributes in process `syz.0.7493'. [ 543.010876][T24848] netlink: 60 bytes leftover after parsing attributes in process `syz.8.7507'. [ 543.057928][T24837] lo speed is unknown, defaulting to 1000 [ 543.387850][T24868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7514'. [ 543.724329][T24886] loop7: detected capacity change from 0 to 1024 [ 543.756248][T24886] EXT4-fs: inline encryption not supported [ 543.785893][T24886] EXT4-fs (loop7): orphan cleanup on readonly fs [ 543.810384][T24886] EXT4-fs (loop7): 1 truncate cleaned up [ 543.824946][T24890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7524'. [ 543.836592][T24886] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 543.935648][T24895] lo speed is unknown, defaulting to 1000 [ 543.957967][T24886] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7521'. [ 543.978570][T24890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7524'. [ 544.235758][T24901] lo speed is unknown, defaulting to 1000 [ 544.359465][T22051] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.404304][T24913] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7531'. [ 544.413344][T24913] FAULT_INJECTION: forcing a failure. [ 544.413344][T24913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.426505][T24913] CPU: 0 UID: 0 PID: 24913 Comm: syz.0.7531 Not tainted syzkaller #0 PREEMPT(voluntary) [ 544.426533][T24913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 544.426549][T24913] Call Trace: [ 544.426559][T24913] [ 544.426569][T24913] __dump_stack+0x1d/0x30 [ 544.426596][T24913] dump_stack_lvl+0xe8/0x140 [ 544.426617][T24913] dump_stack+0x15/0x1b [ 544.426691][T24913] should_fail_ex+0x265/0x280 [ 544.426721][T24913] should_fail+0xb/0x20 [ 544.426742][T24913] should_fail_usercopy+0x1a/0x20 [ 544.426771][T24913] strncpy_from_user+0x25/0x230 [ 544.426920][T24913] ? _printk+0x79/0xa0 [ 544.426957][T24913] strncpy_from_user_nofault+0x68/0xf0 [ 544.427020][T24913] bpf_probe_read_compat_str+0xb4/0x130 [ 544.427092][T24913] bpf_prog_d73d3bb03d5a037f+0x3e/0x44 [ 544.427114][T24913] bpf_trace_run2+0x107/0x1c0 [ 544.427145][T24913] ? rtnl_newlink+0x1282/0x12d0 [ 544.427193][T24913] ? rtnl_newlink+0x1282/0x12d0 [ 544.427334][T24913] kfree+0x27b/0x320 [ 544.427361][T24913] rtnl_newlink+0x1282/0x12d0 [ 544.427405][T24913] ? search_extable+0x53/0x80 [ 544.427456][T24913] ? strncpy_from_user+0x17d/0x230 [ 544.427496][T24913] ? strncpy_from_user+0x17d/0x230 [ 544.427538][T24913] ? fixup_exception+0x741/0xd50 [ 544.427570][T24913] ? xa_load+0xb1/0xe0 [ 544.427607][T24913] ? __rcu_read_unlock+0x4f/0x70 [ 544.427629][T24913] ? avc_has_perm_noaudit+0x1b1/0x200 [ 544.427662][T24913] ? cred_has_capability+0x210/0x280 [ 544.427749][T24913] ? selinux_capable+0x31/0x40 [ 544.427817][T24913] ? security_capable+0x83/0x90 [ 544.427845][T24913] ? ns_capable+0x7d/0xb0 [ 544.427866][T24913] ? __pfx_rtnl_newlink+0x10/0x10 [ 544.427902][T24913] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 544.427955][T24913] ? avc_has_perm_noaudit+0x1b1/0x200 [ 544.427987][T24913] netlink_rcv_skb+0x123/0x220 [ 544.428038][T24913] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 544.428119][T24913] rtnetlink_rcv+0x1c/0x30 [ 544.428155][T24913] netlink_unicast+0x5bd/0x690 [ 544.428183][T24913] netlink_sendmsg+0x58b/0x6b0 [ 544.428260][T24913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.428290][T24913] __sock_sendmsg+0x142/0x180 [ 544.428321][T24913] ____sys_sendmsg+0x31e/0x4e0 [ 544.428418][T24913] ___sys_sendmsg+0x17b/0x1d0 [ 544.428457][T24913] __x64_sys_sendmsg+0xd4/0x160 [ 544.428494][T24913] x64_sys_call+0x191e/0x2ff0 [ 544.428558][T24913] do_syscall_64+0xd2/0x200 [ 544.428598][T24913] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 544.428629][T24913] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 544.428667][T24913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.428718][T24913] RIP: 0033:0x7f5b35f1ebe9 [ 544.428738][T24913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.428778][T24913] RSP: 002b:00007f5b34987038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.428801][T24913] RAX: ffffffffffffffda RBX: 00007f5b36155fa0 RCX: 00007f5b35f1ebe9 [ 544.428887][T24913] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 544.428902][T24913] RBP: 00007f5b34987090 R08: 0000000000000000 R09: 0000000000000000 [ 544.428917][T24913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.428932][T24913] R13: 00007f5b36156038 R14: 00007f5b36155fa0 R15: 00007ffe42a8e448 [ 544.428956][T24913] [ 544.899546][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 544.899566][ T29] audit: type=1326 audit(1757330853.828:40517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24929 comm="syz.3.7539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9c9debe9 code=0x7ffc0000 [ 544.929585][ T29] audit: type=1326 audit(1757330853.828:40518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24929 comm="syz.3.7539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f8d9c9debe9 code=0x7ffc0000 [ 544.953226][ T29] audit: type=1326 audit(1757330853.828:40519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24929 comm="syz.3.7539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9c9debe9 code=0x7ffc0000 [ 544.976948][ T29] audit: type=1326 audit(1757330853.828:40520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24929 comm="syz.3.7539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d9c9debe9 code=0x7ffc0000 [ 545.000589][ T29] audit: type=1326 audit(1757330853.828:40521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24929 comm="syz.3.7539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9c9debe9 code=0x7ffc0000 [ 545.024190][ T29] audit: type=1326 audit(1757330853.828:40522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24929 comm="syz.3.7539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d9c9debe9 code=0x7ffc0000 [ 545.047976][ T29] audit: type=1326 audit(1757330853.828:40523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24929 comm="syz.3.7539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9c9debe9 code=0x7ffc0000 [ 545.071585][ T29] audit: type=1326 audit(1757330853.828:40524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24929 comm="syz.3.7539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d9c9debe9 code=0x7ffc0000 [ 545.095326][ T29] audit: type=1326 audit(1757330853.828:40525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24929 comm="syz.3.7539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9c9debe9 code=0x7ffc0000 [ 545.118995][ T29] audit: type=1326 audit(1757330853.828:40526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24929 comm="syz.3.7539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d9c9debe9 code=0x7ffc0000 [ 545.335091][T24938] netlink: 60 bytes leftover after parsing attributes in process `syz.8.7542'. [ 546.067850][T24982] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 546.105696][T24982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=24982 comm=syz.9.7563 [ 546.284657][T25003] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7571'. [ 546.301302][T25003] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7571'. [ 546.655912][T25008] lo speed is unknown, defaulting to 1000 [ 546.856067][ T3488] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.922403][T25008] chnl_net:caif_netlink_parms(): no params data found [ 546.975399][ T3488] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.007851][T25034] loop7: detected capacity change from 0 to 512 [ 547.039452][T25034] EXT4-fs: inline encryption not supported [ 547.062500][T25034] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 547.089141][ T3488] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.100540][T25034] EXT4-fs (loop7): 1 truncate cleaned up [ 547.107576][T25034] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.155267][ T3488] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.173712][T25034] EXT4-fs warning (device loop7): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 547.212234][T25008] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.219488][T25008] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.228009][T25008] bridge_slave_0: entered allmulticast mode [ 547.235043][T25008] bridge_slave_0: entered promiscuous mode [ 547.236510][T22051] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.242048][T25008] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.257180][T25008] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.266502][T25008] bridge_slave_1: entered allmulticast mode [ 547.275926][T25008] bridge_slave_1: entered promiscuous mode [ 547.306588][T25008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.332799][T25008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.351379][ T3488] bridge_slave_1: left allmulticast mode [ 547.357129][ T3488] bridge_slave_1: left promiscuous mode [ 547.362856][ T3488] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.414352][T25063] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7589'. [ 547.425579][ T3488] bridge_slave_0: left allmulticast mode [ 547.431226][ T3488] bridge_slave_0: left promiscuous mode [ 547.436975][ T3488] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.986877][ T3488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.999146][ T3488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.009419][ T3488] bond0 (unregistering): Released all slaves [ 548.031313][T25008] team0: Port device team_slave_0 added [ 548.041330][T25008] team0: Port device team_slave_1 added [ 548.060296][ T3488] tipc: Left network mode [ 548.072876][T25008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.079950][T25008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.105885][T25008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.117864][T25081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.127897][T25081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.138963][T25083] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7595'. [ 548.142824][T25081] loop7: detected capacity change from 0 to 1024 [ 548.153491][T25083] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7595'. [ 548.165250][ T3488] hsr_slave_0: left promiscuous mode [ 548.171159][ T3488] hsr_slave_1: left promiscuous mode [ 548.178129][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.185575][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.208795][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.216278][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.227317][ T3488] veth1_macvtap: left promiscuous mode [ 548.232950][ T3488] veth0_macvtap: left promiscuous mode [ 548.239747][ T3488] veth1_vlan: left promiscuous mode [ 548.245139][ T3488] veth0_vlan: left promiscuous mode [ 548.318617][ T3488] team0 (unregistering): Port device team_slave_1 removed [ 548.330492][ T3488] team0 (unregistering): Port device team_slave_0 removed [ 548.399804][T25089] netlink: 404 bytes leftover after parsing attributes in process `syz.7.7594'. [ 548.476872][T25008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.483970][T25008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.510000][T25008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.608387][ T1035] lo speed is unknown, defaulting to 1000 [ 548.614299][ T1035] infiniband 3yz0: ib_query_port failed (-19) [ 548.718477][T25098] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9) [ 548.725104][T25098] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 548.732586][T25098] vhci_hcd vhci_hcd.0: Device attached [ 548.839496][T25008] hsr_slave_0: entered promiscuous mode [ 548.852974][T25008] hsr_slave_1: entered promiscuous mode [ 548.863087][T25008] debugfs: 'hsr0' already exists in 'hsr' [ 548.868922][T25008] Cannot create hsr debugfs directory [ 548.958727][ T1035] vhci_hcd: vhci_device speed not set [ 549.024722][ T1035] usb 19-1: new full-speed USB device number 3 using vhci_hcd [ 549.233071][T25104] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7603'. [ 549.474164][T25099] vhci_hcd: connection reset by peer [ 549.486691][ T3526] vhci_hcd: stop threads [ 549.490997][ T3526] vhci_hcd: release socket [ 549.495554][ T3526] vhci_hcd: disconnect device [ 550.003600][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 550.003619][ T29] audit: type=1326 audit(1757330858.938:40699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25118 comm="syz.9.7607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 550.037865][ T29] audit: type=1326 audit(1757330858.938:40700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25118 comm="syz.9.7607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 550.061569][ T29] audit: type=1326 audit(1757330858.938:40701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25118 comm="syz.9.7607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 550.085411][ T29] audit: type=1326 audit(1757330858.938:40702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25118 comm="syz.9.7607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 550.106063][T25008] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 550.109624][ T29] audit: type=1326 audit(1757330858.968:40703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25118 comm="syz.9.7607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 550.139343][ T29] audit: type=1326 audit(1757330858.968:40704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25118 comm="syz.9.7607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 550.162978][ T29] audit: type=1326 audit(1757330858.968:40705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25118 comm="syz.9.7607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 550.186487][ T29] audit: type=1326 audit(1757330858.968:40706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25118 comm="syz.9.7607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 550.210081][ T29] audit: type=1326 audit(1757330858.968:40707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25118 comm="syz.9.7607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 550.233668][ T29] audit: type=1326 audit(1757330858.968:40708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25118 comm="syz.9.7607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 550.308589][T25008] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 550.324697][T25008] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 550.342509][T25008] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 550.424923][T25008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.458003][T25008] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.471120][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.478285][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.492372][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.499497][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.096951][T25155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7617'. [ 552.538718][T25008] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 552.549164][T25008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 553.486087][T25008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.159435][ T1035] usb 19-1: enqueue for inactive port 0 [ 554.172193][ T1035] usb 19-1: enqueue for inactive port 0 [ 555.015171][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 555.015187][ T29] audit: type=1326 audit(1757330863.948:40777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25216 comm="syz.9.7632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 555.075056][T25217] loop9: detected capacity change from 0 to 512 [ 555.157834][ T1035] vhci_hcd: vhci_device speed not set [ 555.252699][T25217] EXT4-fs: Ignoring removed nobh option [ 555.330144][T25217] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.7632: corrupted inode contents [ 555.354088][ T29] audit: type=1326 audit(1757330863.988:40778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25216 comm="syz.9.7632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 555.377752][ T29] audit: type=1326 audit(1757330863.988:40779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25216 comm="syz.9.7632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 555.401385][ T29] audit: type=1326 audit(1757330863.988:40780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25220 comm="syz.7.7633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084d92ebe9 code=0x7ffc0000 [ 555.425153][ T29] audit: type=1326 audit(1757330863.988:40781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25220 comm="syz.7.7633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f084d92ebe9 code=0x7ffc0000 [ 555.448836][ T29] audit: type=1326 audit(1757330863.988:40782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25220 comm="syz.7.7633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084d92ebe9 code=0x7ffc0000 [ 555.472850][ T29] audit: type=1326 audit(1757330863.988:40783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25220 comm="syz.7.7633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f084d92ebe9 code=0x7ffc0000 [ 555.496409][ T29] audit: type=1326 audit(1757330863.988:40784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25220 comm="syz.7.7633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084d92ebe9 code=0x7ffc0000 [ 555.520077][ T29] audit: type=1326 audit(1757330863.988:40785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25220 comm="syz.7.7633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f084d92ebe9 code=0x7ffc0000 [ 555.543622][ T29] audit: type=1326 audit(1757330863.988:40786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25220 comm="syz.7.7633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084d92ebe9 code=0x7ffc0000 [ 556.157706][T25217] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #3: comm syz.9.7632: mark_inode_dirty error [ 556.178931][T25217] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.7632: corrupted inode contents [ 556.194557][T25217] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #3: comm syz.9.7632: mark_inode_dirty error [ 556.749414][T25217] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.7632: Failed to acquire dquot type 0 [ 556.853975][T25217] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.7632: corrupted inode contents [ 556.903307][T25217] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #16: comm syz.9.7632: mark_inode_dirty error [ 556.905957][T25008] veth0_vlan: entered promiscuous mode [ 557.013977][T25008] veth1_vlan: entered promiscuous mode [ 557.045266][T25008] veth0_macvtap: entered promiscuous mode [ 557.055695][T25217] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.7632: corrupted inode contents [ 557.105587][T25217] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.7632: mark_inode_dirty error [ 557.185755][T25008] veth1_macvtap: entered promiscuous mode [ 557.253370][T25217] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.7632: corrupted inode contents [ 557.409149][T25008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.428160][T25008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.448765][ T3508] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.461871][T25217] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 557.471819][ T3492] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.476625][T25217] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.7632: corrupted inode contents [ 557.485289][ T3492] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.493330][T25217] EXT4-fs error (device loop9): ext4_truncate:4666: inode #16: comm syz.9.7632: mark_inode_dirty error [ 557.516388][T25217] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 557.526883][T25217] EXT4-fs (loop9): 1 truncate cleaned up [ 557.534684][T25217] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.547963][T25217] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.560892][T25217] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.939219][ T3492] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.174699][T25273] loop7: detected capacity change from 0 to 2048 [ 558.302522][T25290] tmpfs: Bad value for 'mpol' [ 560.243104][T25339] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 560.249746][T25339] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 560.257316][T25339] vhci_hcd vhci_hcd.0: Device attached [ 560.356347][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 560.356363][ T29] audit: type=1326 audit(1757330869.288:40831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25343 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 560.574712][T25340] vhci_hcd: connection closed [ 560.588071][ T3545] vhci_hcd: stop threads [ 560.597117][ T3545] vhci_hcd: release socket [ 560.601540][ T3545] vhci_hcd: disconnect device [ 560.613524][ T29] audit: type=1326 audit(1757330869.488:40832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25343 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 560.636509][ T29] audit: type=1326 audit(1757330869.488:40833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25343 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 560.659383][ T29] audit: type=1326 audit(1757330869.488:40834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25343 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 560.720633][T25347] FAULT_INJECTION: forcing a failure. [ 560.720633][T25347] name failslab, interval 1, probability 0, space 0, times 0 [ 560.733373][T25347] CPU: 0 UID: 0 PID: 25347 Comm: syz.9.7665 Not tainted syzkaller #0 PREEMPT(voluntary) [ 560.733417][T25347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 560.733432][T25347] Call Trace: [ 560.733441][T25347] [ 560.733450][T25347] __dump_stack+0x1d/0x30 [ 560.733481][ T29] audit: type=1326 audit(1757330869.648:40835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25346 comm="syz.9.7665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 560.733476][T25347] dump_stack_lvl+0xe8/0x140 [ 560.733549][T25347] dump_stack+0x15/0x1b [ 560.733564][T25347] should_fail_ex+0x265/0x280 [ 560.733609][T25347] should_failslab+0x8c/0xb0 [ 560.733641][T25347] kmem_cache_alloc_noprof+0x50/0x310 [ 560.733756][T25347] ? audit_log_start+0x365/0x6c0 [ 560.733802][T25347] audit_log_start+0x365/0x6c0 [ 560.733849][T25347] audit_seccomp+0x48/0x100 [ 560.733952][T25347] ? __seccomp_filter+0x68c/0x10d0 [ 560.733983][T25347] __seccomp_filter+0x69d/0x10d0 [ 560.734026][T25347] ? _raw_spin_unlock+0x26/0x50 [ 560.734062][T25347] __secure_computing+0x82/0x150 [ 560.734092][T25347] syscall_trace_enter+0xcf/0x1e0 [ 560.734156][T25347] do_syscall_64+0xac/0x200 [ 560.734199][T25347] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 560.734233][T25347] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 560.734352][T25347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.734422][T25347] RIP: 0033:0x7ff939a8d5fc [ 560.734444][T25347] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 560.734467][T25347] RSP: 002b:00007ff9384ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 560.734492][T25347] RAX: ffffffffffffffda RBX: 00007ff939cc5fa0 RCX: 00007ff939a8d5fc [ 560.734510][T25347] RDX: 000000000000000f RSI: 00007ff9384ef0a0 RDI: 0000000000000003 [ 560.734527][T25347] RBP: 00007ff9384ef090 R08: 0000000000000000 R09: 0000000000000000 [ 560.734607][T25347] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 560.734646][T25347] R13: 00007ff939cc6038 R14: 00007ff939cc5fa0 R15: 00007fff9038ce08 [ 560.734680][T25347] [ 560.734690][T25347] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 560.743533][ T29] audit: type=1326 audit(1757330869.648:40836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25346 comm="syz.9.7665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 560.753693][T25347] audit: out of memory in audit_log_start [ 560.756981][ T29] audit: type=1326 audit(1757330869.648:40837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25346 comm="syz.9.7665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 561.009187][ T29] audit: type=1326 audit(1757330869.648:40838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25346 comm="syz.9.7665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 561.096922][T25385] loop9: detected capacity change from 0 to 512 [ 561.105195][T25385] EXT4-fs: Ignoring removed nobh option [ 561.119145][T25385] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.7670: corrupted inode contents [ 561.131689][T25385] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #3: comm syz.9.7670: mark_inode_dirty error [ 561.166037][T25385] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.7670: corrupted inode contents [ 561.204257][T25385] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #3: comm syz.9.7670: mark_inode_dirty error [ 561.232087][T25385] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.7670: Failed to acquire dquot type 0 [ 561.276586][T25385] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.7670: corrupted inode contents [ 561.312247][T25385] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #16: comm syz.9.7670: mark_inode_dirty error [ 561.381668][T25385] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.7670: corrupted inode contents [ 561.394873][T25385] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.7670: mark_inode_dirty error [ 561.406712][T25385] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.7670: corrupted inode contents [ 561.563145][T25385] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 561.648581][T25385] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.7670: corrupted inode contents [ 561.761269][T25385] EXT4-fs error (device loop9): ext4_truncate:4666: inode #16: comm syz.9.7670: mark_inode_dirty error [ 561.873353][T25385] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 561.883792][T25385] EXT4-fs (loop9): 1 truncate cleaned up [ 561.892906][T25385] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.926344][T25385] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.939981][T25448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.954585][T25448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.969863][T25385] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.278688][T25461] netlink: 404 bytes leftover after parsing attributes in process `syz.3.7682'. [ 562.497994][T25471] hub 9-0:1.0: USB hub found [ 562.545646][T25471] hub 9-0:1.0: 8 ports detected [ 562.687750][T25475] loop9: detected capacity change from 0 to 512 [ 562.706671][T25475] EXT4-fs (loop9): can't mount with data=, fs mounted w/o journal [ 562.755640][T25477] random: crng reseeded on system resumption [ 562.784583][T25477] loop8: detected capacity change from 0 to 128 [ 562.976593][ T3548] bio_check_eod: 5471 callbacks suppressed [ 562.976614][ T3548] kworker/u8:63: attempt to access beyond end of device [ 562.976614][ T3548] loop8: rw=1, sector=145, nr_sectors = 896 limit=128 [ 566.604707][T25577] loop9: detected capacity change from 0 to 512 [ 566.632364][T25577] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.645674][T25577] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.892379][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 566.892439][ T29] audit: type=1326 audit(1757330875.808:40940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25576 comm="syz.9.7734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 566.922511][ T29] audit: type=1326 audit(1757330875.808:40941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25576 comm="syz.9.7734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 566.946112][ T29] audit: type=1326 audit(1757330875.808:40942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25576 comm="syz.9.7734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 566.969998][ T29] audit: type=1326 audit(1757330875.808:40943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25576 comm="syz.9.7734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 566.993757][ T29] audit: type=1326 audit(1757330875.808:40944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25576 comm="syz.9.7734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 567.017337][ T29] audit: type=1326 audit(1757330875.808:40945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25576 comm="syz.9.7734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 567.040923][ T29] audit: type=1326 audit(1757330875.808:40946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25576 comm="syz.9.7734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 567.064503][ T29] audit: type=1326 audit(1757330875.808:40947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25576 comm="syz.9.7734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 567.088152][ T29] audit: type=1326 audit(1757330875.808:40948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25576 comm="syz.9.7734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 567.111822][ T29] audit: type=1326 audit(1757330875.808:40949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25576 comm="syz.9.7734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 567.220274][T25599] loop7: detected capacity change from 0 to 512 [ 567.228071][T25599] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 567.239917][T25599] EXT4-fs (loop7): 1 truncate cleaned up [ 567.246120][T25599] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.494303][T24143] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.641611][T25623] loop9: detected capacity change from 0 to 128 [ 567.649542][T25623] FAT-fs (loop9): bogus number of reserved sectors [ 567.656146][T25623] FAT-fs (loop9): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 567.667090][T25623] FAT-fs (loop9): Can't find a valid FAT filesystem [ 567.714531][T25633] netlink: 'syz.0.7753': attribute type 13 has an invalid length. [ 568.262404][T22051] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.386261][T25656] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7762'. [ 568.395729][T25656] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7762'. [ 568.439148][T25658] loop7: detected capacity change from 0 to 128 [ 568.446986][T25658] FAT-fs (loop7): bogus number of reserved sectors [ 568.453583][T25658] FAT-fs (loop7): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 568.464754][T25658] FAT-fs (loop7): Can't find a valid FAT filesystem [ 568.679807][T25678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.703704][T25678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.997475][T25714] netlink: 404 bytes leftover after parsing attributes in process `syz.0.7771'. [ 569.370449][T25729] loop9: detected capacity change from 0 to 128 [ 569.385276][T25729] FAT-fs (loop9): bogus number of reserved sectors [ 569.391878][T25729] FAT-fs (loop9): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 569.402872][T25729] FAT-fs (loop9): Can't find a valid FAT filesystem [ 569.445569][T25737] FAULT_INJECTION: forcing a failure. [ 569.445569][T25737] name failslab, interval 1, probability 0, space 0, times 0 [ 569.458239][T25737] CPU: 1 UID: 0 PID: 25737 Comm: syz.3.7793 Not tainted syzkaller #0 PREEMPT(voluntary) [ 569.458270][T25737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 569.458410][T25737] Call Trace: [ 569.458419][T25737] [ 569.458426][T25737] __dump_stack+0x1d/0x30 [ 569.458451][T25737] dump_stack_lvl+0xe8/0x140 [ 569.458505][T25737] dump_stack+0x15/0x1b [ 569.458526][T25737] should_fail_ex+0x265/0x280 [ 569.458561][T25737] should_failslab+0x8c/0xb0 [ 569.458593][T25737] kmem_cache_alloc_noprof+0x50/0x310 [ 569.458625][T25737] ? getname_flags+0x80/0x3b0 [ 569.458722][T25737] getname_flags+0x80/0x3b0 [ 569.458754][T25737] do_sys_openat2+0x60/0x110 [ 569.458791][T25737] __x64_sys_openat+0xf2/0x120 [ 569.458841][T25737] x64_sys_call+0x2e9c/0x2ff0 [ 569.458868][T25737] do_syscall_64+0xd2/0x200 [ 569.458900][T25737] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 569.458929][T25737] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 569.458987][T25737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.459033][T25737] RIP: 0033:0x7f8d9c9dd550 [ 569.459048][T25737] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 569.459065][T25737] RSP: 002b:00007f8d9b446b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 569.459112][T25737] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f8d9c9dd550 [ 569.459127][T25737] RDX: 0000000000000002 RSI: 00007f8d9b446c10 RDI: 00000000ffffff9c [ 569.459141][T25737] RBP: 00007f8d9b446c10 R08: 0000000000000000 R09: 00007f8d9b446986 [ 569.459156][T25737] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 569.459204][T25737] R13: 00007f8d9cc16038 R14: 00007f8d9cc15fa0 R15: 00007fffaff663d8 [ 569.459225][T25737] [ 569.781858][T25762] loop9: detected capacity change from 0 to 128 [ 569.791337][T25762] FAT-fs (loop9): bogus number of reserved sectors [ 569.797976][T25762] FAT-fs (loop9): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 569.808923][T25762] FAT-fs (loop9): Can't find a valid FAT filesystem [ 569.940233][T25766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61270 sclass=netlink_route_socket pid=25766 comm=syz.9.7807 [ 570.461758][T25845] SELinux: security policydb version 17 (MLS) not backwards compatible [ 570.488622][T25845] SELinux: failed to load policy [ 570.985273][T25866] syz.3.7824: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 571.000018][T25866] CPU: 1 UID: 0 PID: 25866 Comm: syz.3.7824 Not tainted syzkaller #0 PREEMPT(voluntary) [ 571.000048][T25866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 571.000064][T25866] Call Trace: [ 571.000072][T25866] [ 571.000081][T25866] __dump_stack+0x1d/0x30 [ 571.000143][T25866] dump_stack_lvl+0xe8/0x140 [ 571.000249][T25866] dump_stack+0x15/0x1b [ 571.000271][T25866] warn_alloc+0x12b/0x1a0 [ 571.000313][T25866] __vmalloc_node_range_noprof+0x9c/0xe00 [ 571.000356][T25866] ? probe_sched_wakeup+0x85/0xa0 [ 571.000525][T25866] ? ttwu_do_activate+0x1d0/0x210 [ 571.000557][T25866] ? __rcu_read_unlock+0x4f/0x70 [ 571.000591][T25866] ? avc_has_perm_noaudit+0x1b1/0x200 [ 571.000625][T25866] ? should_fail_ex+0x30/0x280 [ 571.000688][T25866] ? xskq_create+0x36/0xe0 [ 571.000818][T25866] vmalloc_user_noprof+0x7d/0xb0 [ 571.000858][T25866] ? xskq_create+0x80/0xe0 [ 571.000883][T25866] xskq_create+0x80/0xe0 [ 571.000924][T25866] xsk_init_queue+0x95/0xf0 [ 571.000979][T25866] xsk_setsockopt+0x477/0x640 [ 571.001018][T25866] ? __pfx_xsk_setsockopt+0x10/0x10 [ 571.001057][T25866] __sys_setsockopt+0x181/0x200 [ 571.001154][T25866] __x64_sys_setsockopt+0x64/0x80 [ 571.001190][T25866] x64_sys_call+0x20ec/0x2ff0 [ 571.001211][T25866] do_syscall_64+0xd2/0x200 [ 571.001241][T25866] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 571.001336][T25866] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 571.001367][T25866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.001448][T25866] RIP: 0033:0x7f8d9c9debe9 [ 571.001464][T25866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.001485][T25866] RSP: 002b:00007f8d9b426038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 571.001510][T25866] RAX: ffffffffffffffda RBX: 00007f8d9cc16090 RCX: 00007f8d9c9debe9 [ 571.001526][T25866] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 571.001541][T25866] RBP: 00007f8d9ca61e19 R08: 0000000000000004 R09: 0000000000000000 [ 571.001611][T25866] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 571.001627][T25866] R13: 00007f8d9cc16128 R14: 00007f8d9cc16090 R15: 00007fffaff663d8 [ 571.001653][T25866] [ 571.001661][T25866] Mem-Info: [ 571.224209][T25866] active_anon:100684 inactive_anon:11 isolated_anon:0 [ 571.224209][T25866] active_file:24701 inactive_file:6173 isolated_file:0 [ 571.224209][T25866] unevictable:39915 dirty:59 writeback:0 [ 571.224209][T25866] slab_reclaimable:3934 slab_unreclaimable:18232 [ 571.224209][T25866] mapped:33610 shmem:121144 pagetables:987 [ 571.224209][T25866] sec_pagetables:0 bounce:0 [ 571.224209][T25866] kernel_misc_reclaimable:0 [ 571.224209][T25866] free:1734500 free_pcp:8202 free_cma:0 [ 571.269769][T25866] Node 0 active_anon:402736kB inactive_anon:44kB active_file:98804kB inactive_file:24692kB unevictable:159660kB isolated(anon):0kB isolated(file):0kB mapped:134440kB dirty:236kB writeback:0kB shmem:484576kB kernel_stack:4080kB pagetables:3948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 571.297758][T25866] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 571.326361][T25866] lowmem_reserve[]: 0 2883 7862 7862 [ 571.331699][T25866] Node 0 DMA32 free:2949288kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 571.361781][T25866] lowmem_reserve[]: 0 0 4978 4978 [ 571.367003][T25866] Node 0 Normal free:3973352kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:402736kB inactive_anon:44kB active_file:98804kB inactive_file:24692kB unevictable:159660kB writepending:236kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:29276kB local_pcp:11788kB free_cma:0kB [ 571.399582][T25866] lowmem_reserve[]: 0 0 0 0 [ 571.404159][T25866] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 571.416913][T25866] Node 0 DMA32: 4*4kB (M) 5*8kB (M) 3*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949288kB [ 571.433106][T25866] Node 0 Normal: 970*4kB (UME) 900*8kB (UME) 771*16kB (UME) 904*32kB (UME) 1562*64kB (UME) 687*128kB (UME) 194*256kB (UM) 134*512kB (UME) 106*1024kB (UME) 38*2048kB (UME) 837*4096kB (UM) = 3973240kB [ 571.453318][T25866] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 571.462651][T25866] 168388 total pagecache pages [ 571.467455][T25866] 13 pages in swap cache [ 571.471707][T25866] Free swap = 58452kB [ 571.475824][T25866] Total swap = 124996kB [ 571.479986][T25866] 2097051 pages RAM [ 571.483828][T25866] 0 pages HighMem/MovableOnly [ 571.488522][T25866] 80446 pages reserved [ 571.548375][T25881] netlink: 'syz.3.7831': attribute type 1 has an invalid length. [ 571.556299][T25881] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7831'. [ 571.803632][T25901] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7840'. [ 571.914686][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 571.914701][ T29] audit: type=1326 audit(1757330880.848:41109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25911 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b35f1ebe9 code=0x7ffc0000 [ 571.953437][ T29] audit: type=1326 audit(1757330880.878:41110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25911 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b35f1ebe9 code=0x7ffc0000 [ 571.976537][ T29] audit: type=1326 audit(1757330880.878:41111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25911 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f5b35f1ebe9 code=0x7ffc0000 [ 571.999917][ T29] audit: type=1326 audit(1757330880.878:41112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25911 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b35f1ebe9 code=0x7ffc0000 [ 572.149987][T25926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.158537][T25926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.171499][T25926] loop7: detected capacity change from 0 to 1024 [ 572.204629][T25927] can0: slcan on ttyS3. [ 572.345598][T25933] loop8: detected capacity change from 0 to 1024 [ 572.472245][T25934] netlink: 404 bytes leftover after parsing attributes in process `syz.7.7849'. [ 573.331228][T25937] netlink: 404 bytes leftover after parsing attributes in process `syz.8.7851'. [ 573.472053][T25939] team0 (unregistering): Port device team_slave_0 removed [ 573.484343][ T29] audit: type=1400 audit(1757330882.398:41113): avc: denied { connect } for pid=25938 comm="syz.9.7852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 573.508564][T25939] team0 (unregistering): Port device team_slave_1 removed [ 573.518430][T25925] can0 (unregistered): slcan off ttyS3. [ 573.526537][T25950] loop8: detected capacity change from 0 to 1024 [ 573.532985][T25943] 9pnet_fd: Insufficient options for proto=fd [ 573.533809][T25950] EXT4-fs: inline encryption not supported [ 573.550856][T25950] EXT4-fs (loop8): orphan cleanup on readonly fs [ 573.558391][T25950] EXT4-fs (loop8): 1 truncate cleaned up [ 573.565835][T25950] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 573.606773][T25950] netlink: 60 bytes leftover after parsing attributes in process `syz.8.7854'. [ 573.698299][T25958] can0: slcan on ttyS3. [ 573.708963][T25008] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.748495][ T29] audit: type=1326 audit(1757330882.658:41114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25959 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b35f1ebe9 code=0x7ffc0000 [ 573.792353][ T29] audit: type=1326 audit(1757330882.708:41115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25959 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f5b35f1ebe9 code=0x7ffc0000 [ 573.815490][ T29] audit: type=1326 audit(1757330882.708:41116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25959 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b35f1ebe9 code=0x7ffc0000 [ 573.992965][T25985] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7869'. [ 574.056399][ T29] audit: type=1326 audit(1757330882.988:41117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25990 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9c9debe9 code=0x7ffc0000 [ 574.087114][ T29] audit: type=1326 audit(1757330882.998:41118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25990 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f8d9c9debe9 code=0x7ffc0000 [ 574.753504][T25956] can0 (unregistered): slcan off ttyS3. [ 575.182045][T26028] bond1: entered promiscuous mode [ 575.187230][T26028] bond1: entered allmulticast mode [ 575.192587][T26028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 575.229071][T26028] bond1 (unregistering): Released all slaves [ 576.818145][T26072] loop7: detected capacity change from 0 to 512 [ 576.826223][T26072] EXT4-fs: Ignoring removed nobh option [ 576.856278][T26072] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.7905: corrupted inode contents [ 576.877517][T26072] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #3: comm syz.7.7905: mark_inode_dirty error [ 576.889976][T26072] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.7905: corrupted inode contents [ 576.905185][T26072] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.7905: mark_inode_dirty error [ 576.917423][T26072] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.7905: Failed to acquire dquot type 0 [ 576.929836][T26072] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.7905: corrupted inode contents [ 576.942366][T26072] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.7905: mark_inode_dirty error [ 576.955267][T26072] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.7905: corrupted inode contents [ 576.967345][T26072] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.7905: mark_inode_dirty error [ 576.980497][T26072] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.7905: corrupted inode contents [ 576.994310][T26072] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 577.008595][T26072] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.7905: corrupted inode contents [ 577.025966][T26082] can0: slcan on ttyS3. [ 577.036149][T26072] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.7905: mark_inode_dirty error [ 577.054150][T26072] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 577.551512][T26072] EXT4-fs (loop7): 1 truncate cleaned up [ 577.559616][T26072] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.618393][T26072] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 577.925052][T26072] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.957386][T26093] bond1: entered promiscuous mode [ 577.962496][T26093] bond1: entered allmulticast mode [ 577.985560][T26093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 578.071346][T26093] bond1 (unregistering): Released all slaves [ 578.169392][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 578.169410][ T29] audit: type=1326 audit(1757330887.098:41203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26104 comm="syz.3.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9c9debe9 code=0x7ffc0000 [ 578.211035][T26105] loop9: detected capacity change from 0 to 7 [ 578.233580][T26105] Buffer I/O error on dev loop9, logical block 0, async page read [ 578.261223][T26105] Buffer I/O error on dev loop9, logical block 0, async page read [ 578.269280][T26105] loop9: unable to read partition table [ 578.303279][ T29] audit: type=1326 audit(1757330887.128:41204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26104 comm="syz.3.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d9c9debe9 code=0x7ffc0000 [ 578.327073][ T29] audit: type=1326 audit(1757330887.128:41205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26104 comm="syz.3.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9c9debe9 code=0x7ffc0000 [ 578.350728][ T29] audit: type=1326 audit(1757330887.128:41206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26104 comm="syz.3.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8d9c9debe9 code=0x7ffc0000 [ 578.374355][ T29] audit: type=1326 audit(1757330887.128:41207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26104 comm="syz.3.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9c9debe9 code=0x7ffc0000 [ 578.397949][ T29] audit: type=1326 audit(1757330887.128:41208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26104 comm="syz.3.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8d9c9debe9 code=0x7ffc0000 [ 578.421518][ T29] audit: type=1326 audit(1757330887.128:41209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26104 comm="syz.3.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9c9debe9 code=0x7ffc0000 [ 578.445138][ T29] audit: type=1326 audit(1757330887.128:41210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26104 comm="syz.3.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8d9c9debe9 code=0x7ffc0000 [ 578.468771][ T29] audit: type=1326 audit(1757330887.128:41211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26104 comm="syz.3.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9c9debe9 code=0x7ffc0000 [ 578.492555][ T29] audit: type=1326 audit(1757330887.128:41212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26104 comm="syz.3.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d9c9debe9 code=0x7ffc0000 [ 578.523366][T26105] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 578.523366][T26105] ) failed (rc=-5) [ 578.801660][T26134] loop8: detected capacity change from 0 to 512 [ 578.813089][T26134] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 578.828949][T26134] EXT4-fs (loop8): 1 truncate cleaned up [ 578.833803][T26079] can0 (unregistered): slcan off ttyS3. [ 578.835115][T26134] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.517049][T12480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=12480 comm=kworker/1:6 [ 580.774432][T25008] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.822968][T26172] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.894030][T26182] loop8: detected capacity change from 0 to 512 [ 580.900862][T26182] EXT4-fs: Ignoring removed nobh option [ 580.908570][T26172] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.935495][T26182] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #3: comm syz.8.7941: corrupted inode contents [ 580.949092][T26182] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #3: comm syz.8.7941: mark_inode_dirty error [ 580.964896][T26182] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #3: comm syz.8.7941: corrupted inode contents [ 580.980696][T26172] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.990872][T26182] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.7941: mark_inode_dirty error [ 581.003360][T26182] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.7941: Failed to acquire dquot type 0 [ 581.020877][T26182] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.7941: corrupted inode contents [ 581.034377][T26182] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #16: comm syz.8.7941: mark_inode_dirty error [ 581.061779][T26172] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.075138][T26182] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.7941: corrupted inode contents [ 581.094654][T26182] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.7941: mark_inode_dirty error [ 581.108451][T26182] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.7941: corrupted inode contents [ 581.120774][T26182] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 581.129702][T26182] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.7941: corrupted inode contents [ 581.141884][T26204] loop9: detected capacity change from 0 to 128 [ 581.148944][T26182] EXT4-fs error (device loop8): ext4_truncate:4666: inode #16: comm syz.8.7941: mark_inode_dirty error [ 581.150010][T26204] FAT-fs (loop9): bogus number of reserved sectors [ 581.163406][T26182] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 581.166793][T26204] FAT-fs (loop9): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 581.178731][T26182] EXT4-fs (loop8): 1 truncate cleaned up [ 581.187038][T26204] FAT-fs (loop9): Can't find a valid FAT filesystem [ 581.204086][T26182] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.217346][T26182] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.228163][T25837] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.237009][T25837] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.246899][T26182] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.262527][T25837] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.271851][T25837] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.329043][T26217] loop8: detected capacity change from 0 to 512 [ 581.408785][T26217] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.434414][T26217] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.600234][T25008] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.805934][T26236] SELinux: failed to load policy [ 581.875591][T26247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.887533][T26248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.925022][T26248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.934000][T26247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.987952][T26248] loop9: detected capacity change from 0 to 512 [ 582.012793][T26248] EXT4-fs: Ignoring removed oldalloc option [ 582.018966][T26248] ext4: Unknown parameter 's./file0/file0' [ 582.530446][T26272] can0: slcan on ttyS3. [ 582.630566][T26274] bond1: entered promiscuous mode [ 582.635785][T26274] bond1: entered allmulticast mode [ 582.667079][T26274] 8021q: adding VLAN 0 to HW filter on device bond1 [ 582.761974][T26274] bond1 (unregistering): Released all slaves [ 583.264025][T26267] can0 (unregistered): slcan off ttyS3. [ 583.353592][T26290] team0 (unregistering): Port device team_slave_0 removed [ 583.380420][T26290] team0 (unregistering): Port device team_slave_1 removed [ 583.424024][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 583.424098][ T29] audit: type=1326 audit(1757330892.358:41382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26302 comm="syz.8.7994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72e27ebe9 code=0x7ffc0000 [ 583.455680][ T29] audit: type=1326 audit(1757330892.358:41383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26302 comm="syz.8.7994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd72e27ebe9 code=0x7ffc0000 [ 583.479430][ T29] audit: type=1326 audit(1757330892.358:41384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26302 comm="syz.8.7994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72e27ebe9 code=0x7ffc0000 [ 583.503092][ T29] audit: type=1326 audit(1757330892.358:41385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26302 comm="syz.8.7994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72e27ebe9 code=0x7ffc0000 [ 583.526801][ T29] audit: type=1326 audit(1757330892.358:41386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26302 comm="syz.8.7994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd72e27ebe9 code=0x7ffc0000 [ 583.550469][ T29] audit: type=1326 audit(1757330892.358:41387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26302 comm="syz.8.7994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72e27ebe9 code=0x7ffc0000 [ 583.565189][T26304] loop9: detected capacity change from 0 to 7 [ 583.574144][ T29] audit: type=1326 audit(1757330892.358:41388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26302 comm="syz.8.7994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72e27ebe9 code=0x7ffc0000 [ 583.580370][T26304] Buffer I/O error on dev loop9, logical block 0, async page read [ 583.603884][ T29] audit: type=1326 audit(1757330892.358:41389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26302 comm="syz.8.7994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd72e27ebe9 code=0x7ffc0000 [ 583.603921][ T29] audit: type=1326 audit(1757330892.358:41390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26302 comm="syz.8.7994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd72e27ebe9 code=0x7ffc0000 [ 583.658901][ T29] audit: type=1326 audit(1757330892.358:41391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26302 comm="syz.8.7994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd72e27ebe9 code=0x7ffc0000 [ 583.662902][T26304] Buffer I/O error on dev loop9, logical block 0, async page read [ 583.690498][T26304] loop9: unable to read partition table [ 583.696936][T26304] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 583.696936][T26304] ) failed (rc=-5) [ 584.285190][T26325] loop8: detected capacity change from 0 to 512 [ 584.316961][T26325] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.332929][T26327] loop7: detected capacity change from 0 to 512 [ 584.350865][T26327] EXT4-fs: Ignoring removed nobh option [ 584.357646][T26325] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 584.385123][T26327] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.8003: corrupted inode contents [ 584.574791][T25008] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.583947][T26327] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #3: comm syz.7.8003: mark_inode_dirty error [ 584.604576][T26327] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.8003: corrupted inode contents [ 584.623510][T26327] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.8003: mark_inode_dirty error [ 584.655762][T26327] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.8003: Failed to acquire dquot type 0 [ 584.678050][T26327] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8003: corrupted inode contents [ 584.730594][T26327] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.8003: mark_inode_dirty error [ 584.754172][T26327] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8003: corrupted inode contents [ 584.779275][T26327] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.8003: mark_inode_dirty error [ 584.790864][T26327] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8003: corrupted inode contents [ 584.813437][T26327] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 584.850641][T26327] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8003: corrupted inode contents [ 584.863983][T26327] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.8003: mark_inode_dirty error [ 584.879758][T26345] SELinux: failed to load policy [ 584.884798][T26327] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 584.895072][T26345] netlink: 68 bytes leftover after parsing attributes in process `syz.8.8008'. [ 584.898262][T26327] EXT4-fs (loop7): 1 truncate cleaned up [ 584.914749][T26327] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.927810][T26327] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 584.939185][T26327] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.982953][T26357] loop7: detected capacity change from 0 to 128 [ 584.990477][T26357] FAT-fs (loop7): bogus number of reserved sectors [ 584.997129][T26357] FAT-fs (loop7): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 585.008071][T26357] FAT-fs (loop7): Can't find a valid FAT filesystem [ 585.297308][T26380] can0: slcan on ttyS3. [ 586.109403][T26390] loop8: detected capacity change from 0 to 512 [ 586.123403][T26378] can0 (unregistered): slcan off ttyS3. [ 586.135531][T26390] EXT4-fs: Ignoring removed nobh option [ 586.166085][T26390] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #3: comm syz.8.8021: corrupted inode contents [ 586.203051][T26390] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #3: comm syz.8.8021: mark_inode_dirty error [ 586.246764][T26390] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #3: comm syz.8.8021: corrupted inode contents [ 586.279559][T26390] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.8021: mark_inode_dirty error [ 586.305714][T26390] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.8021: Failed to acquire dquot type 0 [ 586.331910][T26390] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.8021: corrupted inode contents [ 586.359873][T26395] loop7: detected capacity change from 0 to 764 [ 586.397992][T26395] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 586.412800][T26390] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #16: comm syz.8.8021: mark_inode_dirty error [ 586.433574][T26390] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.8021: corrupted inode contents [ 586.461154][T26390] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.8021: mark_inode_dirty error [ 586.474496][T26390] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.8021: corrupted inode contents [ 586.505721][T26390] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 586.514596][T26390] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.8021: corrupted inode contents [ 586.527573][T26390] EXT4-fs error (device loop8): ext4_truncate:4666: inode #16: comm syz.8.8021: mark_inode_dirty error [ 586.541089][T26390] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 586.557539][T26390] EXT4-fs (loop8): 1 truncate cleaned up [ 586.565089][T26390] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.579030][T26390] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 586.608013][T26390] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.754566][T26412] bond2: entered promiscuous mode [ 586.759690][T26412] bond2: entered allmulticast mode [ 586.793880][T26420] loop8: detected capacity change from 0 to 1024 [ 586.800378][T26412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 586.967090][T26412] bond2 (unregistering): Released all slaves [ 587.066833][T26428] netlink: 404 bytes leftover after parsing attributes in process `syz.8.8033'. [ 588.040944][T26436] team0 (unregistering): Port device team_slave_0 removed [ 588.073863][T26436] team0 (unregistering): Port device team_slave_1 removed [ 588.116767][T26440] loop9: detected capacity change from 0 to 128 [ 588.129288][T26440] FAT-fs (loop9): bogus number of reserved sectors [ 588.135935][T26440] FAT-fs (loop9): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 588.146901][T26440] FAT-fs (loop9): Can't find a valid FAT filesystem [ 588.254974][T26447] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8044'. [ 588.940253][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 588.940270][ T29] audit: type=1326 audit(1757330897.868:41573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26498 comm="syz.0.8063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b35f1ebe9 code=0x7ffc0000 [ 588.973040][ T29] audit: type=1326 audit(1757330897.888:41574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26498 comm="syz.0.8063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b35f1ebe9 code=0x7ffc0000 [ 588.973081][ T29] audit: type=1326 audit(1757330897.888:41575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26498 comm="syz.0.8063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b35f1d550 code=0x7ffc0000 [ 589.032548][ T29] audit: type=1326 audit(1757330897.968:41576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26498 comm="syz.0.8063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b35f1ebe9 code=0x7ffc0000 [ 589.056358][ T29] audit: type=1326 audit(1757330897.968:41577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26498 comm="syz.0.8063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b35f1ebe9 code=0x7ffc0000 [ 589.079996][ T29] audit: type=1326 audit(1757330897.968:41578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26498 comm="syz.0.8063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5b35f1ebe9 code=0x7ffc0000 [ 589.103735][ T29] audit: type=1326 audit(1757330897.988:41579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26498 comm="syz.0.8063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5b35f1ec23 code=0x7ffc0000 [ 589.127258][ T29] audit: type=1326 audit(1757330897.988:41580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26498 comm="syz.0.8063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5b35f1ec23 code=0x7ffc0000 [ 589.150915][ T29] audit: type=1326 audit(1757330897.988:41581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26498 comm="syz.0.8063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b35f1ebe9 code=0x7ffc0000 [ 589.174606][ T29] audit: type=1326 audit(1757330897.988:41582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26498 comm="syz.0.8063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b35f1ebe9 code=0x7ffc0000 [ 589.252913][T26504] loop7: detected capacity change from 0 to 512 [ 589.260090][T26504] EXT4-fs: Ignoring removed nobh option [ 589.275544][T26504] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.8064: corrupted inode contents [ 589.288326][T26504] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #3: comm syz.7.8064: mark_inode_dirty error [ 589.300247][T26504] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.8064: corrupted inode contents [ 589.312339][T26504] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.8064: mark_inode_dirty error [ 589.324591][T26504] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.8064: Failed to acquire dquot type 0 [ 589.336538][T26504] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8064: corrupted inode contents [ 589.348694][T26504] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.8064: mark_inode_dirty error [ 589.361155][T26504] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8064: corrupted inode contents [ 589.373396][T26504] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.8064: mark_inode_dirty error [ 589.384983][T26504] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8064: corrupted inode contents [ 589.397095][T26504] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 589.405920][T26504] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8064: corrupted inode contents [ 589.418113][T26504] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.8064: mark_inode_dirty error [ 589.429404][T26504] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 589.439972][T26504] EXT4-fs (loop7): 1 truncate cleaned up [ 589.446082][T26504] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.459210][T26504] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.470689][T26504] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.502294][T26509] loop7: detected capacity change from 0 to 128 [ 589.509545][T26509] FAT-fs (loop7): bogus number of reserved sectors [ 589.516264][T26509] FAT-fs (loop7): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 589.527239][T26509] FAT-fs (loop7): Can't find a valid FAT filesystem [ 589.666668][T26522] loop9: detected capacity change from 0 to 512 [ 589.696224][T26522] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.709172][T26522] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.873322][T24143] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.889451][T26530] bond1: entered promiscuous mode [ 589.894816][T26530] bond1: entered allmulticast mode [ 589.900695][T26530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 589.911609][T26530] bond1 (unregistering): Released all slaves [ 589.942500][T26538] bond1: entered promiscuous mode [ 589.947614][T26538] bond1: entered allmulticast mode [ 589.951235][T26542] loop9: detected capacity change from 0 to 512 [ 589.960062][T26542] EXT4-fs: Ignoring removed nobh option [ 589.965859][T26538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 590.004428][T26542] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.8076: corrupted inode contents [ 590.013783][T26538] bond1 (unregistering): Released all slaves [ 590.022508][T26542] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #3: comm syz.9.8076: mark_inode_dirty error [ 590.036485][T26548] loop7: detected capacity change from 0 to 128 [ 590.044278][T26548] FAT-fs (loop7): bogus number of reserved sectors [ 590.050912][T26548] FAT-fs (loop7): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 590.052319][T26542] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.8076: corrupted inode contents [ 590.061853][T26548] FAT-fs (loop7): Can't find a valid FAT filesystem [ 590.075927][T26542] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #3: comm syz.9.8076: mark_inode_dirty error [ 590.093330][T26542] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.8076: Failed to acquire dquot type 0 [ 590.115186][T26542] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.8076: corrupted inode contents [ 590.127940][T26542] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #16: comm syz.9.8076: mark_inode_dirty error [ 590.163825][T26558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.172314][T26542] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.8076: corrupted inode contents [ 590.184764][T26558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.194305][T26542] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.8076: mark_inode_dirty error [ 590.210706][T26542] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.8076: corrupted inode contents [ 590.242204][T26561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 590.251011][T26561] bridge0: port 3(bond1) entered blocking state [ 590.253459][T26558] loop8: detected capacity change from 0 to 1024 [ 590.257403][T26561] bridge0: port 3(bond1) entered disabled state [ 590.273437][T26542] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 590.286028][T26542] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.8076: corrupted inode contents [ 590.287287][T26561] bond1: entered allmulticast mode [ 590.306198][T26542] EXT4-fs error (device loop9): ext4_truncate:4666: inode #16: comm syz.9.8076: mark_inode_dirty error [ 590.398676][T26561] bond1: entered promiscuous mode [ 590.405410][T26542] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 590.415638][T26542] EXT4-fs (loop9): 1 truncate cleaned up [ 590.425828][T26542] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.443576][T26542] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.469567][T26542] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.509479][T26570] netlink: 404 bytes leftover after parsing attributes in process `syz.8.8082'. [ 590.712049][T26578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8089'. [ 590.811921][T26584] bond2: entered promiscuous mode [ 590.817148][T26584] bond2: entered allmulticast mode [ 590.838448][T26578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.864290][T26584] 8021q: adding VLAN 0 to HW filter on device bond2 [ 590.872868][T26578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.881711][T26584] bond2 (unregistering): Released all slaves [ 590.897142][T26589] loop7: detected capacity change from 0 to 128 [ 590.904309][T26589] FAT-fs (loop7): bogus number of reserved sectors [ 590.910849][T26589] FAT-fs (loop7): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 590.921774][T26589] FAT-fs (loop7): Can't find a valid FAT filesystem [ 591.049784][T26600] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8099'. [ 592.703835][T26620] loop9: detected capacity change from 0 to 2048 [ 592.735433][T26620] EXT4-fs: Ignoring removed oldalloc option [ 592.741436][T26620] ext4: Unknown parameter 'noacl' [ 592.804948][T26630] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.877895][T26630] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.978140][T26646] FAULT_INJECTION: forcing a failure. [ 592.978140][T26646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.991305][T26646] CPU: 1 UID: 0 PID: 26646 Comm: syz.3.8115 Not tainted syzkaller #0 PREEMPT(voluntary) [ 592.991442][T26646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 592.991455][T26646] Call Trace: [ 592.991462][T26646] [ 592.991469][T26646] __dump_stack+0x1d/0x30 [ 592.991491][T26646] dump_stack_lvl+0xe8/0x140 [ 592.991510][T26646] dump_stack+0x15/0x1b [ 592.991529][T26646] should_fail_ex+0x265/0x280 [ 592.991558][T26646] should_fail+0xb/0x20 [ 592.991640][T26646] should_fail_usercopy+0x1a/0x20 [ 592.991670][T26646] strncpy_from_user+0x25/0x230 [ 592.991760][T26646] ? kmem_cache_alloc_noprof+0x186/0x310 [ 592.991805][T26646] ? getname_flags+0x80/0x3b0 [ 592.991835][T26646] getname_flags+0xae/0x3b0 [ 592.991863][T26646] user_path_at+0x28/0x130 [ 592.991896][T26646] user_statfs+0x4d/0x110 [ 592.991949][T26646] __x64_sys_statfs+0x65/0xf0 [ 592.992044][T26646] ? __secure_computing+0x82/0x150 [ 592.992068][T26646] ? syscall_trace_enter+0x102/0x1e0 [ 592.992093][T26646] x64_sys_call+0x2a03/0x2ff0 [ 592.992115][T26646] do_syscall_64+0xd2/0x200 [ 592.992181][T26646] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 592.992213][T26646] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 592.992303][T26646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.992326][T26646] RIP: 0033:0x7f8d9c9debe9 [ 592.992342][T26646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.992360][T26646] RSP: 002b:00007f8d9b447038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 592.992398][T26646] RAX: ffffffffffffffda RBX: 00007f8d9cc15fa0 RCX: 00007f8d9c9debe9 [ 592.992411][T26646] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000200000000200 [ 592.992423][T26646] RBP: 00007f8d9b447090 R08: 0000000000000000 R09: 0000000000000000 [ 592.992435][T26646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.992448][T26646] R13: 00007f8d9cc16038 R14: 00007f8d9cc15fa0 R15: 00007fffaff663d8 [ 592.992467][T26646] [ 593.251632][T26630] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.297751][T26653] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.8117'. [ 593.335537][T26630] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.376192][T26663] loop9: detected capacity change from 0 to 128 [ 593.383613][T26663] FAT-fs (loop9): bogus number of reserved sectors [ 593.390171][T26663] FAT-fs (loop9): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 593.401095][T26663] FAT-fs (loop9): Can't find a valid FAT filesystem [ 593.956285][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 593.956303][ T29] audit: type=1326 audit(1757330902.888:41777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26674 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084d92ebe9 code=0x7ffc0000 [ 594.005441][T25840] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.067174][T25840] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.088499][ T29] audit: type=1326 audit(1757330902.918:41778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26674 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084d92ebe9 code=0x7ffc0000 [ 594.111685][ T29] audit: type=1326 audit(1757330902.918:41779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26674 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f084d92ebe9 code=0x7ffc0000 [ 594.134810][ T29] audit: type=1326 audit(1757330902.918:41780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26674 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084d92ebe9 code=0x7ffc0000 [ 594.157835][ T29] audit: type=1326 audit(1757330902.918:41781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26674 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084d92ebe9 code=0x7ffc0000 [ 594.205398][T25840] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.220515][T26681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.233442][T25840] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.256434][T26683] loop7: detected capacity change from 0 to 512 [ 594.262918][T26681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.445970][T26683] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.517074][T26691] netlink: 404 bytes leftover after parsing attributes in process `syz.0.8128'. [ 594.554772][T26683] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 594.575953][T26693] loop9: detected capacity change from 0 to 128 [ 594.883154][ T29] audit: type=1326 audit(1757330903.728:41782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26682 comm="syz.7.8129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084d92ebe9 code=0x7ffc0000 [ 594.903991][T26693] FAT-fs (loop9): bogus number of reserved sectors [ 594.906903][ T29] audit: type=1326 audit(1757330903.728:41783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26682 comm="syz.7.8129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084d92ebe9 code=0x7ffc0000 [ 594.913355][T26693] FAT-fs (loop9): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 594.936907][ T29] audit: type=1326 audit(1757330903.728:41784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26682 comm="syz.7.8129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f084d92ebe9 code=0x7ffc0000 [ 594.947774][T26693] FAT-fs (loop9): Can't find a valid FAT filesystem [ 594.978319][ T29] audit: type=1326 audit(1757330903.728:41785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26682 comm="syz.7.8129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084d92ebe9 code=0x7ffc0000 [ 595.002081][ T29] audit: type=1326 audit(1757330903.728:41786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26682 comm="syz.7.8129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084d92ebe9 code=0x7ffc0000 [ 595.027835][T22051] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.062759][T26701] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.085745][T26698] FAULT_INJECTION: forcing a failure. [ 595.085745][T26698] name failslab, interval 1, probability 0, space 0, times 0 [ 595.098637][T26698] CPU: 1 UID: 0 PID: 26698 Comm: syz.3.8134 Not tainted syzkaller #0 PREEMPT(voluntary) [ 595.098668][T26698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 595.098685][T26698] Call Trace: [ 595.098711][T26698] [ 595.098721][T26698] __dump_stack+0x1d/0x30 [ 595.098793][T26698] dump_stack_lvl+0xe8/0x140 [ 595.098850][T26698] dump_stack+0x15/0x1b [ 595.098871][T26698] should_fail_ex+0x265/0x280 [ 595.098901][T26698] should_failslab+0x8c/0xb0 [ 595.098928][T26698] kmem_cache_alloc_noprof+0x50/0x310 [ 595.098963][T26698] ? radix_tree_node_alloc+0x8a/0x1f0 [ 595.099068][T26698] radix_tree_node_alloc+0x8a/0x1f0 [ 595.099153][T26698] idr_get_free+0x1fa/0x550 [ 595.099218][T26698] idr_alloc_u32+0xca/0x180 [ 595.099250][T26698] tcf_idr_check_alloc+0x193/0x240 [ 595.099341][T26698] tcf_mirred_init+0x18d/0x900 [ 595.099421][T26698] tcf_action_init_1+0x367/0x4a0 [ 595.099548][T26698] tcf_action_init+0x267/0x6d0 [ 595.099581][T26698] ? mark_reg_read+0x59/0x340 [ 595.099640][T26698] tc_ctl_action+0x291/0x830 [ 595.099707][T26698] ? __pfx_tc_ctl_action+0x10/0x10 [ 595.099842][T26698] rtnetlink_rcv_msg+0x65a/0x6d0 [ 595.099878][T26698] netlink_rcv_skb+0x123/0x220 [ 595.099901][T26698] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 595.099945][T26698] rtnetlink_rcv+0x1c/0x30 [ 595.100032][T26698] netlink_unicast+0x5bd/0x690 [ 595.100052][T26698] netlink_sendmsg+0x58b/0x6b0 [ 595.100075][T26698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.100152][T26698] __sock_sendmsg+0x142/0x180 [ 595.100180][T26698] ____sys_sendmsg+0x31e/0x4e0 [ 595.100205][T26698] ___sys_sendmsg+0x17b/0x1d0 [ 595.100291][T26698] __x64_sys_sendmsg+0xd4/0x160 [ 595.100319][T26698] x64_sys_call+0x191e/0x2ff0 [ 595.100341][T26698] do_syscall_64+0xd2/0x200 [ 595.100522][T26698] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 595.100544][T26698] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 595.100580][T26698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.100599][T26698] RIP: 0033:0x7f8d9c9debe9 [ 595.100653][T26698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.100667][T26698] RSP: 002b:00007f8d9b447038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.100684][T26698] RAX: ffffffffffffffda RBX: 00007f8d9cc15fa0 RCX: 00007f8d9c9debe9 [ 595.100694][T26698] RDX: 000000002000a804 RSI: 0000200000006280 RDI: 0000000000000007 [ 595.100705][T26698] RBP: 00007f8d9b447090 R08: 0000000000000000 R09: 0000000000000000 [ 595.100786][T26698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.100833][T26698] R13: 00007f8d9cc16038 R14: 00007f8d9cc15fa0 R15: 00007fffaff663d8 [ 595.100849][T26698] [ 595.376977][T26701] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.426210][T26701] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.466622][T26701] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.489358][T26723] bond2: entered promiscuous mode [ 595.494524][T26723] bond2: entered allmulticast mode [ 595.499903][T26723] 8021q: adding VLAN 0 to HW filter on device bond2 [ 595.516853][T26723] bond2 (unregistering): Released all slaves [ 595.534157][T25834] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.546031][T25834] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.557309][T25832] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.569657][T25832] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.763914][T26738] loop9: detected capacity change from 0 to 1024 [ 595.770704][T26738] EXT4-fs: inline encryption not supported [ 596.122569][T26738] EXT4-fs (loop9): orphan cleanup on readonly fs [ 596.130785][T26738] EXT4-fs (loop9): 1 truncate cleaned up [ 596.608560][T26759] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.796237][T26738] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 596.996104][T26759] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.112942][T26759] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.152291][T26738] netlink: 60 bytes leftover after parsing attributes in process `syz.9.8147'. [ 597.170205][T26771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8157'. [ 597.181555][T26759] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.194653][T26771] netlink: 'syz.3.8157': attribute type 29 has an invalid length. [ 597.247037][T24143] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.280969][T26779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8160'. [ 597.297841][T26779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.306718][T26779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.561050][T26802] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8168'. [ 597.576579][T26809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.585228][T26809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.600281][T26809] loop8: detected capacity change from 0 to 1024 [ 598.506909][T26812] netlink: 404 bytes leftover after parsing attributes in process `syz.8.8172'. [ 598.640487][T26829] FAULT_INJECTION: forcing a failure. [ 598.640487][T26829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.653688][T26829] CPU: 1 UID: 0 PID: 26829 Comm: syz.3.8178 Not tainted syzkaller #0 PREEMPT(voluntary) [ 598.653777][T26829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 598.653793][T26829] Call Trace: [ 598.653801][T26829] [ 598.653811][T26829] __dump_stack+0x1d/0x30 [ 598.653838][T26829] dump_stack_lvl+0xe8/0x140 [ 598.653861][T26829] dump_stack+0x15/0x1b [ 598.653960][T26829] should_fail_ex+0x265/0x280 [ 598.653990][T26829] should_fail+0xb/0x20 [ 598.654014][T26829] should_fail_usercopy+0x1a/0x20 [ 598.654044][T26829] _copy_from_user+0x1c/0xb0 [ 598.654160][T26829] __copy_msghdr+0x244/0x300 [ 598.654227][T26829] ___sys_sendmsg+0x109/0x1d0 [ 598.654272][T26829] __sys_sendmmsg+0x178/0x300 [ 598.654313][T26829] __x64_sys_sendmmsg+0x57/0x70 [ 598.654382][T26829] x64_sys_call+0x1c4a/0x2ff0 [ 598.654409][T26829] do_syscall_64+0xd2/0x200 [ 598.654446][T26829] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 598.654472][T26829] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 598.654518][T26829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.654611][T26829] RIP: 0033:0x7f8d9c9debe9 [ 598.654626][T26829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.654650][T26829] RSP: 002b:00007f8d9b447038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 598.654673][T26829] RAX: ffffffffffffffda RBX: 00007f8d9cc15fa0 RCX: 00007f8d9c9debe9 [ 598.654692][T26829] RDX: 0000000000000002 RSI: 0000200000000880 RDI: 0000000000000003 [ 598.654704][T26829] RBP: 00007f8d9b447090 R08: 0000000000000000 R09: 0000000000000000 [ 598.654715][T26829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.654727][T26829] R13: 00007f8d9cc16038 R14: 00007f8d9cc15fa0 R15: 00007fffaff663d8 [ 598.654775][T26829] [ 598.930178][T26837] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8183'. [ 598.949781][T26845] loop9: detected capacity change from 0 to 512 [ 598.968256][T26845] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.991043][T26845] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 599.128504][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 599.128536][ T29] audit: type=1326 audit(1757330908.058:41817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26844 comm="syz.9.8186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 599.158601][ T29] audit: type=1326 audit(1757330908.058:41818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26844 comm="syz.9.8186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 599.184414][ T29] audit: type=1326 audit(1757330908.058:41819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26844 comm="syz.9.8186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 599.208186][ T29] audit: type=1326 audit(1757330908.058:41820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26844 comm="syz.9.8186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 599.231779][ T29] audit: type=1326 audit(1757330908.058:41821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26844 comm="syz.9.8186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 599.255370][ T29] audit: type=1326 audit(1757330908.108:41822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26844 comm="syz.9.8186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 599.278961][ T29] audit: type=1326 audit(1757330908.108:41823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26844 comm="syz.9.8186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 599.302618][ T29] audit: type=1326 audit(1757330908.108:41824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26844 comm="syz.9.8186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 599.326214][ T29] audit: type=1326 audit(1757330908.118:41825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26844 comm="syz.9.8186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 599.349970][ T29] audit: type=1326 audit(1757330908.118:41826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26844 comm="syz.9.8186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff939a8ebe9 code=0x7ffc0000 [ 599.422207][T24143] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.617807][T26870] loop9: detected capacity change from 0 to 128 [ 599.626388][T26870] FAT-fs (loop9): bogus number of reserved sectors [ 599.632935][T26870] FAT-fs (loop9): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 599.643915][T26870] FAT-fs (loop9): Can't find a valid FAT filesystem [ 599.977900][T26883] loop9: detected capacity change from 0 to 1024 [ 599.984757][T26883] EXT4-fs: inline encryption not supported [ 599.994537][T26883] EXT4-fs (loop9): orphan cleanup on readonly fs [ 600.010109][T26883] EXT4-fs (loop9): 1 truncate cleaned up [ 600.018662][T26883] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 600.062378][T26883] netlink: 60 bytes leftover after parsing attributes in process `syz.9.8197'. [ 600.149681][T24143] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.189181][T26891] loop9: detected capacity change from 0 to 512 [ 600.216095][T26891] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.229422][T26891] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.442628][T24143] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.666785][T26912] loop9: detected capacity change from 0 to 128 [ 600.674990][T26912] FAT-fs (loop9): bogus number of reserved sectors [ 600.681558][T26912] FAT-fs (loop9): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 600.692717][T26912] FAT-fs (loop9): Can't find a valid FAT filesystem [ 600.740417][T26917] loop8: detected capacity change from 0 to 1024 [ 600.748692][T26917] EXT4-fs: inline encryption not supported [ 600.755293][T26919] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8209'. [ 600.756248][T26917] EXT4-fs (loop8): orphan cleanup on readonly fs [ 600.772281][T26917] EXT4-fs (loop8): 1 truncate cleaned up [ 600.778665][T26917] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 600.805990][T26919] netlink: 'syz.9.8209': attribute type 21 has an invalid length. [ 600.837840][T26919] loop9: detected capacity change from 0 to 1024 [ 600.853655][T26919] EXT4-fs: Ignoring removed bh option [ 600.855232][T26917] netlink: 60 bytes leftover after parsing attributes in process `syz.8.8208'. [ 600.859291][T26919] EXT4-fs: inline encryption not supported [ 600.893773][T26919] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 600.914240][T26919] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 600.951815][T26919] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.8209: lblock 2 mapped to illegal pblock 2 (length 1) [ 600.988145][T26919] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.8209: lblock 0 mapped to illegal pblock 48 (length 1) [ 601.004783][T25008] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.043312][T26919] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.8209: Failed to acquire dquot type 0 [ 601.071960][T26919] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 601.089245][T26919] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.8209: mark_inode_dirty error [ 601.113493][T26919] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 601.125741][T26919] EXT4-fs (loop9): 1 orphan inode deleted [ 601.136232][T26919] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.150471][T25840] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:56: lblock 1 mapped to illegal pblock 1 (length 1) [ 601.178497][T25840] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:56: Failed to release dquot type 0 [ 601.206950][T25832] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.214515][T26919] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.223454][T25832] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.288841][T26943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.304789][T26919] EXT4-fs error (device loop9): __ext4_get_inode_loc:4861: comm syz.9.8209: Invalid inode table block 1 in block_group 0 [ 601.324532][T26943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.333243][T25832] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.341582][T25832] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.364368][T26919] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 601.422163][T26943] loop7: detected capacity change from 0 to 1024 [ 602.358942][T26919] EXT4-fs error (device loop9): ext4_quota_off:7221: inode #3: comm syz.9.8209: mark_inode_dirty error [ 602.880687][T26953] netlink: 404 bytes leftover after parsing attributes in process `syz.7.8215'. [ 603.108860][T26966] loop9: detected capacity change from 0 to 1024 [ 603.116064][T26966] EXT4-fs: inline encryption not supported [ 603.166240][T26955] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8217'. [ 603.215890][T26966] EXT4-fs (loop9): orphan cleanup on readonly fs [ 603.225247][T26966] EXT4-fs (loop9): 1 truncate cleaned up [ 603.232879][T26966] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 603.772652][T26976] netlink: 60 bytes leftover after parsing attributes in process `syz.9.8222'. [ 603.982560][T26981] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.094804][T26982] team0 (unregistering): Port device team_slave_0 removed [ 604.131209][T26982] team0 (unregistering): Port device team_slave_1 removed [ 604.171860][T26981] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.234551][T24143] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.358165][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 604.358181][ T29] audit: type=1326 audit(1757330913.288:41885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26996 comm="syz.0.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b35f1ebe9 code=0x7ffc0000 [ 604.389110][ T29] audit: type=1326 audit(1757330913.298:41886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26996 comm="syz.0.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b35f1ebe9 code=0x7ffc0000 [ 604.412898][ T29] audit: type=1326 audit(1757330913.298:41887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26996 comm="syz.0.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b35f1ebe9 code=0x7ffc0000 [ 604.436584][ T29] audit: type=1326 audit(1757330913.298:41888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26996 comm="syz.0.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b35f1ebe9 code=0x7ffc0000 [ 604.460282][ T29] audit: type=1326 audit(1757330913.298:41889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26996 comm="syz.0.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b35f1ebe9 code=0x7ffc0000 [ 604.484038][ T29] audit: type=1326 audit(1757330913.298:41890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26996 comm="syz.0.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b35f1ebe9 code=0x7ffc0000 [ 604.507648][ T29] audit: type=1326 audit(1757330913.298:41891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26996 comm="syz.0.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b35f1ebe9 code=0x7ffc0000 [ 604.531236][ T29] audit: type=1326 audit(1757330913.298:41892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26996 comm="syz.0.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b35f1ebe9 code=0x7ffc0000 [ 604.545063][T27005] loop7: detected capacity change from 0 to 128 [ 604.554885][ T29] audit: type=1326 audit(1757330913.298:41893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26996 comm="syz.0.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f5b35f1ebe9 code=0x7ffc0000 [ 604.562300][T27005] FAT-fs (loop7): bogus number of reserved sectors [ 604.584817][ T29] audit: type=1326 audit(1757330913.298:41894): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26996 comm="syz.0.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b35f1ebe9 code=0x7ffc0000 [ 604.591350][T27005] FAT-fs (loop7): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 604.618188][T26981] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.626213][T27005] FAT-fs (loop7): Can't find a valid FAT filesystem [ 604.719000][T26981] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.756688][T27014] loop9: detected capacity change from 0 to 1024 [ 604.782639][T27014] EXT4-fs: inline encryption not supported [ 604.888673][T27014] EXT4-fs (loop9): orphan cleanup on readonly fs [ 604.900527][T27014] EXT4-fs (loop9): 1 truncate cleaned up [ 604.904440][T25836] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.906865][T27014] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 604.976267][T25836] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.006019][T25836] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.014559][T25836] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.045146][T27014] netlink: 60 bytes leftover after parsing attributes in process `syz.9.8237'. [ 605.058305][T27040] loop8: detected capacity change from 0 to 512 [ 605.102841][T27040] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.122335][T27040] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 605.145084][T24143] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.244572][T27038] ================================================================== [ 605.252706][T27038] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 605.259753][T27038] [ 605.262075][T27038] write to 0xffff8881037867c8 of 8 bytes by task 27032 on cpu 0: [ 605.269791][T27038] release_task+0x6f9/0xb60 [ 605.274317][T27038] do_exit+0xd81/0x15c0 [ 605.278488][T27038] kthread_exit+0x94/0x190 [ 605.282922][T27038] kthread+0x491/0x510 [ 605.286990][T27038] ret_from_fork+0xda/0x150 [ 605.291503][T27038] ret_from_fork_asm+0x1a/0x30 [ 605.296278][T27038] [ 605.298604][T27038] read to 0xffff888103786300 of 3264 bytes by task 27038 on cpu 1: [ 605.306496][T27038] memcpy_and_pad+0x48/0x80 [ 605.311008][T27038] arch_dup_task_struct+0x2c/0x40 [ 605.316037][T27038] dup_task_struct+0x83/0x6a0 [ 605.320721][T27038] copy_process+0x399/0x2000 [ 605.325318][T27038] kernel_clone+0x16c/0x5c0 [ 605.329831][T27038] __se_sys_clone3+0x1c2/0x200 [ 605.334608][T27038] __x64_sys_clone3+0x31/0x40 [ 605.339299][T27038] x64_sys_call+0x1fc9/0x2ff0 [ 605.343981][T27038] do_syscall_64+0xd2/0x200 [ 605.348498][T27038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.354397][T27038] [ 605.356725][T27038] Reported by Kernel Concurrency Sanitizer on: [ 605.362881][T27038] CPU: 1 UID: 0 PID: 27038 Comm: syz.8.8243 Not tainted syzkaller #0 PREEMPT(voluntary) [ 605.372704][T27038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.382777][T27038] ================================================================== [ 605.422579][T27053] loop9: detected capacity change from 0 to 128 [ 605.430591][T27053] FAT-fs (loop9): bogus number of reserved sectors [ 605.437271][T27053] FAT-fs (loop9): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 605.448274][T27053] FAT-fs (loop9): Can't find a valid FAT filesystem [ 605.455570][T25008] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.