last executing test programs: 18m39.433416677s ago: executing program 32 (id=1174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 17m26.189289861s ago: executing program 33 (id=3014): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000181100"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x6, 0x0, 0x1}, [@NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x79564cec}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x208d7077}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bridge\x00'}]}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x201, 0x0, 0x0, {0xe, 0x0, 0x9}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f0000000080)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) r7 = dup3(r5, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) 17m17.986117883s ago: executing program 34 (id=3196): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\t\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00'}) 17m15.970713582s ago: executing program 35 (id=3214): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='.\x00', 0x1084400, &(0x7f0000000100)=ANY=[], 0xf4, 0xa31, &(0x7f0000002080)="$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") openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX") socket(0x1e, 0x4, 0x0) r1 = syz_io_uring_setup(0x1644, &(0x7f0000000580)={0x0, 0x2, 0x10100, 0x0, 0x17b}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r1, 0x3ace, 0xfffffffe, 0x40, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x1) setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x835, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480)='u:object_r:app_data_file:s0:c512,c768\x00', 0x26, 0x3) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1c9441, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = creat(&(0x7f0000000140)='./bus\x00', 0xc) write$cgroup_int(r5, &(0x7f0000000540), 0xfffffdd8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000040)=0x1) 15m26.170677682s ago: executing program 36 (id=5841): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x763, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) socketpair$unix(0x1, 0x5bf9fa42849f46e6, 0x0, 0x0) 13m3.286031906s ago: executing program 37 (id=7781): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(0x0, 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 12m52.184904135s ago: executing program 38 (id=7880): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) 12m50.899020151s ago: executing program 8 (id=7889): bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000000)="6f462b57ef8c01ca6bdb4129e51d2511b73d6617ee9c6ff10e7efdfbd5ec38a6adc85c6ee441219b70feafec741e", 0x2e}], 0x1, 0x48, 0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00'}, 0x18) 12m50.798260883s ago: executing program 8 (id=7890): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = socket$inet(0x2, 0x1, 0x100) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 12m50.733765994s ago: executing program 8 (id=7891): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x48000) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x2400, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000810b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) 12m50.549924587s ago: executing program 8 (id=7892): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xf6}, 0x18) r0 = socket$kcm(0x10, 0x3, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x4, 0x26d, &(0x7f00000005c0)="$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") r2 = semget(0x1, 0x4, 0x39c) semop(r2, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x3, 0x5b7a, 0x800}], 0x2) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0xa00010, &(0x7f0000000880)={[{@sysvgroups}, {@errors_continue}, {@nobarrier}, {@grpjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@block_validity}]}, 0x21, 0x4ca, &(0x7f0000000e80)="$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") creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000400)=@loop={'/dev/loop', 0x0}, r3, &(0x7f00000005c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12m49.779293123s ago: executing program 8 (id=7895): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000005000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x75, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r6, &(0x7f0000000000)='./file0\x00', 0x5) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x0, 0x40000333}, &(0x7f0000000380), &(0x7f0000000040)) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x82) 12m49.054989277s ago: executing program 8 (id=7904): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x8000040}, 0x20000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x8, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x77359400}, 0x1, 0x40, 0x1}) r6 = syz_io_uring_complete(0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x20, 0x0, r6, &(0x7f0000000000)={0x200000, 0x10, 0x2}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000880)={0x0, @in6={{0xa, 0x4e22, 0x1, @empty, 0x1f8}}, 0x1, 0xfe15}, 0x90) 12m48.8869212s ago: executing program 39 (id=7904): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x8000040}, 0x20000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x8, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x77359400}, 0x1, 0x40, 0x1}) r6 = syz_io_uring_complete(0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x20, 0x0, r6, &(0x7f0000000000)={0x200000, 0x10, 0x2}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000880)={0x0, @in6={{0xa, 0x4e22, 0x1, @empty, 0x1f8}}, 0x1, 0xfe15}, 0x90) 12m39.659229093s ago: executing program 4 (id=7984): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r2], 0x20}}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r0, 0x4, r0}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setregid(0xee00, 0xee00) keyctl$session_to_parent(0x12) 12m38.562534764s ago: executing program 4 (id=7994): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = socket$inet(0x2, 0x1, 0x100) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 12m38.521634975s ago: executing program 4 (id=7995): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x56, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x8, 0xf989, "fe2e80ee"}, @mss={0x2, 0x4, 0x2}]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r8}, &(0x7f0000000a00), &(0x7f0000000a40)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r8}, &(0x7f0000000880), &(0x7f00000008c0)=r7}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) lseek(r1, 0x0, 0x3) 12m38.391950918s ago: executing program 4 (id=7997): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800200005000000000000000000000018120000", @ANYRESDEC=r0, @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$P9_RREAD(r4, 0x0, 0x100b) syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60004000000c3c00fe800000000000000000000000000033ff02000000000000000000000000000100000000000c907841400000c6"], 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00') read$eventfd(r5, &(0x7f0000000080), 0x8) r6 = openat$cgroup_ro(r5, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4004080) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000700)=ANY=[@ANYBLOB="000000004c9095854e85314316b3010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000004000"/192]) unlinkat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setsig(0x4203, r8, 0x80, &(0x7f00000000c0)={0xb, 0xb, 0x7}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r9, 0xffffffffffffffff, 0x200000000000000) 12m38.182938622s ago: executing program 4 (id=7999): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x281442, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xe}, 0x8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TCSETSW2(r3, 0x5453, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0xffffffffffff8001}, 0x18) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r6, 0x5, 0x4) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfff, 0x0, 0x3, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x64f1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4004010) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000a8ffffff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100200005000000", 0x29}], 0x1) 12m36.900069367s ago: executing program 4 (id=8010): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r2], 0x20}}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r0, 0x4, r0}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setregid(0xee00, 0xee00) keyctl$session_to_parent(0x12) 12m36.78631168s ago: executing program 40 (id=8010): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r2], 0x20}}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r0, 0x4, r0}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setregid(0xee00, 0xee00) keyctl$session_to_parent(0x12) 8m24.316573839s ago: executing program 6 (id=10952): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x281442, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xe}, 0x8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TCSETSW2(r3, 0x5453, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0xffffffffffff8001}, 0x18) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r6, 0x5, 0x4) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfff, 0x0, 0x3, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x64f1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100000000000000000000000050000030500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x4004010) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100200005000000", 0x29}], 0x1) 8m23.568705804s ago: executing program 6 (id=10958): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$xdp(0x2c, 0x3, 0x0) accept(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='cpuacct.usage\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x38) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x0, r6) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x49, &(0x7f0000000440)=""/73}, &(0x7f0000000380)="259374c96ee3", 0x0, 0xffffffff, 0x30, 0x0, 0x0}) 8m23.202811351s ago: executing program 6 (id=10966): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = open$dir(&(0x7f0000000180)='./file0\x00', 0x2ac103, 0xc) mknodat$null(r6, &(0x7f0000000300)='./file0/../file0\x00', 0x100, 0x103) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(r7, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x3}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 8m22.275062579s ago: executing program 6 (id=10982): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x800) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000001c0)=ANY=[], 0x4, 0x2dc, &(0x7f0000000bc0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0xe, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab49030000001854ec98e972cfed1adcad0600fbcb566a0982938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "6035ae1e0fe721441705322025000000003e2a5b4377f7ad4bcf2b71d17e1ec0ef54e6773fd7264c39ea00c508ba607269613800"}, 0x48, 0xfffffffffffffffe) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x97}, 0x18) keyctl$KEYCTL_MOVE(0x4, r6, r5, r5, 0x0) keyctl$KEYCTL_MOVE(0x4, r4, r4, 0x0, 0x0) r8 = socket(0xa, 0x3, 0x3a) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3a, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) r11 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r11) tkill(r11, 0x12) ptrace(0x4208, r11) ptrace(0x4207, r11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 8m21.951095786s ago: executing program 6 (id=10987): write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000000380)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) open$dir(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)=@setlink={0x40, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x40200}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x48000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d008d0f61"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8", @ANYRES32, @ANYBLOB="0000000000002000b70500f7ffffff0085000000a5000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x1, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000980)=[{0x40001, 0x1, 0x2000007}, {0x5, 0x0, 0xf, 0xa}, {0x5, 0x2, 0xe, 0x9}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0x7}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) r9 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0x200000000000011c, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000bb005500000018120000", @ANYRES32=r6, @ANYRESHEX=r9], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r10, 0x0, 0xfffffffffffffff4}, 0x18) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_GET_DEST(r4, 0x0, 0x40040c0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x170bd26, 0x0, {0x7, r12}, [@MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x0, 0x1002, {@ip4=@dev={0xac, 0x14, 0x14, 0x2d}, 0x86dd}}}]}, 0x38}}, 0xdbd2a08011d4c5a2) syz_usb_connect(0x4, 0x24, &(0x7f0000000480)=ANY=[], 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 8m19.927517016s ago: executing program 6 (id=11002): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000058c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xb84, 0x3, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x6, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffff002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x200, 0x3, 0x0, 0x0, 0x3, 0xfffff36d, 0x0, 0x0, 0x20000000, 0xfffffffd, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xf, 0xf, 0x0, 0x0, 0xb, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe8d0, 0x101, 0x8, 0x200, 0x3, 0x7f, 0x3, 0xffffffff, 0x3, 0x80000001, 0x8000000b, 0xac0, 0xfffff0c2, 0x7, 0xa042, 0xfffffc21, 0xffff8002, 0x4, 0x4, 0x400, 0x8, 0x7, 0x5d3b2fc3, 0x9, 0x7ff, 0x5, 0x5, 0x2, 0x1, 0xa0, 0xb, 0xf14, 0x2, 0x7f, 0x7, 0x1, 0x1, 0x5, 0x1, 0x9, 0x4, 0x6340, 0x8, 0x7, 0x8, 0x40000000, 0x5, 0x0, 0x40, 0x1, 0x5, 0x1, 0x9, 0x1ff, 0x0, 0x9, 0x426, 0x6, 0x4914, 0xffffffff, 0x3a, 0x5, 0x9, 0x3feb, 0x0, 0x5, 0x20eb5, 0x1ff, 0x5, 0x8, 0x0, 0x0, 0x7, 0x4, 0x2597, 0x9, 0x7, 0x4, 0xb8, 0xcb, 0xf, 0x0, 0x2, 0x4, 0x0, 0x27d, 0xc2c, 0x6, 0x1, 0x6, 0x4, 0x0, 0x8, 0x9, 0x10001, 0x3, 0x6, 0x2, 0xc, 0x6, 0x9, 0x3, 0x1c1, 0x3, 0x9, 0x4, 0x3, 0x3, 0x6, 0x4, 0xa21, 0xffff, 0x3ff, 0x0, 0x8, 0x355a, 0x1, 0x6, 0xffffff60, 0xee, 0x1000, 0xa, 0xfffffffb, 0x2, 0x7, 0x0, 0x2, 0xe0, 0x7f, 0xea50, 0x5, 0x2, 0x1000, 0x8, 0x0, 0x8, 0x1000, 0x7, 0x5, 0xfffffffa, 0x200, 0x7ff, 0xfffffff9, 0xfffffffd, 0x6, 0x1000, 0x8, 0x7ff, 0x81, 0x401, 0xe, 0x0, 0x8, 0x5, 0xffffffff, 0x1f2, 0x24000, 0x7, 0x100, 0x5, 0x6, 0x7ff, 0x7, 0x1b, 0x3a03, 0xb, 0xffffffff, 0x8, 0x3, 0x5, 0x3, 0x171751e3, 0x5, 0x6, 0x54, 0xfffffffb, 0xfa7, 0x7, 0x60, 0x1, 0x10, 0xcc0b, 0xa, 0x62, 0x8, 0x120000, 0x8, 0xfff, 0x1, 0x8001, 0xd, 0x5, 0x5, 0x5c, 0x4, 0x67bd, 0x3866, 0x9, 0xed1, 0x8, 0x5, 0x1, 0x2, 0x2, 0x2, 0x2, 0xb, 0x6, 0xb0c, 0x7, 0x5, 0x5c3b, 0x6, 0xb21, 0x40, 0x9, 0x3, 0x8, 0xfffffff8, 0x40000000, 0x2, 0x8, 0x4, 0xfff, 0x80000000, 0x5, 0x2b, 0x0, 0x3, 0x8, 0x9, 0x6, 0x400, 0x10e, 0x7, 0x101, 0x41a, 0x6, 0x1, 0x6, 0x0, 0x8, 0x6, 0x401, 0xfffffffe, 0xa, 0x0, 0x0, 0x1, 0xfffffff8, 0x9, 0xf87, 0x1, 0x9, 0x5, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x0, 0x1, 0x9, 0x100, {0x4, 0x2, 0x7, 0x2, 0x8000, 0x3}, {0x8, 0x0, 0x7fff, 0x8, 0x1, 0x100}, 0x2, 0x10, 0xe723}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x88c}}, 0xc0) 8m19.827848298s ago: executing program 41 (id=11002): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000058c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xb84, 0x3, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x6, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffff002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x200, 0x3, 0x0, 0x0, 0x3, 0xfffff36d, 0x0, 0x0, 0x20000000, 0xfffffffd, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xf, 0xf, 0x0, 0x0, 0xb, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe8d0, 0x101, 0x8, 0x200, 0x3, 0x7f, 0x3, 0xffffffff, 0x3, 0x80000001, 0x8000000b, 0xac0, 0xfffff0c2, 0x7, 0xa042, 0xfffffc21, 0xffff8002, 0x4, 0x4, 0x400, 0x8, 0x7, 0x5d3b2fc3, 0x9, 0x7ff, 0x5, 0x5, 0x2, 0x1, 0xa0, 0xb, 0xf14, 0x2, 0x7f, 0x7, 0x1, 0x1, 0x5, 0x1, 0x9, 0x4, 0x6340, 0x8, 0x7, 0x8, 0x40000000, 0x5, 0x0, 0x40, 0x1, 0x5, 0x1, 0x9, 0x1ff, 0x0, 0x9, 0x426, 0x6, 0x4914, 0xffffffff, 0x3a, 0x5, 0x9, 0x3feb, 0x0, 0x5, 0x20eb5, 0x1ff, 0x5, 0x8, 0x0, 0x0, 0x7, 0x4, 0x2597, 0x9, 0x7, 0x4, 0xb8, 0xcb, 0xf, 0x0, 0x2, 0x4, 0x0, 0x27d, 0xc2c, 0x6, 0x1, 0x6, 0x4, 0x0, 0x8, 0x9, 0x10001, 0x3, 0x6, 0x2, 0xc, 0x6, 0x9, 0x3, 0x1c1, 0x3, 0x9, 0x4, 0x3, 0x3, 0x6, 0x4, 0xa21, 0xffff, 0x3ff, 0x0, 0x8, 0x355a, 0x1, 0x6, 0xffffff60, 0xee, 0x1000, 0xa, 0xfffffffb, 0x2, 0x7, 0x0, 0x2, 0xe0, 0x7f, 0xea50, 0x5, 0x2, 0x1000, 0x8, 0x0, 0x8, 0x1000, 0x7, 0x5, 0xfffffffa, 0x200, 0x7ff, 0xfffffff9, 0xfffffffd, 0x6, 0x1000, 0x8, 0x7ff, 0x81, 0x401, 0xe, 0x0, 0x8, 0x5, 0xffffffff, 0x1f2, 0x24000, 0x7, 0x100, 0x5, 0x6, 0x7ff, 0x7, 0x1b, 0x3a03, 0xb, 0xffffffff, 0x8, 0x3, 0x5, 0x3, 0x171751e3, 0x5, 0x6, 0x54, 0xfffffffb, 0xfa7, 0x7, 0x60, 0x1, 0x10, 0xcc0b, 0xa, 0x62, 0x8, 0x120000, 0x8, 0xfff, 0x1, 0x8001, 0xd, 0x5, 0x5, 0x5c, 0x4, 0x67bd, 0x3866, 0x9, 0xed1, 0x8, 0x5, 0x1, 0x2, 0x2, 0x2, 0x2, 0xb, 0x6, 0xb0c, 0x7, 0x5, 0x5c3b, 0x6, 0xb21, 0x40, 0x9, 0x3, 0x8, 0xfffffff8, 0x40000000, 0x2, 0x8, 0x4, 0xfff, 0x80000000, 0x5, 0x2b, 0x0, 0x3, 0x8, 0x9, 0x6, 0x400, 0x10e, 0x7, 0x101, 0x41a, 0x6, 0x1, 0x6, 0x0, 0x8, 0x6, 0x401, 0xfffffffe, 0xa, 0x0, 0x0, 0x1, 0xfffffff8, 0x9, 0xf87, 0x1, 0x9, 0x5, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x0, 0x1, 0x9, 0x100, {0x4, 0x2, 0x7, 0x2, 0x8000, 0x3}, {0x8, 0x0, 0x7fff, 0x8, 0x1, 0x100}, 0x2, 0x10, 0xe723}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x88c}}, 0xc0) 5m44.143670094s ago: executing program 3 (id=13790): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x281442, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xe}, 0x8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TCSETSW2(r3, 0x5453, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0xffffffffffff8001}, 0x18) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r6, 0x5, 0x4) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfff, 0x0, 0x3, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x64f1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100000000000000000000000050000030500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x4004010) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000a8ffffff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100200005000000", 0x29}], 0x1) 5m43.465132617s ago: executing program 3 (id=13802): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r0, 0x407, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@errors_continue}, {@data_err_abort}, {@nomblk_io_submit}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b0}}, {@noblock_validity}, {@grpquota}, {@nobh}, {@user_xattr}, {@inode_readahead_blks}, {@dioread_nolock}]}, 0x21, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) pwritev(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="cabf637cc7bb88c12da30171f4d1ed5e5d81299d812fbceea2ed1e7c52c115328832b5d3903e067f6e8ccf963cb0f97e98bf6f7001463919c0628f3429a9b63467bcf297456960a44676cd28d4dbf6881cc2247fd33cf15c325324913868ebe8f4380d80ab541a01bbfb623e906e750675161029288e6037e96ed81bdadaae353ca06aed311ee3e5d11cb8987511b67da34e249a2773fc69f5874d", 0x9b}, {&(0x7f00000001c0)="4e3a2fee0e59760cfd40a25f5952f61f616625d16764dcf94b1175a7b08351d83797c7b5ceef8aa9a9e501127775bd3fb02d856659fd5fa202d4320f594aa2dd0f2f5b8f33c4bbbe594611f3f4aab62ae638c7a3c0009ed9", 0x58}, {&(0x7f0000000000)="8972ed960f5d3da269d67ed818dcb2f892e39df1900e39375b8148c7041f3ed9db5823146b587704b12e1df042ee586cae2f80ea7ea307", 0x37}, {&(0x7f0000001fc0)="f220651390ec9dfcd41b6d218ccb4a8257453004b03e32397135a61ed16e526ee7a88d3e5069627bc4caa8d9070000005a584c242af0dc248701af5e759a21d6f8b17e25b4b13dc99242bbbebf4b6790f09b40e74ff1f0451cd9e2aba58bb1e3bbdc2f59a0e6bfa514983764ecd03a9fadf306fa19e2a68c46ec61873cb2d481b7b37c8157a9e0bd17f9912c52b7d3adeee5703faa778a297dbaab22a77f31bf3d28c74d3f148c4e4d436d1bc3ca1e6100"/191, 0xbf}, {&(0x7f0000000440)="d8c062fd6c1df28ce69a2690d70ebe113986e82c83e0adfd068057195d596ac1d86f5864ace240db1589350f7e1337851d28ba3dd60d8d5390f79bc15f78b5f677e32c3fcf169821a0ddd554bd8b45f4d370d643b9064fd1468e4d65c56f224a4f797a8f04ed98d73c0e11d446b891618e66e5901178b45b98a96901561edb7610219585c0d67128f30a", 0x8a}, {&(0x7f0000000fc0)="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", 0xca8}], 0x6, 0x7, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e8", 0x7e}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @loopback}}}], 0x20}, 0xe900) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x3ffff) sendfile(0xffffffffffffffff, r3, 0x0, 0x7fffeffd) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4004000) socket(0x400000000010, 0x3, 0x0) r5 = getpid() syz_pidfd_open(r5, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='kfree\x00', r7}, 0x18) capset(&(0x7f0000000c00)={0x20071026}, &(0x7f0000000440)={0x0, 0x3, 0x4, 0x8000, 0x10040, 0x8f}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) 5m43.027595176s ago: executing program 3 (id=13810): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x3}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) 5m42.149140824s ago: executing program 3 (id=13827): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0xf632}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0xf632}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@nodelalloc}, {@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_continue}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") chdir(&(0x7f0000000140)='./file0\x00') (async) chdir(&(0x7f0000000140)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 5m41.881402179s ago: executing program 3 (id=13830): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x80003, 0xff) socket(0x2a, 0x2, 0xffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x6}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x40001c4}, 0x0) 5m41.028284725s ago: executing program 3 (id=13846): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRES16=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040)) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x20000) (async) r5 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x20000) read$usbmon(r5, 0x0, 0x0) (async) read$usbmon(r5, 0x0, 0x0) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000180)={0x0, 0x0}) (async) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000180)={0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) pwritev2(r3, &(0x7f0000000200)=[{&(0x7f00000014c0)="424d3f85b240893d1d20f01a3f91dfbffe42c5aa1b3a42002cf5d5c075a8285d9bd2f33c6cd381846821ac1a03936e3c85418ed92f133c610f82dc75b5336e5609604c27dc2198350151db97ae32669dd02a99c4a7d9bf00936eb2fd6117647df84d0e80f50b3e71975bcd72bd73f04120e4d46d046a5ffecd1aabec077f283816bc844b47f9659ff0f54d36ec790619e62956e32c9bf09265661feb", 0x9c}], 0x1, 0x100, 0x1, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)="81296740f249d84332574a385502b25a79e996483626a1eb26fe5dadadfdddbf72d6231c46580e719188362bc1df", 0x2e}], 0x1, &(0x7f0000000740)=[@init={0x18, 0x84, 0x0, {0xc9ef, 0x3, 0x433, 0x4}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x8, 0x1ff, 0x5}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x3e}}], 0x70, 0x4000000}, {&(0x7f0000000800)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000840)="64f9b07414c4f713061d58ac591d0294876b2359a520bab9699b5ace11d63ca59cfa9d5719e4bca831fe17df1ee6309556d2d098b712338330f679e995821b8dc3cecc2352ab53811fc78b1474d446ca58f2fc013bdaafe2c03735a041bdb32ddfa05ddcb7cef55c22c867f4a51d66f898fe4f050d438282ef", 0x79}], 0x1, &(0x7f0000000a00)=[@sndrcv={0x30, 0x84, 0x1, {0xf22a, 0x1, 0x0, 0x7, 0x7ff, 0x9, 0x2, 0x3}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}], 0x50, 0x20060841}, {&(0x7f0000000a80)=@in6={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000ac0)="2f6827ecf10dea6db1fcb3885af0bfa908d4101eed9c027293df1cc6c443e34b6a3a36abc31fb3e59cd544002031e0244156569dd48200c250c8684d268f54256cb4b9590e755df867f063229a950e587abb66a32a2a37abef536d8ecc69ecac44104186658c22bc662c4e6ac897c7cbeb32efa56cc9413c9ff2dbccf4644a4ef36db5775d62f93cb76c8de8d70e45d65ac315a328088a7e3b45d8c3be8848a00ef0e603466c85fba1b707fb7a5524933d17505cf5ab84d034e1a762c9bfb1c99ae3078484b09ba110312c90c5f049b0845c06a12c14a2590dd108cab64af89ed37f2962", 0xe4}, {&(0x7f0000000bc0)="bfdce6a89752f4429c5ee2be43a5b22d7c0c11f87b4acaedf3cb34df649d1878e257233492856a797ea06a26902047d20406de91d0e12396", 0x38}], 0x2, &(0x7f0000000c40)=[@init={0x18, 0x84, 0x0, {0xebc, 0x8001, 0x0, 0xffff}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xd9d9}}], 0x48, 0x804c804}], 0x3, 0x4000000) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901) mount_setattr(r7, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f00000003c0)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000000)={0x0, r6, 0x3a9, 0x2, 0x7, 0x3}) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000028002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000028002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="180000000002000000000000800000009500000000000000d53db9ef6fb2064db66ad3b503c89747c22bcfca25620f5c664487291dea379c6c2368fe061e2873fd8874a5c3efffd3ebe4bf9c01ce0113d7a02a8678e3d5c2783678fe3b251baddd584ec1db9735"], &(0x7f00000007c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41002, 0x8, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd27, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd27, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000306050000000000000000000000000005000100"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 5m41.028010736s ago: executing program 42 (id=13846): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRES16=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040)) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x20000) (async) r5 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x20000) read$usbmon(r5, 0x0, 0x0) (async) read$usbmon(r5, 0x0, 0x0) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000180)={0x0, 0x0}) (async) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000180)={0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) pwritev2(r3, &(0x7f0000000200)=[{&(0x7f00000014c0)="424d3f85b240893d1d20f01a3f91dfbffe42c5aa1b3a42002cf5d5c075a8285d9bd2f33c6cd381846821ac1a03936e3c85418ed92f133c610f82dc75b5336e5609604c27dc2198350151db97ae32669dd02a99c4a7d9bf00936eb2fd6117647df84d0e80f50b3e71975bcd72bd73f04120e4d46d046a5ffecd1aabec077f283816bc844b47f9659ff0f54d36ec790619e62956e32c9bf09265661feb", 0x9c}], 0x1, 0x100, 0x1, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)="81296740f249d84332574a385502b25a79e996483626a1eb26fe5dadadfdddbf72d6231c46580e719188362bc1df", 0x2e}], 0x1, &(0x7f0000000740)=[@init={0x18, 0x84, 0x0, {0xc9ef, 0x3, 0x433, 0x4}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x8, 0x1ff, 0x5}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x3e}}], 0x70, 0x4000000}, {&(0x7f0000000800)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000840)="64f9b07414c4f713061d58ac591d0294876b2359a520bab9699b5ace11d63ca59cfa9d5719e4bca831fe17df1ee6309556d2d098b712338330f679e995821b8dc3cecc2352ab53811fc78b1474d446ca58f2fc013bdaafe2c03735a041bdb32ddfa05ddcb7cef55c22c867f4a51d66f898fe4f050d438282ef", 0x79}], 0x1, &(0x7f0000000a00)=[@sndrcv={0x30, 0x84, 0x1, {0xf22a, 0x1, 0x0, 0x7, 0x7ff, 0x9, 0x2, 0x3}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}], 0x50, 0x20060841}, {&(0x7f0000000a80)=@in6={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000ac0)="2f6827ecf10dea6db1fcb3885af0bfa908d4101eed9c027293df1cc6c443e34b6a3a36abc31fb3e59cd544002031e0244156569dd48200c250c8684d268f54256cb4b9590e755df867f063229a950e587abb66a32a2a37abef536d8ecc69ecac44104186658c22bc662c4e6ac897c7cbeb32efa56cc9413c9ff2dbccf4644a4ef36db5775d62f93cb76c8de8d70e45d65ac315a328088a7e3b45d8c3be8848a00ef0e603466c85fba1b707fb7a5524933d17505cf5ab84d034e1a762c9bfb1c99ae3078484b09ba110312c90c5f049b0845c06a12c14a2590dd108cab64af89ed37f2962", 0xe4}, {&(0x7f0000000bc0)="bfdce6a89752f4429c5ee2be43a5b22d7c0c11f87b4acaedf3cb34df649d1878e257233492856a797ea06a26902047d20406de91d0e12396", 0x38}], 0x2, &(0x7f0000000c40)=[@init={0x18, 0x84, 0x0, {0xebc, 0x8001, 0x0, 0xffff}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xd9d9}}], 0x48, 0x804c804}], 0x3, 0x4000000) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901) mount_setattr(r7, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f00000003c0)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000000)={0x0, r6, 0x3a9, 0x2, 0x7, 0x3}) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000028002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000028002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="180000000002000000000000800000009500000000000000d53db9ef6fb2064db66ad3b503c89747c22bcfca25620f5c664487291dea379c6c2368fe061e2873fd8874a5c3efffd3ebe4bf9c01ce0113d7a02a8678e3d5c2783678fe3b251baddd584ec1db9735"], &(0x7f00000007c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41002, 0x8, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd27, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd27, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000306050000000000000000000000000005000100"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 3m20.254706718s ago: executing program 0 (id=16940): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_open_dev$mouse(&(0x7f00000002c0), 0x5, 0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18090000000007000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x1800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x4}, 0x18) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680), 0x80c02, 0x0) write$cgroup_int(r4, 0x0, 0x2) syz_io_uring_setup(0x3c10, &(0x7f00000000c0)={0x0, 0x7b5f, 0x100, 0x0, 0x8a}, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x40010, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x7000000) 3m19.965297033s ago: executing program 0 (id=16948): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m19.875688525s ago: executing program 0 (id=16950): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, 0x0, 0x64, 0x183000, 0x23456}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3m19.672133249s ago: executing program 0 (id=16954): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ftruncate(0xffffffffffffffff, 0x2000009) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000180)="33f6f23e4d7cbe725aa5d7c4b6cff152792665c2f9893b10e3a48bdb52dcfe70e79cc92b6c991d2f5bbdaf4f6ed31d742543f0206cf5be101480ce47e3aedce578e6c9cec9697bc1e50e13632d2c592cb784a74bda3a3376a3cc868155413845bd5bba61737482a43e250aceb71a3eb6ea24f2e98d4c90339e73180195dfd17f3dbffeeacdd7f8dd8a5848ffaa579e890a158e0eee4918980d38d553a7777ecb30a72e1b6b648ceb0ba4d08f46b5302e76ac5fd0fc9fe9f124962c9b") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtaction={0x1c0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x1ac, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0xc29e, 0x0, 0x767cda3, 0xd}, 0xb}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x0, 0x3}}}}, @m_ct={0x98, 0x0, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0xd76f}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0xa4, 0x1b, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @TCA_IFE_TYPE={0x6, 0x5, 0x49f}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7f, 0x7fff, 0x20000000, 0x6, 0xc}}}]}, {0x4c, 0x6, "424271043e3526994161de824bc22eb3728afc8c820740867dae11d09aafa76223d7ce60c9e4b13cbc57797a0cef348c30460194c3b36f6ff306fe4efe3a105097e16e39f8b13419"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1c0}}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}}}]}, 0x5c}}, 0x20000084) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x24040840) sendfile(r7, r6, 0x0, 0x5ccc) sendmsg$can_raw(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xee, 0x0, 0x0, 0x40041}, 0x0) 3m19.296673437s ago: executing program 0 (id=16961): connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "8906abc820391ade", "29a6a1787d83a8e48a52ac8d65f08c41", "7441c0d0", "54ae29c83bbfa003"}, 0x28) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) io_setup(0x8f0, 0x0) (async) connect$tipc(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) symlinkat(0x0, 0xffffffffffffffff, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x2, 0xb, 0x5, r0}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x40, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) close(0x3) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000080)=0x2, 0x100, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x2) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 3m18.970800043s ago: executing program 0 (id=16971): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_open_dev$mouse(&(0x7f00000002c0), 0x5, 0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18090000000007000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x1800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x4}, 0x18) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680), 0x80c02, 0x0) write$cgroup_int(r4, 0x0, 0x2) syz_io_uring_setup(0x3c10, &(0x7f00000000c0)={0x0, 0x7b5f, 0x100, 0x0, 0x8a}, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x40010, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x7000000) 3m18.908976085s ago: executing program 43 (id=16971): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_open_dev$mouse(&(0x7f00000002c0), 0x5, 0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18090000000007000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x1800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x4}, 0x18) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680), 0x80c02, 0x0) write$cgroup_int(r4, 0x0, 0x2) syz_io_uring_setup(0x3c10, &(0x7f00000000c0)={0x0, 0x7b5f, 0x100, 0x0, 0x8a}, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x40010, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x7000000) 1.693358397s ago: executing program 5 (id=21211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x44}}, 0x0) eventfd(0x1) futex(&(0x7f0000000000)=0x1, 0x4, 0x0, &(0x7f0000000040), &(0x7f0000000180), 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4, 0x0, 0xfffffffffffffff7}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000002f80)=""/61) r6 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000440)=']\x16i\xdc\x9e\x81f\xf74\x12\xc5Tcf\x00H\xeb\xaahb\x14CT\xea\xa0\xff\xde/r\x04\xf0\x1a\xa6nu\xd5&o_\x9ckl\xa3\xe4&/\xc2\xe2\xbawM\x01\xb3\xff\xff\xdc4\xf0\xbc\xab\x82\xe3z\xeay\x98@RW\xeb\xac\x00\x00\x00\x00\x00\x00', 0x0, r2) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/47}, 0x20) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000001c0)={0x6, 0x9, 0x1, 0xa27, 0xe93}, 0x14) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) listen(r7, 0x8000) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) 1.580449749s ago: executing program 7 (id=21212): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r0, &(0x7f0000019dc0)=""/102391, 0x18ff7, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x17, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) syz_io_uring_setup(0x160f, &(0x7f0000002180)={0x0, 0x8564, 0x20000, 0x0, 0x330}, &(0x7f0000001540)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000002240)=0x600f, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r6}, 0x38) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x69) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b70300000000008085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r8}, 0x10) acct(0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=r10, @ANYBLOB="138000002b9201002400128009000100626f6e64000000001400028008001f0007000000080007"], 0x44}, 0x1, 0x0, 0x0, 0x4044870}, 0x4000) sendmmsg$inet6(r0, &(0x7f0000001f40)=[{{&(0x7f00000005c0)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x401}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001b40)={0xa, 0x4e21, 0x7, @mcast2, 0x76547424}, 0x1c, 0x0}}], 0x4, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[], 0xa0}, 0x4004881) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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") 1.433149002s ago: executing program 5 (id=21213): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f00000028c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) creat(0x0, 0x88) 1.144801898s ago: executing program 7 (id=21217): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.05879919s ago: executing program 5 (id=21218): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 977.584781ms ago: executing program 2 (id=21220): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001a40)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x2, 0x0, 0x0, 0x7}}}], []]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1, 0x3}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x9044, @multicast2}, {0x2, 0x4e2f, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='lo\x00', 0xffffffff}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="a642b66de1b132fa3d0649581ff019dbab5c8704bec0b04307460110eaf0813f8a84b65ce8af2a3d59affcf5e0db69c3093150db20f0a6b3e609d8feb0015c9a06195dc710d9e35fb2180ccb6a128141de70c05db16dd730d0f37c0e904aeb8b45344d78f3ab295e8317f59fc2e3f62fa281fa363cb28186aab1ff0618b5f4fa0b1ea51dd0d7cc7e69d37aa670df32c27fb18582fc3d4832c801d91ed1208dad7d55f191", @ANYRES16=r3, @ANYBLOB="040025bd7000fedbdf250800000058000180380004001400010002004e20ac1414bb0000000000000000200002000a004e210000000000000000000000000000000000000001fdffffff0d0001007564703a73797a31000000000c0001006574683a77673100"], 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x48) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) poll(&(0x7f0000000080)=[{r7, 0x5061}, {r7, 0x8009}], 0x2, 0x44) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='rpm_return_int\x00', r5}, 0xfffffffffffffe35) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000900000090c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f74ffffffff696467650014000100776732000000000000000000000000001400010076657468305f80a990b628130d30746f"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 832.682904ms ago: executing program 5 (id=21221): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f00000028c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) creat(&(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x88) 805.507244ms ago: executing program 7 (id=21222): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x281442, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xe}, 0x8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TCSETSW2(r3, 0x5453, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0xffffffffffff8001}, 0x18) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r6, 0x5, 0x4) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfff, 0x0, 0x3, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x64f1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100000000000000000000000050000030500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x4004010) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000a8ffffff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x1) 691.343606ms ago: executing program 5 (id=21224): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000280)=0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r2) 652.233367ms ago: executing program 2 (id=21225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r0, 0x14, 0x0, 0x800, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)='\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000a00)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000000000000072970b455954dbfbac46f51abf13fb9901c30f6944722666ba7f2305cd4bea8675b8251a4aea53b105d9dbc2029c9af9acbf4b34a8d1d6f0252ab3e40acaddf5ac1957349382b307d0a6121a1d21e9638fdc7d01725e2079d3e18400a33cea93c56524a2"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='hrtimer_init\x00'}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 633.219548ms ago: executing program 2 (id=21226): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r4, @ANYBLOB="080003"], 0x80}}, 0x8000) 629.064318ms ago: executing program 9 (id=21227): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000040)=0x27, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) sendmmsg$unix(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0x1, 0x20000000) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{0x304}, "b33cebd1698137d9", "3efbbd6af57252a1a0421f38c06f32c6", "f7049e4e", "3227ca6b6d1363d6"}, 0x28) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000000)=0x40000fb, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)=0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x46, 0x8, 0xfffffffffffffffd, 0x3f}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = socket(0xa, 0x5, 0x0) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @loopback, 0xfffffff9}, 0x1c) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000380), &(0x7f00000003c0)=0x4) openat(r0, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write$P9_RREAD(r9, &(0x7f0000000580)=ANY=[], 0xa0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r11, 0x0, 0x3fffffd}, 0x18) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) read$ptp(r12, 0x0, 0x2f) 605.949938ms ago: executing program 2 (id=21228): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r0, 0x14, 0x0, 0x800, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1c, 0x400002, 0x7fe2, 0x3, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000a00)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000000000000072970b455954dbfbac46f51abf13fb9901c30f6944722666ba7f2305cd4bea8675b8251a4aea53b105d9dbc2029c9af9acbf4b34a8d1d6f0252ab3e40acaddf5ac1957349382b307d0a6121a1d21e9638fdc7d01725e2079d3e18400a33cea93c56524a2a324"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='xen_mc_flush_reason\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@fallback=r3, r1, 0x7, 0x20, r1, @void, @void, @void, @value, r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='hrtimer_init\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f0000001480)=ANY=[@ANYRES16=0x0, @ANYBLOB="85874ac110ac9540c755d283f4e3d697c2d5e3ffa7dccaea3ca22cb52fdd2ce1b0e3ff2206de77efefe37c7eac91f108044a412ece270d00a78fa3bb0a806b71a856796c6913dfe938635173c57858f0fefa64212590fa7f5057f82ce45fbca3755af0f0ac08d430f34bc9f36961ba82cacab44b5daaa339c34a66fc5959be9d0f429585b7b484f7b104c2e248ecfc2f086d3764ce5ba1d4d652049c2dcf811b3f03364b797746b445388e6af8948c3e75af677cf562a79a8146d25e249ce843c299ef2bf93bdd02d2ef6146f50f4c029270b37d805a6b306a5a661da07993832623d565bcfbe527eb1252ff3db2aae145346ff9c9d2cda3255a25d6be55f731400579e76af2d51551fd2f0444aa90c926f06fd82752e407ea15ea5f7d881ad790ad5d2afb97540912caa9b489d54adfa636699a4d64b9b3792b0e8c120c4a4b4653ebb972d5ed307613ae0ab9132fb79e024ad2499bac2a4d2f0e238024a4b13b7bcc6476abb83e0ea6bf6fb17e171e340829eaf1322b8acc852717e323ffaa376461ab1bf5ff237a49719ce33480db401f5321d5e3519fd18a2df8192b416354d94eebbaec0971719e0db1baf1728ba0423bde7169545da0f9a55aaf771c61bedc089a404412a15bf43a449f51892e014533ad2e6f0bff2bab94fe2d22fa5e44dd251897b5a2860b2b6bb6c2951806b5680287640ecd41c888eb18ba717b68ecced712f47ccc6f142f2fa535ee0d3c969968b84cee8f54020027eae78e5b2b08271d9d3b2a907557bb676bd1f93a2aad1a2d7bb5d090044a3ea5b6a74370a5bea8593ca4b1ac3983982b33d0c20d89183b66a232ba473f0eea6613925fe5b43ee8c35b7fdfdb73801fb2030656bc66861e7b74414095f5e03b5bef4ddd60c702342b30c969221b6e4803d3a8d42c04f579922fd329f5a7b21d047b1d4fa52832ba8bbc35b4cd890223fdf371721c3f5eb8fb747cb46b5ac96acaf2107695e7e59033e7e7459a48a96aed0fbc6af9e62b73286645e47ed5ecc2f0939e5eee997197caea62b267bd03ed8ddceb2a5202cc7b42f373388a79d810c8988644b05809ebb47bffabc3137956f3e3ad47aff018534acd759b174eb6e68d54421e31d0d686c461f429f1614464461cfa3490ed9bbca49df7a65bfad0bdd908e5647d614d8280e9769af87c179c3ee2695224b6da2da1230e7154d293a96fe988c8f44d8f9122d19508cf993c3eefaabd22290ba5adc0ebae64e6c6886a7f308b212e4c13e348770c954aa7c08af0e4c497bc07fe6cce7894821d9b467cd515dff31f7257e0320505c05a6cba6027be8e4c06432b7d8cd457e1df1ab911477d18152357bb2a1c722035f27a0088da7b712895c9f00e7b241913cf66cdd081d033bc15304b8c1e445b4407f81e5d5ed4c71e3a2fb8c4b8a0ceb352384731e6a7082c8da6dc1a66fce07caafc17e6c28289f8cf509a44ca25e55409640d1eb1a35ac9a86ecd20ee8a11873d7342f02b2da6cc4c33160934f3d1ff291d0dd862733ff493d4cbc1d43c539a2d66253b739b9dfe6b32ca500ae5f844dbc00402b4f854e4ba1084b24095a0dae16801c24fa5d796048ae6f7496fbf245cd2996428d738194e3232c24afc163eda3e81f0d65029c64cdb67415ffd479c9a94e666419728353d7baf58a8722940bba03371b0a5d8ec7d37adbd8364c04d0068572074ba1d7300452beed80cb433545f3a6c144ed4d47ca976369f5db3b52ad3b65c782759d1ef97fd1b3f448d3c2e3eafd1a42aa45fc00aa9ddbcf16e51ebb91523d97b236d466ce94380ee549b3d545c44255819246bec5ed88ee3b04bd67366e2d9d2f81ee0b4e1cd2cb16b7f9cb3cefa2e6d0d54afd3e1f586336f905d29353384c98b9466bdcae0f496a638bc2d0a9ab44d9d91f75f4f0db54875de130577edd4f9df4e56751e7ecb0990bb575416f8e6624004d5d264ce7fb531b729974f8e1792c30967da11ab593e99b186a036e080230bc807eaeed75f42a27138aafb5af9bcb5a627995ee72bd5983f18b1302449abe94deb17a9517bb7e47e124e4aa35b386dcc3a0cc9d08f196c8fe63da746cb32dd477fa5f3ecda87709af9ddcab99c9f6f0221908dbeadabf3fd5deb5ea6413dbe16d8ee04cc94d3c6aad774ba84e7841ec4d118eadce3c1b2c8bda51a3de168c72ab071e97618d8cf34b6f765a3c23d6d3c7c27177a4aae18a3c6d7fc415d4afb8de8d0c35cf246c53ae569844fca612a2285fa60003ae27776887c8793084ce7c5c41e828380c24af871035ef141bd792b37d47ab60a95c41fda2bec396f5ef2ae9ff1b9e8a4b05d9a1f6573c79b412be872a2f35359913d6f2a6b887bbcbd5f103c7de4459f2a3dc2ce93799954c0179f9dd3abc213b3dcd0d85ee66ff697ba20d9f1e968cc231a73001db4e51d9d90a35e6fcae9e71b92c5e71411994833cf7257210313404f3ec96280a1d01d034c2b79b2683ee8f0c64ad97acea109c666bcde89d1ecbcf5488d9144519f3d6a72fb918846ac3fbe14814b0be66a2abf719bfb7fd56e41a30eb33115c68ff8fedcc870db60c282cc0c2494f0637af19712eae6f25db6d8fe6443767c347468b61cea25e6ec02a08082f379943a297a6fc0ea2c2fd81df2a83463309e9f600f2cb92e31ae620271d55d884dcd4884495ae2e51895ac0999bbe19b93410dc50c687dd26380bfe69a0f2ff94eee5fa135a895dbbc54987a86c8219b995f9f0d444752c5ce075ed8db4563faefd92e2ee6f2510fffece1610b8891f0d54f4cba68d5e51195f770b5715ddf72c816159a485da16676c33e499f19d3bb5d36a2282c0b3c364d68cc5d51d900c56a986122f329cc53166789c8808b61fff5d4d5c75ebe6d8d553c70fcc25435603fc2699a4b26b75d133ad9c263243c26d095ae42a3978baba8c5506487ae32f5f0d85b91c2d6465b6e64c83a49f36705015faaff1a619a347a74b10b62ccfbc22ed42275b226ccf4d929b280d6672b5968331821ad98339202170bbbdea470f1084bdc80c8d657699f1a257adb400a137fb2710bc1b6975e0c2f10f7b7b25ea7738f826b1007f665a227ddb12c5f4a1463d23d2a035fcb1bd51d54d25cfe3faa1720f3a8592c0d16e3508adf9a263ed4fe4eca6feb601d89e379a3ebf6d0a86c1cc289bb195a8484024fe01465cef8ffd73cdeb0db73461308691698dbdd88fd27e5b25fe68b1c79b431ad6c878e9ccf58e331b5e20bc96926c12a9d7b5d5b395ddb43cc5e19df467f3fa53d20ddc8357ef3a88637dbca15cddd24c0ddf6e9233ae22ff775730ae3ccacd890b3c677957691a979950e01bf0ed7a2b02a103e4080cf01b4c6801d78bd4c616d01aa5a8d067f745fdf24225e7d1fd6f23feae976654e9e42e11f332f11d8854c5eed58a107cedad57fa49fc74500dca747e7659f04e22d63a2d4a17d506ae5e9f51cf5d523a704ea222cf21c4c8f297e32af53c3a99dfbb89ac349f74aae3a467a90617049b68102d4135a3ec54553fbb5f7ae8ba246d213cacd45351f8f823ca6d86b3bad2a879524962de705c2357a2395c846ed37de1359714e0367a0e39d61fd78215cc7f2f6a63850ea80130989b2eb898ba8861218a7341ac856072335260d4e3189a996aca1442a743eeff5169b004f904c938ef0e4d84140d80c27c3d9b0b1465add0b5b03b2a9584b99092969b48be22dd7b39ca361621826979f233c8c0f331556975f73330d73b52e4823c2360b99506f19bf869782359956e13a167b10ba0c149142da6ccadcf4623d0dfa91e2487a62609dabc5000e2b0d3a269bafed66feafe247c43c091bf2027647b5f1df23aa451db611ef21cb45ff0fffe55d09bbf6c2bfa950cd564c0f566a18ebeb826abb26374ad92b7dfa59eac02e3cbf0b2e3e135294ca622b526430873aef057fdfcb3095989d1afcd00ee27362da6daa2b182b62e172248d2420bc733f9ba0a89041506f4c23b34f333a0bf2a3aff0bf87da72f6fd78c5bdfd41f9f31905cf796af41265b00725c92dc41e035be593ff27cd2a436a642bec4aa9efa402a162aed82c0c3cf1e71f2c5e89f80590b80583e3c65f8d96a86ccb89da51351b8198c66c0f5822f678527a8db35a6b69018a6c898df9f6519b51ac5013bd17bf30009f4b9c3c0b06b5e5509788ccf2f1d3722659da23dcf5abad840ee5cebe6536d9f06d360063a9c8e2b5c767536f77f1107ee5a31ea5fddb344d9eeb1cf14feacfd46e0a9505a0c884fc672494a2c906438d893996fbb6ef78f3c3fb36920716a15e10116b76f4696be07cbd4a197c57e4daa287cf1bb7c48f36485f3860a5112d3053c914e3fca5bc1bd7d25a02edd0fd10f147c352435f7ef214798d07a79b5e7b62cdad86c1cbbefbdc8dc4369af1710a27947ca88946340dceeffa9927f0aed9ed5fab3e9cdcb22e54eb8d8c05ff19830b9f1f03e3293709ac719382b87c41912b6ad87835cac2342191fd875b28cfc94f16a605c33aa3c7b87ca8700769501bb91c1ceadb29dd91855c3a81f170e147fa29a7980eb95f3d9b3191f65ba65f5454308ec07f560dc5aba684f2fbf2460d05c4ce5fd6ddd5566af5b07732aefca9cf55bdde2c945e6ae6f4cc5608cbfb89e0829bd8df0d9360f1ca62a29d5ae88c07ec9933a67cef871fd0355d2db704085dbff4b33b317287d27e3391cf6e360885e8a4862da6e55b7c476f3846031ae8271589bd34c9fb092a2d3c73eed95368cc177e0d2b6fdd794cfe39bc4467a78dba751f415124f711600c15fe259f7151d6572a1446a443041cb0635c73959bd9f219c18cb1c169d64e105ecd28a6a7a9c55b0e6b2797786b44b8643732a83cc86c9e61d5f1fa87c0761b84168c2aa139be627b560ce904d08bd78004569a6978e8e460864e0616283b74013c22531eba730766987f2ee5bdc7943722ae6129431ab4be2468eb22969ffddb9f7393b8b31d5ee6c4d828576309c4611a78bd1b8637c84b0e7a7d41ae7da40c8c87086a46251d8ea28dc55d2be8bebc54760f8141662ac88edf5400fe6cee8f9b9407a7723f5d229d7b1de63aef26eeab83dfec1baba38da26161f484469939be2215d789f2bd1a2986b8c6632ebfd006793166dda1631335fca463a074839141d3e5c5b79e26ec14abbd0473ceaa2692560a7a14d8a572e1d8d6da8b635511096ea1c5eea307fcbe326edc40a9a9134c9d25b799f088ad52cba58a8de5d2bf0cd391249e96192523a1aff5644e3a521f08fe35c8ce3a0b059d40f7d2c08670a8f4047456d79422fd6200346a13c800063c3bd7295a920a49c2b738922f5a16ef9ef0f355adf22df3ee2a2044289c8437c7425d08c9c463aaff7bf010dfb2356883c9d9d4a253b22637580ec60bb725fdfc694f6570cdb59c5bec02f95c7ab418fad563d672f4ea48e5ed19aca5f0e08b8eda15ad360dbdf97a5173512f9f9d215a8089bc716882b936c0cbda7813f041891d9eb70c8e95fa371a18b82d90626d6062be6dc93a96bab1eb2b8371aae0bff8d7ee237793d927451e44d7f2023cf6008c13fffc7c2c9f88be3157d3d28e570c898aed042cc530882d77076ee61d0125f18d84b16f96d9c2a81ed68c1e8e03737a1edf13b65b764798c05671633978be794f0b20f84e52a9e044138323e2e43d8fde666f9921d4becbd7837a729528ade4e59d8469fe32e13b237c4a94914998dab95ff30fc81eed76eb965facb31162697c1b6b451b7094034c7ce760b68c03ec41c2b803da002d4e804a3a0df4", @ANYRESOCT=r7, @ANYRES64=r4, @ANYRESHEX, @ANYRES8=r6, @ANYRES64=r1, @ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close_range(r9, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 534.0207ms ago: executing program 5 (id=21230): ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x2292}, {0xffffffffffffffff, 0x8}], 0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000080"], 0x50) io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x9371}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20004810) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r3, &(0x7f0000000140)=""/68, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8001a0) 486.305291ms ago: executing program 2 (id=21232): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 322.728934ms ago: executing program 2 (id=21233): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0xaf88, 0x4000, 0x3, 0x3a6}, &(0x7f0000000380), &(0x7f0000000200)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f00000003c0)=0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000f47000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) timer_settime(r2, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r1, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) 300.321894ms ago: executing program 1 (id=21234): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 283.064635ms ago: executing program 7 (id=21235): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000940)={'gre0\x00', &(0x7f0000000a40)={'sit0\x00', 0x0, 0xd695bb75570cde87, 0x6, 0x2, 0x3, {{0x5, 0x4, 0x3, 0x2, 0x14, 0x68, 0x0, 0x0, 0x4, 0x0, @multicast2, @private=0xa010100}}}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x8001}, 0x8) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4050, &(0x7f0000000000)=0xfd2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r6, 0x0, 0x9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x94) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x46) r7 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 263.598675ms ago: executing program 9 (id=21236): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0706000000000000080000000108000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r8) add_key(&(0x7f0000000380)='ceph\x00', 0x0, &(0x7f0000000640)="010001000000000000000000", 0xc, 0xffffffffffffffff) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000500)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x33}, 0x2}, {0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, r11, 0x16c}}, 0x48) sendmsg$NLBL_CALIPSO_C_REMOVE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) sendmsg$NLBL_CALIPSO_C_LIST(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x4c, r9, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4014}, 0x4010) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000087f00000000002000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x20}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x24}, @NFC_ATTR_IM_PROTOCOLS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3fa38c1999366c41}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x2c}}, 0x10) 170.161747ms ago: executing program 1 (id=21237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r0, 0x14, 0x0, 0x800, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)='\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000a00)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000000000000072970b455954dbfbac46f51abf13fb9901c30f6944722666ba7f2305cd4bea8675b8251a4aea53b105d9dbc2029c9af9acbf4b34a8d1d6f0252ab3e40acaddf5ac1957349382b307d0a6121a1d21e9638fdc7d01725e2079d3e18400a33cea93c56524a2"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='hrtimer_init\x00'}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 144.630007ms ago: executing program 9 (id=21238): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r4, @ANYBLOB="080003"], 0x80}}, 0x8000) 144.119947ms ago: executing program 1 (id=21239): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0xff, 0x81}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000000)=@buf={0xda, &(0x7f00000000c0)="18129c2ed8b7e53007023b53c025a71a685da6a97067ba71be161aad0eef95231683858c4d6181742800f305ac3400859895a3a78497b3dfe165693781cadb2424adf30ac1af9d08e4dbcfb73589028f854fa3ce270c90d86cdc4a7c55a017fa7d310480e55da0067e6446272c018a3f94e45e8d552147e426ba8a6ed601992850602b32fc9ab211b4dee549bd2f5596111ca907c8f6fa1587e8438a9f9af97c2b34efdfaca5089fabfada433cdc699a433be85e30815a4e1bb80a27dbcce45c15cbcaf1567063eddf4899264d47d3bbc0338f964fe85d9183e5"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r4}, 0x18) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x0, 0xfffffffd, 0x7}, 0xff14) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a00)=ANY=[@ANYBLOB="180000005200012200"], 0x18}, 0x1, 0x0, 0x0, 0x4801c}, 0x0) 109.108678ms ago: executing program 1 (id=21240): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000280)=0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r2) 108.519528ms ago: executing program 9 (id=21241): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000200)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x2c048044}, 0x40) r2 = dup(r1) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) 99.304048ms ago: executing program 7 (id=21242): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffff001}, 0x18) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) acct(&(0x7f00000001c0)='./file0\x00') unshare(0x8020200) acct(&(0x7f0000000200)='./file0\x00') keyctl$unlink(0x9, r4, r4) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000240)={'sit0\x00', &(0x7f00000000c0)={@rand_addr=0x64010102, 0x0, 0x0, 0x10, 0x0, [{@loopback}]}}) 53.999039ms ago: executing program 1 (id=21243): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x11, @empty, 0x1}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r1, 0x0, 0x8a}, 0x18) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty}, 0x1c, 0x0}}], 0x1, 0x240c089d) 15.77598ms ago: executing program 9 (id=21244): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x44}}, 0x0) eventfd(0x1) futex(&(0x7f0000000000)=0x1, 0x4, 0x0, &(0x7f0000000040), &(0x7f0000000180), 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4, 0x0, 0xfffffffffffffff7}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000002f80)=""/61) r6 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000440)=']\x16i\xdc\x9e\x81f\xf74\x12\xc5Tcf\x00H\xeb\xaahb\x14CT\xea\xa0\xff\xde/r\x04\xf0\x1a\xa6nu\xd5&o_\x9ckl\xa3\xe4&/\xc2\xe2\xbawM\x01\xb3\xff\xff\xdc4\xf0\xbc\xab\x82\xe3z\xeay\x98@RW\xeb\xac\x00\x00\x00\x00\x00\x00', 0x0, r2) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/47}, 0x20) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000001c0)={0x6, 0x9, 0x1, 0xa27, 0xe93}, 0x14) socket$inet6(0xa, 0x5, 0x0) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) 15.27123ms ago: executing program 7 (id=21245): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 10.41959ms ago: executing program 9 (id=21246): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r4, @ANYBLOB="080003"], 0x80}}, 0x8000) 0s ago: executing program 1 (id=21247): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x27, r0, 0x0, 0x5, 0x67, 0x3, "0ec4ec3891b0f71a3fb3061c212c4043d42f890e9758ada4dc2446d07b2c2ff2f54610a8921b33256d1571d427875bf27f8919d369891f1e0c9c05d29ddb10", 0x32}, 0x60, &(0x7f0000000240)=[{&(0x7f00000000c0)="32e19135f5b15f90458598bd1f44ec46226d954b894161acfb40c29133ef074f2b9e9c512f58db2be08fb3fd04e41ae62a0e5fcee6e26ff97cccc4ccc63cf07a297046db482765d3412a3b51bd38f37fbacf3f34dc44edf6d0a3707d8f9fdcf94226e18bf2f1b77dd2f3838dd765fccc4ec925aadf8c5ece491af959bb706c03de54906e947f4683235a297f097cad3311b85b05d2c160743a6a83e3f5e92006fd93f6d929f3e34c97622b362801640851d63768f952033058b05f2032ca595f3fb05a8bdcb1bb3211763d8e8732eeed1e5c10fb920ac34906ba2344f3b94a3707eacf3d37f7dc74519368e2f42df3eb05b2ad2e013160", 0xf7}, {&(0x7f00000001c0)="451d2968d653b88d0061a9fea3973c71a8cde5cf0ad0fa47d8cfac1e3399827b44fff6dc985db1d5f33edbe014af0b148bc95867b9baa4337fb7383881b82f3171f8a63598a2714a4626498eeab7992cfb97c0727a", 0x55}], 0x2, &(0x7f0000000280)={0x18, 0x112, 0x2, "27fc"}, 0x18, 0x20000010}, 0x40) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000300)=@can={0x1d, 0x0}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/148, 0x94}, {&(0x7f0000000440)=""/146, 0x92}, {&(0x7f0000000500)=""/105, 0x69}, {&(0x7f0000000580)=""/116, 0x74}, {&(0x7f0000000600)=""/96, 0x60}, {&(0x7f0000000680)=""/12, 0xc}, {&(0x7f00000006c0)=""/198, 0xc6}], 0x7, &(0x7f0000000840)=""/199, 0xc7}, 0x161) (async) lsetxattr$security_selinux(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), &(0x7f0000000a00)='system_u:object_r:crond_unit_file_t:s0\x00', 0x27, 0x0) (async) getpriority(0x2, 0xffffffffffffffff) (async) r2 = getpid() (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c80)='./cgroup/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000cc0)={0x100, &(0x7f0000000a40)=0xffffffffffffffff, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x0, {0x16}, &(0x7f0000000b00)=""/9, 0x9, &(0x7f0000000b40)=""/249, &(0x7f0000000c40)=[r2, 0xffffffffffffffff], 0x2, {r3}}, 0x58) (async) ptrace$ARCH_MAP_VDSO_X32(0x1e, r2, 0x800000000000, 0x2001) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000d80)={0x8000000000000001, 0x10, '\x00', 0x0, &(0x7f0000000d40)=[0x0, 0x0]}) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000e00)={0x1, 'veth0_macvtap\x00', 0x2}, 0x18) (async) r8 = ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000e40)={0x1, 0x11}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r7, 0x0, 0xcc, 0x13, &(0x7f0000000e80)="6069ad47aa300b5a8830bc3ac2f0db02ef6d1fe274a3c00dfe9cef65bee59af354634b9d575f6ad5e729f061d048fd66b0afbebb5760099fd8224d411464279fa6866d4f0ce5374a2d0874045ee3daf5fda84bd4b97816bb05a83282c90be0bd919ff56ce74ec159effa383e94a7210654f5161b48aed67be81afc1055228ffbf588d6db87359e8d257c498e5a6e2d42671f5db9574c2689a2552defbfb9063b6dab9141174c8d36202c1a35ae1520939ad7a69d66b85224443b6d6e03c9563d6bcfae78803f27c0e1c748ab", &(0x7f0000000f80)=""/19, 0x4, 0x0, 0xb8, 0x4e, &(0x7f0000000fc0)="c27f3486157413da6f74b4fe581effe06160db3a33212e26d2b54193ef2e2830a0b58840866d78e56cfec0c27de3036c717913e0fc1ba77fd73063f5207add2a8e21b3377ec2e6b89b4c1ff4d6b37fa122ada803f1883e02ac0e077e1d0e97a2569f5921d2c9ee32fe522009017ea9988990bb7a3cab2599190c9f6966b60ed8c1e132a6c01ce601f27287a30b851506af2aa586e9cd58f5dc915a03a7645abf69c0178337163dea9a00eca93e0518ff4d5d6a9471b8d89c", &(0x7f0000001080)="dfc9aafdd3c0ff9fdcaa177856d36c98a1f3ce64d9ea81afba41dd6eaceeb3b254107e840a9c6b3c347f4e6d485becfaab9355429fd7399836428e52db34f2c575818e1f20e615f937cf4c7dff66", 0x1}, 0x50) (async) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000002400)={&(0x7f0000003000)={[{&(0x7f0000001180)="edc06f33465e583165f97ee8543324740d8c0999a2a6c2476ce39d936b032d9e81ce7913575913e3579fe72366afd500bcbf386a2bc978e83dea67083e8d5007a41c4eeaad41e0a8714f5f993a34cfa2636f4c8c6ff8e4093bec788503c754499a711096097d1cf5969c1fd56f1155fc47cc9313a29e90646c83c0ac59272fb162113942e95922e7cb347dee9959bc440948", 0x92, 0x3}, {&(0x7f0000001240)="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", 0x1000, 0x1}, {&(0x7f0000002240)="eef2bbee25041286380cac4bd6b65f456c575b5cd4c0505f7db183293f0112e551c0870bdef820eb9342620027f8a47fc899ade215270b0377ae97e3fab756446aeaa9d403faf4e5256cef8b12d853c06fa9856b93d8a7b7052b5c002ac19eadc34294b296e0c7274c0bd3312f8ecea1c2a2c4c0f4fc302ebcf3f5f5e451b2bdab01e94fc777a1a31ed8e6e83b0407748dd4a32cfa599dab07814f2ae3c2a419fb98c6e670487c3698f273b63c75f245719e7f1e62aadc746f4970c0a42eba3e7c2a5220eb5a07a188b942dd94e2c4ab5350", 0xd2, 0x2}, {&(0x7f0000002340)="85b1bcae28bc966c607785f31d155b3ca449163cb343248f8b7b28c1905623f5f960bffb3133ab5ae31b9dc3cde739d300d75f5fe9cdbdf795306b7bd1b2c36781b1e0b9900dd3aa525cc46b4b4c3ef3763e436dc067c35468abfa675d1d532cdd7e0c41113e1c9cf7c14c29eab6940519afdc1a9dc58764743e8022fa244a89770d51a7eb4bd3832334c236aae70fd4b7565c842fe88bfc163a2a5fbba8d0b4391fcb5593412fc3c377de18b0289d7446e7d2c675050aa7a897b46f", 0xbc, 0x1}]}, 0x4, 0x3}, 0x1) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000002440)=[@in6={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x0, @remote, 0x7}], 0x48) (async) io_uring_enter(r7, 0xb61, 0x1e16, 0x5b, &(0x7f00000024c0)={[0x8]}, 0x8) (async) setpgid(r5, r5) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002500)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', r1, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) ioctl$INCFS_IOC_FILL_BLOCKS(r9, 0x80106720, &(0x7f0000002a40)={0x5, &(0x7f0000002980)=[{0x7f400, 0xf0, &(0x7f0000002580)="6f97db0e5b15f3fd0bd0db31c34b1e2dee12d9eb82e1905ec0816ffe3e16305faedeaaa38c9a948d6f599a0e863586cc3fb20d9304233afca0e246dcc783fb33bdb956b03a24b63713803192488dd99c70dfa71e2d455df656f8c2179ca65bea94b70130c54fcd890e796755d4e04497b5f6cd0239f4cfdc65d8e2a8cda750e53a557e0a2ce30112fe4ff5c367624e5c4ce3e26f3bb8fe988b8efd7a8ea5417316d899740431482def6816be7f82bc3765903f2b09497ea78026b1c819871ff0d9632e26d90ac5032e76329d2ccb3f7f2b42b826fd1ebea5e7507837287fe2140e31e2ea495c2afed8b5e2ed435c7cc7", 0x0, 0x1}, {0x4, 0xa4, &(0x7f0000002680)="e7eef98d1c4fcf6ef250e177562629a99844d842d675b933472ae94fe873d48a3ac9e5d326146d982463da304c18dcdcb8c3231c2bc687bedf17e766ebb671805a5062e6cfc9af0a49d05838a260f76b8730d3f4810ff6cd86ec4c9ffde8dcce086033568537dd6efa6b9de095de11ab66923d4eb59fe6cf9b1145acdc6cf89b8b106f5439370937b1f88001b8e0bfd057a50ac87b735823501301c9e1da610e6d0f6fe0", 0x1}, {0x9, 0xcf, &(0x7f0000002740)="fc4523b559da59403582754294860b0d2c88f3645f2ca5664f3f1e65fb8efe9b12db8ff9945ebd7cec4e7aea9905fff0a0fcb54d388dfe3324dffc72429ac2272e71aabd0ab480b470b9562b86ffa7e6cc8d8c6ee75b1f7bbda7a3416aa79e8ee079ccf7c141dbd7d18e5381c560d54314cf3ef6ab8b5ea2169c96dc88d701166b6269da714d30f0bea3fc226c5c2e4d9b6d32228e8f757715d383cab5288aa8466af27d0c7582e311a2e336e7db1e0be1509703f4d856c77d62480609bd1b391ed967c83b2e7bdb9b1fac0e715a44", 0x1}, {0x1, 0xda, &(0x7f0000002840)="3e1d02595d7206d8933e5cc93cdcf38d11fcba039f2a8f36d04594126fb3fe7e4cb68e0d3e6d3470fa3968148c8661e55faeffc194f13e6753c0960a62bad9497dd90f657cc341c404870e1de76f4a35e47ca53fbe910b92aeb33f53b1c846e5e9e25fdbb4b4e5c31bfcadb2853ee559735c9c32a3f3ebfa1c9672f03c1262eb90e611d5d70a156782d143d72fc332430acdb4b98391fbf0b80d74fd5a9301f1a28e6a12eefd9c93dcd6da3e1b79f09609e301b4bf93d9490312de02ff79e9f472d4428f90ec41fee2bdb8fdd127b1a32118c5953a60705c57f9", 0x1, 0x1}, {0x2, 0x0, &(0x7f0000002940), 0x1, 0x1}]}) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000002a80), &(0x7f0000002ac0)=0x4) fcntl$dupfd(r4, 0x406, r8) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002b00)={{{@in=@loopback, @in=@initdev}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000002c00)=0xe8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000002c40)=0x5) (async) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000002c80), 0x208200, 0x0) ioctl$PERF_EVENT_IOC_ID(r10, 0x80082407, &(0x7f0000002cc0)) (async) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r7, 0xc058534b, &(0x7f0000002d00)={0x7, 0x3df, 0xd, 0xf, 0xba, 0x7}) (async) setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000002d80)={0x7, 0x9, 0x9, 0x4aa5}, 0x8) ioprio_get$pid(0x3, r6) kernel console output (not intermixed with test programs): ed promiscuous mode [ 1167.204110][ T398] wireguard0: entered allmulticast mode [ 1167.217631][ T413] loop1: detected capacity change from 0 to 512 [ 1167.257414][ T398] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1167.286168][ T415] lo speed is unknown, defaulting to 1000 [ 1167.413601][ T413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1167.573318][T32219] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1167.657849][T32031] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1167.993627][ T454] loop5: detected capacity change from 0 to 8192 [ 1168.135130][ T463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.156155][ T448] lo speed is unknown, defaulting to 1000 [ 1168.164809][ T463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.202827][ T455] loop9: detected capacity change from 0 to 512 [ 1168.238230][ T455] EXT4-fs (loop9): failed to open journal device unknown-block(0,0) -6 [ 1168.618616][ T497] loop7: detected capacity change from 0 to 4096 [ 1168.625387][ T497] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1168.635508][ T497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1168.649789][ T490] loop9: detected capacity change from 0 to 8192 [ 1168.801031][ T512] loop5: detected capacity change from 0 to 1024 [ 1168.843444][ T512] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1168.845764][T31271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1168.860212][ T512] EXT4-fs: Ignoring removed nobh option [ 1168.882575][ T512] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1168.922202][ T521] loop7: detected capacity change from 0 to 512 [ 1168.951512][ T521] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1168.963440][ T521] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1168.995893][ T512] Falling back ldisc for ttyS3. [ 1169.008756][ T9912] hid-generic 0000:0000:0000.0047: hidraw0: HID v8.00 Device [syz0] on syz0 [ 1169.023138][ T521] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.20299: Failed to acquire dquot type 1 [ 1169.035270][ T521] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.20299: bg 0: block 40: padding at end of block bitmap is not set [ 1169.063998][ T521] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1169.074543][T28707] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1169.114192][ T521] EXT4-fs (loop7): 1 truncate cleaned up [ 1169.120931][ T521] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1169.171813][T31271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1169.193363][ T545] loop1: detected capacity change from 0 to 512 [ 1169.201131][ T545] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1169.227439][ T545] EXT4-fs (loop1): 1 truncate cleaned up [ 1169.234816][ T545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1169.277192][ T23] hid-generic 0000:0000:0000.0048: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1169.277896][ T557] loop5: detected capacity change from 0 to 1024 [ 1169.295628][ T557] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1169.304437][ T557] EXT4-fs: Ignoring removed nobh option [ 1169.315134][ T562] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 1169.321692][ T562] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1169.329280][ T562] vhci_hcd vhci_hcd.0: Device attached [ 1169.351216][ T557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1169.392178][T32031] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1169.402600][ T563] vhci_hcd: connection closed [ 1169.406512][ T5331] vhci_hcd: stop threads [ 1169.415544][ T5331] vhci_hcd: release socket [ 1169.419993][ T5331] vhci_hcd: disconnect device [ 1169.472306][ T557] Falling back ldisc for ttyS3. [ 1169.524756][ T582] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20323'. [ 1169.557817][T28707] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1169.567000][ T589] netlink: 28 bytes leftover after parsing attributes in process `syz.7.20327'. [ 1169.592774][ T589] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20327'. [ 1169.598005][ T23] hid_parser_main: 92 callbacks suppressed [ 1169.598030][ T23] hid-generic 0000:0000:0000.0049: unknown main item tag 0x1 [ 1169.615218][ T23] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 1169.615251][ T23] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 1169.615335][ T23] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 1169.615364][ T23] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 1169.615386][ T23] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 1169.615421][ T23] hid-generic 0000:0000:0000.0049: unknown main item tag 0x4 [ 1169.615450][ T23] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 1169.615477][ T23] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 1169.615534][ T23] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 1169.635577][ T23] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1169.655367][ T29] kauditd_printk_skb: 495 callbacks suppressed [ 1169.655382][ T29] audit: type=1326 audit(1209.857:86001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=579 comm="syz.9.20323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1169.655422][ T29] audit: type=1326 audit(1209.857:86002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=579 comm="syz.9.20323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1169.655455][ T29] audit: type=1326 audit(1209.857:86003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=579 comm="syz.9.20323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1169.655563][ T29] audit: type=1326 audit(1209.857:86004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=579 comm="syz.9.20323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1169.655597][ T29] audit: type=1326 audit(1209.857:86005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=579 comm="syz.9.20323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1169.655623][ T29] audit: type=1326 audit(1209.857:86006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=579 comm="syz.9.20323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1169.655697][ T29] audit: type=1326 audit(1209.857:86007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=579 comm="syz.9.20323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1169.655979][ T29] audit: type=1326 audit(1209.857:86008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=579 comm="syz.9.20323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1169.656537][ T29] audit: type=1326 audit(1209.857:86009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=579 comm="syz.9.20323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1169.656651][ T29] audit: type=1400 audit(1209.857:86010): avc: denied { bind } for pid=579 comm="syz.9.20323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1169.714546][ T597] loop5: detected capacity change from 0 to 128 [ 1169.715344][ T597] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1169.717870][ T597] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1169.831947][ T597] syzkaller0: entered allmulticast mode [ 1170.028958][ T603] syzkaller0 (unregistering): left allmulticast mode [ 1170.055251][ T614] loop9: detected capacity change from 0 to 512 [ 1170.069627][ T616] loop7: detected capacity change from 0 to 1024 [ 1170.077233][ T616] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1170.078260][ T614] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1170.092431][ T614] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1170.098884][ T616] EXT4-fs: Ignoring removed nobh option [ 1170.100228][ T614] EXT4-fs warning (device loop9): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1170.119827][ T614] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 1170.127256][ T614] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.20337: bg 0: block 40: padding at end of block bitmap is not set [ 1170.128217][ T616] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1170.142692][ T614] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1170.163819][ T614] EXT4-fs (loop9): 1 truncate cleaned up [ 1170.170313][ T614] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1170.203097][ T622] loop2: detected capacity change from 0 to 128 [ 1170.210269][ T622] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1170.222439][ T622] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1170.222627][T32219] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.242008][ T5331] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1170.244575][ T622] syzkaller0: entered allmulticast mode [ 1170.259879][ T622] syzkaller0 (unregistering): left allmulticast mode [ 1170.266772][ T616] Falling back ldisc for ttyS3. [ 1170.282980][ T23] hid-generic 0000:0000:0000.004A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1170.327074][ T629] loop9: detected capacity change from 0 to 2048 [ 1170.351668][ T5329] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1170.365265][ T629] Alternate GPT is invalid, using primary GPT. [ 1170.371774][ T629] loop9: p2 p3 p7 [ 1170.390350][T31271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.485026][ T654] loop1: detected capacity change from 0 to 512 [ 1170.492094][ T654] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1170.510852][ T654] EXT4-fs (loop1): 1 truncate cleaned up [ 1170.517251][ T654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1170.575416][ T661] loop7: detected capacity change from 0 to 128 [ 1170.584176][ T661] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1170.598082][ T661] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1170.606545][ T658] bridge_slave_0: left allmulticast mode [ 1170.612840][ T658] bridge_slave_0: left promiscuous mode [ 1170.618625][ T658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.632787][T32031] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.647891][ T658] bridge_slave_1: left allmulticast mode [ 1170.653656][ T658] bridge_slave_1: left promiscuous mode [ 1170.659350][ T658] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.686800][ T658] bond0: (slave bond_slave_0): Releasing backup interface [ 1170.706559][ T658] bond0: (slave bond_slave_1): Releasing backup interface [ 1170.725950][ T658] team0: Port device team_slave_0 removed [ 1170.735443][ T658] team0: Port device team_slave_1 removed [ 1170.742514][ T658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1170.750152][ T658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1170.760609][ T658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1170.763251][ T674] loop1: detected capacity change from 0 to 512 [ 1170.768239][ T658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1170.786551][ T641] loop2: detected capacity change from 0 to 512 [ 1170.796395][ T674] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1170.816375][ T674] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1170.822985][ T674] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1170.840840][ T674] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 1170.849317][ T674] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.20359: bg 0: block 40: padding at end of block bitmap is not set [ 1170.867324][ T641] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 1170.867463][ T674] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1170.885192][ T674] EXT4-fs (loop1): 1 truncate cleaned up [ 1170.898138][ T674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1170.900315][ T663] lo speed is unknown, defaulting to 1000 [ 1170.934001][ T5320] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1170.973497][T32031] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1171.012603][ T689] loop9: detected capacity change from 0 to 1024 [ 1171.044082][ T689] EXT4-fs: inline encryption not supported [ 1171.049975][ T689] EXT4-fs: Ignoring removed nobh option [ 1171.055610][ T689] EXT4-fs: Ignoring removed orlov option [ 1171.119964][ T689] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1171.147639][ T703] vlan3: entered allmulticast mode [ 1171.152905][ T703] bridge_slave_0: entered allmulticast mode [ 1171.166162][ T711] loop1: detected capacity change from 0 to 512 [ 1171.176728][T32219] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1171.188605][ T711] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1171.199845][ T711] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1171.208334][ T711] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1171.235199][ T711] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 1171.242468][ T711] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.20373: bg 0: block 40: padding at end of block bitmap is not set [ 1171.257688][ T711] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1171.268474][ T718] loop7: detected capacity change from 0 to 2048 [ 1171.278731][ T722] loop9: detected capacity change from 0 to 128 [ 1171.287594][ T722] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1171.288261][ T711] EXT4-fs (loop1): 1 truncate cleaned up [ 1171.305913][ T9912] hid-generic 0000:0000:0000.004B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1171.306949][ T722] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1171.332973][ T711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1171.336614][ T718] Alternate GPT is invalid, using primary GPT. [ 1171.351848][ T718] loop7: p2 p3 p7 [ 1171.386354][ T722] syzkaller0: entered allmulticast mode [ 1171.395659][ T722] syzkaller0 (unregistering): left allmulticast mode [ 1171.408892][T32031] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1171.485248][ T5329] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1171.738028][ T779] loop9: detected capacity change from 0 to 128 [ 1171.749374][ T783] loop5: detected capacity change from 0 to 512 [ 1171.755872][ T783] msdos: Bad value for 'uid' [ 1171.760589][ T783] msdos: Bad value for 'uid' [ 1171.802140][ T783] infiniband syz1: set active [ 1171.806928][ T783] infiniband syz1: added veth0_to_bridge [ 1171.813930][ T779] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1171.832497][ T783] RDS/IB: syz1: added [ 1171.834457][ T779] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1171.836698][ T783] smc: adding ib device syz1 with port count 1 [ 1171.852159][ T783] smc: ib device syz1 port 1 has pnetid [ 1171.866357][ T779] syzkaller0: entered allmulticast mode [ 1171.883567][ T779] syzkaller0 (unregistering): left allmulticast mode [ 1171.884190][ T5320] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1172.351144][ T23] hid-generic 0000:0000:0000.004C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1172.420928][ T837] loop5: detected capacity change from 0 to 128 [ 1172.428314][ T837] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1172.440562][ T837] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1172.469418][ T837] syzkaller0: entered allmulticast mode [ 1172.477980][ T836] syzkaller0: left allmulticast mode [ 1172.493929][ T5329] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1172.648441][ T10] hid-generic 0000:0000:0000.004D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1172.871815][ T868] loop9: detected capacity change from 0 to 128 [ 1172.894408][ T868] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1172.902454][ T870] FAULT_INJECTION: forcing a failure. [ 1172.902454][ T870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1172.919286][ T870] CPU: 1 UID: 0 PID: 870 Comm: syz.7.20436 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1172.919318][ T870] Tainted: [W]=WARN [ 1172.919393][ T870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1172.919413][ T870] Call Trace: [ 1172.919422][ T870] [ 1172.919432][ T870] __dump_stack+0x1d/0x30 [ 1172.919481][ T870] dump_stack_lvl+0xe8/0x140 [ 1172.919506][ T870] dump_stack+0x15/0x1b [ 1172.919527][ T870] should_fail_ex+0x265/0x280 [ 1172.919551][ T870] should_fail+0xb/0x20 [ 1172.919573][ T870] should_fail_usercopy+0x1a/0x20 [ 1172.919691][ T870] strncpy_from_user+0x25/0x230 [ 1172.919734][ T870] ? __kmalloc_cache_noprof+0x189/0x320 [ 1172.919777][ T870] __se_sys_memfd_create+0x1ff/0x590 [ 1172.919940][ T870] __x64_sys_memfd_create+0x31/0x40 [ 1172.919972][ T870] x64_sys_call+0x2abe/0x2ff0 [ 1172.919992][ T870] do_syscall_64+0xd2/0x200 [ 1172.920022][ T870] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1172.920053][ T870] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1172.920116][ T870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.920162][ T870] RIP: 0033:0x7efc65abeec9 [ 1172.920181][ T870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1172.920212][ T870] RSP: 002b:00007efc6451ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1172.920236][ T870] RAX: ffffffffffffffda RBX: 000000000000044d RCX: 00007efc65abeec9 [ 1172.920249][ T870] RDX: 00007efc6451eef0 RSI: 0000000000000000 RDI: 00007efc65b42960 [ 1172.920260][ T870] RBP: 0000200000000a40 R08: 00007efc6451ebb7 R09: 00007efc6451ee40 [ 1172.920302][ T870] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000680 [ 1172.920313][ T870] R13: 00007efc6451eef0 R14: 00007efc6451eeb0 R15: 0000200000000280 [ 1172.920330][ T870] [ 1172.938693][ T868] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1173.150042][ T868] syzkaller0: entered allmulticast mode [ 1173.157657][ T866] syzkaller0: left allmulticast mode [ 1173.176734][ T5320] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1173.283426][ T10] hid-generic 0000:0000:0000.004E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1173.389143][ T888] loop7: detected capacity change from 0 to 2048 [ 1173.472484][ T888] Alternate GPT is invalid, using primary GPT. [ 1173.478896][ T888] loop7: p2 p3 p7 [ 1173.701537][ T3386] hid-generic 0000:0000:0000.004F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1173.773228][ T917] loop5: detected capacity change from 0 to 2048 [ 1173.835425][ T917] Alternate GPT is invalid, using primary GPT. [ 1173.841856][ T917] loop5: p2 p3 p7 [ 1173.899024][ T3386] hid-generic 0000:0000:0000.0050: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1173.927950][ T9912] hid-generic 0000:0000:0000.0051: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1173.951197][ T948] loop5: detected capacity change from 0 to 128 [ 1173.958959][ T948] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1173.973255][ T948] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1174.002215][ T5330] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1174.113502][ T3386] hid-generic 0000:0000:0000.0052: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1174.138478][ T974] loop7: detected capacity change from 0 to 2048 [ 1174.158027][ T974] Alternate GPT is invalid, using primary GPT. [ 1174.164421][ T974] loop7: p2 p3 p7 [ 1174.167586][ T978] loop5: detected capacity change from 0 to 128 [ 1174.175349][ T978] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1174.188396][ T978] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1174.216444][ T5320] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1174.301245][ T992] loop5: detected capacity change from 0 to 2048 [ 1174.339143][ T992] Alternate GPT is invalid, using primary GPT. [ 1174.345501][ T992] loop5: p2 p3 p7 [ 1174.429921][ T29] kauditd_printk_skb: 563 callbacks suppressed [ 1174.429936][ T29] audit: type=1326 audit(1214.867:86571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz.5.20491" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdaa267eec9 code=0x0 [ 1174.620995][ T29] audit: type=1326 audit(1215.067:86572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1005 comm="syz.9.20492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1174.644442][ T29] audit: type=1326 audit(1215.067:86573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1005 comm="syz.9.20492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1174.667564][ T29] audit: type=1326 audit(1215.067:86574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1005 comm="syz.9.20492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1174.690731][ T29] audit: type=1326 audit(1215.067:86575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1005 comm="syz.9.20492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1174.714078][ T29] audit: type=1326 audit(1215.067:86576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1005 comm="syz.9.20492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1174.737403][ T29] audit: type=1326 audit(1215.067:86577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1005 comm="syz.9.20492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1174.760658][ T29] audit: type=1326 audit(1215.067:86578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1005 comm="syz.9.20492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1174.783836][ T29] audit: type=1326 audit(1215.067:86579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1005 comm="syz.9.20492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1174.807139][ T29] audit: type=1326 audit(1215.067:86580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1005 comm="syz.9.20492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1174.839318][ T1010] loop9: detected capacity change from 0 to 128 [ 1174.846472][ T1010] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1174.858952][ T1010] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1174.887311][ T5330] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1175.107169][ T1032] loop7: detected capacity change from 0 to 2048 [ 1175.158183][ T1032] Alternate GPT is invalid, using primary GPT. [ 1175.164664][ T1032] loop7: p2 p3 p7 [ 1175.283116][ T1052] loop7: detected capacity change from 0 to 512 [ 1175.292230][ T1052] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1175.302817][ T1052] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 1175.339306][ T2952] hid_parser_main: 370 callbacks suppressed [ 1175.339331][ T2952] hid-generic 0000:0000:0000.0053: unknown main item tag 0x1 [ 1175.352812][ T2952] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0 [ 1175.360241][ T2952] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0 [ 1175.367696][ T2952] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0 [ 1175.375245][ T2952] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0 [ 1175.382678][ T2952] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0 [ 1175.390118][ T2952] hid-generic 0000:0000:0000.0053: unknown main item tag 0x4 [ 1175.397639][ T2952] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0 [ 1175.405274][ T2952] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0 [ 1175.412710][ T2952] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0 [ 1175.421481][ T2952] hid-generic 0000:0000:0000.0053: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1175.474017][ T1066] loop5: detected capacity change from 0 to 2048 [ 1175.512888][ T1066] Alternate GPT is invalid, using primary GPT. [ 1175.519578][ T1066] loop5: p2 p3 p7 [ 1175.524338][ T1072] loop7: detected capacity change from 0 to 512 [ 1175.533040][ T1072] msdos: Bad value for 'uid' [ 1175.537805][ T1072] msdos: Bad value for 'uid' [ 1175.574868][ T1074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20521'. [ 1175.629268][ T23] hid-generic 0000:0000:0000.0054: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1175.707610][ T1095] loop7: detected capacity change from 0 to 1024 [ 1175.715561][ T1095] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1175.722662][ T1095] EXT4-fs: Ignoring removed nobh option [ 1175.737545][ T1095] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1175.762513][ T1102] loop9: detected capacity change from 0 to 2048 [ 1175.787103][ T1102] Alternate GPT is invalid, using primary GPT. [ 1175.793513][ T1102] loop9: p2 p3 p7 [ 1175.798012][ T1095] Falling back ldisc for ttyS3. [ 1175.821409][ T1106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20534'. [ 1175.856579][ T1109] loop5: detected capacity change from 0 to 1024 [ 1175.871412][ T1111] loop9: detected capacity change from 0 to 512 [ 1175.873269][ T1109] EXT4-fs: inline encryption not supported [ 1175.883658][ T1109] EXT4-fs: Ignoring removed nobh option [ 1175.889330][ T1109] EXT4-fs: Ignoring removed orlov option [ 1175.899432][ T1111] EXT4-fs error (device loop9): ext4_orphan_get:1392: comm syz.9.20536: inode #15: comm syz.9.20536: iget: illegal inode # [ 1175.914648][ T1111] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.20536: couldn't read orphan inode 15 (err -117) [ 1175.928212][T31271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.943428][ T1116] loop2: detected capacity change from 0 to 512 [ 1175.946522][ T1111] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1175.968391][ T1109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1175.994820][ T1116] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1176.009433][T32219] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.018901][ T1116] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1176.025996][ T1116] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1176.041807][T28707] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.050963][ T1116] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 1176.084768][ T1116] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.20538: bg 0: block 40: padding at end of block bitmap is not set [ 1176.103913][ T1116] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1176.113554][ T1116] EXT4-fs (loop2): 1 truncate cleaned up [ 1176.125544][ T36] hid-generic 0000:0000:0000.0055: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1176.135996][ T1116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1176.202656][T27317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.206844][ T1137] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20545'. [ 1176.243058][ T1144] netlink: 'syz.1.20549': attribute type 4 has an invalid length. [ 1176.251083][ T1144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20549'. [ 1176.278645][ T1144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1144 comm=syz.1.20549 [ 1176.302938][ T1144] loop1: detected capacity change from 0 to 2048 [ 1176.365915][ T1144] loop1: p1 < > p4 [ 1176.372095][ T1144] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1176.419617][ T1158] loop9: detected capacity change from 0 to 128 [ 1176.439426][ T1158] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1176.451699][ T1158] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1176.464843][ T1144] lo speed is unknown, defaulting to 1000 [ 1176.519661][ T5320] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1176.643691][ T1171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20560'. [ 1176.645234][ T1169] loop7: detected capacity change from 0 to 512 [ 1176.661456][ T1169] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1176.673420][ T1169] EXT4-fs (loop7): 1 truncate cleaned up [ 1176.680240][ T1169] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1176.754394][ T1177] lo speed is unknown, defaulting to 1000 [ 1177.205617][T31271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1177.243482][ T1194] netlink: 28 bytes leftover after parsing attributes in process `syz.7.20566'. [ 1177.257715][ T1195] loop2: detected capacity change from 0 to 128 [ 1177.266767][ T1195] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1177.280841][ T1195] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1177.281123][ T1194] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20566'. [ 1177.331210][ T5320] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1177.351113][ T1200] loop5: detected capacity change from 0 to 2048 [ 1177.376103][ T1204] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20571'. [ 1177.395507][ T1200] Alternate GPT is invalid, using primary GPT. [ 1177.401895][ T1200] loop5: p2 p3 p7 [ 1177.559290][ T1226] netlink: 'syz.5.20581': attribute type 1 has an invalid length. [ 1177.604833][ T1226] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1177.617718][ T1231] loop7: detected capacity change from 0 to 128 [ 1177.625520][ T1231] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1177.644842][ T1231] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1177.706445][ T5323] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1177.771142][ T1244] loop9: detected capacity change from 0 to 1024 [ 1177.778935][ T1244] EXT4-fs: inline encryption not supported [ 1177.780971][ T1240] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20586'. [ 1177.784961][ T1244] EXT4-fs: Ignoring removed nobh option [ 1177.799504][ T1244] EXT4-fs: Ignoring removed orlov option [ 1177.815180][ T1244] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1177.866387][ T1250] loop7: detected capacity change from 0 to 2048 [ 1177.876210][T32219] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1177.934502][ T1250] Alternate GPT is invalid, using primary GPT. [ 1177.939856][ T1253] loop9: detected capacity change from 0 to 512 [ 1177.941085][ T1250] loop7: p2 p3 p7 [ 1177.952126][ T1253] EXT4-fs error (device loop9): ext4_orphan_get:1392: comm syz.9.20590: inode #15: comm syz.9.20590: iget: illegal inode # [ 1177.968991][ T1253] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.20590: couldn't read orphan inode 15 (err -117) [ 1178.044232][ T1255] lo speed is unknown, defaulting to 1000 [ 1178.164339][ T1253] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1178.298369][T32219] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.436783][ T1270] netlink: 28 bytes leftover after parsing attributes in process `syz.9.20594'. [ 1178.456666][ T1268] loop1: detected capacity change from 0 to 2048 [ 1178.495738][ T1283] loop7: detected capacity change from 0 to 1024 [ 1178.510028][ T1283] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1178.523561][ T1283] EXT4-fs: Ignoring removed nobh option [ 1178.531323][ T1268] Alternate GPT is invalid, using primary GPT. [ 1178.537828][ T1268] loop1: p2 p3 p7 [ 1178.548140][ T1283] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1178.621212][ T1283] Falling back ldisc for ttyS3. [ 1178.683044][T31271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.739551][ T1297] loop2: detected capacity change from 0 to 512 [ 1178.764717][ T1297] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 1178.896456][ T1323] loop7: detected capacity change from 0 to 128 [ 1178.897355][ T1323] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1178.897629][ T1323] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1178.942162][ T5330] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1178.978994][ T1327] loop7: detected capacity change from 0 to 512 [ 1178.982929][ T1327] EXT4-fs error (device loop7): ext4_orphan_get:1392: comm syz.7.20613: inode #15: comm syz.7.20613: iget: illegal inode # [ 1179.002874][ T1327] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.20613: couldn't read orphan inode 15 (err -117) [ 1179.033154][ T1327] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1179.074399][T31271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1179.225622][ T29] kauditd_printk_skb: 569 callbacks suppressed [ 1179.225636][ T29] audit: type=1400 audit(1219.909:87149): avc: denied { unmount } for pid=27317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1179.342252][ T1345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.342675][ T29] audit: type=1400 audit(1220.024:87150): avc: denied { write } for pid=1344 comm="syz.9.20620" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1179.350805][ T1345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.373441][ T29] audit: type=1400 audit(1220.024:87151): avc: denied { ioctl } for pid=1344 comm="syz.9.20620" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1179.418305][ T29] audit: type=1400 audit(1220.108:87152): avc: denied { create } for pid=1347 comm="syz.2.20622" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1179.442321][ T1349] FAULT_INJECTION: forcing a failure. [ 1179.442321][ T1349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1179.455598][ T1349] CPU: 0 UID: 0 PID: 1349 Comm: syz.5.20621 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1179.455637][ T1349] Tainted: [W]=WARN [ 1179.455645][ T1349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1179.455658][ T1349] Call Trace: [ 1179.455666][ T1349] [ 1179.455676][ T1349] __dump_stack+0x1d/0x30 [ 1179.455700][ T1349] dump_stack_lvl+0xe8/0x140 [ 1179.455732][ T1349] dump_stack+0x15/0x1b [ 1179.455751][ T1349] should_fail_ex+0x265/0x280 [ 1179.455778][ T1349] should_fail+0xb/0x20 [ 1179.455800][ T1349] should_fail_usercopy+0x1a/0x20 [ 1179.455869][ T1349] strncpy_from_user+0x25/0x230 [ 1179.455920][ T1349] ? kmem_cache_alloc_noprof+0x186/0x310 [ 1179.455950][ T1349] ? getname_flags+0x80/0x3b0 [ 1179.455982][ T1349] getname_flags+0xae/0x3b0 [ 1179.456011][ T1349] path_listxattrat+0x7e/0x2a0 [ 1179.456115][ T1349] __x64_sys_listxattr+0x4a/0x60 [ 1179.456186][ T1349] x64_sys_call+0x2df7/0x2ff0 [ 1179.456210][ T1349] do_syscall_64+0xd2/0x200 [ 1179.456243][ T1349] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1179.456270][ T1349] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1179.456300][ T1349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.456322][ T1349] RIP: 0033:0x7fdaa267eec9 [ 1179.456347][ T1349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1179.456367][ T1349] RSP: 002b:00007fdaa10df038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 1179.456388][ T1349] RAX: ffffffffffffffda RBX: 00007fdaa28d5fa0 RCX: 00007fdaa267eec9 [ 1179.456401][ T1349] RDX: 00000000000000a7 RSI: 00002000000006c0 RDI: 0000200000000180 [ 1179.456415][ T1349] RBP: 00007fdaa10df090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.456429][ T1349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.456442][ T1349] R13: 00007fdaa28d6038 R14: 00007fdaa28d5fa0 R15: 00007ffcd152b4b8 [ 1179.456463][ T1349] [ 1179.481031][ T29] audit: type=1400 audit(1220.108:87153): avc: denied { mounton } for pid=1347 comm="syz.2.20622" path="/442/file0" dev="tmpfs" ino=2424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1179.561227][ T1359] FAULT_INJECTION: forcing a failure. [ 1179.561227][ T1359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1179.562733][ T29] audit: type=1400 audit(1220.119:87154): avc: denied { mount } for pid=1347 comm="syz.2.20622" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1179.568536][ T1359] CPU: 0 UID: 0 PID: 1359 Comm: syz.1.20626 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1179.568569][ T1359] Tainted: [W]=WARN [ 1179.568577][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1179.568592][ T1359] Call Trace: [ 1179.568602][ T1359] [ 1179.568614][ T1359] __dump_stack+0x1d/0x30 [ 1179.568730][ T1359] dump_stack_lvl+0xe8/0x140 [ 1179.568759][ T1359] dump_stack+0x15/0x1b [ 1179.568782][ T1359] should_fail_ex+0x265/0x280 [ 1179.568879][ T1359] should_fail+0xb/0x20 [ 1179.568907][ T1359] should_fail_usercopy+0x1a/0x20 [ 1179.568942][ T1359] strncpy_from_user+0x25/0x230 [ 1179.569015][ T1359] ? kmem_cache_alloc_noprof+0x186/0x310 [ 1179.569053][ T1359] ? getname_flags+0x80/0x3b0 [ 1179.569093][ T1359] getname_flags+0xae/0x3b0 [ 1179.569158][ T1359] user_path_at+0x28/0x130 [ 1179.569197][ T1359] do_sys_truncate+0x5c/0x130 [ 1179.569231][ T1359] __x64_sys_truncate+0x31/0x40 [ 1179.569264][ T1359] x64_sys_call+0x1a2f/0x2ff0 [ 1179.569302][ T1359] do_syscall_64+0xd2/0x200 [ 1179.569344][ T1359] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1179.569383][ T1359] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1179.569419][ T1359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.569449][ T1359] RIP: 0033:0x7f55bcb5eec9 [ 1179.569469][ T1359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1179.569546][ T1359] RSP: 002b:00007f55bb5bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 1179.569572][ T1359] RAX: ffffffffffffffda RBX: 00007f55bcdb5fa0 RCX: 00007f55bcb5eec9 [ 1179.569590][ T1359] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000080 [ 1179.569608][ T1359] RBP: 00007f55bb5bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.569626][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.569643][ T1359] R13: 00007f55bcdb6038 R14: 00007f55bcdb5fa0 R15: 00007ffd02df60f8 [ 1179.569669][ T1359] [ 1179.902483][ T29] audit: type=1400 audit(1220.119:87155): avc: denied { write } for pid=1347 comm="syz.2.20622" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1179.923040][ T29] audit: type=1400 audit(1220.119:87156): avc: denied { open } for pid=1347 comm="syz.2.20622" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1179.944212][ T29] audit: type=1400 audit(1220.150:87157): avc: denied { unmount } for pid=27317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1180.009248][ T29] audit: type=1400 audit(1220.192:87158): avc: denied { mount } for pid=1344 comm="syz.9.20620" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1180.068687][ T1371] loop2: detected capacity change from 0 to 2048 [ 1180.075615][ T1376] loop1: detected capacity change from 0 to 1024 [ 1180.083162][ T1376] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1180.090104][ T1371] Alternate GPT is invalid, using primary GPT. [ 1180.092549][ T1376] EXT4-fs: Ignoring removed nobh option [ 1180.096699][ T1371] loop2: p2 p3 p7 [ 1180.132990][ T1376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1180.239850][ T1376] Falling back ldisc for ttyS3. [ 1180.261889][ T1386] loop9: detected capacity change from 0 to 256 [ 1180.293826][ T1386] FAT-fs (loop9): Directory bread(block 64) failed [ 1180.313557][ T1386] FAT-fs (loop9): Directory bread(block 65) failed [ 1180.324992][ T1386] FAT-fs (loop9): Directory bread(block 66) failed [ 1180.339980][ T1386] FAT-fs (loop9): Directory bread(block 67) failed [ 1180.346618][ T1386] FAT-fs (loop9): Directory bread(block 68) failed [ 1180.353154][ T1386] FAT-fs (loop9): Directory bread(block 69) failed [ 1180.359784][ T1386] FAT-fs (loop9): Directory bread(block 70) failed [ 1180.366373][ T1386] FAT-fs (loop9): Directory bread(block 71) failed [ 1180.373349][ T1386] FAT-fs (loop9): Directory bread(block 72) failed [ 1180.375247][T32031] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1180.379935][ T1386] FAT-fs (loop9): Directory bread(block 73) failed [ 1180.461872][ T1402] FAULT_INJECTION: forcing a failure. [ 1180.461872][ T1402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1180.475209][ T1402] CPU: 1 UID: 0 PID: 1402 Comm: syz.7.20641 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1180.475258][ T1402] Tainted: [W]=WARN [ 1180.475264][ T1402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1180.475277][ T1402] Call Trace: [ 1180.475285][ T1402] [ 1180.475295][ T1402] __dump_stack+0x1d/0x30 [ 1180.475321][ T1402] dump_stack_lvl+0xe8/0x140 [ 1180.475366][ T1402] dump_stack+0x15/0x1b [ 1180.475387][ T1402] should_fail_ex+0x265/0x280 [ 1180.475415][ T1402] should_fail+0xb/0x20 [ 1180.475441][ T1402] should_fail_usercopy+0x1a/0x20 [ 1180.475576][ T1402] strncpy_from_user+0x25/0x230 [ 1180.475619][ T1402] ? __kmalloc_cache_noprof+0x189/0x320 [ 1180.475653][ T1402] __se_sys_memfd_create+0x1ff/0x590 [ 1180.475700][ T1402] __x64_sys_memfd_create+0x31/0x40 [ 1180.475722][ T1402] x64_sys_call+0x2abe/0x2ff0 [ 1180.475746][ T1402] do_syscall_64+0xd2/0x200 [ 1180.475821][ T1402] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1180.475864][ T1402] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1180.475918][ T1402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.476002][ T1402] RIP: 0033:0x7efc65abeec9 [ 1180.476019][ T1402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1180.476043][ T1402] RSP: 002b:00007efc6451ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1180.476064][ T1402] RAX: ffffffffffffffda RBX: 0000000000000433 RCX: 00007efc65abeec9 [ 1180.476078][ T1402] RDX: 00007efc6451eef0 RSI: 0000000000000000 RDI: 00007efc65b42960 [ 1180.476092][ T1402] RBP: 0000200000000d80 R08: 00007efc6451ebb7 R09: 00007efc6451ee40 [ 1180.476105][ T1402] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 1180.476119][ T1402] R13: 00007efc6451eef0 R14: 00007efc6451eeb0 R15: 0000200000000580 [ 1180.476138][ T1402] [ 1180.779965][ T1419] loop1: detected capacity change from 0 to 512 [ 1180.786986][ T1419] msdos: Bad value for 'uid' [ 1180.791701][ T1419] msdos: Bad value for 'uid' [ 1180.799263][ T1419] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 1180.844905][ T1423] tipc: Started in network mode [ 1180.849974][ T1423] tipc: Node identity ac14140f, cluster identity 4711 [ 1180.859134][ T1423] tipc: New replicast peer: 255.255.255.83 [ 1180.865227][ T1423] tipc: Enabled bearer , priority 10 [ 1180.874190][ T1425] __nla_validate_parse: 2 callbacks suppressed [ 1180.874204][ T1425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20648'. [ 1180.951728][ T1432] lo speed is unknown, defaulting to 1000 [ 1181.370128][ T1446] loop9: detected capacity change from 0 to 512 [ 1181.387035][ T1450] loop2: detected capacity change from 0 to 1024 [ 1181.394086][ T1450] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1181.400853][ T1450] EXT4-fs: Ignoring removed nobh option [ 1181.419286][ T1446] EXT4-fs (loop9): failed to open journal device unknown-block(0,0) -6 [ 1181.433548][ T1450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1181.453523][ T1461] loop5: detected capacity change from 0 to 1024 [ 1181.471301][ T1461] EXT4-fs: inline encryption not supported [ 1181.477255][ T1461] EXT4-fs: Ignoring removed nobh option [ 1181.482852][ T1461] EXT4-fs: Ignoring removed orlov option [ 1181.509174][ T1461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1181.555051][ T1450] Falling back ldisc for ttyS3. [ 1181.563136][T28707] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1181.607529][ T1474] netlink: 204 bytes leftover after parsing attributes in process `syz.1.20664'. [ 1181.622876][ T1474] loop1: detected capacity change from 0 to 512 [ 1181.631983][ T1474] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1181.646117][ T1482] tipc: Started in network mode [ 1181.651091][ T1482] tipc: Node identity ac14140f, cluster identity 4711 [ 1181.658094][ T1482] tipc: New replicast peer: 255.255.255.83 [ 1181.664189][ T1482] tipc: Enabled bearer , priority 10 [ 1181.679639][ T1485] loop5: detected capacity change from 0 to 512 [ 1181.686333][ T1485] msdos: Bad value for 'uid' [ 1181.691081][ T1485] msdos: Bad value for 'uid' [ 1181.698314][ T1485] syz1: rxe_newlink: already configured on veth0_to_bridge [ 1181.722456][ T1474] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.20664: bg 0: block 4: invalid block bitmap [ 1181.754198][T27317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1181.755338][ T1488] loop7: detected capacity change from 0 to 128 [ 1181.769668][ T1474] EXT4-fs (loop1): Remounting filesystem read-only [ 1181.776458][ T1474] EXT4-fs (loop1): 1 truncate cleaned up [ 1181.783528][ T1474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1181.798844][ T1488] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1181.822094][ T1488] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1181.840126][ T1492] loop5: detected capacity change from 0 to 512 [ 1181.861893][T32031] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1181.880254][ T1492] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1181.893129][ T1492] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1181.903237][ T1492] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1181.924913][ T9912] tipc: Node number set to 2886997007 [ 1181.934500][ T1492] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 1181.944484][ T1503] tipc: Started in network mode [ 1181.949417][ T1503] tipc: Node identity ac14140f, cluster identity 4711 [ 1181.951888][ T1492] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.20673: bg 0: block 40: padding at end of block bitmap is not set [ 1181.971242][ T1492] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1181.974336][ T1503] tipc: New replicast peer: 255.255.255.83 [ 1181.984203][ T9912] hid_parser_main: 105 callbacks suppressed [ 1181.984228][ T9912] hid-generic 0000:0000:0000.0056: unknown main item tag 0x1 [ 1181.986070][ T1503] tipc: Enabled bearer , priority 10 [ 1181.991975][ T9912] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 1182.012832][ T9912] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 1182.020296][ T9912] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 1182.027742][ T9912] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 1182.035228][ T9912] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 1182.042895][ T9912] hid-generic 0000:0000:0000.0056: unknown main item tag 0x4 [ 1182.050507][ T9912] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 1182.058068][ T9912] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 1182.065600][ T9912] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 1182.068414][ T1492] EXT4-fs (loop5): 1 truncate cleaned up [ 1182.075186][ T9912] hid-generic 0000:0000:0000.0056: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1182.117305][ T1512] loop9: detected capacity change from 0 to 2048 [ 1182.178016][ T1512] Alternate GPT is invalid, using primary GPT. [ 1182.184573][ T1512] loop9: p2 p3 p7 [ 1182.358457][ T1546] lo speed is unknown, defaulting to 1000 [ 1182.724746][ T10] tipc: Node number set to 2886997007 [ 1182.740084][ T1557] loop2: detected capacity change from 0 to 512 [ 1182.747602][ T1557] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1182.753395][ T1556] loop5: detected capacity change from 0 to 2048 [ 1182.760898][ T1557] EXT4-fs (loop2): 1 truncate cleaned up [ 1182.794069][ T1556] Alternate GPT is invalid, using primary GPT. [ 1182.800621][ T1556] loop5: p2 p3 p7 [ 1182.869284][ T1564] loop5: detected capacity change from 0 to 128 [ 1182.876381][ T1564] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1182.890438][ T1564] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1182.905315][ T10] hid-generic 0000:0000:0000.0057: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1182.934083][ T3386] tipc: Node number set to 2886997007 [ 1182.966955][ T1574] netlink: 'syz.2.20700': attribute type 1 has an invalid length. [ 1182.974958][ T1574] netlink: 224 bytes leftover after parsing attributes in process `syz.2.20700'. [ 1183.009959][ T1577] syzkaller1: entered promiscuous mode [ 1183.015571][ T1577] syzkaller1: entered allmulticast mode [ 1183.143981][ T1586] netlink: 16 bytes leftover after parsing attributes in process `syz.9.20703'. [ 1183.262315][ T1612] loop1: detected capacity change from 0 to 2048 [ 1183.300177][ T1612] Alternate GPT is invalid, using primary GPT. [ 1183.307033][ T1612] loop1: p2 p3 p7 [ 1183.356975][ T1618] loop1: detected capacity change from 0 to 1024 [ 1183.400606][ T1619] lo speed is unknown, defaulting to 1000 [ 1183.438641][ T1618] loop1: detected capacity change from 0 to 512 [ 1183.445622][ T1618] EXT4-fs: Ignoring removed mblk_io_submit option [ 1183.452508][ T1618] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1183.464322][ T1618] EXT4-fs (loop1): 1 truncate cleaned up [ 1183.602812][ T1627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20720'. [ 1183.767969][ T1644] loop1: detected capacity change from 0 to 1024 [ 1183.775177][ T1644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1183.783395][ T1644] EXT4-fs: Ignoring removed nobh option [ 1183.820207][ T1653] netlink: 16 bytes leftover after parsing attributes in process `syz.7.20731'. [ 1183.846698][ T1657] loop7: detected capacity change from 0 to 512 [ 1183.860167][ T1644] Falling back ldisc for ttyS3. [ 1183.870251][ T1657] EXT4-fs (loop7): failed to open journal device unknown-block(0,0) -6 [ 1184.021936][ T1682] netlink: 'syz.1.20743': attribute type 4 has an invalid length. [ 1184.029929][ T1682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20743'. [ 1184.037951][ T1679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20742'. [ 1184.041241][ T1682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1682 comm=syz.1.20743 [ 1184.081828][ T1685] loop9: detected capacity change from 0 to 512 [ 1184.102742][ T1682] loop1: detected capacity change from 0 to 2048 [ 1184.110196][ T1685] EXT4-fs (loop9): failed to open journal device unknown-block(0,0) -6 [ 1184.112820][ T1689] netlink: 'syz.2.20745': attribute type 10 has an invalid length. [ 1184.126571][ T1689] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20745'. [ 1184.136868][ T1689] batman_adv: batadv0: Adding interface: veth1_vlan [ 1184.143610][ T1689] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1184.170059][ T1689] batman_adv: batadv0: Interface activated: veth1_vlan [ 1184.182652][ T1682] loop1: p1 < > p4 [ 1184.190097][ T1682] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1184.206291][ T1691] loop9: detected capacity change from 0 to 4096 [ 1184.214595][ T1691] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1184.267589][ T1696] loop1: detected capacity change from 0 to 512 [ 1184.274336][ T1696] msdos: Bad value for 'uid' [ 1184.279107][ T1696] msdos: Bad value for 'uid' [ 1184.306369][ T1701] FAULT_INJECTION: forcing a failure. [ 1184.306369][ T1701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1184.319557][ T1701] CPU: 1 UID: 0 PID: 1701 Comm: syz.1.20749 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1184.319646][ T1701] Tainted: [W]=WARN [ 1184.319700][ T1701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1184.319717][ T1701] Call Trace: [ 1184.319726][ T1701] [ 1184.319734][ T1701] __dump_stack+0x1d/0x30 [ 1184.319757][ T1701] dump_stack_lvl+0xe8/0x140 [ 1184.319782][ T1701] dump_stack+0x15/0x1b [ 1184.319862][ T1701] should_fail_ex+0x265/0x280 [ 1184.319894][ T1701] should_fail+0xb/0x20 [ 1184.319917][ T1701] should_fail_usercopy+0x1a/0x20 [ 1184.320072][ T1701] _copy_from_user+0x1c/0xb0 [ 1184.320110][ T1701] ___sys_sendmsg+0xc1/0x1d0 [ 1184.320258][ T1701] __x64_sys_sendmsg+0xd4/0x160 [ 1184.320296][ T1701] x64_sys_call+0x191e/0x2ff0 [ 1184.320324][ T1701] do_syscall_64+0xd2/0x200 [ 1184.320401][ T1701] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1184.320425][ T1701] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1184.320452][ T1701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.320475][ T1701] RIP: 0033:0x7f55bcb5eec9 [ 1184.320490][ T1701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1184.320522][ T1701] RSP: 002b:00007f55bb5bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1184.320592][ T1701] RAX: ffffffffffffffda RBX: 00007f55bcdb5fa0 RCX: 00007f55bcb5eec9 [ 1184.320610][ T1701] RDX: 00000000240000c0 RSI: 0000200000000140 RDI: 0000000000000004 [ 1184.320625][ T1701] RBP: 00007f55bb5bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1184.320636][ T1701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1184.320648][ T1701] R13: 00007f55bcdb6038 R14: 00007f55bcdb5fa0 R15: 00007ffd02df60f8 [ 1184.320667][ T1701] [ 1184.536195][ T29] kauditd_printk_skb: 1480 callbacks suppressed [ 1184.536213][ T29] audit: type=1400 audit(1225.486:88638): avc: denied { write } for pid=1690 comm="syz.9.20746" path="/118/file0/bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1184.564889][ T29] audit: type=1400 audit(1225.486:88639): avc: denied { mounton } for pid=1690 comm="syz.9.20746" path="/118/file0/bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1184.590830][ T1703] netlink: 'syz.1.20750': attribute type 4 has an invalid length. [ 1184.598804][ T1703] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20750'. [ 1184.610323][ T1706] loop2: detected capacity change from 0 to 2048 [ 1184.638991][ T1709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1709 comm=syz.1.20750 [ 1184.663121][ T1709] loop1: detected capacity change from 0 to 2048 [ 1184.678929][ T1706] Alternate GPT is invalid, using primary GPT. [ 1184.685467][ T1706] loop2: p2 p3 p7 [ 1184.716092][ T1709] loop1: p1 < > p4 [ 1184.720472][ T1709] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1184.760263][ T29] audit: type=1400 audit(1225.717:88640): avc: denied { ioctl } for pid=1715 comm="syz.1.20756" path="socket:[219748]" dev="sockfs" ino=219748 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1184.855165][ T29] audit: type=1326 audit(1225.790:88641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1723 comm="syz.7.20759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc65abeec9 code=0x7ffc0000 [ 1184.878399][ T29] audit: type=1326 audit(1225.790:88642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1723 comm="syz.7.20759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc65abeec9 code=0x7ffc0000 [ 1184.901796][ T29] audit: type=1326 audit(1225.790:88643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1723 comm="syz.7.20759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc65abeec9 code=0x7ffc0000 [ 1184.924995][ T29] audit: type=1326 audit(1225.790:88644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1723 comm="syz.7.20759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc65abeec9 code=0x7ffc0000 [ 1184.948095][ T29] audit: type=1326 audit(1225.790:88645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1723 comm="syz.7.20759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc65abeec9 code=0x7ffc0000 [ 1184.971765][ T29] audit: type=1326 audit(1225.790:88646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1723 comm="syz.7.20759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc65abeec9 code=0x7ffc0000 [ 1184.995153][ T29] audit: type=1326 audit(1225.790:88647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1723 comm="syz.7.20759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc65abeec9 code=0x7ffc0000 [ 1185.260951][ T1740] loop5: detected capacity change from 0 to 4096 [ 1185.269473][ T1740] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1185.625812][ T1756] loop7: detected capacity change from 0 to 2048 [ 1185.683159][ T1756] Alternate GPT is invalid, using primary GPT. [ 1185.689716][ T1756] loop7: p2 p3 p7 [ 1185.715465][ T1760] loop2: detected capacity change from 0 to 2048 [ 1185.787727][ T1760] Alternate GPT is invalid, using primary GPT. [ 1185.794250][ T1760] loop2: p2 p3 p7 [ 1185.858700][ T1769] loop2: detected capacity change from 0 to 512 [ 1185.875452][ T1769] msdos: Bad value for 'uid' [ 1185.880184][ T1769] msdos: Bad value for 'uid' [ 1185.897405][ T1769] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 1186.102077][ T1781] __nla_validate_parse: 2 callbacks suppressed [ 1186.102095][ T1781] netlink: 16 bytes leftover after parsing attributes in process `syz.7.20779'. [ 1186.231294][ T1787] tipc: Can't bind to reserved service type 0 [ 1186.980194][ T1809] loop5: detected capacity change from 0 to 4096 [ 1187.015721][ T1809] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1187.076438][ T1818] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20790'. [ 1187.163374][ T1822] lo speed is unknown, defaulting to 1000 [ 1187.567101][ T1833] tipc: Started in network mode [ 1187.572173][ T1833] tipc: Node identity ac14140f, cluster identity 4711 [ 1187.600126][ T1833] tipc: New replicast peer: 255.255.255.83 [ 1187.606041][ T1833] tipc: Enabled bearer , priority 10 [ 1187.621262][ T1835] loop5: detected capacity change from 0 to 1024 [ 1187.633698][ T1839] loop9: detected capacity change from 0 to 2048 [ 1187.640766][ T1835] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1187.652591][ T1835] EXT4-fs: Ignoring removed nobh option [ 1187.667435][ T1841] loop2: detected capacity change from 0 to 512 [ 1187.689621][ T1841] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1187.698380][ T1841] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1187.701941][ T1839] Alternate GPT is invalid, using primary GPT. [ 1187.711351][ T1839] loop9: p2 p3 p7 [ 1187.716923][ T1841] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1187.732463][ T1841] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 1187.742435][ T1850] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20801'. [ 1187.757428][ T1835] Falling back ldisc for ttyS3. [ 1187.771338][ T1841] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.20799: bg 0: block 40: padding at end of block bitmap is not set [ 1187.786620][ T1841] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1187.807497][ T1841] EXT4-fs (loop2): 1 truncate cleaned up [ 1187.909778][ T1868] loop7: detected capacity change from 0 to 1024 [ 1187.927875][ T1866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20808'. [ 1187.948163][ T1868] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1187.974198][ T1866] vlan2: entered allmulticast mode [ 1187.974378][ T1868] EXT4-fs: Ignoring removed nobh option [ 1187.979370][ T1866] bridge_slave_0: entered allmulticast mode [ 1187.994021][ T1876] loop9: detected capacity change from 0 to 128 [ 1188.011815][ T1876] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1188.034736][ T1880] tipc: Enabling of bearer rejected, already enabled [ 1188.043748][ T1874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20812'. [ 1188.060889][ T1884] loop5: detected capacity change from 0 to 1024 [ 1188.067698][ T1884] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1188.074545][ T1884] EXT4-fs: Ignoring removed nobh option [ 1188.085459][ T1876] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1188.094693][ T1868] Falling back ldisc for ttyS3. [ 1188.184411][ T1896] loop9: detected capacity change from 0 to 2048 [ 1188.209342][ T1884] Falling back ldisc for ttyS3. [ 1188.222754][ T1896] Alternate GPT is invalid, using primary GPT. [ 1188.222987][ T1896] loop9: p2 p3 p7 [ 1188.343372][ T1914] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20826'. [ 1188.369721][ T1919] loop5: detected capacity change from 0 to 128 [ 1188.392547][ T1919] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1188.408012][ T1919] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1188.491783][ T1929] loop5: detected capacity change from 0 to 1024 [ 1188.498683][ T1929] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1188.506163][ T1929] EXT4-fs: Ignoring removed nobh option [ 1188.551884][ T23] tipc: Node number set to 2886997007 [ 1188.571286][ T1929] Falling back ldisc for ttyS3. [ 1188.615758][ T1937] loop5: detected capacity change from 0 to 512 [ 1188.628728][ T1937] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1188.637489][ T1937] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1188.644220][ T1937] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1188.659462][ T1937] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 1188.667534][ T1937] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.20834: bg 0: block 40: padding at end of block bitmap is not set [ 1188.682686][ T1937] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1188.691976][ T1937] EXT4-fs (loop5): 1 truncate cleaned up [ 1188.819658][ T1951] loop5: detected capacity change from 0 to 512 [ 1188.847145][ T1951] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1188.857730][ T1951] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1188.876721][ T1951] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1188.878546][ T1959] loop2: detected capacity change from 0 to 512 [ 1188.898429][ T1959] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1188.908440][ T1951] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 1188.916498][ T1951] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.20839: bg 0: block 40: padding at end of block bitmap is not set [ 1188.916540][ T1959] EXT4-fs (loop2): 1 truncate cleaned up [ 1188.936943][ T1951] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1188.947618][ T1951] EXT4-fs (loop5): 1 truncate cleaned up [ 1188.998865][ T1962] loop7: detected capacity change from 0 to 1024 [ 1189.009613][ T1964] loop5: detected capacity change from 0 to 128 [ 1189.010509][ T1962] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1189.023112][ T1964] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1189.035175][ T1962] EXT4-fs: Ignoring removed nobh option [ 1189.043419][ T1964] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1189.064996][ T1967] netlink: 'syz.2.20845': attribute type 4 has an invalid length. [ 1189.072948][ T1967] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20845'. [ 1189.123951][ T1967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1967 comm=syz.2.20845 [ 1189.142233][ T1962] Falling back ldisc for ttyS3. [ 1189.160522][ T1967] loop2: detected capacity change from 0 to 2048 [ 1189.219132][ T1967] loop2: p1 < > p4 [ 1189.225339][ T1967] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1189.280545][ T1978] loop1: detected capacity change from 0 to 512 [ 1189.286438][ T1967] lo speed is unknown, defaulting to 1000 [ 1189.293210][ T1978] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1189.314570][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 1189.314589][ T29] audit: type=1326 audit(1230.506:88990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1980 comm="syz.5.20850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa267eec9 code=0x7ffc0000 [ 1189.357880][ T1978] EXT4-fs (loop1): 1 truncate cleaned up [ 1189.427498][ T29] audit: type=1326 audit(1230.506:88991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1980 comm="syz.5.20850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa267eec9 code=0x7ffc0000 [ 1189.450624][ T29] audit: type=1326 audit(1230.559:88992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1980 comm="syz.5.20850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaa267eec9 code=0x7ffc0000 [ 1189.473812][ T29] audit: type=1326 audit(1230.559:88993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1980 comm="syz.5.20850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa267eec9 code=0x7ffc0000 [ 1189.496914][ T29] audit: type=1326 audit(1230.559:88994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1980 comm="syz.5.20850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa267eec9 code=0x7ffc0000 [ 1189.506069][ T1994] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20853'. [ 1189.520068][ T29] audit: type=1326 audit(1230.559:88995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1980 comm="syz.5.20850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaa267eec9 code=0x7ffc0000 [ 1189.552152][ T29] audit: type=1326 audit(1230.559:88996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1980 comm="syz.5.20850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa267eec9 code=0x7ffc0000 [ 1189.575399][ T29] audit: type=1326 audit(1230.559:88997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1980 comm="syz.5.20850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa267eec9 code=0x7ffc0000 [ 1189.598652][ T29] audit: type=1326 audit(1230.559:88998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1980 comm="syz.5.20850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaa267eec9 code=0x7ffc0000 [ 1189.621858][ T29] audit: type=1326 audit(1230.559:88999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1980 comm="syz.5.20850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa267eec9 code=0x7ffc0000 [ 1189.696319][ T2001] loop7: detected capacity change from 0 to 128 [ 1189.704052][ T2001] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1189.721263][ T1999] loop5: detected capacity change from 0 to 512 [ 1189.727854][ T2001] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1189.740093][ T1999] EXT4-fs: Ignoring removed oldalloc option [ 1189.769337][ T1999] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.20855: Parent and EA inode have the same ino 15 [ 1189.785352][ T1999] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.20855: Parent and EA inode have the same ino 15 [ 1189.800373][ T1999] EXT4-fs (loop5): 1 orphan inode deleted [ 1189.922643][ T2021] bridge0: entered promiscuous mode [ 1189.943963][ T2021] macsec1: entered promiscuous mode [ 1189.968124][ T2021] bridge0: port 1(macsec1) entered blocking state [ 1189.974751][ T2021] bridge0: port 1(macsec1) entered disabled state [ 1190.018443][ T2021] macsec1: entered allmulticast mode [ 1190.023913][ T2021] bridge0: entered allmulticast mode [ 1190.057318][ T2021] macsec1: left allmulticast mode [ 1190.062423][ T2021] bridge0: left allmulticast mode [ 1190.079487][ T2021] bridge0: left promiscuous mode [ 1190.151823][ T2033] loop7: detected capacity change from 0 to 512 [ 1190.158373][ T2033] msdos: Bad value for 'uid' [ 1190.163197][ T2033] msdos: Bad value for 'uid' [ 1190.209736][ T2038] loop7: detected capacity change from 0 to 2048 [ 1190.250582][ T2044] loop5: detected capacity change from 0 to 128 [ 1190.257666][ T2044] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1190.269096][ T2038] Alternate GPT is invalid, using primary GPT. [ 1190.269661][ T2044] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1190.275993][ T2038] loop7: p2 p3 p7 [ 1190.420784][ T2058] loop5: detected capacity change from 0 to 512 [ 1190.427763][ T2058] msdos: Bad value for 'uid' [ 1190.432426][ T2058] msdos: Bad value for 'uid' [ 1190.439594][ T2058] syz1: rxe_newlink: already configured on veth0_to_bridge [ 1190.517033][ T2063] lo speed is unknown, defaulting to 1000 [ 1190.891387][ T2077] loop5: detected capacity change from 0 to 128 [ 1190.899836][ T2077] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1190.912239][ T2077] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1190.970980][ T2084] loop7: detected capacity change from 0 to 2048 [ 1190.992196][ T2084] Alternate GPT is invalid, using primary GPT. [ 1190.998790][ T2084] loop7: p2 p3 p7 [ 1191.084801][ T2101] netlink: 'syz.5.20892': attribute type 4 has an invalid length. [ 1191.092683][ T2101] netlink: 20 bytes leftover after parsing attributes in process `syz.5.20892'. [ 1191.103521][ T2101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2101 comm=syz.5.20892 [ 1191.139031][ T2101] loop5: detected capacity change from 0 to 2048 [ 1191.180110][ T2101] loop5: p1 < > p4 [ 1191.184531][ T2101] loop5: p4 size 8388608 extends beyond EOD, truncated [ 1191.208225][ T2101] lo speed is unknown, defaulting to 1000 [ 1191.364422][ T10] hid_parser_main: 66 callbacks suppressed [ 1191.364445][ T10] hid-generic 0000:0000:0000.0058: unknown main item tag 0x1 [ 1191.377860][ T10] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 1191.385416][ T10] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 1191.392910][ T10] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 1191.400529][ T10] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 1191.408182][ T10] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 1191.415624][ T10] hid-generic 0000:0000:0000.0058: unknown main item tag 0x4 [ 1191.423167][ T10] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 1191.430628][ T10] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 1191.438084][ T10] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 1191.454694][ T10] hid-generic 0000:0000:0000.0058: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1191.548602][ T2127] loop1: detected capacity change from 0 to 4096 [ 1191.564007][ T2127] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1191.581696][ T2133] bridge0: entered promiscuous mode [ 1191.587251][ T2133] macsec1: entered promiscuous mode [ 1191.592953][ T2133] bridge0: port 1(macsec1) entered blocking state [ 1191.599673][ T2133] bridge0: port 1(macsec1) entered disabled state [ 1191.606538][ T2133] macsec1: entered allmulticast mode [ 1191.612154][ T2133] bridge0: entered allmulticast mode [ 1191.618647][ T2133] macsec1: left allmulticast mode [ 1191.623787][ T2133] bridge0: left allmulticast mode [ 1191.630542][ T2133] bridge0: left promiscuous mode [ 1191.715633][ T2141] loop2: detected capacity change from 0 to 128 [ 1191.716172][ T2141] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1191.716452][ T2141] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1191.924745][ T2157] loop9: detected capacity change from 0 to 2048 [ 1191.946063][ T2161] vlan2: entered allmulticast mode [ 1191.951334][ T2161] bridge_slave_0: entered allmulticast mode [ 1191.975089][ T2157] Alternate GPT is invalid, using primary GPT. [ 1191.981725][ T2157] loop9: p2 p3 p7 [ 1192.062538][ T2171] loop5: detected capacity change from 0 to 1024 [ 1192.071203][ T2171] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1192.081610][ T2171] EXT4-fs: Ignoring removed nobh option [ 1192.087668][ T2173] loop2: detected capacity change from 0 to 2048 [ 1192.100193][ T2176] bridge0: entered promiscuous mode [ 1192.106213][ T2176] macsec1: entered promiscuous mode [ 1192.112182][ T2176] bridge0: port 1(macsec1) entered blocking state [ 1192.118744][ T2176] bridge0: port 1(macsec1) entered disabled state [ 1192.125531][ T2176] macsec1: entered allmulticast mode [ 1192.130860][ T2176] bridge0: entered allmulticast mode [ 1192.136859][ T2176] macsec1: left allmulticast mode [ 1192.142061][ T2176] bridge0: left allmulticast mode [ 1192.149682][ T2173] Alternate GPT is invalid, using primary GPT. [ 1192.156161][ T2173] loop2: p2 p3 p7 [ 1192.163912][ T2176] bridge0: left promiscuous mode [ 1192.216085][ T2187] loop2: detected capacity change from 0 to 512 [ 1192.241384][ T2187] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 1192.250313][ T2171] Falling back ldisc for ttyS3. [ 1192.333827][ T2205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=2205 comm=syz.5.20928 [ 1192.419036][ T2205] syz_tun: refused to change device tx_queue_len [ 1192.495894][ T2218] loop9: detected capacity change from 0 to 128 [ 1192.507793][ T2218] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1192.523041][ T2218] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1192.557577][ T2222] loop2: detected capacity change from 0 to 512 [ 1192.577277][ T2222] msdos: Bad value for 'uid' [ 1192.582152][ T2222] msdos: Bad value for 'uid' [ 1192.599495][ T2230] netlink: 'syz.9.20938': attribute type 1 has an invalid length. [ 1192.605028][ T2222] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 1192.614561][ T2230] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1192.634498][ T2230] netlink: 28 bytes leftover after parsing attributes in process `syz.9.20938'. [ 1192.681916][ T2234] netlink: 'syz.1.20932': attribute type 1 has an invalid length. [ 1192.690038][ T2234] netlink: 224 bytes leftover after parsing attributes in process `syz.1.20932'. [ 1192.729409][ T2239] bridge0: entered promiscuous mode [ 1192.737686][ T2239] macsec1: entered promiscuous mode [ 1192.769004][ T2239] bridge0: port 1(macsec1) entered blocking state [ 1192.775561][ T2239] bridge0: port 1(macsec1) entered disabled state [ 1192.782391][ T2239] macsec1: entered allmulticast mode [ 1192.787738][ T2239] bridge0: entered allmulticast mode [ 1192.794778][ T2239] macsec1: left allmulticast mode [ 1192.799883][ T2239] bridge0: left allmulticast mode [ 1192.868858][ T2244] loop2: detected capacity change from 0 to 1024 [ 1192.912956][ T2239] bridge0: left promiscuous mode [ 1193.085784][ T2227] lo speed is unknown, defaulting to 1000 [ 1193.149493][ T9912] hid-generic 0000:0000:0000.0059: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1193.205461][ T2257] loop2: detected capacity change from 0 to 4096 [ 1193.239900][ T2257] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1193.259792][ T2263] loop7: detected capacity change from 0 to 512 [ 1193.267093][ T2263] msdos: Bad value for 'uid' [ 1193.271826][ T2263] msdos: Bad value for 'uid' [ 1193.580379][ T2278] netlink: 'syz.7.20954': attribute type 4 has an invalid length. [ 1193.588482][ T2278] netlink: 20 bytes leftover after parsing attributes in process `syz.7.20954'. [ 1193.614746][ T2278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2278 comm=syz.7.20954 [ 1193.694273][ T2282] loop7: detected capacity change from 0 to 2048 [ 1193.742645][ T2282] loop7: p1 < > p4 [ 1193.750978][ T2285] loop9: detected capacity change from 0 to 2048 [ 1193.780391][ T2282] loop7: p4 size 8388608 extends beyond EOD, truncated [ 1193.802470][ T2285] Alternate GPT is invalid, using primary GPT. [ 1193.809030][ T2285] loop9: p2 p3 p7 [ 1193.881431][ T2288] loop5: detected capacity change from 0 to 2048 [ 1193.917308][ T2278] lo speed is unknown, defaulting to 1000 [ 1194.027718][ T2288] Alternate GPT is invalid, using primary GPT. [ 1194.034258][ T2288] loop5: p2 p3 p7 [ 1194.069755][ T2300] loop1: detected capacity change from 0 to 1024 [ 1194.078500][ T2300] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1194.105438][ T2300] EXT4-fs: Ignoring removed nobh option [ 1194.120928][ T2299] loop9: detected capacity change from 0 to 512 [ 1194.144488][ T2300] EXT4-fs mount: 44 callbacks suppressed [ 1194.144510][ T2300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1194.179069][ T2299] msdos: Bad value for 'uid' [ 1194.183723][ T2299] msdos: Bad value for 'uid' [ 1194.250658][ T2299] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 1194.264469][ T2296] Falling back ldisc for ttyS3. [ 1194.287186][ T29] kauditd_printk_skb: 808 callbacks suppressed [ 1194.287203][ T29] audit: type=1326 audit(1235.726:89808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2307 comm="syz.9.20963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1194.316687][ T29] audit: type=1326 audit(1235.726:89809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2307 comm="syz.9.20963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1194.339821][ T29] audit: type=1326 audit(1235.726:89810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2307 comm="syz.9.20963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1194.363127][ T29] audit: type=1326 audit(1235.726:89811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2307 comm="syz.9.20963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1194.386331][ T29] audit: type=1326 audit(1235.726:89812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2307 comm="syz.9.20963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1194.405891][ T2310] loop5: detected capacity change from 0 to 2048 [ 1194.437579][T32031] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1194.488303][ T2310] Alternate GPT is invalid, using primary GPT. [ 1194.494906][ T2310] loop5: p2 p3 p7 [ 1194.640052][ T2328] loop5: detected capacity change from 0 to 512 [ 1194.655320][ T2328] msdos: Bad value for 'uid' [ 1194.660007][ T2328] msdos: Bad value for 'uid' [ 1194.685400][ T2328] syz1: rxe_newlink: already configured on veth0_to_bridge [ 1194.733410][ T2330] loop5: detected capacity change from 0 to 128 [ 1194.740327][ T2330] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1194.779663][ T2330] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1194.881350][ T2335] lo speed is unknown, defaulting to 1000 [ 1195.055858][ T29] audit: type=1326 audit(1236.503:89813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2332 comm="syz.7.20967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc65abeec9 code=0x7ffc0000 [ 1195.079888][ T29] audit: type=1326 audit(1236.503:89814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2332 comm="syz.7.20967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc65abeec9 code=0x7ffc0000 [ 1195.103793][ T29] audit: type=1326 audit(1236.503:89815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2332 comm="syz.7.20967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7efc65abeec9 code=0x7ffc0000 [ 1195.126876][ T29] audit: type=1326 audit(1236.503:89816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2332 comm="syz.7.20967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc65abeec9 code=0x7ffc0000 [ 1195.150611][ T29] audit: type=1326 audit(1236.503:89817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2332 comm="syz.7.20967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc65abeec9 code=0x7ffc0000 [ 1195.274439][ T2342] bridge0: entered promiscuous mode [ 1195.279850][ T2342] macsec1: entered promiscuous mode [ 1195.279864][ T2341] loop7: detected capacity change from 0 to 512 [ 1195.295760][ T2342] bridge0: port 1(macsec1) entered blocking state [ 1195.302327][ T2342] bridge0: port 1(macsec1) entered disabled state [ 1195.310269][ T2342] macsec1: entered allmulticast mode [ 1195.315707][ T2342] bridge0: entered allmulticast mode [ 1195.322478][ T2342] macsec1: left allmulticast mode [ 1195.322901][ T2341] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1195.327547][ T2342] bridge0: left allmulticast mode [ 1195.341644][ T2341] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1195.351335][ T2341] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1195.379020][ T2342] bridge0: left promiscuous mode [ 1195.394149][ T2346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20979'. [ 1195.405663][ T2341] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 1195.412951][ T2341] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.20977: bg 0: block 40: padding at end of block bitmap is not set [ 1195.443285][ T2341] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1195.472222][ T2341] EXT4-fs (loop7): 1 truncate cleaned up [ 1195.499632][ T2341] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1195.512915][ T2354] syz1: rxe_newlink: already configured on veth0_to_bridge [ 1195.637636][T31271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1195.709340][ T2368] loop7: detected capacity change from 0 to 512 [ 1195.716405][ T2368] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1195.738193][ T2368] EXT4-fs (loop7): 1 truncate cleaned up [ 1195.747325][ T2368] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1195.980669][T31271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.079481][ T2376] netlink: 148 bytes leftover after parsing attributes in process `syz.7.20990'. [ 1196.143901][ T2384] loop7: detected capacity change from 0 to 2048 [ 1196.190382][ T2384] Alternate GPT is invalid, using primary GPT. [ 1196.196955][ T2384] loop7: p2 p3 p7 [ 1196.321256][ T2393] loop7: detected capacity change from 0 to 512 [ 1196.328461][ T2393] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1196.340502][ T2393] EXT4-fs (loop7): 1 truncate cleaned up [ 1196.346718][ T2393] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1196.439470][ T2396] lo speed is unknown, defaulting to 1000 [ 1196.705666][ T2399] loop2: detected capacity change from 0 to 512 [ 1196.790175][ T2399] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1196.804315][ T2399] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1196.804527][T31271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.827636][ T2399] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1196.848982][ T2405] loop5: detected capacity change from 0 to 1024 [ 1196.858688][ T2405] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1196.878883][ T2405] EXT4-fs: Ignoring removed nobh option [ 1196.900221][ T2399] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 1196.921050][ T2399] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.20999: bg 0: block 40: padding at end of block bitmap is not set [ 1196.951173][ T2399] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1196.967982][ T2399] EXT4-fs (loop2): 1 truncate cleaned up [ 1196.968938][ T2405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1196.980335][ T2399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1197.077026][T27317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1197.094128][ T2405] Falling back ldisc for ttyS3. [ 1197.151297][ T2417] loop9: detected capacity change from 0 to 2048 [ 1197.158293][ T2420] netlink: 148 bytes leftover after parsing attributes in process `syz.7.21004'. [ 1197.201727][T28707] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1197.214016][ T2417] Alternate GPT is invalid, using primary GPT. [ 1197.220492][ T2417] loop9: p2 p3 p7 [ 1197.288424][ T2436] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 1197.308022][ T2439] loop9: detected capacity change from 0 to 512 [ 1197.331426][ T2439] EXT4-fs warning (device loop9): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1197.350804][ T2439] EXT4-fs (loop9): mount failed [ 1197.366156][ T2439] loop9: detected capacity change from 0 to 1024 [ 1197.538053][ T2452] loop9: detected capacity change from 0 to 4096 [ 1197.546303][ T2452] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1197.547437][ T2024] hid_parser_main: 66 callbacks suppressed [ 1197.547460][ T2024] hid-generic 0000:0000:0000.005A: unknown main item tag 0x1 [ 1197.566379][ T2024] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1197.569351][ T2452] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1197.573993][ T2024] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1197.593775][ T2024] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1197.601281][ T2024] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1197.608891][ T2024] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1197.616476][ T2024] hid-generic 0000:0000:0000.005A: unknown main item tag 0x4 [ 1197.623882][ T2024] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1197.631317][ T2024] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1197.638836][ T2024] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1197.647171][ T2024] hid-generic 0000:0000:0000.005A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1197.674946][ T2460] netlink: 148 bytes leftover after parsing attributes in process `syz.1.21019'. [ 1197.777655][ T2469] loop1: detected capacity change from 0 to 2048 [ 1197.818435][ T2469] Alternate GPT is invalid, using primary GPT. [ 1197.824805][ T2469] loop1: p2 p3 p7 [ 1197.839607][T32219] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1197.887404][ T2471] loop9: detected capacity change from 0 to 4096 [ 1197.894507][ T2471] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1197.904637][ T2471] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1198.062287][ T2484] loop2: detected capacity change from 0 to 128 [ 1198.078482][ T2484] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1198.097017][ T2484] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1198.142927][T32219] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1198.209296][ T2492] loop7: detected capacity change from 0 to 2048 [ 1198.247587][ T2492] Alternate GPT is invalid, using primary GPT. [ 1198.254325][ T2492] loop7: p2 p3 p7 [ 1198.332479][ T2501] netlink: 44 bytes leftover after parsing attributes in process `syz.9.21031'. [ 1198.395009][ T2519] loop7: detected capacity change from 0 to 4096 [ 1198.403451][ T2519] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1198.415665][ T2519] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1198.541154][ T2531] bridge0: entered promiscuous mode [ 1198.546814][ T2531] macsec0: entered promiscuous mode [ 1198.555383][ T2531] bridge0: port 1(macsec0) entered blocking state [ 1198.561999][ T2531] bridge0: port 1(macsec0) entered disabled state [ 1198.569446][ T2531] macsec0: entered allmulticast mode [ 1198.574760][ T2531] bridge0: entered allmulticast mode [ 1198.580892][ T2531] macsec0: left allmulticast mode [ 1198.585966][ T2531] bridge0: left allmulticast mode [ 1198.591809][ T2531] bridge0: left promiscuous mode [ 1198.634826][T31271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1198.663748][ T2534] loop7: detected capacity change from 0 to 512 [ 1198.674057][ T2534] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1198.683844][ T2534] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1198.690484][ T2534] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1198.707817][ T2534] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 1198.716893][ T2534] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.21047: bg 0: block 40: padding at end of block bitmap is not set [ 1198.732743][ T2534] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1198.743013][ T2534] EXT4-fs (loop7): 1 truncate cleaned up [ 1198.751042][ T2534] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1198.776692][T31271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1198.849835][ T2547] loop7: detected capacity change from 0 to 512 [ 1198.856687][ T2547] msdos: Bad value for 'uid' [ 1198.861347][ T2547] msdos: Bad value for 'uid' [ 1198.866830][ T2549] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 1198.937710][ T2557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21057'. [ 1198.949328][ T2555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.990570][ T2555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1199.000885][ T2555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1199.020377][ T2566] netlink: 'syz.5.21058': attribute type 4 has an invalid length. [ 1199.028586][ T2566] netlink: 20 bytes leftover after parsing attributes in process `syz.5.21058'. [ 1199.063832][ T2566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2566 comm=syz.5.21058 [ 1199.085284][ T5330] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.094378][ T2566] loop5: detected capacity change from 0 to 2048 [ 1199.101656][ T5330] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.114682][ T5330] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.123791][ T5330] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.140390][ T2566] loop5: p1 < > p4 [ 1199.146835][ T2570] loop1: detected capacity change from 0 to 2048 [ 1199.153395][ T2566] loop5: p4 size 8388608 extends beyond EOD, truncated [ 1199.207833][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 1199.207852][ T29] audit: type=1326 audit(1240.894:89959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2577 comm="syz.9.21063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1199.245596][ T2576] loop5: detected capacity change from 0 to 2048 [ 1199.247552][ T2570] Alternate GPT is invalid, using primary GPT. [ 1199.259173][ T2570] loop1: p2 p3 p7 [ 1199.264093][ T29] audit: type=1326 audit(1240.894:89960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2577 comm="syz.9.21063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1199.287405][ T29] audit: type=1326 audit(1240.894:89961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2577 comm="syz.9.21063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1199.310573][ T29] audit: type=1326 audit(1240.894:89962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2577 comm="syz.9.21063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8f6beec9 code=0x7ffc0000 [ 1199.365089][ T2583] loop1: detected capacity change from 0 to 512 [ 1199.366100][ T29] audit: type=1326 audit(1240.967:89963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2579 comm="syz.9.21064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb8f6beec9 code=0x0 [ 1199.374613][ T2583] msdos: Bad value for 'uid' [ 1199.396934][ T2576] Alternate GPT is invalid, using primary GPT. [ 1199.399790][ T2583] msdos: Bad value for 'uid' [ 1199.405340][ T2576] loop5: p2 p3 p7 [ 1199.438595][ T2583] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 1199.469797][ T2587] bridge0: entered promiscuous mode [ 1199.488266][ T2587] macsec1: entered promiscuous mode [ 1199.494004][ T29] audit: type=1400 audit(1241.188:89964): avc: denied { create } for pid=2589 comm="syz.5.21067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1199.520527][ T2587] bridge0: port 1(macsec1) entered blocking state [ 1199.527014][ T2587] bridge0: port 1(macsec1) entered disabled state [ 1199.533609][ T29] audit: type=1400 audit(1241.198:89965): avc: denied { bind } for pid=2589 comm="syz.5.21067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1199.553092][ T29] audit: type=1400 audit(1241.219:89966): avc: denied { write } for pid=2589 comm="syz.5.21067" path="socket:[223294]" dev="sockfs" ino=223294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1199.576746][ T29] audit: type=1400 audit(1241.219:89967): avc: denied { write } for pid=2589 comm="syz.5.21067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1199.597071][ T2587] macsec1: entered allmulticast mode [ 1199.597227][ T2591] netlink: 12 bytes leftover after parsing attributes in process `syz.5.21067'. [ 1199.602449][ T2587] bridge0: entered allmulticast mode [ 1199.621690][ T2587] macsec1: left allmulticast mode [ 1199.626820][ T2587] bridge0: left allmulticast mode [ 1199.632171][ T2595] loop7: detected capacity change from 0 to 512 [ 1199.639693][ T2587] bridge0: left promiscuous mode [ 1199.653866][ T2595] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1199.662130][ T2595] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1199.669024][ T2595] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 1199.679430][ T2595] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1199.698225][ T2595] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 1199.712679][ T2595] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.21070: bg 0: block 40: padding at end of block bitmap is not set [ 1199.728440][ T2595] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1199.732156][ T2606] loop9: detected capacity change from 0 to 512 [ 1199.739582][ T2595] EXT4-fs (loop7): 1 truncate cleaned up [ 1199.744359][ T2606] EXT4-fs: Ignoring removed mblk_io_submit option [ 1199.751425][ T2595] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1199.757333][ T2606] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1199.779593][ T2606] EXT4-fs (loop9): 1 truncate cleaned up [ 1199.785709][ T2606] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1199.799294][T31271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1199.833877][ T2611] loop7: detected capacity change from 0 to 1024 [ 1199.842219][ T2611] EXT4-fs: Ignoring removed bh option [ 1199.848089][ T2611] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1199.885446][ T2611] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1199.904522][ T2611] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.21075: bg 0: block 248: padding at end of block bitmap is not set [ 1199.922200][ T2611] EXT4-fs (loop7): Remounting filesystem read-only [ 1199.934414][ T2611] netlink: 'syz.7.21075': attribute type 10 has an invalid length. [ 1199.942505][ T2611] netlink: 40 bytes leftover after parsing attributes in process `syz.7.21075'. [ 1199.955724][ T2611] team0: Port device geneve1 added [ 1199.965790][ T5323] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.976732][ T5323] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.009582][ T2619] loop2: detected capacity change from 0 to 512 [ 1200.018542][ T2619] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1200.031412][ T2619] EXT4-fs (loop2): 1 truncate cleaned up [ 1200.039631][ T2619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1200.051870][ T5323] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.061232][ T5323] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.071171][T32219] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1200.093900][ T2622] loop9: detected capacity change from 0 to 512 [ 1200.101585][ T2622] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1200.112856][ T2622] EXT4-fs (loop9): 1 truncate cleaned up [ 1200.119111][ T2622] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1200.134203][T27317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1200.193444][T32219] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1200.456469][ T2634] syz1: rxe_newlink: already configured on veth0_to_bridge [ 1200.571049][ T2642] bridge0: entered promiscuous mode [ 1200.576552][ T2642] macsec0: entered promiscuous mode [ 1200.582323][ T2642] bridge0: port 1(macsec0) entered blocking state [ 1200.588865][ T2642] bridge0: port 1(macsec0) entered disabled state [ 1200.595504][ T2642] macsec0: entered allmulticast mode [ 1200.600914][ T2642] bridge0: entered allmulticast mode [ 1200.607491][ T2642] macsec0: left allmulticast mode [ 1200.612656][ T2642] bridge0: left allmulticast mode [ 1200.619317][ T2642] bridge0: left promiscuous mode [ 1200.669458][ T2646] netlink: 'syz.1.21088': attribute type 4 has an invalid length. [ 1200.677982][ T2646] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21088'. [ 1200.688268][ T2646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2646 comm=syz.1.21088 [ 1200.708767][ T2646] loop1: detected capacity change from 0 to 2048 [ 1200.767497][ T2646] loop1: p1 < > p4 [ 1200.771837][ T2646] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1201.106968][T31271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1201.128341][ T2658] loop7: detected capacity change from 0 to 128 [ 1201.135531][ T2658] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1201.149237][ T2658] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1201.170643][ T2659] loop2: detected capacity change from 0 to 4096 [ 1201.178182][ T2659] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1201.189163][ T2659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1201.213468][ T2663] loop7: detected capacity change from 0 to 4096 [ 1201.220227][ T2664] loop9: detected capacity change from 0 to 512 [ 1201.227296][ T2663] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1201.237105][ T2663] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1201.283787][ T2664] EXT4-fs (loop9): failed to open journal device unknown-block(0,0) -6 [ 1201.381367][ T2672] loop9: detected capacity change from 0 to 2048 [ 1201.426945][ T2672] Alternate GPT is invalid, using primary GPT. [ 1201.433337][ T2672] loop9: p2 p3 p7 [ 1201.468187][T27317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1201.530894][T31271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1201.609299][ T2685] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 1201.651981][ T2691] netlink: 'syz.5.21104': attribute type 4 has an invalid length. [ 1201.659916][ T2691] netlink: 20 bytes leftover after parsing attributes in process `syz.5.21104'. [ 1201.685297][ T2695] loop7: detected capacity change from 0 to 512 [ 1201.710420][ T2697] netlink: 16 bytes leftover after parsing attributes in process `syz.9.21108'. [ 1201.719683][ T2697] netlink: 24 bytes leftover after parsing attributes in process `syz.9.21108'. [ 1201.732243][ T2695] msdos: Bad value for 'uid' [ 1201.736872][ T2695] msdos: Bad value for 'uid' [ 1201.788326][ T2698] lo speed is unknown, defaulting to 1000 [ 1201.834229][ T2702] loop7: detected capacity change from 0 to 2048 [ 1201.893860][ T2702] Alternate GPT is invalid, using primary GPT. [ 1201.900335][ T2702] loop7: p2 p3 p7 [ 1201.981366][ T2710] serio: Serial port ptm0 [ 1202.142952][ T2724] tipc: Enabling of bearer rejected, already enabled [ 1202.208328][ T2732] netlink: 16 bytes leftover after parsing attributes in process `syz.5.21120'. [ 1202.218244][ T2732] netlink: 12 bytes leftover after parsing attributes in process `syz.5.21120'. [ 1202.292256][ T2738] loop5: detected capacity change from 0 to 2048 [ 1202.342559][ T2738] Alternate GPT is invalid, using primary GPT. [ 1202.349062][ T2738] loop5: p2 p3 p7 [ 1202.495973][ T2742] loop5: detected capacity change from 0 to 2048 [ 1202.542833][ T2742] Alternate GPT is invalid, using primary GPT. [ 1202.549346][ T2742] loop5: p2 p3 p7 [ 1202.787681][ T2751] syz1: rxe_newlink: already configured on veth0_to_bridge [ 1202.825156][ T2755] FAULT_INJECTION: forcing a failure. [ 1202.825156][ T2755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1202.838319][ T2755] CPU: 1 UID: 0 PID: 2755 Comm: syz.5.21130 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1202.838354][ T2755] Tainted: [W]=WARN [ 1202.838398][ T2755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1202.838415][ T2755] Call Trace: [ 1202.838423][ T2755] [ 1202.838432][ T2755] __dump_stack+0x1d/0x30 [ 1202.838460][ T2755] dump_stack_lvl+0xe8/0x140 [ 1202.838478][ T2755] dump_stack+0x15/0x1b [ 1202.838494][ T2755] should_fail_ex+0x265/0x280 [ 1202.838548][ T2755] should_fail+0xb/0x20 [ 1202.838568][ T2755] should_fail_usercopy+0x1a/0x20 [ 1202.838592][ T2755] _copy_from_user+0x1c/0xb0 [ 1202.838672][ T2755] ___sys_sendmsg+0xc1/0x1d0 [ 1202.838715][ T2755] __x64_sys_sendmsg+0xd4/0x160 [ 1202.838800][ T2755] x64_sys_call+0x191e/0x2ff0 [ 1202.838829][ T2755] do_syscall_64+0xd2/0x200 [ 1202.838860][ T2755] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1202.838951][ T2755] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1202.838988][ T2755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.839023][ T2755] RIP: 0033:0x7fdaa267eec9 [ 1202.839043][ T2755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1202.839067][ T2755] RSP: 002b:00007fdaa10df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1202.839089][ T2755] RAX: ffffffffffffffda RBX: 00007fdaa28d5fa0 RCX: 00007fdaa267eec9 [ 1202.839119][ T2755] RDX: 0000000004008054 RSI: 0000200000000280 RDI: 0000000000000003 [ 1202.839131][ T2755] RBP: 00007fdaa10df090 R08: 0000000000000000 R09: 0000000000000000 [ 1202.839142][ T2755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1202.839195][ T2755] R13: 00007fdaa28d6038 R14: 00007fdaa28d5fa0 R15: 00007ffcd152b4b8 [ 1202.839216][ T2755] [ 1203.067647][ T2759] loop9: detected capacity change from 0 to 128 [ 1203.079700][ T2759] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1203.094292][ T2759] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1203.119787][ T2766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21135'. [ 1203.129815][ T2766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21135'. [ 1203.170998][ T2771] netlink: 'syz.2.21137': attribute type 4 has an invalid length. [ 1203.178992][ T2771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21137'. [ 1203.193735][ T2771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2771 comm=syz.2.21137 [ 1203.217781][ T2771] loop2: detected capacity change from 0 to 2048 [ 1203.224306][ T2769] loop5: detected capacity change from 0 to 2048 [ 1203.247205][ T2773] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.258970][ T2771] loop2: p1 < > p4 [ 1203.265163][ T2771] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1203.278173][ T2769] Alternate GPT is invalid, using primary GPT. [ 1203.284683][ T2769] loop5: p2 p3 p7 [ 1203.297810][ T2771] lo speed is unknown, defaulting to 1000 [ 1203.308176][ T2774] 9pnet: p9_errstr2errno: server reported unknown error  [ 1203.327725][ T2773] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.383594][ T2777] loop5: detected capacity change from 0 to 512 [ 1203.401651][ T2773] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.404210][ T2777] msdos: Bad value for 'uid' [ 1203.416673][ T2777] msdos: Bad value for 'uid' [ 1203.425309][ T2777] syz1: rxe_newlink: already configured on veth0_to_bridge [ 1203.467640][ T2780] tipc: Enabling of bearer rejected, already enabled [ 1203.484719][ T2773] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.545555][ T5323] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.553980][ T5323] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.563343][ T5323] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.563464][ T5323] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.613672][ T2788] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 1203.841277][ T2795] smc: net device bond0 applied user defined pnetid SYZ0 [ 1203.841292][ T2795] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 1203.843845][ T2795] smc: net device bond0 erased user defined pnetid SYZ0 [ 1203.866353][ T2795] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 1203.980801][ T2800] netlink: 16 bytes leftover after parsing attributes in process `syz.9.21148'. [ 1204.018485][ T2803] FAULT_INJECTION: forcing a failure. [ 1204.018485][ T2803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1204.031601][ T2803] CPU: 1 UID: 0 PID: 2803 Comm: syz.9.21149 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1204.031641][ T2803] Tainted: [W]=WARN [ 1204.031648][ T2803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1204.031660][ T2803] Call Trace: [ 1204.031666][ T2803] [ 1204.031675][ T2803] __dump_stack+0x1d/0x30 [ 1204.031719][ T2803] dump_stack_lvl+0xe8/0x140 [ 1204.031738][ T2803] dump_stack+0x15/0x1b [ 1204.031753][ T2803] should_fail_ex+0x265/0x280 [ 1204.031776][ T2803] should_fail+0xb/0x20 [ 1204.031798][ T2803] should_fail_usercopy+0x1a/0x20 [ 1204.031890][ T2803] _copy_from_user+0x1c/0xb0 [ 1204.031925][ T2803] ___sys_sendmsg+0xc1/0x1d0 [ 1204.031994][ T2803] __x64_sys_sendmsg+0xd4/0x160 [ 1204.032047][ T2803] x64_sys_call+0x191e/0x2ff0 [ 1204.032134][ T2803] do_syscall_64+0xd2/0x200 [ 1204.032162][ T2803] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1204.032185][ T2803] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1204.032246][ T2803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.032269][ T2803] RIP: 0033:0x7fbb8f6beec9 [ 1204.032283][ T2803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1204.032301][ T2803] RSP: 002b:00007fbb8e127038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1204.032319][ T2803] RAX: ffffffffffffffda RBX: 00007fbb8f915fa0 RCX: 00007fbb8f6beec9 [ 1204.032341][ T2803] RDX: 0000000000040080 RSI: 00002000000007c0 RDI: 0000000000000003 [ 1204.032358][ T2803] RBP: 00007fbb8e127090 R08: 0000000000000000 R09: 0000000000000000 [ 1204.032375][ T2803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1204.032391][ T2803] R13: 00007fbb8f916038 R14: 00007fbb8f915fa0 R15: 00007ffc41b4b3e8 [ 1204.032415][ T2803] [ 1204.290573][ T2809] tipc: Started in network mode [ 1204.290610][ T2809] tipc: Node identity ac14140f, cluster identity 4711 [ 1204.290698][ T2809] tipc: New replicast peer: 255.255.255.83 [ 1204.290727][ T2809] tipc: Enabled bearer , priority 10 [ 1204.344012][ T2811] lo speed is unknown, defaulting to 1000 [ 1204.408106][ T2814] syz1: rxe_newlink: already configured on veth0_to_bridge [ 1204.487396][ T2815] lo speed is unknown, defaulting to 1000 [ 1204.916202][ T2826] loop5: detected capacity change from 0 to 512 [ 1204.922762][ T2826] msdos: Bad value for 'uid' [ 1204.927379][ T2826] msdos: Bad value for 'uid' [ 1204.940697][ T2826] syz1: rxe_newlink: already configured on veth0_to_bridge [ 1204.973807][ T2824] loop1: detected capacity change from 0 to 4096 [ 1204.980544][ T2824] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1204.985752][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 1204.985773][ T29] audit: type=1326 audit(1246.954:90097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2827 comm="syz.2.21160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36145eeec9 code=0x7ffc0000 [ 1205.016414][ T29] audit: type=1326 audit(1246.954:90098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2827 comm="syz.2.21160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f36145eeec9 code=0x7ffc0000 [ 1205.039495][ T29] audit: type=1326 audit(1246.954:90099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2827 comm="syz.2.21160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36145eeec9 code=0x7ffc0000 [ 1205.062600][ T29] audit: type=1326 audit(1246.954:90100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2827 comm="syz.2.21160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36145eeec9 code=0x7ffc0000 [ 1205.106173][ T2824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1205.127372][ T29] audit: type=1326 audit(1247.101:90101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2837 comm="syz.2.21163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36145eeec9 code=0x7ffc0000 [ 1205.150617][ T29] audit: type=1326 audit(1247.101:90102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2837 comm="syz.2.21163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36145eeec9 code=0x7ffc0000 [ 1205.173729][ T29] audit: type=1326 audit(1247.101:90103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2837 comm="syz.2.21163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f36145eeec9 code=0x7ffc0000 [ 1205.196827][ T29] audit: type=1326 audit(1247.101:90104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2837 comm="syz.2.21163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36145eeec9 code=0x7ffc0000 [ 1205.219976][ T29] audit: type=1326 audit(1247.101:90105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2837 comm="syz.2.21163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36145eeec9 code=0x7ffc0000 [ 1205.243066][ T29] audit: type=1326 audit(1247.101:90106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2837 comm="syz.2.21163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36145eeec9 code=0x7ffc0000 [ 1205.356902][ T2952] tipc: Node number set to 2886997007 [ 1205.589285][T32031] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.621666][ T2871] bridge0: entered promiscuous mode [ 1205.627793][ T2871] macsec0: entered promiscuous mode [ 1205.677954][ T2873] loop9: detected capacity change from 0 to 2048 [ 1205.686054][ T2871] bridge0: port 1(macsec0) entered blocking state [ 1205.692662][ T2871] bridge0: port 1(macsec0) entered disabled state [ 1205.701359][ T2871] macsec0: entered allmulticast mode [ 1205.706708][ T2871] bridge0: entered allmulticast mode [ 1205.714101][ T2871] macsec0: left allmulticast mode [ 1205.719195][ T2871] bridge0: left allmulticast mode [ 1205.731756][ T2871] bridge0: left promiscuous mode [ 1205.741092][ T2873] Alternate GPT is invalid, using primary GPT. [ 1205.747593][ T2873] loop9: p2 p3 p7 [ 1205.769339][ T2874] lo speed is unknown, defaulting to 1000 [ 1206.427252][ T2885] lo speed is unknown, defaulting to 1000 [ 1206.784516][ T2902] bridge0: entered promiscuous mode [ 1206.792710][ T2902] macsec0: entered promiscuous mode [ 1206.797260][ T2902] bridge0: port 1(macsec0) entered blocking state [ 1206.797302][ T2902] bridge0: port 1(macsec0) entered disabled state [ 1206.797385][ T2902] macsec0: entered allmulticast mode [ 1206.797399][ T2902] bridge0: entered allmulticast mode [ 1206.803638][ T2902] macsec0: left allmulticast mode [ 1206.833067][ T2902] bridge0: left allmulticast mode [ 1206.853922][ T2902] bridge0: left promiscuous mode [ 1207.072544][ T2923] loop7: detected capacity change from 0 to 8192 [ 1207.271456][ T2942] loop2: detected capacity change from 0 to 128 [ 1207.278406][ T2942] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1207.296976][ T2942] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1207.306057][ T2939] lo speed is unknown, defaulting to 1000 [ 1207.312482][ T2945] netlink: 'syz.7.21201': attribute type 4 has an invalid length. [ 1207.320474][ T2945] netlink: 20 bytes leftover after parsing attributes in process `syz.7.21201'. [ 1207.341430][ T2943] netlink: 'syz.1.21193': attribute type 1 has an invalid length. [ 1207.350016][ T2943] netlink: 224 bytes leftover after parsing attributes in process `syz.1.21193'. [ 1207.360722][ T2945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2945 comm=syz.7.21201 [ 1207.400493][ T2945] loop7: detected capacity change from 0 to 2048 [ 1207.441798][ T2945] loop7: p1 < > p4 [ 1207.449211][ T2945] loop7: p4 size 8388608 extends beyond EOD, truncated [ 1207.457930][ T2947] rdma_rxe: rxe_newlink: failed to add veth0_to_bridge [ 1207.578361][ T2945] lo speed is unknown, defaulting to 1000 [ 1207.657985][ T2967] netlink: 'syz.2.21208': attribute type 1 has an invalid length. [ 1207.666569][ T2967] netlink: 224 bytes leftover after parsing attributes in process `syz.2.21208'. [ 1207.928475][ T2979] loop7: detected capacity change from 0 to 2048 [ 1208.119078][ T2982] loop5: detected capacity change from 0 to 128 [ 1208.150382][ T2979] Alternate GPT is invalid, using primary GPT. [ 1208.156899][ T2979] loop7: p2 p3 p7 [ 1208.161529][ T2982] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1208.225329][ T2982] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1208.336078][ T2992] macsec1: entered promiscuous mode [ 1208.341436][ T2992] bridge0: entered promiscuous mode [ 1208.390698][ T2992] bridge0: port 1(macsec1) entered blocking state [ 1208.397396][ T2992] bridge0: port 1(macsec1) entered disabled state [ 1208.421565][ T2992] macsec1: entered allmulticast mode [ 1208.426969][ T2992] bridge0: entered allmulticast mode [ 1208.443533][ T2992] macsec1: left allmulticast mode [ 1208.448613][ T2992] bridge0: left allmulticast mode [ 1208.458068][ T2992] bridge0: left promiscuous mode [ 1208.468227][ T2994] bridge0: entered promiscuous mode [ 1208.473602][ T2994] macsec1: entered promiscuous mode [ 1208.479605][ T2994] bridge0: port 1(macsec1) entered blocking state [ 1208.486106][ T2994] bridge0: port 1(macsec1) entered disabled state [ 1208.493527][ T2994] macsec1: entered allmulticast mode [ 1208.498863][ T2994] bridge0: entered allmulticast mode [ 1208.504903][ T2994] macsec1: left allmulticast mode [ 1208.510049][ T2994] bridge0: left allmulticast mode [ 1208.516036][ T2994] bridge0: left promiscuous mode [ 1208.596931][ T3003] loop5: detected capacity change from 0 to 128 [ 1208.620600][ T3003] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1208.638897][ T2999] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 1208.646121][ T2999] batman_adv: batadv0: Removing interface: veth1_vlan [ 1208.654673][ T3003] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1208.720305][ T3005] loop7: detected capacity change from 0 to 4096 [ 1208.731505][ T3005] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1208.757091][ T3005] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1208.819417][ T3018] loop9: detected capacity change from 0 to 512 [ 1208.828159][ T3018] EXT4-fs: Ignoring removed mblk_io_submit option [ 1208.837904][ T3018] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1208.894246][ T3018] EXT4-fs (loop9): 1 truncate cleaned up [ 1208.902897][ T3018] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1208.945781][ T3031] macsec1: entered promiscuous mode [ 1208.952225][ T3029] loop1: detected capacity change from 0 to 2048 [ 1208.960444][ T3031] bridge0: port 1(macsec1) entered blocking state [ 1208.967045][ T3031] bridge0: port 1(macsec1) entered disabled state [ 1208.973990][ T3031] macsec1: entered allmulticast mode [ 1208.979441][ T3031] bridge0: entered allmulticast mode [ 1208.986861][ T3031] macsec1: left allmulticast mode [ 1208.992154][ T3031] bridge0: left allmulticast mode [ 1209.054485][ T3029] Alternate GPT is invalid, using primary GPT. [ 1209.061075][ T3029] loop1: p2 p3 p7 [ 1209.159880][T32219] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1209.173379][T31271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1209.185404][ T3038] smc: net device bond0 applied user defined pnetid SYZ0 [ 1209.192507][ T3038] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 1209.210041][ T3038] smc: net device bond0 erased user defined pnetid SYZ0 [ 1209.218739][ T3038] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 1209.238216][ T3040] loop9: detected capacity change from 0 to 1024 [ 1209.246286][ T3040] EXT4-fs (loop9): invalid first ino: 10 [ 1209.341735][ T3053] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3053 comm=syz.7.21242 [ 1209.354402][ T3053] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3053 comm=syz.7.21242 [ 1209.385613][ T9912] Process accounting resumed [ 1209.400902][ T3053] Process accounting resumed [ 1209.432312][ T3060] loop7: detected capacity change from 0 to 2048 [ 1209.444989][ T3066] ================================================================== [ 1209.453134][ T3066] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 1209.459846][ T3066] [ 1209.462175][ T3066] write to 0xffff88810702dd10 of 8 bytes by task 3063 on cpu 1: [ 1209.469807][ T3066] call_rcu+0x44/0x3f0 [ 1209.473892][ T3066] mas_wmb_replace+0xc6a/0x14a0 [ 1209.478755][ T3066] mas_wr_store_entry+0x1773/0x2b50 [ 1209.483978][ T3066] mas_store_prealloc+0x74d/0x9e0 [ 1209.489032][ T3066] vma_iter_store_new+0x1c5/0x200 [ 1209.494068][ T3066] vma_complete+0x125/0x580 [ 1209.498578][ T3066] __split_vma+0x5d9/0x650 [ 1209.503016][ T3066] vma_modify+0x3f2/0xc80 [ 1209.507359][ T3066] vma_modify_flags+0x101/0x130 [ 1209.512335][ T3066] mprotect_fixup+0x2cc/0x570 [ 1209.517024][ T3066] do_mprotect_pkey+0x6d6/0x980 [ 1209.521889][ T3066] __x64_sys_mprotect+0x48/0x60 [ 1209.526749][ T3066] x64_sys_call+0x274e/0x2ff0 [ 1209.531477][ T3066] do_syscall_64+0xd2/0x200 [ 1209.536041][ T3066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.541941][ T3066] [ 1209.544270][ T3066] read to 0xffff88810702dd10 of 8 bytes by task 3066 on cpu 0: [ 1209.551821][ T3066] mas_state_walk+0x2f5/0x650 [ 1209.556513][ T3066] mas_walk+0x60/0x150 [ 1209.560598][ T3066] lock_vma_under_rcu+0x8d/0x160 [ 1209.565561][ T3066] do_user_addr_fault+0x233/0x1090 [ 1209.570694][ T3066] exc_page_fault+0x62/0xa0 [ 1209.575215][ T3066] asm_exc_page_fault+0x26/0x30 [ 1209.580079][ T3066] [ 1209.582413][ T3066] Reported by Kernel Concurrency Sanitizer on: [ 1209.588577][ T3066] CPU: 0 UID: 0 PID: 3066 Comm: syz.1.21247 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1209.599965][ T3066] Tainted: [W]=WARN [ 1209.603771][ T3066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1209.614018][ T3066] ================================================================== [ 1209.635051][ T3060] Alternate GPT is invalid, using primary GPT. [ 1209.641536][ T3060] loop7: p2 p3 p7