last executing test programs: 4m22.484583672s ago: executing program 32 (id=1593): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, &(0x7f00000001c0)={@desc={0x1, 0x0, @desc2}}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) r7 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae, 0x2, @perf_config_ext={0x0, 0x8}, 0x10d51d, 0xb6a0, 0x0, 0x0, 0x4, 0xf22, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f0000001900)={0x1, 0x80, 0x6, 0x9, 0x0, 0x1, 0x0, 0x1, 0x55804, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xa}, 0x8, 0x0, 0x0, 0x5, 0x5, 0xffff, 0x8a1e}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x1, 0xc1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}}, 0x0, 0x0, 0x41, 0x0, "de2170420b42866d26462f6e152472578c7e9359d81409d1a02b9c3248e87414c4cfec9913387fd71c721f5ed55b000000000000ed6602a697309a4400"}, 0xd8) syz_emit_ethernet(0x4e, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaa248100ebff86dd60a6be7800140601fc0100000000000000000000000000010000000d00000000000000000091990bbde06e9b1c0000014e204e23e2b29b0ecfae03f50181dfbf5114f94c1157b65678073e8954f02b39e2e1d95c0e6662014871dc1493af2c58c3ff2507d19492934412b39ad8c878e971b856113b3a88034599022aa4fdd7d0bcdb4547b6e8cada7388a69da9f8c5888092c8957f35407d4c9cc46a853d1306c2c654d4d0fdec2810fdaefbd3c6376dc18a8afcf6f0453b49a3e11ecd674e1810eb4111", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5102004490780003"], 0x0) 4m10.019474539s ago: executing program 3 (id=1785): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = epoll_create1(0x0) epoll_pwait(r6, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)={0x30000008}) dup3(r4, r5, 0x0) bind$tipc(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x12}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, 0x0, 0xee00, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r8, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x7c8, 0x0) 4m9.505880272s ago: executing program 3 (id=1798): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x4100, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf01000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="64000000020601080000000004000000000000001400078008001140000000000500150002000000050001000600000005"], 0x64}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r6, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES8=r5], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080)) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r10}, 0x18) r11 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r11, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}], 0x1, 0x4000004) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="06000010060000000600000003000000230a0400", @ANYRES32=r2, @ANYRES64=r6, @ANYRES64, @ANYRES32=r9, @ANYBLOB="00000000041300000100000000000000000000000007000000000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scmi_xfer_response_wait\x00', r3}, 0x18) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r12, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000a}, 0x94) unshare(0x80) 4m8.631033692s ago: executing program 3 (id=1820): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="072820020000000000", @ANYRESOCT=0x0], 0x50) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='target_sequencer_start\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r2 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r2, 0x11, 0x0, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 4m8.472469859s ago: executing program 3 (id=1824): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000500)={[{@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_nolock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r0, 0x0, 0x0, 0x8800000) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0xa10408, &(0x7f00000001c0)={[{@nojournal_checksum}, {@dioread_lock}, {@mblk_io_submit}, {}, {@noload}, {@inlinecrypt}, {@debug}, {@usrjquota}]}, 0x3, 0x581, &(0x7f0000000c00)="$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") sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x84, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000006c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x3, 'macvlan1\x00'}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) write$binfmt_misc(r1, &(0x7f0000000340)="be", 0x1) 4m8.023558258s ago: executing program 3 (id=1825): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x20001, 0x15d) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r6, 0x80047441, 0xf0ff1f00000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x10, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r3, @ANYBLOB="00000000001f0000b70500000800000095000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="02030003230000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e0101000000000000100002001000000004d3000004d50000000014001800090d94"], 0x118}, 0x1, 0x7}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000380)={0x3, 0x2000009, 0xc10, 0x0, 0x7}) r9 = syz_open_dev$vcsu(&(0x7f0000000080), 0x4eef328b, 0x20800) splice(r0, &(0x7f0000000040)=0x9, r9, &(0x7f0000000100)=0x8, 0x4, 0x6) openat(r5, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=',\"']) 4m7.290471381s ago: executing program 3 (id=1837): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESOCT=0x0], 0x50) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='target_sequencer_start\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r2 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r2, 0x11, 0x0, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 4m7.275913472s ago: executing program 33 (id=1837): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESOCT=0x0], 0x50) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='target_sequencer_start\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r2 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r2, 0x11, 0x0, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 3m40.260555121s ago: executing program 5 (id=2263): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x4, 0x7f, 0xd, 0x80, 0x1, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x0, 0xff, 0x4}}) (async, rerun: 64) r2 = io_uring_setup(0x13cf, &(0x7f0000000040)={0x0, 0x4ea1, 0xc000, 0x1, 0x28b}) (rerun: 64) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000b00)={{r2}, 0x8, 0x2, 0x4}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r3, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@ifindex=r4, 0x11, 0x0, 0x80000000, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async, rerun: 64) sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x18}}, {{&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="04c116681218b2688bc797b4884d5f8a7e18c4d8c6c0dea417958bf1bf28c50d42e10d8614af04284cec56328ef3a4438ee7054fc03e104cabf8a0aab5d9b8eef542fabf306b79d23323ad3f810e35ae18c0e4ed9cbf03395f1205dede7ec4b015f30e804f3e3ccfc316484461eb827b3cc0321c9508304c7d5d423bca723be6496156ce6dd4af3d80921acf9e9d8b3c8357521bee33331c79dbd3232781c549367834587076e595d97433059029f1d2212dc60aa29ec5efefe60e4a6b523000f87a2bfb3a518113c4593781c28842b97769af34ee7657bd16a8713008b22cc9a672ab", 0xe3}, {&(0x7f00000001c0)="ebc2c8768a63d5156f02b48214a68c6ace00d301", 0x14}, {&(0x7f0000000200)="d908008cf885e8e5fccd1efccca3c5ab529ce640804786dcb29545cdb57310e853a5b46591ef436fd75625e1895072779ee31de88cef704a946875d5583fbbea5996ac4de027693ae12c173d534eaa1df1cdc80268de38bedd67d356543e34bf1855286258478d357ca01d46e9fb78210e173f611ebcad0ea239c5ef9d763860fb125ae6a8f45b2bd7d99da90e751578032583f1dba12888e37092ac94067fa3", 0xa0}, {&(0x7f00000002c0)="d452ea2a4eef989aed1b9d19bdfe0506973cc2000000", 0x16}, {&(0x7f0000000300)="64ddeb1f1406fd89cc563aa5ca5ec4d14861f5fcdc9ca94c9387c905b71320d7897fb2de6f004ee8e6b825344895fdde2bbff69929b37706a8cd6cfe9f0b5d06fe16c8617e73d331185624dfb0d92ac993e7ff80cc423e97761fc42b", 0x5c}], 0x5, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xf}}, @ip_retopts={{0x64, 0x0, 0x7, {[@cipso={0x86, 0x1c, 0x1, [{0x0, 0xd, "11bc2349e582424bbb789b"}, {0x1, 0x5, "1744a7"}, {0x7, 0x4, "d1f0"}]}, @generic={0x83, 0xe, "821fa2d34126300e4d1421b8"}, @ssrr={0x89, 0xb, 0xb3, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x86, 0xe, "3b2485964ab82aee31f11ac5"}, @timestamp={0x44, 0x10, 0xab, 0x0, 0x1, [0x7, 0x5, 0xa]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @dev={0xac, 0x14, 0x14, 0x32}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @dev={0xac, 0x14, 0x14, 0x42}}}}], 0xc0}}, {{&(0x7f00000005c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000000600)="316c1264c176a730d3aa004a5f0f8061d4cd90b76a962073fa759c0e29df39fe37415bcad4bf50b33ec54abdd2119a5d676fef64f94cc06fb8cf66d69e8318bb44729e4e793842c62e1616382a92713bfe043ce73e8750f72c071ba057aa34b04bfcd1401b0596c0728a26f7879ca0b16b3cbb01b454815fac30bed18224eb9b8d878b4e879be8a44be59cb0ea832550841e39ff504cfc6f1575", 0x9a}, {&(0x7f00000006c0)="0b00c18d2f33513b836252eb26589494d651f8b0b39645940a63fb55ff780a289a98e2c5ee63791f387fd7799c8408ce2c83", 0x32}, {&(0x7f0000000700)='\r', 0x1}, {&(0x7f0000000740)="0b76abc480617a18a5fdd21bae8df6d548e490beefc339f7f11315d4f87a2f40ce37628bd546969e6a70cc4fb150dd5746bc112231f82242a88e8060ee71a5352787e54e0d98314b39c73be5892e33029ff0e68e0119037da8e34546628be9f8496f1cc887ea8e8d080d7befb3110a79b03c686e4d51e64348cd7acf69e6010f857de0f98f8136ea4692abcc365a16ddd3fdf952a6db203c0eca38a0ff7457677b78e3c9f5aa31407f46f57d5cb019c82cfaa7d68bccea5fa21af041b7f56b7929d3a40ca1741c02cc", 0xc9}, {&(0x7f0000000880)="00aa4306560ec67fcc5ae9829f857ceec80fad9fda9c7da80acb0a5275efd85b6c3d091c7fad65145091", 0x2a}], 0x6, &(0x7f0000000940)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x54, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x35, 0x3, 0x3, [{@multicast2, 0x2}, {@rand_addr=0x64010100, 0x2}, {@broadcast, 0x9}, {@private=0xa010102, 0x5}, {@rand_addr=0x64010101, 0xfffffffd}, {@private=0xa010102, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x1}]}, @lsrr={0x83, 0x7, 0x14, [@broadcast]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x88}}, {{&(0x7f0000000a00)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000a40)="ac294f031be78c8f8f302dae3f57", 0xe}], 0x1}}], 0x4, 0x4880) (rerun: 64) r5 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081c, &(0x7f0000000600)={[{@grpquota}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0xc}}]}, 0x1, 0x4fa, &(0x7f00000015c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x141042, 0xdb) sendfile(r7, r7, 0x0, 0x40000000009) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) pread64(r5, &(0x7f0000000140)=""/106, 0x6a, 0x1000007) (async, rerun: 64) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000ac0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) 3m39.983830524s ago: executing program 5 (id=2264): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2a5c0, 0x1c1, 0x4}, 0x18) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0xff, 0x4e, 0x54, 0x0, 0xcb2, 0x9c40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xb6b5c95fd317821}, 0x18144, 0x81, 0x800, 0x4, 0x9, 0x1, 0x77c, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffeff, 0xffffffffffffffff, 0x9) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) r4 = getpid() r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x8, 0x1, 0x1, 0x1, {{0xa, 0x4, 0x3, 0x9, 0x28, 0x68, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @multicast1, {[@lsrr={0x83, 0x7, 0x74, [@broadcast]}, @rr={0x7, 0xb, 0x16, [@private=0xa010100, @local]}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000440)={@private0, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3894, 0x5, 0x5, 0x0, 0xe, 0x1480080, r6}) r7 = syz_pidfd_open(r4, 0x0) r8 = pidfd_getfd(r7, r7, 0x0) setns(r8, 0x66020000) r9 = openat$cgroup_type(r8, &(0x7f0000000300), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000500)) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f00000008c0)={{0x0, 0x2, 0x9, 0x160, 0x7, 0x1, 0xffffffff, 0x80000000, 0x8, 0x5, 0x5, 0xc9, 0x0, 0xff, 0xb}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket(0x10, 0x3, 0x6) r11 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r11, 0x0, 0x13, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000100), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20008010) 3m39.819814751s ago: executing program 5 (id=2268): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) (fail_nth: 2) 3m39.753384834s ago: executing program 5 (id=2270): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xc529, 0x1000, 0x0, 0xfffffffe}, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002bc0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7f, 0x0, 0x0, 0x0, 0x6, '\x00', r4, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r5}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x3, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xffff, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0xb, 0x0, &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f00)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0x1d6}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_read_part_table(0x5ad, &(0x7f0000002600)="$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") r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r8, @ANYBLOB="010000a5e10834456e8afd0000000000e3b95992", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50) 3m39.326004973s ago: executing program 5 (id=2281): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$chown(0x4, r0, 0x0, 0x0) 3m39.091866933s ago: executing program 5 (id=2285): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0728200200"/17, @ANYRESOCT=0x0], 0x50) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r1, 0x11, 0x0, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 3m39.069052494s ago: executing program 34 (id=2285): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0728200200"/17, @ANYRESOCT=0x0], 0x50) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r1, 0x11, 0x0, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 1m33.154727551s ago: executing program 6 (id=4487): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) inotify_init1(0x80800) socket$pppl2tp(0x18, 0x1, 0x1) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00 \x00~'], 0x14}}, 0x4000054) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000040), 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r8}, 0x10) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000e00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f000000bb00)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r10, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0xfefe, 0x807, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0xfffffffd, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) 1m32.248855251s ago: executing program 6 (id=4499): bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r6}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfefffffd, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) 1m31.477239075s ago: executing program 2 (id=4506): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4089, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f0000000540)=""/158, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m31.405962739s ago: executing program 2 (id=4508): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fremovexattr(r0, &(0x7f0000000280)=@known='trusted.overlay.metacopy\x00') lseek(r0, 0x5, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fcntl$setlease(r3, 0x400, 0x0) migrate_pages(0x0, 0xfc, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r4, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r7, 0x20, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x810) 1m31.340655831s ago: executing program 6 (id=4511): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x20}, 0x18) unshare(0x20400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x7ff, 0x65bf, 0x6, 0x10, 0x1, 0xcb02}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)='%ps \x00'}, 0x20) 1m31.307988463s ago: executing program 6 (id=4512): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xc529, 0x1000, 0x0, 0xfffffffe}, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002bc0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7f, 0x0, 0x0, 0x0, 0x6, '\x00', r4, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r5}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x3, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xffff, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0xb, 0x0, &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f00)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0x1d6}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_read_part_table(0x5ad, &(0x7f0000002600)="$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") r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r8, @ANYBLOB="010000a5e10834456e8afd0000000000e3b95992", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50) 1m31.210771967s ago: executing program 2 (id=4513): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db7", 0x2d}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xfffffff4}, 0x0) recvmmsg(r0, &(0x7f0000005100)=[{{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000003c80)=""/175, 0xaf}], 0x1, &(0x7f0000003d80)=""/33, 0x21}, 0x8}, {{&(0x7f0000003dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003e40)=""/59, 0x3b}, {&(0x7f0000004f00)=""/76, 0x4c}, {&(0x7f0000004f80)=""/115, 0x73}], 0x3, &(0x7f0000005000)=""/233, 0xe9}}], 0x3, 0x100, 0x0) 1m30.966625228s ago: executing program 6 (id=4517): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950f", 0x55}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xfffffff4}, 0x0) recvmmsg(r0, &(0x7f0000005100)=[{{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000003c80)=""/175, 0xaf}], 0x1, &(0x7f0000003d80)=""/33, 0x21}, 0x8}, {{&(0x7f0000003dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003e40)=""/59, 0x3b}, {&(0x7f0000004f00)=""/76, 0x4c}, {&(0x7f0000004f80)=""/115, 0x73}], 0x3, &(0x7f0000005000)=""/233, 0xe9}}], 0x3, 0x100, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000004c0)=""/192}, 0x20) 1m30.9094904s ago: executing program 6 (id=4518): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000480)={[{@noinit_itable}, {@delalloc}, {@bsdgroups}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5dc, &(0x7f0000000bc0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m30.887547701s ago: executing program 35 (id=4518): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000480)={[{@noinit_itable}, {@delalloc}, {@bsdgroups}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5dc, &(0x7f0000000bc0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m30.281955388s ago: executing program 2 (id=4527): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xc529, 0x1000, 0x0, 0xfffffffe}, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002bc0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7f, 0x0, 0x0, 0x0, 0x6, '\x00', r4, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r5}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x3, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xffff, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0xb, 0x0, &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f00)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0x1d6}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$eJzs3cFvHFcZAPBvNl7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQnCohyj0Ye2NZWXste93GVgXrvwAJIUDiBBcuSPwBSCgSF44IKRKcQSoCIUhBggN00OzO2mY9a2/SjTde/37SZN6b2Znvexu/2Zmdp9kAzq3nI+KNiPggTdOXImImX17Kp2h1pux17z94dymbkkjTt/6WRJIv6+4ryedX8s2mIuJrX4n4ZnI07tbO7p3Fer22mderzbWN6tbO7o3VtcWV2kptfX5+7tWF1xZeWbg5lHZejYjXv/Sn73/np19+/ZeffeePt/5y/VtZWtP5+sPteEgTx63sNL18capng81HDPYkytpT7lYuDbbN3mPMBwCA/rJz/I9ExKci4qWYiQvHn84CAAAAZ1D6hen4TxKRFpvssxwAAAA4Q0rtMbBJqZKPBZiOUqlS6Yzh/VhcLtUbW83P3G5sry93xsrORrl0e7Veu5mPFZ6NcpLV59rlg/rLPfX5iHg6Ir43c6ldryw16suj/vIDAAAAzokrPdf//5zpXP8DAAAAY2Z21AkAAAAAj53rfwAAABh/rv8BAABgrH31zTezKe3+/vXy2zvbdxpv31iubd2prG0vVZYamxuVlUZjpf3MvrWT9ldvNDY+F+vbd6vN2lazenVn99ZaY3u9eWs1pk6lQQAAAMART3/y3u+TiGh9/lJ7ykyOOingVEzsl5J8XtD7//BUZ/7eKSUFnIoLA7zmvYvFy50nwNk20bugT18Hxk951AkAI5ecsL7v4J3fdGalIecDAAAM37VPFN//P/l8vuWUH844nRjOr577/+nMqBIBTl37/v+gA3mcLMBYKQ80AhAYZx/2/v/J0vShEgIAAIZuuj0lpUr+9d50lEqVSsTV9s8ClJPbq/XazYh4KiJ+N1O+mNXn2lsmJ14zAAAAAAAAAAAAAAAAAAAAAAAAAAAdaZpECgAAAIy1iNKfk191nuV/bebF6d7vByaTf7d/EngyIt750Vs/uLvYbG7OZcv/vr+8+cN8+cuj+AYDAAAA6NW9Tm/P/zXqbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYN+8/eHepOw3w8kvDivvXL0bEbFH8iZhqz6eiHBGX/5HExKHtkoi4MIT4rb2I+HhR/CRLaz9kUfxhvAmtvaSVthXGj9n8XSiKf2UI8eE8u5cdf94o6v+leL49L+5/ExH/V39U/Y9/sX/8u9Cn/18dMMYz939e7Rt/L+KZieLjXzd+0if+CwPG/8bXd3f7rUt/HHGt+/nTPuIdjnBQqjbXNqpbO7s3VtcWV2ortfX5+blXF15beGXhZvX2ar2W/1sY47vP/uKD49p/ufDzL8mz6d/+Fwv2V/SZ9N/7dx98tFtpHY1//YWC+L/+Sf6Ko/FLeZxP5+Vs/bVuudUpH/bcz3773HHtXz5of/lh/v+v99tpryMd5dlB/3QAgMdga2f3zmK9Xtsc20J2lf4EpPEohcl4ItIY38K3s8L9Ye0wTdM061MFq+5FxCD7SWLILS0V53NQ6HsEGPWRCQAAGLaDk/5RZwIAAAAAAAAAAAAAAAAAAADn12k8Za035sEjkJNhPEIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAo/hcAAP//Yw3Xfw==") syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_read_part_table(0x5ad, &(0x7f0000002600)="$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") r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r8, @ANYBLOB="010000a5e10834456e8afd0000000000e3b95992", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50) 1m29.913511165s ago: executing program 2 (id=4529): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1ffffff, {0x0, 0x0, 0x0, r3, {0x7, 0x9}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000002000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001000000100000001700"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00'}, 0x18) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc13", 0x17) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x50) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000006c0)=@newtaction={0xa0, 0x30, 0x9, 0x100000, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xa, 0x0, 0x0, 0x1}}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {0x0, 0x0, 0x8, 0x43}, {0x3, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x84}, {}, {0x0, 0x0, 0x0, 0xafcd}, {0x6, 0x0, 0x1}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1m29.591979709s ago: executing program 2 (id=4530): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) inotify_init1(0x80800) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 1m29.55784394s ago: executing program 36 (id=4530): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) inotify_init1(0x80800) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 1m29.246976324s ago: executing program 4 (id=4536): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000380), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 1m29.240137525s ago: executing program 4 (id=4537): socket$rds(0x15, 0x5, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7e, 0x7527, 0x5c8, 0x7fff, 0x9}) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) fchmodat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f0000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0xf}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) gettid() setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xfffffff4}, 0x0) recvmmsg(r3, &(0x7f0000005100)=[{{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000003c80)=""/175, 0xaf}], 0x1, &(0x7f0000003d80)=""/33, 0x21}, 0x8}, {{&(0x7f0000003dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003e40)=""/59, 0x3b}, {&(0x7f0000004f00)=""/76, 0x4c}, {&(0x7f0000004f80)=""/115, 0x73}], 0x3, &(0x7f0000005000)=""/233, 0xe9}}], 0x3, 0x100, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000004c0)=""/192}, 0x20) 1m28.401983282s ago: executing program 4 (id=4541): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950f", 0x55}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xfffffff4}, 0x0) recvmmsg(r0, &(0x7f0000005100)=[{{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000003c80)=""/175, 0xaf}], 0x1, &(0x7f0000003d80)=""/33, 0x21}, 0x8}, {{&(0x7f0000003dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003e40)=""/59, 0x3b}, {&(0x7f0000004f00)=""/76, 0x4c}, {&(0x7f0000004f80)=""/115, 0x73}], 0x3, &(0x7f0000005000)=""/233, 0xe9}}], 0x3, 0x100, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000004c0)=""/192}, 0x20) 1m27.508437491s ago: executing program 4 (id=4548): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xc529, 0x1000, 0x0, 0xfffffffe}, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002bc0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7f, 0x0, 0x0, 0x0, 0x6, '\x00', r4, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r5}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x3, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xffff, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0xb, 0x0, &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f00)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0x1d6}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_read_part_table(0x5ad, &(0x7f0000002600)="$eJzs0r1Lq1cYAPCTtJfQ0kvkcuEOdhAMLo0KcdAhgVqJIYsRseLgLDjoIDg4SEp09uMfsPgF4iJ2dixGEIU4iaM4FxSXLH1L27eg2KGUGqn8fsvLec7zvM85PCfwv5YMv0RRlAghRKlH4dQ/KP0shO8PisPljtHBsfEQEmEqhFD8+qs/NhNx0l9/PYrXlXhdTuUaW2dD9wdt552X9cxOMt4/TobwQwhh9mY3/R9dkTfssHCSXl6ZL60uFmauSku3fdPdxfa14txG/3a+OvEpPxk/rONka/pnGgN7F1HlbvN9z7t6o5k7jfOyiZfpz+t6Mv9vQwgfa9e15kjX/kJv9sP1z9X1eO4Pj+b/5audFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeMsOCyfp5ZX50upiYeaqtHTbN91dbF8rzm30b+erE5/yk8k/846Trej/a5RpDOxdRJW7zfc97+qNZu40zssmnpV+99PLHIkW+iY8fX8/fqxd15ojXfsLvdkPn4fqejz3h+fzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4W8Xhcsfo4Nh4CIkwFUIYSrbt/h6PUk/zjuJvJY6XU7nG1tnQ/UHbeedlPbMzmgrhccnszW76i1Zdgn/ttwAAAP//XdqDXg==") r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r8, @ANYBLOB="010000a5e10834456e8afd0000000000e3b95992", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50) 1m26.902485079s ago: executing program 4 (id=4550): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000480)={[{@noinit_itable}, {@delalloc}, {@bsdgroups}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5dc, &(0x7f0000000bc0)="$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") chdir(&(0x7f0000000240)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m26.515738315s ago: executing program 4 (id=4551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x97a3}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000090a010400000000000000000300000008000a40000000000900020073797a31000000000900010073797a300000f7ff0800054000000023200011800e000100636f6e6e6c696d69740000000c000280080001"], 0xa4}}, 0x4) syz_clone(0xaeb24080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="944b3fa7657504007f06008b8100400086dd6a5402bd0030297a00000000000000000000000000000000ff01000000000000000000002300000187000400031002003204005800000000fc020000000000000000000000000000fe880000000000000000000000000001"], 0x6a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018"], 0x0, 0x34}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x43, &(0x7f0000000040), 0x3b) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") open(&(0x7f0000000040)='./file2\x00', 0x4440, 0x4) 1m26.496996727s ago: executing program 37 (id=4551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x97a3}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000090a010400000000000000000300000008000a40000000000900020073797a31000000000900010073797a300000f7ff0800054000000023200011800e000100636f6e6e6c696d69740000000c000280080001"], 0xa4}}, 0x4) syz_clone(0xaeb24080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="944b3fa7657504007f06008b8100400086dd6a5402bd0030297a00000000000000000000000000000000ff01000000000000000000002300000187000400031002003204005800000000fc020000000000000000000000000000fe880000000000000000000000000001"], 0x6a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018"], 0x0, 0x34}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x43, &(0x7f0000000040), 0x3b) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") open(&(0x7f0000000040)='./file2\x00', 0x4440, 0x4) 2.062902668s ago: executing program 9 (id=5822): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f00000003c0)={0x2, 0x4e22, @local}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r2) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000400)={0x0, 0x10}, 0xc) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf2105000000080001005d"], 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10004014) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r7}, 0x10) timer_getoverrun(0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r8, @ANYBLOB="20002cbd7000fbdbdf252100000008000300", @ANYRES32=r9, @ANYBLOB="0c00060000000000000000000c000600030000000300000024002d8008000200010000000800030000000000080002000300000008000300080000001c002d8005000100060000000500010040000000080003000600000014002d800800030002000000050001000600000008000300", @ANYRES32=r10, @ANYBLOB="3c002d8008000300d016dd0600000005000100020000000800020000000000050004000000000008000200000000000800030005000000080003000600728885", @ANYRES32=r11, @ANYBLOB], 0xd4}, 0x1, 0x0, 0x0, 0x4040090}, 0x40) 1.613246898s ago: executing program 9 (id=5825): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r2, 0x0, 0xfffffffffffffffe}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64], 0x18}}, 0x2080) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x1, 0x70bd25, 0x7, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000200c}, 0x20004010) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000300)) 1.612709968s ago: executing program 7 (id=5826): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") r1 = open(&(0x7f0000000040)='./file2\x00', 0x4440, 0x4) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 1.56391915s ago: executing program 0 (id=5828): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xfffffff4}, 0x0) recvmmsg(r0, &(0x7f0000005100)=[{{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000003c80)=""/175, 0xaf}], 0x1, &(0x7f0000003d80)=""/33, 0x21}, 0x8}, {{&(0x7f0000003dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003e40)=""/59, 0x3b}, {&(0x7f0000004f00)=""/76, 0x4c}, {&(0x7f0000004f80)=""/115, 0x73}], 0x3, &(0x7f0000005000)=""/233, 0xe9}}], 0x3, 0x100, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000004c0)=""/192}, 0x20) 1.518592852s ago: executing program 7 (id=5829): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r2, 0x0, 0xfffffffffffffffe}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64], 0x18}}, 0x2080) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x1, 0x70bd25, 0x7, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000200c}, 0x20004010) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000300)) 1.479558364s ago: executing program 7 (id=5830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000090a010400000000000000000300000008000a40000000000900020073797a31000000000900010073797a300000f7ff0800054000000023200011800e000100636f6e6e6c696d69740000000c000280080001"], 0xa4}}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000040), 0x3b) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") open(&(0x7f0000000040)='./file2\x00', 0x4440, 0x4) 721.982487ms ago: executing program 9 (id=5845): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) unshare(0x8000000) semop(0x0, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}], 0x1) unshare(0x2c040000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='hrtimer_expire_entry\x00', r2, 0x0, 0x1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/49, 0x2c000, 0x1000, 0x10, 0x2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 711.839058ms ago: executing program 1 (id=5846): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e0000008500000007"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000002142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ffff"], 0x0) 684.860269ms ago: executing program 1 (id=5847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b00000018000180140002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 673.316459ms ago: executing program 9 (id=5848): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x6f6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000140001800500020001010000080006001a00"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r6) 662.11615ms ago: executing program 0 (id=5849): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="a001000010000100000000ddff000000fe880000000000000010000000000101ac1414bb1eba4da0df8bc05d81451b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14143500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd0000000000000048000200636263286165732900"/231], 0x1a0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) 651.176601ms ago: executing program 1 (id=5850): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x2, 0xde, &(0x7f0000000840)=""/222, 0x0, 0x40}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r1, 0x0, 0x0, 0x0, 0x200) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) pwritev2(r2, 0x0, 0x0, 0x7a00, 0x0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ca000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f0000000180)=0x3) sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 605.142842ms ago: executing program 1 (id=5851): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x2, 0xde, &(0x7f0000000840)=""/222, 0x0, 0x40}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r2, &(0x7f0000000240)='./mnt\x00', 0x0, 0x0, 0x200) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) pwritev2(r3, 0x0, 0x0, 0x7a00, 0x0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ca000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4, 0x0, 0x3}, 0x18) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000180)=0x3) sendmsg$tipc(r5, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 604.587162ms ago: executing program 0 (id=5852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 598.980592ms ago: executing program 1 (id=5853): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) migrate_pages(0x0, 0xfc, 0x0, 0x0) 554.648785ms ago: executing program 7 (id=5854): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x4b5, &(0x7f00000004c0)={0x0, 0x86e1, 0x400, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 551.512325ms ago: executing program 0 (id=5856): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000010c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000080000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$inet6_sctp(0xa, 0x4, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x26, &(0x7f0000000140)=ANY=[@ANYBLOB="c0aaaaaaaaaabbbbbbbbbfbb0800450000000063f700042f9078ac14140f7f00000100408848"], 0x0) sendto$inet6(r3, &(0x7f0000001440)="00a78a75a68147f623c4759f0c8714932a2a6de5d1ef98882a184845c22a38b8acb5bca962bd3ef18f4d4c32fffbddac56c29967d4953b029db5d68398f0aa98ae21a6cf213c83aea47cef5d3839b3e25b6a6381c4d73c4ee1a23aeda77c58ef1e4337a450a93d0fbbb5a6530f4ade5b65cbdf6bb60ee92c3a90378c1b45c7d96893939a8231f30d03541b17cd3a", 0x8e, 0x8085, &(0x7f0000001040)={0xa, 0x4e23, 0x0, @local, 0x800}, 0x1c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000001080)='xen_cpu_write_idt_entry\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='thermal_power_cpu_limit\x00', r6}, 0x18) rt_sigpending(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r8 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0xffffffff, 0x30, 0x0, 0x0}) ioctl$SG_GET_VERSION_NUM(r7, 0x2284, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001300)=@bpf_tracing={0x1a, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="18000000000000000000000081000000950000000000000034126aba23786387c3fff275de1b212b241dfd51cc17bae4aa2cdb3f6dc724d7ac937443d733aafd545b012de0f31b201d94d08f"], &(0x7f0000001100)='GPL\x00', 0xfff, 0x48, &(0x7f0000001140)=""/72, 0x41100, 0x72, '\x00', 0x0, 0x33, r5, 0x8, &(0x7f0000001200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x3, 0x2, 0x2, 0x40}, 0x10, 0x631, 0xffffffffffffffff, 0x3, &(0x7f0000001280)=[r1], &(0x7f00000012c0)=[{0x3, 0x4, 0xb, 0x7}, {0x4, 0x4, 0xb, 0x5}, {0x1, 0x4, 0xe, 0x6}]}, 0x94) 541.770725ms ago: executing program 1 (id=5857): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r2, 0x0, 0xfffffffffffffffe}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64], 0x18}}, 0x2080) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x1, 0x70bd25, 0x7, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000200c}, 0x20004010) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000300)) 494.565748ms ago: executing program 7 (id=5858): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e0000008500000007"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000002142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ffff"], 0x0) 465.474599ms ago: executing program 7 (id=5859): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xfffffff4}, 0x0) recvmmsg(r0, &(0x7f0000005100)=[{{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000003c80)=""/175, 0xaf}], 0x1, &(0x7f0000003d80)=""/33, 0x21}, 0x8}, {{&(0x7f0000003dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003e40)=""/59, 0x3b}, {&(0x7f0000004f00)=""/76, 0x4c}, {&(0x7f0000004f80)=""/115, 0x73}], 0x3, &(0x7f0000005000)=""/233, 0xe9}}], 0x3, 0x100, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000004c0)=""/192}, 0x20) 453.757769ms ago: executing program 0 (id=5860): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r2, 0x0, 0xfffffffffffffffe}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 424.59164ms ago: executing program 0 (id=5861): setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) socket(0x10, 0x3, 0x0) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/partitions\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000002940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee01, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) keyctl$chown(0x4, r3, 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/4095, 0xfff}], 0x1, 0x4f, 0x205) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x6}, 0x4, 0x5, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000340)={r6, 0x1c, "f0b8ceb49090e4350185f10e9660c657b3f251ced1302bab354b0b96"}, &(0x7f0000000000)=0x24) fcntl$setlease(r0, 0x400, 0x1) 333.385665ms ago: executing program 9 (id=5863): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="a001000010000100000000ddff000000fe880000000000000010000000000101ac1414bb1eba4da0df8bc05d81451b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14143500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd0000000000000048000200636263286165732900"/239], 0x1a0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) 307.456086ms ago: executing program 8 (id=5864): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) fremovexattr(r0, &(0x7f0000000280)=@known='trusted.overlay.metacopy\x00') lseek(r0, 0x5, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000300)) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) migrate_pages(0x0, 0xfc, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) 307.048805ms ago: executing program 9 (id=5865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000090a010400000000000000000300000008000a40000000000900020073797a31000000000900010073797a300000f7ff0800054000000023200011800e000100636f6e6e6c696d69740000000c000280080001"], 0xa4}}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000040), 0x3b) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") open(&(0x7f0000000040)='./file2\x00', 0x4440, 0x4) 292.460387ms ago: executing program 8 (id=5866): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x50) mount$nfs(&(0x7f00000003c0)=']\x00', &(0x7f0000000500)='./file1\x00', &(0x7f0000000680), 0x4044, &(0x7f0000000880)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',smackfstranemute=']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000900)='kfree\x00'}, 0x18) r1 = creat(0x0, 0x14c) fallocate(r1, 0x0, 0x9, 0x2000403) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x64) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="0c0100001000030400"/18, @ANYRES32=0x0, @ANYRES32=r1], 0x10c}, 0x1, 0xba01}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1, 0x766}, 0x20) sendmsg$inet6(r3, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6000000000000000290000000b0000000008007f0000000000"], 0x60}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYRES16=r5, @ANYRES16=r4, @ANYRESHEX=r5], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010326bd7000fbdbdf251c00000020000180140002006c6f00"/37, @ANYRESHEX=r5], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40006) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000940)="ffb5c664c34928fbbd1c289cb7c4aea4ca8480c830d7000000000000000000000000000000000090787cf0b18e1cbc2bd8d38a77ead4d20b3ac6fbdb108b519370b66df3c241b8e9749ace91f86b41956f7d6681cb61d2212fb81e8eab4e55716bc2a00fabdba90e161de6c2e1eef9dd0f07d79c435d0e0c0000b9fe2415264043da346a2db878af6ea92d2685a43f4fc8acc6c7c217c9c9597b60a17afb9a03bc5a42c13bd5f0fbc9e627a6df3f8944796f40ea", 0x7f}], 0x1, 0x5412, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) 215.15821ms ago: executing program 8 (id=5867): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) migrate_pages(0x0, 0xfc, 0x0, 0x0) 201.157841ms ago: executing program 8 (id=5868): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") r1 = open(&(0x7f0000000040)='./file2\x00', 0x4440, 0x4) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 136.003053ms ago: executing program 8 (id=5869): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x6f6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000007000000140001800500020001010000080006001a00"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r7) 0s ago: executing program 8 (id=5870): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1ffffff, {0x0, 0x0, 0x0, r3, {0x7, 0x9}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc13", 0x17) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x50) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000006c0)=@newtaction={0xa0, 0x30, 0x9, 0x100000, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xa, 0x0, 0x0, 0x1}}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {0x0, 0x0, 0x8, 0x43}, {0x3, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x84}, {}, {0x0, 0x0, 0x0, 0xafcd}, {0x6, 0x0, 0x1}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): red blocking state [ 357.550387][T18455] netlink: 236 bytes leftover after parsing attributes in process `syz.1.5053'. [ 357.552204][T18423] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.568692][T18423] bridge_slave_1: entered allmulticast mode [ 357.575196][T18423] bridge_slave_1: entered promiscuous mode [ 357.594855][T18423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.605097][T18423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.632363][T18423] team0: Port device team_slave_0 added [ 357.641518][T18423] team0: Port device team_slave_1 added [ 357.647176][ T31] bridge_slave_1: left allmulticast mode [ 357.652902][ T31] bridge_slave_1: left promiscuous mode [ 357.658638][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.666715][ T31] bridge_slave_0: left allmulticast mode [ 357.672417][ T31] bridge_slave_0: left promiscuous mode [ 357.678059][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.110151][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.119922][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.129344][ T31] bond0 (unregistering): Released all slaves [ 358.137641][ T31] bond1 (unregistering): Released all slaves [ 358.146750][ T31] bond2 (unregistering): Released all slaves [ 358.155651][ T31] bond3 (unregistering): Released all slaves [ 358.164182][ T31] bond4 (unregistering): Released all slaves [ 358.172726][ T31] bond5 (unregistering): Released all slaves [ 358.194379][T18423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.201354][T18423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.227277][T18423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.241554][T18423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.248581][T18423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.274573][T18423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.274959][T18467] loop9: detected capacity change from 0 to 128 [ 358.301318][ T31] hsr_slave_0: left promiscuous mode [ 358.307088][ T31] hsr_slave_1: left promiscuous mode [ 358.314106][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.321530][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.334297][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.341906][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.345448][T18473] loop8: detected capacity change from 0 to 128 [ 358.359740][ T31] veth1_macvtap: left promiscuous mode [ 358.360920][T18473] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5060'. [ 358.365194][ T31] veth0_macvtap: left promiscuous mode [ 358.365248][ T31] veth1_vlan: left promiscuous mode [ 358.384858][ T31] veth0_vlan: left promiscuous mode [ 358.430157][T18476] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fff0000) [ 358.435717][T18477] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5058'. [ 358.438029][T18476] FAT-fs (loop8): Filesystem has been set read-only [ 358.460406][ T31] team0 (unregistering): Port device team_slave_1 removed [ 358.471048][ T31] team0 (unregistering): Port device team_slave_0 removed [ 358.489593][T18478] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fff0000) [ 358.497419][T18478] FAT-fs (loop9): Filesystem has been set read-only [ 358.564891][T18423] hsr_slave_0: entered promiscuous mode [ 358.571494][T18423] hsr_slave_1: entered promiscuous mode [ 358.580526][T18423] debugfs: 'hsr0' already exists in 'hsr' [ 358.586264][T18423] Cannot create hsr debugfs directory [ 358.670210][ T31] IPVS: stop unused estimator thread 0... [ 358.793435][T18476] syz.8.5060: attempt to access beyond end of device [ 358.793435][T18476] loop8: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 358.807117][T18476] Buffer I/O error on dev loop8, logical block 128, lost async page write [ 358.816140][T18476] syz.8.5060: attempt to access beyond end of device [ 358.816140][T18476] loop8: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 358.829899][T18476] Buffer I/O error on dev loop8, logical block 128, lost async page write [ 358.838914][ T29] kauditd_printk_skb: 1370 callbacks suppressed [ 358.838929][ T29] audit: type=1326 audit(1765327366.706:43823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.1.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 358.868896][ T29] audit: type=1326 audit(1765327366.706:43824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.1.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 358.892439][ T29] audit: type=1326 audit(1765327366.706:43825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.1.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 358.916204][ T29] audit: type=1326 audit(1765327366.706:43826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.1.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 358.939766][ T29] audit: type=1326 audit(1765327366.706:43827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.1.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 358.963402][ T29] audit: type=1326 audit(1765327366.706:43828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.1.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 358.970062][T18467] syz.9.5058: attempt to access beyond end of device [ 358.970062][T18467] loop9: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 358.986879][ T29] audit: type=1326 audit(1765327366.716:43829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.1.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 359.000539][T18467] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 359.024027][ T29] audit: type=1326 audit(1765327366.716:43830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.1.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 359.056103][ T29] audit: type=1326 audit(1765327366.716:43831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.1.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 359.079678][ T29] audit: type=1326 audit(1765327366.716:43832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.1.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 359.147715][T18489] loop9: detected capacity change from 0 to 128 [ 359.184336][T18497] loop8: detected capacity change from 0 to 128 [ 359.250515][T18423] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 359.472304][T18504] lo speed is unknown, defaulting to 1000 [ 359.571163][T18423] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 359.598307][T18423] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 359.627456][T18423] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 359.754823][T18423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.767577][T18423] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.777437][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.784551][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.798028][T12109] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.805112][T12109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.824743][T18502] loop8: detected capacity change from 0 to 512 [ 359.854958][T18502] loop8: detected capacity change from 0 to 2048 [ 359.879819][T18423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.901994][T18521] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5069'. [ 359.987139][T18423] veth0_vlan: entered promiscuous mode [ 360.003082][T18423] veth1_vlan: entered promiscuous mode [ 360.035458][T18423] veth0_macvtap: entered promiscuous mode [ 360.073782][T18423] veth1_macvtap: entered promiscuous mode [ 360.083944][T18423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.094821][T18423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.121723][T12109] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.146435][T12109] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.162605][T12109] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.179108][T12109] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.308225][T18553] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5077'. [ 360.579572][T18577] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5085'. [ 360.638580][T18583] EXT4-fs (loop9): orphan cleanup on readonly fs [ 360.648644][T18583] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.5086: corrupted inode contents [ 360.661070][T18583] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 360.670286][T18583] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.5086: corrupted inode contents [ 360.683525][T18583] EXT4-fs error (device loop9): ext4_evict_inode:301: inode #15: comm syz.9.5086: mark_inode_dirty error [ 360.710243][T18583] EXT4-fs (loop9): 1 orphan inode deleted [ 360.716593][T18583] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 360.746660][T18592] veth0: entered promiscuous mode [ 360.776273][T18594] EXT4-fs (loop8): orphan cleanup on readonly fs [ 360.782992][T18594] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.5088: corrupted inode contents [ 360.783077][T16592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.805034][T18594] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 360.819714][T18594] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.5088: corrupted inode contents [ 360.832011][T18594] EXT4-fs error (device loop8): ext4_evict_inode:301: inode #15: comm syz.8.5088: mark_inode_dirty error [ 360.848526][T18599] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fff0000) [ 360.848712][T18594] EXT4-fs (loop8): 1 orphan inode deleted [ 360.856358][T18599] FAT-fs (loop7): Filesystem has been set read-only [ 360.869706][T18594] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 361.006374][T16541] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.091380][T18618] netlink: 'syz.8.5096': attribute type 1 has an invalid length. [ 362.046595][T18674] set_capacity_and_notify: 5 callbacks suppressed [ 362.046673][T18674] loop8: detected capacity change from 0 to 128 [ 362.076579][T18674] EXT4-fs: Ignoring removed nobh option [ 362.096190][T18674] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 362.111099][T18674] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 362.142620][T18683] loop7: detected capacity change from 0 to 512 [ 362.152254][T18684] loop9: detected capacity change from 0 to 512 [ 362.179085][T16541] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 362.182436][T18683] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 362.197105][T18684] EXT4-fs (loop9): orphan cleanup on readonly fs [ 362.207895][T18683] EXT4-fs (loop7): 1 truncate cleaned up [ 362.219674][T18683] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.220148][T18684] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.5117: corrupted inode contents [ 362.251016][T18684] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 362.251160][T18684] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.5117: corrupted inode contents [ 362.273989][T18423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.286438][T18684] EXT4-fs error (device loop9): ext4_evict_inode:301: inode #15: comm syz.9.5117: mark_inode_dirty error [ 362.302959][T18684] EXT4-fs (loop9): 1 orphan inode deleted [ 362.310219][T18684] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 362.324017][T18698] netlink: 'syz.1.5122': attribute type 1 has an invalid length. [ 362.399978][T16592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.481863][T18712] __nla_validate_parse: 5 callbacks suppressed [ 362.481877][T18712] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5126'. [ 362.503506][T18712] sd 0:0:1:0: device reset [ 362.621044][T18720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5130'. [ 362.735355][T18726] loop9: detected capacity change from 0 to 128 [ 362.768097][T18726] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5131'. [ 362.780033][T18726] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fff0000) [ 362.787939][T18726] FAT-fs (loop9): Filesystem has been set read-only [ 362.997197][T18726] ÿ: attempt to access beyond end of device [ 362.997197][T18726] loop9: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 363.010104][T18726] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 363.046889][T18730] loop9: detected capacity change from 0 to 512 [ 363.054947][T18730] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 363.066437][T18730] EXT4-fs (loop9): 1 truncate cleaned up [ 363.072546][T18730] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.103256][T16592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.125288][T18735] loop9: detected capacity change from 0 to 128 [ 363.142562][T18737] loop8: detected capacity change from 0 to 512 [ 363.155354][T18735] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5134'. [ 363.172240][T18737] EXT4-fs (loop8): orphan cleanup on readonly fs [ 363.181222][T18735] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fff0000) [ 363.189085][T18735] FAT-fs (loop9): Filesystem has been set read-only [ 363.197339][T18737] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.5135: corrupted inode contents [ 363.261985][T18737] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 363.296821][T18737] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.5135: corrupted inode contents [ 363.309180][T18737] EXT4-fs error (device loop8): ext4_evict_inode:301: inode #15: comm syz.8.5135: mark_inode_dirty error [ 363.329248][T18737] EXT4-fs (loop8): 1 orphan inode deleted [ 363.341195][T18737] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 363.472794][T16541] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.517766][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5141'. [ 363.550635][T18735] ÿ: attempt to access beyond end of device [ 363.550635][T18735] loop9: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 363.563590][T18735] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 363.576021][T18741] syz.9.5134: attempt to access beyond end of device [ 363.576021][T18741] loop9: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 363.576436][T18759] sd 0:0:1:0: device reset [ 363.589792][T18741] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 363.598737][T18741] syz.9.5134: attempt to access beyond end of device [ 363.598737][T18741] loop9: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 363.603617][T18756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5143'. [ 363.616477][T18741] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 363.856761][ T29] kauditd_printk_skb: 1542 callbacks suppressed [ 363.856778][ T29] audit: type=1326 audit(1765327371.736:45375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18763 comm="syz.9.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff1280f65e7 code=0x7ffc0000 [ 363.887193][ T29] audit: type=1326 audit(1765327371.776:45376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18763 comm="syz.9.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff12809b829 code=0x7ffc0000 [ 363.910699][ T29] audit: type=1326 audit(1765327371.776:45377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18763 comm="syz.9.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff1280f65e7 code=0x7ffc0000 [ 363.934235][ T29] audit: type=1326 audit(1765327371.776:45378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18763 comm="syz.9.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff12809b829 code=0x7ffc0000 [ 363.957772][ T29] audit: type=1326 audit(1765327371.776:45379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18763 comm="syz.9.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff1280ff749 code=0x7ffc0000 [ 363.982683][ T29] audit: type=1326 audit(1765327371.796:45380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18763 comm="syz.9.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff1280f65e7 code=0x7ffc0000 [ 364.006326][ T29] audit: type=1326 audit(1765327371.796:45381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18763 comm="syz.9.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff12809b829 code=0x7ffc0000 [ 364.029798][ T29] audit: type=1326 audit(1765327371.796:45382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18763 comm="syz.9.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff1280ff749 code=0x7ffc0000 [ 364.053371][ T29] audit: type=1326 audit(1765327371.796:45383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18763 comm="syz.9.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff1280f65e7 code=0x7ffc0000 [ 364.076967][ T29] audit: type=1326 audit(1765327371.796:45384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18763 comm="syz.9.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff12809b829 code=0x7ffc0000 [ 364.258060][T18777] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5148'. [ 364.280094][T18777] sd 0:0:1:0: device reset [ 364.365089][T18783] netlink: 'syz.7.5149': attribute type 1 has an invalid length. [ 364.542640][T18789] lo speed is unknown, defaulting to 1000 [ 364.804845][T18792] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5152'. [ 365.014350][T18797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5153'. [ 365.308651][T18816] sd 0:0:1:0: device reset [ 365.330621][T18820] loop7: detected capacity change from 0 to 512 [ 365.341580][T18820] EXT4-fs: Ignoring removed oldalloc option [ 365.361439][T18820] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.375009][T18826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5165'. [ 365.388743][T18820] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 365.409660][T18820] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5164: bg 0: block 217: padding at end of block bitmap is not set [ 365.480577][T18832] sd 0:0:1:0: device reset [ 365.530111][T18423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.635894][T18843] loop9: detected capacity change from 0 to 512 [ 365.643315][T18843] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 365.654704][T18843] EXT4-fs (loop9): 1 truncate cleaned up [ 365.661073][T18843] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.679115][T18846] loop7: detected capacity change from 0 to 512 [ 365.685843][T18846] EXT4-fs: Ignoring removed oldalloc option [ 365.693177][T16592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.705583][T18846] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.719185][T18846] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 365.734295][T18846] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5172: bg 0: block 217: padding at end of block bitmap is not set [ 365.798964][T18852] FAULT_INJECTION: forcing a failure. [ 365.798964][T18852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.812076][T18852] CPU: 1 UID: 0 PID: 18852 Comm: syz.9.5174 Not tainted syzkaller #0 PREEMPT(voluntary) [ 365.812216][T18852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.812224][T18852] Call Trace: [ 365.812229][T18852] [ 365.812234][T18852] __dump_stack+0x1d/0x30 [ 365.812249][T18852] dump_stack_lvl+0xe8/0x140 [ 365.812262][T18852] dump_stack+0x15/0x1b [ 365.812273][T18852] should_fail_ex+0x265/0x280 [ 365.812332][T18852] should_fail+0xb/0x20 [ 365.812343][T18852] should_fail_usercopy+0x1a/0x20 [ 365.812413][T18852] _copy_from_user+0x1c/0xb0 [ 365.812499][T18852] do_sock_getsockopt+0xf1/0x210 [ 365.812537][T18852] __x64_sys_getsockopt+0x11e/0x1a0 [ 365.812620][T18852] x64_sys_call+0x2dc7/0x3000 [ 365.812650][T18852] do_syscall_64+0xd8/0x2a0 [ 365.812669][T18852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.812681][T18852] RIP: 0033:0x7ff1280ff749 [ 365.812691][T18852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.812731][T18852] RSP: 002b:00007ff126b5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 365.812743][T18852] RAX: ffffffffffffffda RBX: 00007ff128355fa0 RCX: 00007ff1280ff749 [ 365.812751][T18852] RDX: 0000000000000033 RSI: 0000000000000000 RDI: 0000000000000003 [ 365.812835][T18852] RBP: 00007ff126b5f090 R08: 0000200000d23000 R09: 0000000000000000 [ 365.812843][T18852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.812850][T18852] R13: 00007ff128356038 R14: 00007ff128355fa0 R15: 00007fffa9ce4038 [ 365.812861][T18852] [ 365.999909][T18423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.215816][T18873] netem: change failed [ 366.553110][T18891] lo speed is unknown, defaulting to 1000 [ 366.661250][T18856] syz.7.5176: attempt to access beyond end of device [ 366.661250][T18856] loop7: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 366.675002][T18856] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 367.023551][T18897] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fff0000) [ 367.031547][T18897] FAT-fs (loop7): Filesystem has been set read-only [ 367.332354][T18915] set_capacity_and_notify: 2 callbacks suppressed [ 367.332371][T18915] loop9: detected capacity change from 0 to 512 [ 367.387052][T18915] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 367.410780][T18915] EXT4-fs (loop9): 1 truncate cleaned up [ 367.424009][T18915] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.464172][T18884] loop8: detected capacity change from 0 to 512 [ 367.478726][T18922] sd 0:0:1:0: device reset [ 367.487657][T18884] loop8: detected capacity change from 0 to 2048 [ 367.496756][T16592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.521906][T18897] ÿ: attempt to access beyond end of device [ 367.521906][T18897] loop7: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 367.534880][T18897] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 367.555884][T18927] loop9: detected capacity change from 0 to 128 [ 367.574943][T18927] EXT4-fs: Ignoring removed nobh option [ 367.590063][T18927] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 367.602451][T18927] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 367.656856][T16592] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 367.740218][T18937] loop7: detected capacity change from 0 to 512 [ 367.760533][T18937] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5200: bg 0: block 248: padding at end of block bitmap is not set [ 367.796727][T18937] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.5200: Failed to acquire dquot type 1 [ 367.820889][T18937] EXT4-fs (loop7): 1 truncate cleaned up [ 367.827415][T18937] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.842564][T18937] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.885208][T18423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.899640][T12093] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:27: Failed to release dquot type 1 [ 367.935228][T18946] __nla_validate_parse: 5 callbacks suppressed [ 367.935244][T18946] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5204'. [ 368.030933][T18967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5208'. [ 368.076215][T18971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5210'. [ 368.153464][T18975] lo speed is unknown, defaulting to 1000 [ 368.907690][T18993] loop9: detected capacity change from 0 to 8192 [ 368.924710][T18993] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 368.933334][T18993] FAT-fs (loop9): Filesystem has been set read-only [ 368.949363][T18999] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5219'. [ 369.103503][ T29] kauditd_printk_skb: 779 callbacks suppressed [ 369.103519][ T29] audit: type=1326 audit(1765327376.986:46161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.1.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 369.163303][T19021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5220'. [ 369.172517][ T29] audit: type=1326 audit(1765327377.026:46162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.1.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 369.196176][ T29] audit: type=1326 audit(1765327377.026:46163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.1.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 369.219718][ T29] audit: type=1326 audit(1765327377.026:46164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.1.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 369.226958][T19022] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5222'. [ 369.243449][ T29] audit: type=1326 audit(1765327377.026:46165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.1.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 369.243477][ T29] audit: type=1326 audit(1765327377.026:46166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.1.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 369.243521][ T29] audit: type=1326 audit(1765327377.026:46167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.1.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 369.323112][ T29] audit: type=1326 audit(1765327377.026:46168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.1.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 369.346700][ T29] audit: type=1326 audit(1765327377.026:46169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.1.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 369.370270][ T29] audit: type=1326 audit(1765327377.026:46170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.1.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd97b56f783 code=0x7ffc0000 [ 369.399104][T19014] loop8: detected capacity change from 0 to 8192 [ 369.429103][T19022] sd 0:0:1:0: device reset [ 369.459064][T19026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5223'. [ 369.778583][T19039] netem: change failed [ 370.149797][T19057] loop7: detected capacity change from 0 to 512 [ 370.182920][T19057] EXT4-fs (loop7): orphan cleanup on readonly fs [ 370.201943][T19057] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.5233: corrupted inode contents [ 370.300698][T19064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5235'. [ 370.322162][T19057] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 370.351244][T19057] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.5233: corrupted inode contents [ 370.375094][T19057] EXT4-fs error (device loop7): ext4_evict_inode:301: inode #15: comm syz.7.5233: mark_inode_dirty error [ 370.387383][T19057] EXT4-fs (loop7): 1 orphan inode deleted [ 370.394845][T19057] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 370.466490][T19073] loop9: detected capacity change from 0 to 128 [ 370.478955][T19073] EXT4-fs: Ignoring removed nobh option [ 370.511558][T19073] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 370.524225][T18423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.544170][T19073] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 370.601706][T19080] loop7: detected capacity change from 0 to 512 [ 370.634484][T19080] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 370.652541][T19080] EXT4-fs (loop7): 1 truncate cleaned up [ 370.658984][T19080] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.685577][T16592] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.749058][T18423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.828539][T19088] netlink: 76 bytes leftover after parsing attributes in process `syz.9.5243'. [ 370.847635][T19089] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5242'. [ 370.859031][T19089] sd 0:0:1:0: device reset [ 371.848411][T19135] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 371.898423][T19135] EXT4-fs (loop8): 1 truncate cleaned up [ 371.930899][T19135] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.014888][T16541] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.266755][T19162] sd 0:0:1:0: device reset [ 372.287078][T19157] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fff0000) [ 372.295031][T19157] FAT-fs (loop7): Filesystem has been set read-only [ 372.367450][T19170] netem: change failed [ 372.613441][T19157] ÿ: attempt to access beyond end of device [ 372.613441][T19157] loop7: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 372.626359][T19157] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 373.013505][T19208] sd 0:0:1:0: device reset [ 373.063175][T19215] set_capacity_and_notify: 3 callbacks suppressed [ 373.063191][T19215] loop8: detected capacity change from 0 to 128 [ 373.078842][T19215] EXT4-fs: Ignoring removed nobh option [ 373.088791][T19215] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 373.101058][T19215] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 373.156599][T16541] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 373.173396][T19212] loop9: detected capacity change from 0 to 512 [ 373.200269][T19222] loop7: detected capacity change from 0 to 128 [ 373.229037][T19212] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5279: bg 0: block 248: padding at end of block bitmap is not set [ 373.249380][T19222] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fff0000) [ 373.257186][T19222] FAT-fs (loop7): Filesystem has been set read-only [ 373.276909][T19212] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.5279: Failed to acquire dquot type 1 [ 373.292350][T19212] EXT4-fs (loop9): 1 truncate cleaned up [ 373.304591][T19212] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.324709][T19212] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.399700][T16592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.399817][ T410] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 1 [ 373.519557][T19252] __nla_validate_parse: 3 callbacks suppressed [ 373.519574][T19252] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5290'. [ 373.563618][T19253] lo speed is unknown, defaulting to 1000 [ 373.611788][T19256] sd 0:0:1:0: device reset [ 373.980965][T19222] ÿ: attempt to access beyond end of device [ 373.980965][T19222] loop7: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 373.993862][T19222] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 374.092898][T19270] loop7: detected capacity change from 0 to 512 [ 374.110791][T19270] EXT4-fs (loop7): 1 orphan inode deleted [ 374.117003][T19270] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.129662][T10606] __quota_error: 467 callbacks suppressed [ 374.129747][T10606] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 374.145270][T10606] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:18: Failed to release dquot type 1 [ 374.157426][T19270] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.201755][T18423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.216528][T19278] loop7: detected capacity change from 0 to 128 [ 374.225995][T19278] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5299'. [ 374.236708][T19278] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fff0000) [ 374.244581][T19278] FAT-fs (loop7): Filesystem has been set read-only [ 374.332360][ T29] audit: type=1326 audit(1765327382.216:46635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19286 comm="syz.0.5302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff077f1f749 code=0x7ffc0000 [ 374.332478][ T29] audit: type=1326 audit(1765327382.216:46636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19286 comm="syz.0.5302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff077f1f749 code=0x7ffc0000 [ 374.332540][ T29] audit: type=1326 audit(1765327382.216:46637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19286 comm="syz.0.5302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff077f1f749 code=0x7ffc0000 [ 374.332587][ T29] audit: type=1326 audit(1765327382.216:46638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19286 comm="syz.0.5302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff077f1f783 code=0x7ffc0000 [ 374.358739][ T29] audit: type=1326 audit(1765327382.246:46639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19286 comm="syz.0.5302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff077f1e1ff code=0x7ffc0000 [ 374.359298][ T29] audit: type=1326 audit(1765327382.246:46640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19286 comm="syz.0.5302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff077f1f7d7 code=0x7ffc0000 [ 374.361832][ T29] audit: type=1326 audit(1765327382.246:46641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19286 comm="syz.0.5302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff077f1df90 code=0x7ffc0000 [ 374.361974][ T29] audit: type=1326 audit(1765327382.246:46642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19286 comm="syz.0.5302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff077f1e3aa code=0x7ffc0000 [ 374.362161][ T29] audit: type=1326 audit(1765327382.246:46643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19286 comm="syz.0.5302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff077f1f749 code=0x7ffc0000 [ 374.654753][T19309] netlink: 'syz.1.5309': attribute type 10 has an invalid length. [ 374.662610][T19309] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.5309'. [ 374.673897][T19310] netlink: 'syz.8.5308': attribute type 1 has an invalid length. [ 374.690002][T19309] netlink: 'syz.1.5309': attribute type 1 has an invalid length. [ 374.706260][T19309] netlink: 124 bytes leftover after parsing attributes in process `syz.1.5309'. [ 374.734539][T19309] lo speed is unknown, defaulting to 1000 [ 374.741364][T19278] ÿ: attempt to access beyond end of device [ 374.741364][T19278] loop7: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 374.754349][T19278] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 374.779873][T19284] syz.7.5299: attempt to access beyond end of device [ 374.779873][T19284] loop7: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 374.793594][T19284] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 374.804404][T19284] syz.7.5299: attempt to access beyond end of device [ 374.804404][T19284] loop7: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 374.818081][T19284] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 374.842100][T19313] loop9: detected capacity change from 0 to 512 [ 374.883790][T19313] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5310: bg 0: block 248: padding at end of block bitmap is not set [ 374.911214][T19313] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.5310: Failed to acquire dquot type 1 [ 374.927993][T19313] EXT4-fs (loop9): 1 truncate cleaned up [ 374.943154][T19313] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.033646][T10605] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:17: Failed to release dquot type 1 [ 375.074599][T19328] lo speed is unknown, defaulting to 1000 [ 375.249606][T19333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5314'. [ 375.544774][T19349] loop9: detected capacity change from 0 to 128 [ 375.551614][T19349] EXT4-fs: Ignoring removed nobh option [ 375.559174][T19349] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 375.611862][T19354] loop9: detected capacity change from 0 to 128 [ 375.622911][T19354] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5323'. [ 375.634943][T19354] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fff0000) [ 375.643072][T19354] FAT-fs (loop9): Filesystem has been set read-only [ 375.768016][T19360] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 375.774543][T19360] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 375.781955][T19360] vhci_hcd vhci_hcd.0: Device attached [ 375.796441][T19360] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(7) [ 375.802984][T19360] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 375.810521][T19360] vhci_hcd vhci_hcd.0: Device attached [ 375.817508][T19360] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 375.826657][T19360] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 375.847549][T19360] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(13) [ 375.854192][T19360] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 375.861851][T19360] vhci_hcd vhci_hcd.0: Device attached [ 375.884363][T19360] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(15) [ 375.891047][T19360] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 375.898678][T19360] vhci_hcd vhci_hcd.0: Device attached [ 375.913994][T19374] vhci_hcd: connection closed [ 375.914091][T19372] vhci_hcd: connection closed [ 375.919163][T19365] vhci_hcd: connection closed [ 375.923847][T19361] vhci_hcd: connection closed [ 375.929187][T10606] vhci_hcd vhci_hcd.8: stop threads [ 375.939148][T10606] vhci_hcd vhci_hcd.8: release socket [ 375.944518][T10606] vhci_hcd vhci_hcd.8: disconnect device [ 375.960499][T19382] netlink: 'syz.0.5331': attribute type 1 has an invalid length. [ 375.978373][T17804] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 375.986127][T10606] vhci_hcd vhci_hcd.8: stop threads [ 375.991347][T10606] vhci_hcd vhci_hcd.8: release socket [ 375.996754][T10606] vhci_hcd vhci_hcd.8: disconnect device [ 376.002584][T10606] vhci_hcd vhci_hcd.8: stop threads [ 376.007812][T10606] vhci_hcd vhci_hcd.8: release socket [ 376.013250][T10606] vhci_hcd vhci_hcd.8: disconnect device [ 376.027374][T10606] vhci_hcd vhci_hcd.8: stop threads [ 376.032611][T10606] vhci_hcd vhci_hcd.8: release socket [ 376.038045][T10606] vhci_hcd vhci_hcd.8: disconnect device [ 376.059156][T17804] usb 17-1: new full-speed USB device number 3 using vhci_hcd [ 376.087061][T17804] usb 17-1: enqueue for inactive port 0 [ 376.093238][T17804] usb 17-1: enqueue for inactive port 0 [ 376.096894][T19358] syz.9.5323: attempt to access beyond end of device [ 376.096894][T19358] loop9: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 376.099026][T17804] usb 17-1: enqueue for inactive port 0 [ 376.112583][T19358] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 376.126797][T19354] ÿ: attempt to access beyond end of device [ 376.126797][T19354] loop9: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 376.139681][T19354] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 376.187371][T19392] netem: change failed [ 376.188432][T17804] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 376.225787][T19398] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5337'. [ 376.558252][T19431] loop8: detected capacity change from 0 to 512 [ 376.565446][T19431] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 376.576884][T19431] EXT4-fs (loop8): 1 truncate cleaned up [ 376.756351][T19435] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5348'. [ 376.855948][T19442] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 376.862516][T19442] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 376.870034][T19442] vhci_hcd vhci_hcd.0: Device attached [ 376.903027][T19442] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 376.909579][T19442] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 376.917114][T19442] vhci_hcd vhci_hcd.0: Device attached [ 376.954337][T19451] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 376.965337][T19442] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 376.980625][T19442] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(13) [ 376.987219][T19442] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 376.994849][T19442] vhci_hcd vhci_hcd.0: Device attached [ 377.005855][T19442] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(15) [ 377.007716][T19455] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 377.012443][T19442] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 377.018919][T19455] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 377.026517][T19442] vhci_hcd vhci_hcd.0: Device attached [ 377.033829][T19455] vhci_hcd vhci_hcd.0: Device attached [ 377.048438][ T5206] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 377.057062][T19442] FAULT_INJECTION: forcing a failure. [ 377.057062][T19442] name failslab, interval 1, probability 0, space 0, times 0 [ 377.069732][T19442] CPU: 1 UID: 0 PID: 19442 Comm: syz.0.5349 Not tainted syzkaller #0 PREEMPT(voluntary) [ 377.069800][T19442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 377.069811][T19442] Call Trace: [ 377.069817][T19442] [ 377.069824][T19442] __dump_stack+0x1d/0x30 [ 377.069861][T19442] dump_stack_lvl+0xe8/0x140 [ 377.069885][T19442] dump_stack+0x15/0x1b [ 377.069901][T19442] should_fail_ex+0x265/0x280 [ 377.069976][T19442] should_failslab+0x8c/0xb0 [ 377.069994][T19442] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 377.070014][T19442] ? __alloc_skb+0x324/0x4d0 [ 377.070095][T19442] __alloc_skb+0x324/0x4d0 [ 377.070112][T19442] ? __alloc_skb+0x24d/0x4d0 [ 377.070134][T19442] netlink_alloc_large_skb+0xbf/0xf0 [ 377.070157][T19442] netlink_sendmsg+0x3cf/0x6b0 [ 377.070182][T19442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.070205][T19442] __sock_sendmsg+0x145/0x180 [ 377.070319][T19442] ____sys_sendmsg+0x31e/0x4a0 [ 377.070343][T19442] ___sys_sendmsg+0x17b/0x1d0 [ 377.070376][T19442] __x64_sys_sendmsg+0xd4/0x160 [ 377.070400][T19442] x64_sys_call+0x17ba/0x3000 [ 377.070473][T19442] do_syscall_64+0xd8/0x2a0 [ 377.070499][T19442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.070516][T19442] RIP: 0033:0x7ff077f1f749 [ 377.070572][T19442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.070586][T19442] RSP: 002b:00007ff07697f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.070652][T19442] RAX: ffffffffffffffda RBX: 00007ff078175fa0 RCX: 00007ff077f1f749 [ 377.070663][T19442] RDX: 0000000000088010 RSI: 0000200000000540 RDI: 0000000000000011 [ 377.070674][T19442] RBP: 00007ff07697f090 R08: 0000000000000000 R09: 0000000000000000 [ 377.070684][T19442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.070702][T19442] R13: 00007ff078176038 R14: 00007ff078175fa0 R15: 00007ffc0e499738 [ 377.070780][T19442] [ 377.071189][T19455] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(11) [ 377.071573][T19448] vhci_hcd: connection closed [ 377.080990][T19455] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 377.081173][T19455] vhci_hcd vhci_hcd.0: Device attached [ 377.091821][T19443] vhci_hcd: connection closed [ 377.095166][T19452] vhci_hcd: connection closed [ 377.098630][T10606] vhci_hcd vhci_hcd.0: stop threads [ 377.103934][T19459] vhci_hcd: connection closed [ 377.106301][T10606] vhci_hcd vhci_hcd.0: release socket [ 377.117505][T19466] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 377.119712][T10606] vhci_hcd vhci_hcd.0: disconnect device [ 377.134863][T19466] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 377.149092][ T5206] usb 1-1: new full-speed USB device number 3 using vhci_hcd [ 377.247895][T19471] netlink: 'syz.7.5350': attribute type 16 has an invalid length. [ 377.283607][T10606] vhci_hcd vhci_hcd.0: stop threads [ 377.288981][T19471] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.5350'. [ 377.294189][T19466] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(20) [ 377.298346][T10606] vhci_hcd vhci_hcd.0: release socket [ 377.303495][T19466] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 377.308153][T10606] vhci_hcd vhci_hcd.0: disconnect device [ 377.313535][T19466] vhci_hcd vhci_hcd.0: Device attached [ 377.315621][T19474] netlink: 'syz.8.5347': attribute type 24 has an invalid length. [ 377.332163][T10606] vhci_hcd vhci_hcd.0: stop threads [ 377.335485][T19455] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(13) [ 377.342775][T10606] vhci_hcd vhci_hcd.0: release socket [ 377.342796][T10606] vhci_hcd vhci_hcd.0: disconnect device [ 377.342929][ T5206] usb 1-1: enqueue for inactive port 0 [ 377.350588][T19455] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 377.350660][T19455] vhci_hcd vhci_hcd.0: Device attached [ 377.355976][ T5206] usb 1-1: enqueue for inactive port 0 [ 377.450329][T17804] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 377.493296][T10606] vhci_hcd vhci_hcd.0: stop threads [ 377.498632][T10606] vhci_hcd vhci_hcd.0: release socket [ 377.504057][T10606] vhci_hcd vhci_hcd.0: disconnect device [ 377.511380][T19469] vhci_hcd: connection closed [ 377.511855][T19462] vhci_hcd: connection closed [ 377.516468][T19468] vhci_hcd: connection closed [ 377.516809][T10606] vhci_hcd vhci_hcd.8: stop threads [ 377.531420][T10606] vhci_hcd vhci_hcd.8: release socket [ 377.536800][T10606] vhci_hcd vhci_hcd.8: disconnect device [ 377.543014][T10606] vhci_hcd vhci_hcd.8: stop threads [ 377.543066][T19456] vhci_hcd: connection closed [ 377.548212][T10606] vhci_hcd vhci_hcd.8: release socket [ 377.548235][T10606] vhci_hcd vhci_hcd.8: disconnect device [ 377.564256][T10606] vhci_hcd vhci_hcd.8: stop threads [ 377.569525][T10606] vhci_hcd vhci_hcd.8: release socket [ 377.574894][T10606] vhci_hcd vhci_hcd.8: disconnect device [ 377.580740][T10606] vhci_hcd vhci_hcd.8: stop threads [ 377.580714][ T5206] usb 1-1: enqueue for inactive port 0 [ 377.585977][T10606] vhci_hcd vhci_hcd.8: release socket [ 377.596801][T10606] vhci_hcd vhci_hcd.8: disconnect device [ 377.638416][T17804] usb 17-1: enqueue for inactive port 0 [ 377.647184][T17804] usb 17-1: enqueue for inactive port 0 [ 377.653696][T17804] usb 17-1: enqueue for inactive port 0 [ 377.660189][ T5206] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 377.696354][T19486] netem: change failed [ 377.718923][T19488] netem: change failed [ 377.728684][T17804] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 377.741107][T19490] netlink: 'syz.1.5359': attribute type 1 has an invalid length. [ 377.790038][T19492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5360'. [ 377.936766][T19500] loop7: detected capacity change from 0 to 512 [ 377.943409][T19500] EXT4-fs: Ignoring removed i_version option [ 377.949470][T19500] EXT4-fs: Ignoring removed bh option [ 377.970433][T19500] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 377.983060][T19500] FAULT_INJECTION: forcing a failure. [ 377.983060][T19500] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 377.996422][T19500] CPU: 0 UID: 0 PID: 19500 Comm: syz.7.5362 Not tainted syzkaller #0 PREEMPT(voluntary) [ 377.996502][T19500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 377.996510][T19500] Call Trace: [ 377.996516][T19500] [ 377.996527][T19500] __dump_stack+0x1d/0x30 [ 377.996542][T19500] dump_stack_lvl+0xe8/0x140 [ 377.996555][T19500] dump_stack+0x15/0x1b [ 377.996590][T19500] should_fail_ex+0x265/0x280 [ 377.996659][T19500] should_fail_alloc_page+0xf2/0x100 [ 377.996673][T19500] alloc_pages_bulk_noprof+0x102/0x540 [ 377.996690][T19500] copy_splice_read+0xf3/0x660 [ 377.996704][T19500] ? __pfx_ext4_file_splice_read+0x10/0x10 [ 377.996792][T19500] splice_direct_to_actor+0x290/0x680 [ 377.996805][T19500] ? __pfx_direct_splice_actor+0x10/0x10 [ 377.996819][T19500] do_splice_direct+0xda/0x150 [ 377.996832][T19500] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 377.996847][T19500] do_sendfile+0x380/0x650 [ 377.996895][T19500] __x64_sys_sendfile64+0x105/0x150 [ 377.996979][T19500] x64_sys_call+0x2db1/0x3000 [ 377.997088][T19500] do_syscall_64+0xd8/0x2a0 [ 377.997108][T19500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.997120][T19500] RIP: 0033:0x7ff86262f749 [ 377.997135][T19500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.997146][T19500] RSP: 002b:00007ff86108f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 377.997216][T19500] RAX: ffffffffffffffda RBX: 00007ff862885fa0 RCX: 00007ff86262f749 [ 377.997223][T19500] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 377.997231][T19500] RBP: 00007ff86108f090 R08: 0000000000000000 R09: 0000000000000000 [ 377.997242][T19500] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 377.997249][T19500] R13: 00007ff862886038 R14: 00007ff862885fa0 R15: 00007ffe599e5718 [ 377.997304][T19500] [ 378.348145][T19519] loop7: detected capacity change from 0 to 512 [ 378.355412][T19519] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 378.368846][T19519] EXT4-fs (loop7): 1 truncate cleaned up [ 378.380163][T19522] loop9: detected capacity change from 0 to 512 [ 378.401182][T19522] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 378.415082][T19522] EXT4-fs (loop9): 1 truncate cleaned up [ 378.423740][T19526] loop7: detected capacity change from 0 to 128 [ 378.469249][T19529] loop9: detected capacity change from 0 to 512 [ 378.480754][T19529] EXT4-fs (loop9): orphan cleanup on readonly fs [ 378.487543][T19526] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fff0000) [ 378.495389][T19526] FAT-fs (loop7): Filesystem has been set read-only [ 378.502675][T19529] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.5371: corrupted inode contents [ 378.506060][T19533] loop8: detected capacity change from 0 to 512 [ 378.521878][T19529] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 378.521936][T19533] EXT4-fs: Ignoring removed oldalloc option [ 378.537073][T19529] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.5371: corrupted inode contents [ 378.549471][T19529] EXT4-fs error (device loop9): ext4_evict_inode:301: inode #15: comm syz.9.5371: mark_inode_dirty error [ 378.555630][T19533] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 378.560992][T19529] EXT4-fs (loop9): 1 orphan inode deleted [ 378.590692][T19533] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5372: bg 0: block 217: padding at end of block bitmap is not set [ 378.643897][T19541] __nla_validate_parse: 2 callbacks suppressed [ 378.643912][T19541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5375'. [ 378.737975][T19549] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5377'. [ 378.821646][T19539] loop8: detected capacity change from 0 to 512 [ 378.854087][T19556] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5379'. [ 378.890583][T19558] loop9: detected capacity change from 0 to 512 [ 378.897976][T19558] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 378.911272][T19558] EXT4-fs (loop9): 1 truncate cleaned up [ 378.924001][T19563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5381'. [ 378.928524][T19539] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5374: bg 0: block 248: padding at end of block bitmap is not set [ 378.953777][T19539] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.5374: Failed to acquire dquot type 1 [ 378.985797][T19539] EXT4-fs (loop8): 1 truncate cleaned up [ 379.020652][T19539] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.049550][T19570] netlink: 'syz.9.5384': attribute type 1 has an invalid length. [ 379.104324][T19574] netem: change failed [ 379.147397][ T29] kauditd_printk_skb: 560 callbacks suppressed [ 379.147412][ T29] audit: type=1326 audit(1765327387.026:47199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19564 comm="syz.0.5382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff077f1f749 code=0x7ffc0000 [ 379.204356][T19526] ÿ: attempt to access beyond end of device [ 379.204356][T19526] loop7: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 379.217341][T19526] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 379.224368][ T29] audit: type=1326 audit(1765327387.066:47200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19564 comm="syz.0.5382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff077f1f749 code=0x7ffc0000 [ 379.380382][ T29] audit: type=1326 audit(1765327387.266:47201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19598 comm="syz.1.5394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 379.423797][ T29] audit: type=1326 audit(1765327387.296:47202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19598 comm="syz.1.5394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 379.447358][ T29] audit: type=1326 audit(1765327387.296:47203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19598 comm="syz.1.5394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 379.470941][ T29] audit: type=1326 audit(1765327387.296:47204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19598 comm="syz.1.5394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 379.494562][ T29] audit: type=1326 audit(1765327387.296:47205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19598 comm="syz.1.5394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 379.518148][ T29] audit: type=1326 audit(1765327387.296:47206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19598 comm="syz.1.5394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 379.518370][T19605] loop7: detected capacity change from 0 to 512 [ 379.541767][ T29] audit: type=1326 audit(1765327387.296:47207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19598 comm="syz.1.5394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 379.548344][T19605] EXT4-fs: Ignoring removed i_version option [ 379.571517][ T29] audit: type=1326 audit(1765327387.296:47208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19598 comm="syz.1.5394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 379.577598][T19605] EXT4-fs: Ignoring removed bh option [ 379.616042][T19601] loop8: detected capacity change from 0 to 2048 [ 379.634274][T19605] EXT4-fs mount: 20 callbacks suppressed [ 379.634289][T19605] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.652647][T19605] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 379.729160][T19601] loop8: p1 < > p4 [ 379.735955][T19613] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5397'. [ 379.755200][T19601] loop8: p4 size 8388608 extends beyond EOD, truncated [ 379.798211][T19613] sd 0:0:1:0: device reset [ 380.312552][T19638] lo speed is unknown, defaulting to 1000 [ 380.809382][T19653] netlink: 'syz.8.5410': attribute type 21 has an invalid length. [ 380.817213][T19653] IPv6: NLM_F_CREATE should be specified when creating new route [ 380.839084][T19653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.846291][T19653] IPv6: NLM_F_CREATE should be set when creating new route [ 380.853499][T19653] IPv6: NLM_F_CREATE should be set when creating new route [ 380.860741][T19653] IPv6: NLM_F_CREATE should be set when creating new route [ 380.904736][T19658] netlink: 'syz.8.5412': attribute type 1 has an invalid length. [ 380.998723][T18423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.335614][T19692] loop7: detected capacity change from 0 to 512 [ 381.355739][T19692] EXT4-fs (loop7): 1 orphan inode deleted [ 381.362050][T19692] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.375458][T12085] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:26: Failed to release dquot type 1 [ 381.387445][T19692] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.422573][T18423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.102685][T19716] EXT4-fs (loop8): 1 orphan inode deleted [ 382.121467][T19716] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.137076][T10605] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:17: Failed to release dquot type 1 [ 382.164006][T19716] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.243910][T16541] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.448444][T19741] EXT4-fs: Ignoring removed oldalloc option [ 382.553404][T19741] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.567075][T19741] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 382.610227][T19741] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5439: bg 0: block 217: padding at end of block bitmap is not set [ 382.638521][T19743] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 382.647167][T19743] FAT-fs (loop7): Filesystem has been set read-only [ 382.661929][T16541] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.766515][T19767] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 382.802850][T19767] EXT4-fs (loop8): 1 truncate cleaned up [ 382.815935][T19767] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.834482][T19774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5446'. [ 382.871685][T16541] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.926584][T19786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=19786 comm=syz.7.5456 [ 383.054657][T19797] EXT4-fs (loop8): orphan cleanup on readonly fs [ 383.068775][T19797] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.5459: corrupted inode contents [ 383.101866][T19797] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 383.116573][T19797] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.5459: corrupted inode contents [ 383.164777][T19797] EXT4-fs error (device loop8): ext4_evict_inode:301: inode #15: comm syz.8.5459: mark_inode_dirty error [ 383.192244][T19797] EXT4-fs (loop8): 1 orphan inode deleted [ 383.204305][T19797] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 383.340890][T16541] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.367443][T19803] EXT4-fs (loop9): orphan cleanup on readonly fs [ 383.377389][T19803] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.5460: corrupted inode contents [ 383.393036][T19803] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 383.401867][T19803] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.5460: corrupted inode contents [ 383.420810][T19811] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 383.441426][T19803] EXT4-fs error (device loop9): ext4_evict_inode:301: inode #15: comm syz.9.5460: mark_inode_dirty error [ 383.442369][T19813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5464'. [ 383.454078][T19803] EXT4-fs (loop9): 1 orphan inode deleted [ 383.468211][T19803] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 383.481471][T19811] EXT4-fs (loop8): 1 truncate cleaned up [ 383.487496][T19811] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.532845][T16541] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.572414][T19825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5470'. [ 383.643879][T19833] lo speed is unknown, defaulting to 1000 [ 383.739337][T16592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.042907][T19838] set_capacity_and_notify: 8 callbacks suppressed [ 384.042923][T19838] loop8: detected capacity change from 0 to 512 [ 384.060139][T19838] EXT4-fs (loop8): 1 orphan inode deleted [ 384.157006][T12085] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:26: Failed to release dquot type 1 [ 384.169723][T19838] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.186821][T19838] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.216458][T16541] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.291205][T19847] loop9: detected capacity change from 0 to 8192 [ 384.478561][ T29] kauditd_printk_skb: 746 callbacks suppressed [ 384.478577][ T29] audit: type=1326 audit(1765327392.039:47952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19851 comm="syz.0.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff077f1f749 code=0x7ffc0000 [ 384.542026][ T29] audit: type=1326 audit(1765327392.067:47953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19851 comm="syz.0.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7ff077f1f749 code=0x7ffc0000 [ 384.544810][T19858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5480'. [ 384.565560][ T29] audit: type=1326 audit(1765327392.067:47954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19851 comm="syz.0.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff077f1f749 code=0x7ffc0000 [ 384.565591][ T29] audit: type=1326 audit(1765327392.067:47955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19851 comm="syz.0.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff077f1f749 code=0x7ffc0000 [ 384.565614][ T29] audit: type=1326 audit(1765327392.067:47956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19851 comm="syz.0.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7ff077f1f749 code=0x7ffc0000 [ 384.646019][ T29] audit: type=1326 audit(1765327392.067:47957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19851 comm="syz.0.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff077f1f749 code=0x7ffc0000 [ 384.669660][ T29] audit: type=1326 audit(1765327392.067:47958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19851 comm="syz.0.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff077f1f749 code=0x7ffc0000 [ 384.693234][ T29] audit: type=1326 audit(1765327392.067:47959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19851 comm="syz.0.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff077f1f749 code=0x7ffc0000 [ 384.716908][ T29] audit: type=1326 audit(1765327392.067:47960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19851 comm="syz.0.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff077f1f783 code=0x7ffc0000 [ 384.740338][ T29] audit: type=1326 audit(1765327392.067:47961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19851 comm="syz.0.5478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff077f1e1ff code=0x7ffc0000 [ 384.876612][T19873] netem: change failed [ 384.943027][T19880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5488'. [ 385.120892][T19890] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5491'. [ 385.257536][T19904] loop8: detected capacity change from 0 to 512 [ 385.266411][T19904] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 385.279952][T19904] EXT4-fs (loop8): 1 truncate cleaned up [ 385.295022][T19904] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.323842][T16541] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.343343][T19909] loop8: detected capacity change from 0 to 128 [ 385.350385][T19909] EXT4-fs: Ignoring removed nobh option [ 385.356576][T19910] loop9: detected capacity change from 0 to 512 [ 385.364299][T19909] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 385.377281][T19909] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 385.388482][T19910] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5498: bg 0: block 248: padding at end of block bitmap is not set [ 385.411076][T16541] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 385.420151][T19910] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.5498: Failed to acquire dquot type 1 [ 385.447352][T19910] EXT4-fs (loop9): 1 truncate cleaned up [ 385.483556][T19915] loop8: detected capacity change from 0 to 8192 [ 385.499142][T19915] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 385.507868][T19915] FAT-fs (loop8): Filesystem has been set read-only [ 385.528107][T19910] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.554968][T19910] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.586937][T16592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.596098][ T2111] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 1 [ 385.627673][T19917] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5501'. [ 385.768435][T19933] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5507'. [ 385.799817][T19935] loop7: detected capacity change from 0 to 512 [ 385.800365][T19935] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 385.822993][T19935] EXT4-fs (loop7): 1 truncate cleaned up [ 385.823485][T19935] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.925876][T18423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.259608][T19967] netem: change failed [ 386.777281][T19989] netlink: 236 bytes leftover after parsing attributes in process `syz.8.5526'. [ 386.961292][T20001] loop7: detected capacity change from 0 to 512 [ 386.971928][T20002] loop8: detected capacity change from 0 to 512 [ 386.989402][T20002] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 387.002566][T19991] loop9: detected capacity change from 0 to 512 [ 387.014984][T20001] EXT4-fs (loop7): 1 orphan inode deleted [ 387.016273][T20002] EXT4-fs (loop8): 1 truncate cleaned up [ 387.023514][T20001] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.037623][T20002] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.039473][T20001] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.061604][ T1986] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 1 [ 387.097819][T19991] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5527: bg 0: block 248: padding at end of block bitmap is not set [ 387.112995][T16541] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.135167][T19991] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.5527: Failed to acquire dquot type 1 [ 387.165768][T19991] EXT4-fs (loop9): 1 truncate cleaned up [ 387.183802][T18423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.190344][T19991] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.205978][T19991] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.251727][T16592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.263340][T10606] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:18: Failed to release dquot type 1 [ 387.289784][T20018] FAULT_INJECTION: forcing a failure. [ 387.289784][T20018] name failslab, interval 1, probability 0, space 0, times 0 [ 387.302454][T20018] CPU: 1 UID: 0 PID: 20018 Comm: syz.0.5536 Not tainted syzkaller #0 PREEMPT(voluntary) [ 387.302480][T20018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 387.302539][T20018] Call Trace: [ 387.302546][T20018] [ 387.302553][T20018] __dump_stack+0x1d/0x30 [ 387.302638][T20018] dump_stack_lvl+0xe8/0x140 [ 387.302659][T20018] dump_stack+0x15/0x1b [ 387.302676][T20018] should_fail_ex+0x265/0x280 [ 387.302699][T20018] should_failslab+0x8c/0xb0 [ 387.302723][T20018] kmem_cache_alloc_noprof+0x69/0x4b0 [ 387.302759][T20018] ? getname_flags+0x80/0x3b0 [ 387.302785][T20018] getname_flags+0x80/0x3b0 [ 387.302815][T20018] do_sys_openat2+0x60/0x150 [ 387.302915][T20018] __se_sys_openat2+0x194/0x1f0 [ 387.303014][T20018] __x64_sys_openat2+0x55/0x70 [ 387.303038][T20018] x64_sys_call+0x2c04/0x3000 [ 387.303117][T20018] do_syscall_64+0xd8/0x2a0 [ 387.303146][T20018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.303186][T20018] RIP: 0033:0x7ff077f1f749 [ 387.303202][T20018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.303221][T20018] RSP: 002b:00007ff07697f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 387.303242][T20018] RAX: ffffffffffffffda RBX: 00007ff078175fa0 RCX: 00007ff077f1f749 [ 387.303305][T20018] RDX: 0000200000000280 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 387.303316][T20018] RBP: 00007ff07697f090 R08: 0000000000000000 R09: 0000000000000000 [ 387.303329][T20018] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 387.303343][T20018] R13: 00007ff078176038 R14: 00007ff078175fa0 R15: 00007ffc0e499738 [ 387.303363][T20018] [ 387.507043][T20027] netlink: 236 bytes leftover after parsing attributes in process `syz.0.5539'. [ 387.700758][T20034] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 387.782657][T20038] EXT4-fs (loop7): 1 orphan inode deleted [ 387.795708][T20038] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.808273][ T2111] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 1 [ 387.821109][T20038] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.847757][T18423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.879462][T20043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5546'. [ 388.363006][T20076] FAULT_INJECTION: forcing a failure. [ 388.363006][T20076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.376115][T20076] CPU: 1 UID: 0 PID: 20076 Comm: syz.0.5558 Not tainted syzkaller #0 PREEMPT(voluntary) [ 388.376213][T20076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 388.376225][T20076] Call Trace: [ 388.376233][T20076] [ 388.376241][T20076] __dump_stack+0x1d/0x30 [ 388.376266][T20076] dump_stack_lvl+0xe8/0x140 [ 388.376290][T20076] dump_stack+0x15/0x1b [ 388.376320][T20076] should_fail_ex+0x265/0x280 [ 388.376343][T20076] should_fail+0xb/0x20 [ 388.376361][T20076] should_fail_usercopy+0x1a/0x20 [ 388.376381][T20076] _copy_from_user+0x1c/0xb0 [ 388.376444][T20076] __se_sys_mount+0x10d/0x2e0 [ 388.376464][T20076] ? fput+0x8f/0xc0 [ 388.376534][T20076] ? ksys_write+0x192/0x1a0 [ 388.376556][T20076] __x64_sys_mount+0x67/0x80 [ 388.376576][T20076] x64_sys_call+0x2cca/0x3000 [ 388.376661][T20076] do_syscall_64+0xd8/0x2a0 [ 388.376693][T20076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.376791][T20076] RIP: 0033:0x7ff077f1f749 [ 388.376808][T20076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.376862][T20076] RSP: 002b:00007ff07697f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 388.376879][T20076] RAX: ffffffffffffffda RBX: 00007ff078175fa0 RCX: 00007ff077f1f749 [ 388.376890][T20076] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 388.376903][T20076] RBP: 00007ff07697f090 R08: 0000200000000300 R09: 0000000000000000 [ 388.376918][T20076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.376932][T20076] R13: 00007ff078176038 R14: 00007ff078175fa0 R15: 00007ffc0e499738 [ 388.377026][T20076] [ 388.875138][T20080] lo speed is unknown, defaulting to 1000 [ 389.165211][T20108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5568'. [ 389.280744][T20116] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fff0000) [ 389.288939][T20116] FAT-fs (loop7): Filesystem has been set read-only [ 389.369469][T20127] FAULT_INJECTION: forcing a failure. [ 389.369469][T20127] name failslab, interval 1, probability 0, space 0, times 0 [ 389.382159][T20127] CPU: 0 UID: 0 PID: 20127 Comm: syz.0.5573 Not tainted syzkaller #0 PREEMPT(voluntary) [ 389.382251][T20127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 389.382262][T20127] Call Trace: [ 389.382268][T20127] [ 389.382276][T20127] __dump_stack+0x1d/0x30 [ 389.382299][T20127] dump_stack_lvl+0xe8/0x140 [ 389.382385][T20127] dump_stack+0x15/0x1b [ 389.382406][T20127] should_fail_ex+0x265/0x280 [ 389.382444][T20127] should_failslab+0x8c/0xb0 [ 389.382493][T20127] __kmalloc_cache_noprof+0x65/0x4c0 [ 389.382514][T20127] ? bpf_init_fs_context+0x36/0x110 [ 389.382554][T20127] bpf_init_fs_context+0x36/0x110 [ 389.382587][T20127] alloc_fs_context+0x4a4/0x590 [ 389.382721][T20127] fs_context_for_reconfigure+0x42/0x50 [ 389.382746][T20127] __se_sys_fspick+0x11e/0x240 [ 389.382773][T20127] __x64_sys_fspick+0x43/0x50 [ 389.382804][T20127] x64_sys_call+0x2bf9/0x3000 [ 389.382861][T20127] do_syscall_64+0xd8/0x2a0 [ 389.382892][T20127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.382911][T20127] RIP: 0033:0x7ff077f1f749 [ 389.382925][T20127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.382940][T20127] RSP: 002b:00007ff07697f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 389.382959][T20127] RAX: ffffffffffffffda RBX: 00007ff078175fa0 RCX: 00007ff077f1f749 [ 389.383038][T20127] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 389.383051][T20127] RBP: 00007ff07697f090 R08: 0000000000000000 R09: 0000000000000000 [ 389.383065][T20127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.383157][T20127] R13: 00007ff078176038 R14: 00007ff078175fa0 R15: 00007ffc0e499738 [ 389.383174][T20127] [ 389.691501][T20137] netem: change failed [ 389.777815][T20130] syz.7.5569: attempt to access beyond end of device [ 389.777815][T20130] loop7: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 389.791578][T20130] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 389.801349][T20116] ÿ: attempt to access beyond end of device [ 389.801349][T20116] loop7: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 389.814254][T20116] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 389.830192][T20116] ÿ: attempt to access beyond end of device [ 389.830192][T20116] loop7: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 389.843081][T20116] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 389.854643][ T29] kauditd_printk_skb: 613 callbacks suppressed [ 389.854737][ T29] audit: type=1326 audit(1765327397.072:48567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20153 comm="syz.0.5583" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff077f1f749 code=0x0 [ 389.928918][ T29] audit: type=1326 audit(1765327397.100:48568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20140 comm="syz.1.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 389.952545][ T29] audit: type=1326 audit(1765327397.100:48569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20140 comm="syz.1.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 389.976111][ T29] audit: type=1326 audit(1765327397.100:48570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20140 comm="syz.1.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 389.999786][ T29] audit: type=1326 audit(1765327397.100:48571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20140 comm="syz.1.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 390.023383][ T29] audit: type=1326 audit(1765327397.100:48572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20140 comm="syz.1.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 390.046946][ T29] audit: type=1326 audit(1765327397.100:48573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20140 comm="syz.1.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 390.070344][ T29] audit: type=1326 audit(1765327397.100:48574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20140 comm="syz.1.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 390.094244][ T29] audit: type=1326 audit(1765327397.100:48575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20140 comm="syz.1.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 390.118137][ T29] audit: type=1326 audit(1765327397.100:48576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20140 comm="syz.1.5579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97b56f749 code=0x7ffc0000 [ 390.152743][T20160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5583'. [ 390.183894][T20160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.191290][T20160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.243632][T20160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.251148][T20160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.339366][T20176] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5588'. [ 390.386803][T20165] lo speed is unknown, defaulting to 1000 [ 390.447314][T20151] set_capacity_and_notify: 2 callbacks suppressed [ 390.447328][T20151] loop8: detected capacity change from 0 to 512 [ 390.476032][T20165] chnl_net:caif_netlink_parms(): no params data found [ 390.498468][T20151] loop8: detected capacity change from 0 to 2048 [ 390.506564][T12093] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.543650][T20165] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.550789][T20165] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.558364][T20165] bridge_slave_0: entered allmulticast mode [ 390.564905][T20165] bridge_slave_0: entered promiscuous mode [ 390.574912][T12093] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.596512][T20165] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.603692][T20165] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.613023][T20165] bridge_slave_1: entered allmulticast mode [ 390.622143][T20165] bridge_slave_1: entered promiscuous mode [ 390.642475][T20198] loop8: detected capacity change from 0 to 512 [ 390.650246][T20165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.661368][T20165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.670872][T20198] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 390.671547][T12093] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.700329][T20198] EXT4-fs (loop8): 1 truncate cleaned up [ 390.706436][T20198] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.726356][T20165] team0: Port device team_slave_0 added [ 390.733265][T20165] team0: Port device team_slave_1 added [ 390.742216][T16541] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.765686][T12093] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.787543][T20165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.794549][T20165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.820469][T20165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.831953][T20165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.838928][T20165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.864900][T20165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.901398][T20165] hsr_slave_0: entered promiscuous mode [ 390.908148][T20165] hsr_slave_1: entered promiscuous mode [ 390.914084][T20165] debugfs: 'hsr0' already exists in 'hsr' [ 390.919802][T20165] Cannot create hsr debugfs directory [ 391.325909][T20238] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5606'. [ 391.340298][T12093] bond0 (unregistering): Released all slaves [ 391.350324][T20238] IPVS: Error connecting to the multicast addr [ 391.397351][T12093] veth1_macvtap: left promiscuous mode [ 391.413597][T12093] veth0_macvtap: left promiscuous mode [ 391.419175][T12093] veth1_vlan: left promiscuous mode [ 391.428868][T12093] veth0_vlan: left promiscuous mode [ 391.442816][T20244] loop8: detected capacity change from 0 to 8192 [ 391.456981][T20244] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 391.465679][T20244] FAT-fs (loop8): Filesystem has been set read-only [ 391.506708][T20249] loop8: detected capacity change from 0 to 128 [ 391.514541][T20249] EXT4-fs: Ignoring removed nobh option [ 391.522236][T20249] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 391.541976][T20249] ext4 filesystem being mounted at /211/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 391.567393][ T3968] lo speed is unknown, defaulting to 1000 [ 391.573142][ T3968] infiniband syz2: ib_query_port failed (-19) [ 391.597931][T16541] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 391.811672][T20273] loop9: detected capacity change from 0 to 512 [ 391.812164][T20270] loop8: detected capacity change from 0 to 8192 [ 391.831884][T20273] EXT4-fs: Ignoring removed oldalloc option [ 391.832185][T20270] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 391.846527][T20270] FAT-fs (loop8): Filesystem has been set read-only [ 391.865038][T20273] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.872735][T20165] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 391.886623][T20165] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 391.894424][T20273] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 391.913103][T20165] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 391.921106][T20273] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5621: bg 0: block 217: padding at end of block bitmap is not set [ 391.922491][T20165] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 391.951357][T20280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5622'. [ 391.972597][T20165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.983860][T16592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.984912][T20165] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.002969][T12085] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.010045][T12085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.020334][T10605] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.027384][T10605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.080640][T20165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.136268][T20165] veth0_vlan: entered promiscuous mode [ 392.145010][T20165] veth1_vlan: entered promiscuous mode [ 392.158748][T20165] veth0_macvtap: entered promiscuous mode [ 392.165990][T20165] veth1_macvtap: entered promiscuous mode [ 392.175914][T20165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.186560][T20165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.196545][T12093] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.205364][T12093] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.214237][T12093] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.223323][T12093] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.641403][T20335] netlink: 236 bytes leftover after parsing attributes in process `syz.7.5636'. [ 392.723603][T20344] FAULT_INJECTION: forcing a failure. [ 392.723603][T20344] name failslab, interval 1, probability 0, space 0, times 0 [ 392.736247][T20344] CPU: 0 UID: 0 PID: 20344 Comm: syz.1.5640 Not tainted syzkaller #0 PREEMPT(voluntary) [ 392.736275][T20344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 392.736319][T20344] Call Trace: [ 392.736325][T20344] [ 392.736331][T20344] __dump_stack+0x1d/0x30 [ 392.736351][T20344] dump_stack_lvl+0xe8/0x140 [ 392.736369][T20344] dump_stack+0x15/0x1b [ 392.736385][T20344] should_fail_ex+0x265/0x280 [ 392.736420][T20344] should_failslab+0x8c/0xb0 [ 392.736440][T20344] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 392.736460][T20344] ? dup_task_struct+0x5b/0x950 [ 392.736478][T20344] dup_task_struct+0x5b/0x950 [ 392.736493][T20344] ? copy_process+0x36c/0x1ef0 [ 392.736540][T20344] copy_process+0x37d/0x1ef0 [ 392.736632][T20344] ? kstrtouint+0x76/0xc0 [ 392.736657][T20344] ? kstrtouint_from_user+0x9f/0xf0 [ 392.736674][T20344] ? 0xffffffff81000000 [ 392.736689][T20344] kernel_clone+0x16c/0x5c0 [ 392.736730][T20344] ? vfs_write+0x7e8/0x960 [ 392.736746][T20344] __x64_sys_clone+0xe6/0x120 [ 392.736769][T20344] x64_sys_call+0x12d0/0x3000 [ 392.736810][T20344] do_syscall_64+0xd8/0x2a0 [ 392.736835][T20344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.736853][T20344] RIP: 0033:0x7f4ae067f749 [ 392.736865][T20344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.736948][T20344] RSP: 002b:00007f4adf0defe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 392.736965][T20344] RAX: ffffffffffffffda RBX: 00007f4ae08d5fa0 RCX: 00007f4ae067f749 [ 392.736975][T20344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026801000 [ 392.737004][T20344] RBP: 00007f4adf0df090 R08: 0000000000000000 R09: 0000000000000000 [ 392.737015][T20344] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 392.737025][T20344] R13: 00007f4ae08d6038 R14: 00007f4ae08d5fa0 R15: 00007ffde37bfac8 [ 392.737041][T20344] [ 393.052941][T20364] netlink: 236 bytes leftover after parsing attributes in process `syz.1.5648'. [ 393.085398][T20371] loop7: detected capacity change from 0 to 512 [ 393.145760][T20371] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 393.158452][T20371] EXT4-fs (loop7): 1 truncate cleaned up [ 393.164710][T20371] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.403619][T18423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.568111][T20392] FAULT_INJECTION: forcing a failure. [ 393.568111][T20392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.581271][T20392] CPU: 1 UID: 0 PID: 20392 Comm: syz.1.5655 Not tainted syzkaller #0 PREEMPT(voluntary) [ 393.581288][T20392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 393.581295][T20392] Call Trace: [ 393.581299][T20392] [ 393.581304][T20392] __dump_stack+0x1d/0x30 [ 393.581323][T20392] dump_stack_lvl+0xe8/0x140 [ 393.581336][T20392] dump_stack+0x15/0x1b [ 393.581347][T20392] should_fail_ex+0x265/0x280 [ 393.581428][T20392] should_fail+0xb/0x20 [ 393.581439][T20392] should_fail_usercopy+0x1a/0x20 [ 393.581453][T20392] _copy_from_user+0x1c/0xb0 [ 393.581531][T20392] __se_sys_mount+0x10d/0x2e0 [ 393.581543][T20392] ? fput+0x8f/0xc0 [ 393.581634][T20392] ? ksys_write+0x192/0x1a0 [ 393.581645][T20392] __x64_sys_mount+0x67/0x80 [ 393.581657][T20392] x64_sys_call+0x2cca/0x3000 [ 393.581671][T20392] do_syscall_64+0xd8/0x2a0 [ 393.581820][T20392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.581832][T20392] RIP: 0033:0x7f4ae067f749 [ 393.581842][T20392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.581852][T20392] RSP: 002b:00007f4adf0df038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 393.581865][T20392] RAX: ffffffffffffffda RBX: 00007f4ae08d5fa0 RCX: 00007f4ae067f749 [ 393.581872][T20392] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 393.581880][T20392] RBP: 00007f4adf0df090 R08: 0000200000000300 R09: 0000000000000000 [ 393.581957][T20392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.581964][T20392] R13: 00007f4ae08d6038 R14: 00007f4ae08d5fa0 R15: 00007ffde37bfac8 [ 393.581977][T20392] [ 393.763971][T20396] loop9: detected capacity change from 0 to 512 [ 393.779860][T20396] EXT4-fs (loop9): 1 orphan inode deleted [ 393.786121][T20396] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.799363][T10183] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:15: Failed to release dquot type 1 [ 393.811346][T20396] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.834818][T16592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.960293][T20419] netlink: 176 bytes leftover after parsing attributes in process `syz.9.5664'. [ 394.034380][T20430] FAULT_INJECTION: forcing a failure. [ 394.034380][T20430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.047650][T20430] CPU: 0 UID: 0 PID: 20430 Comm: syz.8.5668 Not tainted syzkaller #0 PREEMPT(voluntary) [ 394.047731][T20430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 394.047744][T20430] Call Trace: [ 394.047762][T20430] [ 394.047771][T20430] __dump_stack+0x1d/0x30 [ 394.047796][T20430] dump_stack_lvl+0xe8/0x140 [ 394.047820][T20430] dump_stack+0x15/0x1b [ 394.047914][T20430] should_fail_ex+0x265/0x280 [ 394.047936][T20430] should_fail+0xb/0x20 [ 394.047954][T20430] should_fail_usercopy+0x1a/0x20 [ 394.047978][T20430] _copy_from_user+0x1c/0xb0 [ 394.048076][T20430] lo_ioctl+0x383/0x12b0 [ 394.048096][T20430] ? avc_has_extended_perms+0x609/0x800 [ 394.048137][T20430] ? blkdev_common_ioctl+0xbf0/0x1f50 [ 394.048239][T20430] ? do_vfs_ioctl+0x866/0xe10 [ 394.048271][T20430] ? selinux_file_ioctl+0x308/0x3a0 [ 394.048368][T20430] ? __pfx_lo_ioctl+0x10/0x10 [ 394.048386][T20430] ? __pfx_blkdev_ioctl+0x10/0x10 [ 394.048478][T20430] blkdev_ioctl+0x37d/0x460 [ 394.048496][T20430] ? __pfx_blkdev_ioctl+0x10/0x10 [ 394.048516][T20430] __se_sys_ioctl+0xce/0x140 [ 394.048547][T20430] __x64_sys_ioctl+0x43/0x50 [ 394.048623][T20430] x64_sys_call+0x14b0/0x3000 [ 394.048647][T20430] do_syscall_64+0xd8/0x2a0 [ 394.048680][T20430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.048701][T20430] RIP: 0033:0x7f9ef279f749 [ 394.048715][T20430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.048802][T20430] RSP: 002b:00007f9ef1207038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 394.048819][T20430] RAX: ffffffffffffffda RBX: 00007f9ef29f5fa0 RCX: 00007f9ef279f749 [ 394.048831][T20430] RDX: 0000200000001600 RSI: 0000000000004c0a RDI: 0000000000000005 [ 394.048843][T20430] RBP: 00007f9ef1207090 R08: 0000000000000000 R09: 0000000000000000 [ 394.048862][T20430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.048874][T20430] R13: 00007f9ef29f6038 R14: 00007f9ef29f5fa0 R15: 00007ffdd677e3f8 [ 394.048893][T20430] [ 394.050812][T20432] netlink: 'syz.1.5669': attribute type 1 has an invalid length. [ 394.091895][T20434] loop8: detected capacity change from 0 to 512 [ 394.268476][T20434] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 394.280126][T20434] EXT4-fs (loop8): 1 truncate cleaned up [ 394.286189][T20434] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.311132][T16541] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.519762][T20452] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fff0000) [ 394.527740][T20452] FAT-fs (loop8): Filesystem has been set read-only [ 394.730282][T20461] netlink: 176 bytes leftover after parsing attributes in process `syz.8.5678'. [ 394.957009][T20467] EXT4-fs: Ignoring removed oldalloc option [ 395.020057][T20467] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.040424][T20467] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 395.054406][T20467] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5690: bg 0: block 217: padding at end of block bitmap is not set [ 395.118278][T16541] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.220959][ T29] kauditd_printk_skb: 533 callbacks suppressed [ 395.220979][ T29] audit: type=1326 audit(1765327402.085:49109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20485 comm="syz.8.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef279f749 code=0x7ffc0000 [ 395.252749][T20486] EXT4-fs: Ignoring removed nobh option [ 395.267155][ T29] audit: type=1326 audit(1765327402.104:49110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20485 comm="syz.8.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9ef279f749 code=0x7ffc0000 [ 395.290954][ T29] audit: type=1326 audit(1765327402.104:49111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20485 comm="syz.8.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9ef279f783 code=0x7ffc0000 [ 395.305802][T20486] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 395.314336][ T29] audit: type=1326 audit(1765327402.113:49112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20485 comm="syz.8.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9ef279e1ff code=0x7ffc0000 [ 395.349668][ T29] audit: type=1326 audit(1765327402.113:49113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20485 comm="syz.8.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9ef279f7d7 code=0x7ffc0000 [ 395.373243][ T29] audit: type=1326 audit(1765327402.113:49114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20485 comm="syz.8.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ef279df90 code=0x7ffc0000 [ 395.374094][T20486] ext4 filesystem being mounted at /230/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 395.396839][ T29] audit: type=1326 audit(1765327402.113:49115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20485 comm="syz.8.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ef279f34b code=0x7ffc0000 [ 395.430527][ T29] audit: type=1326 audit(1765327402.113:49116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20485 comm="syz.8.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9ef279e3aa code=0x7ffc0000 [ 395.454045][ T29] audit: type=1326 audit(1765327402.113:49117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20485 comm="syz.8.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9ef279e3aa code=0x7ffc0000 [ 395.477445][ T29] audit: type=1326 audit(1765327402.113:49118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20485 comm="syz.8.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9ef279de97 code=0x7ffc0000 [ 395.546108][T16541] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 395.603057][T20496] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 395.624908][T20498] FAULT_INJECTION: forcing a failure. [ 395.624908][T20498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.638072][T20498] CPU: 1 UID: 0 PID: 20498 Comm: syz.1.5694 Not tainted syzkaller #0 PREEMPT(voluntary) [ 395.638098][T20498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 395.638112][T20498] Call Trace: [ 395.638120][T20498] [ 395.638128][T20498] __dump_stack+0x1d/0x30 [ 395.638210][T20498] dump_stack_lvl+0xe8/0x140 [ 395.638229][T20498] dump_stack+0x15/0x1b [ 395.638294][T20498] should_fail_ex+0x265/0x280 [ 395.638319][T20498] should_fail+0xb/0x20 [ 395.638339][T20498] should_fail_usercopy+0x1a/0x20 [ 395.638362][T20498] _copy_from_iter+0xcf/0xe70 [ 395.638423][T20498] ? __alloc_skb+0x3bb/0x4d0 [ 395.638446][T20498] ? __alloc_skb+0x24d/0x4d0 [ 395.638470][T20498] netlink_sendmsg+0x471/0x6b0 [ 395.638500][T20498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.638536][T20498] __sock_sendmsg+0x145/0x180 [ 395.638569][T20498] ____sys_sendmsg+0x31e/0x4a0 [ 395.638684][T20498] ___sys_sendmsg+0x17b/0x1d0 [ 395.638760][T20498] __x64_sys_sendmsg+0xd4/0x160 [ 395.638786][T20498] x64_sys_call+0x17ba/0x3000 [ 395.638811][T20498] do_syscall_64+0xd8/0x2a0 [ 395.638860][T20498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.638940][T20498] RIP: 0033:0x7f4ae067f749 [ 395.639003][T20498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.639020][T20498] RSP: 002b:00007f4adf0df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.639037][T20498] RAX: ffffffffffffffda RBX: 00007f4ae08d5fa0 RCX: 00007f4ae067f749 [ 395.639049][T20498] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000007 [ 395.639060][T20498] RBP: 00007f4adf0df090 R08: 0000000000000000 R09: 0000000000000000 [ 395.639126][T20498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.639140][T20498] R13: 00007f4ae08d6038 R14: 00007f4ae08d5fa0 R15: 00007ffde37bfac8 [ 395.639161][T20498] [ 395.840378][T20496] EXT4-fs (loop9): 1 truncate cleaned up [ 395.846576][T20496] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.897293][T16592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.952509][T20519] set_capacity_and_notify: 4 callbacks suppressed [ 395.952521][T20519] loop9: detected capacity change from 0 to 512 [ 395.966072][T20519] EXT4-fs: Ignoring removed oldalloc option [ 395.981382][T20519] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.994368][T20519] ext4 filesystem being mounted at /210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 396.009151][T20519] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5699: bg 0: block 217: padding at end of block bitmap is not set [ 396.033929][T20528] loop7: detected capacity change from 0 to 128 [ 396.040589][T20528] EXT4-fs: Ignoring removed nobh option [ 396.047388][T20528] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 396.060302][T20528] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 396.209997][T16592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.492213][T18423] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 396.512947][T20537] SELinux: Context system_u:object_r:sshd_key_t:s0 is not valid (left unmapped). [ 396.532195][T20537] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5704'. [ 396.541266][T20537] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 396.557119][T20537] $Hÿ: renamed from bond0 (while UP) [ 396.565315][T20537] $Hÿ: entered promiscuous mode [ 396.570345][T20537] bond_slave_0: entered promiscuous mode [ 396.576014][T20537] bond_slave_1: entered promiscuous mode [ 396.612397][T20543] loop7: detected capacity change from 0 to 512 [ 396.626160][T20543] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 396.638620][T20543] EXT4-fs (loop7): 1 truncate cleaned up [ 396.647948][T20549] FAULT_INJECTION: forcing a failure. [ 396.647948][T20549] name failslab, interval 1, probability 0, space 0, times 0 [ 396.660635][T20549] CPU: 1 UID: 0 PID: 20549 Comm: syz.0.5711 Not tainted syzkaller #0 PREEMPT(voluntary) [ 396.660777][T20549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 396.660790][T20549] Call Trace: [ 396.660797][T20549] [ 396.660805][T20549] __dump_stack+0x1d/0x30 [ 396.660851][T20549] dump_stack_lvl+0xe8/0x140 [ 396.660871][T20549] dump_stack+0x15/0x1b [ 396.660887][T20549] should_fail_ex+0x265/0x280 [ 396.660910][T20549] should_failslab+0x8c/0xb0 [ 396.660953][T20549] kmem_cache_alloc_noprof+0x69/0x4b0 [ 396.660973][T20549] ? audit_log_start+0x342/0x720 [ 396.660996][T20549] audit_log_start+0x342/0x720 [ 396.661018][T20549] ? kstrtouint+0x76/0xc0 [ 396.661069][T20549] audit_seccomp+0x48/0x100 [ 396.661094][T20549] ? __seccomp_filter+0x832/0x1260 [ 396.661120][T20549] __seccomp_filter+0x843/0x1260 [ 396.661193][T20549] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 396.661221][T20549] ? vfs_write+0x7e8/0x960 [ 396.661242][T20549] ? __cond_resched+0x4e/0x90 [ 396.661267][T20549] __secure_computing+0x82/0x150 [ 396.661348][T20549] syscall_trace_enter+0xcf/0x1e0 [ 396.661369][T20549] do_syscall_64+0xb2/0x2a0 [ 396.661471][T20549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.661488][T20549] RIP: 0033:0x7ff077f1f749 [ 396.661502][T20549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.661520][T20549] RSP: 002b:00007ff07697f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.661540][T20549] RAX: ffffffffffffffda RBX: 00007ff078175fa0 RCX: 00007ff077f1f749 [ 396.661555][T20549] RDX: 0000000000000014 RSI: 0000200000000300 RDI: 000000000000000a [ 396.661625][T20549] RBP: 00007ff07697f090 R08: 0000000000000000 R09: 0000000000000000 [ 396.661636][T20549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.661648][T20549] R13: 00007ff078176038 R14: 00007ff078175fa0 R15: 00007ffc0e499738 [ 396.661721][T20549] [ 396.662209][T20543] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.940746][T20562] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5716'. [ 396.950897][T18423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.987339][T20562] tipc: Enabling of bearer rejected, failed to enable media [ 397.056587][T20576] loop7: detected capacity change from 0 to 512 [ 397.070573][T20576] EXT4-fs (loop7): 1 orphan inode deleted [ 397.089673][T20576] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.090326][T10606] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:18: Failed to release dquot type 1 [ 397.115547][T20584] netlink: 'syz.9.5722': attribute type 1 has an invalid length. [ 397.125944][T20576] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.188255][T18423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.749055][T20616] loop7: detected capacity change from 0 to 512 [ 397.766781][T20616] EXT4-fs (loop7): 1 orphan inode deleted [ 397.773032][T20616] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.786240][T20616] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.796885][T10606] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:18: Failed to release dquot type 1 [ 397.827287][T18423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.847743][T20627] netlink: 236 bytes leftover after parsing attributes in process `syz.7.5735'. [ 398.020491][T20634] loop9: detected capacity change from 0 to 512 [ 398.027069][T20634] EXT4-fs: Ignoring removed oldalloc option [ 398.055403][T20634] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.087625][T20634] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 398.108946][T20634] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5738: bg 0: block 217: padding at end of block bitmap is not set [ 398.198789][T16592] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.240323][T20651] netlink: 176 bytes leftover after parsing attributes in process `syz.7.5744'. [ 398.630358][T20690] loop8: detected capacity change from 0 to 128 [ 398.657451][T20690] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5760'. [ 398.668618][T20690] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fff0000) [ 398.676588][T20690] FAT-fs (loop8): Filesystem has been set read-only [ 398.858001][T20690] ÿ: attempt to access beyond end of device [ 398.858001][T20690] loop8: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 398.870921][T20690] Buffer I/O error on dev loop8, logical block 128, lost async page write [ 398.879624][T20699] syz.8.5760: attempt to access beyond end of device [ 398.879624][T20699] loop8: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 398.893291][T20699] Buffer I/O error on dev loop8, logical block 128, lost async page write [ 398.902674][T20699] syz.8.5760: attempt to access beyond end of device [ 398.902674][T20699] loop8: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 398.916331][T20699] Buffer I/O error on dev loop8, logical block 128, lost async page write [ 399.168475][T20723] loop8: detected capacity change from 0 to 128 [ 399.195074][T20723] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fff0000) [ 399.202963][T20723] FAT-fs (loop8): Filesystem has been set read-only [ 399.224338][T20731] loop7: detected capacity change from 0 to 128 [ 399.266294][T20731] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5775'. [ 399.278152][T20731] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fff0000) [ 399.286131][T20731] FAT-fs (loop7): Filesystem has been set read-only [ 399.287246][T20741] loop8: detected capacity change from 0 to 512 [ 399.299988][T20741] EXT4-fs: Ignoring removed oldalloc option [ 399.300205][T20743] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5779'. [ 399.326517][T20741] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 399.343193][T20741] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5778: bg 0: block 217: padding at end of block bitmap is not set [ 399.392452][T20750] FAULT_INJECTION: forcing a failure. [ 399.392452][T20750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.405575][T20750] CPU: 1 UID: 0 PID: 20750 Comm: syz.8.5781 Not tainted syzkaller #0 PREEMPT(voluntary) [ 399.405603][T20750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 399.405620][T20750] Call Trace: [ 399.405626][T20750] [ 399.405635][T20750] __dump_stack+0x1d/0x30 [ 399.405660][T20750] dump_stack_lvl+0xe8/0x140 [ 399.405740][T20750] dump_stack+0x15/0x1b [ 399.405759][T20750] should_fail_ex+0x265/0x280 [ 399.405782][T20750] should_fail+0xb/0x20 [ 399.405801][T20750] should_fail_usercopy+0x1a/0x20 [ 399.405872][T20750] _copy_from_user+0x1c/0xb0 [ 399.405898][T20750] ___sys_sendmsg+0xc1/0x1d0 [ 399.405939][T20750] __x64_sys_sendmsg+0xd4/0x160 [ 399.405969][T20750] x64_sys_call+0x17ba/0x3000 [ 399.405998][T20750] do_syscall_64+0xd8/0x2a0 [ 399.406029][T20750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.406050][T20750] RIP: 0033:0x7f9ef279f749 [ 399.406066][T20750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.406159][T20750] RSP: 002b:00007f9ef1207038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.406179][T20750] RAX: ffffffffffffffda RBX: 00007f9ef29f5fa0 RCX: 00007f9ef279f749 [ 399.406193][T20750] RDX: 0000000000000040 RSI: 0000200000002540 RDI: 0000000000000003 [ 399.406206][T20750] RBP: 00007f9ef1207090 R08: 0000000000000000 R09: 0000000000000000 [ 399.406219][T20750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.406232][T20750] R13: 00007f9ef29f6038 R14: 00007f9ef29f5fa0 R15: 00007ffdd677e3f8 [ 399.406252][T20750] [ 399.714017][T20761] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fff0000) [ 399.721943][T20761] FAT-fs (loop8): Filesystem has been set read-only [ 399.765633][T20731] ÿ: attempt to access beyond end of device [ 399.765633][T20731] loop7: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 399.778571][T20731] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 399.787311][T20748] syz.7.5775: attempt to access beyond end of device [ 399.787311][T20748] loop7: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 399.801022][T20748] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 399.813988][T20748] syz.7.5775: attempt to access beyond end of device [ 399.813988][T20748] loop7: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 399.827697][T20748] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 399.839617][T20769] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5788'. [ 399.868463][T20773] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5790'. [ 399.894484][T20776] EXT4-fs: Ignoring removed oldalloc option [ 399.904410][T20776] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 399.918316][T20776] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5791: bg 0: block 217: padding at end of block bitmap is not set [ 400.034973][T20785] netlink: 236 bytes leftover after parsing attributes in process `syz.7.5794'. [ 400.244152][T20790] netlink: 'syz.0.5796': attribute type 3 has an invalid length. [ 400.424637][T20789] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 400.433399][T20789] FAT-fs (loop7): Filesystem has been set read-only [ 400.581294][T20802] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fff0000) [ 400.589230][T20802] FAT-fs (loop9): Filesystem has been set read-only [ 400.683646][ T29] kauditd_printk_skb: 700 callbacks suppressed [ 400.683675][ T29] audit: type=1326 audit(1765327407.202:49815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20814 comm="syz.0.5806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff077f1f749 code=0x7ffc0000 [ 400.715450][ T29] audit: type=1326 audit(1765327407.230:49816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20814 comm="syz.0.5806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff077f1f749 code=0x7ffc0000 [ 400.739116][ T29] audit: type=1326 audit(1765327407.230:49817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20814 comm="syz.0.5806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff077f1f783 code=0x7ffc0000 [ 400.762588][ T29] audit: type=1326 audit(1765327407.230:49818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20814 comm="syz.0.5806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff077f1e1ff code=0x7ffc0000 [ 400.786001][ T29] audit: type=1326 audit(1765327407.230:49819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20814 comm="syz.0.5806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff077f1f7d7 code=0x7ffc0000 [ 400.809486][ T29] audit: type=1326 audit(1765327407.230:49820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20814 comm="syz.0.5806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff077f1df90 code=0x7ffc0000 [ 400.833145][ T29] audit: type=1326 audit(1765327407.230:49821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20814 comm="syz.0.5806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff077f1e3aa code=0x7ffc0000 [ 400.856579][ T29] audit: type=1326 audit(1765327407.230:49822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20814 comm="syz.0.5806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff077f1f749 code=0x7ffc0000 [ 400.880224][ T29] audit: type=1326 audit(1765327407.230:49823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20814 comm="syz.0.5806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff077f1f749 code=0x7ffc0000 [ 400.953032][ T29] audit: type=1326 audit(1765327407.249:49824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20814 comm="syz.0.5806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7ff077f1f749 code=0x7ffc0000 [ 401.017170][T20813] syz.9.5801: attempt to access beyond end of device [ 401.017170][T20813] loop9: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 401.030856][T20813] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 401.061884][T20813] syz.9.5801: attempt to access beyond end of device [ 401.061884][T20813] loop9: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 401.075578][T20813] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 401.893220][T20840] set_capacity_and_notify: 4 callbacks suppressed [ 401.893262][T20840] loop8: detected capacity change from 0 to 128 [ 401.907936][T20840] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.559501][T20871] loop7: detected capacity change from 0 to 8192 [ 402.570062][T20874] loop8: detected capacity change from 0 to 512 [ 402.575619][T20871] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 402.576755][T20874] EXT4-fs: Ignoring removed oldalloc option [ 402.585361][T20871] FAT-fs (loop7): Filesystem has been set read-only [ 402.614820][T20874] ext4 filesystem being mounted at /258/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 402.630818][T20874] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5827: bg 0: block 217: padding at end of block bitmap is not set [ 402.730903][T20885] loop7: detected capacity change from 0 to 8192 [ 402.899637][T20890] __nla_validate_parse: 4 callbacks suppressed [ 402.899654][T20890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5833'. [ 403.141989][T20901] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5838'. [ 403.414770][T20917] loop9: detected capacity change from 0 to 512 [ 403.422057][T20917] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 403.433952][T20917] EXT4-fs (loop9): 1 truncate cleaned up [ 403.452894][T20922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5847'. [ 403.479517][T20926] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5849'. [ 403.535921][T20933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5852'. [ 403.734675][T20958] loop8: detected capacity change from 0 to 512 [ 403.753671][T20958] EXT4-fs (loop8): 1 orphan inode deleted [ 403.760019][T20958] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.772621][T10183] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:15: Failed to release dquot type 1 [ 403.798393][T20963] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5863'. [ 403.839537][T20969] netlink: 236 bytes leftover after parsing attributes in process `syz.8.5866'. [ 403.902674][T20970] loop9: detected capacity change from 0 to 8192 [ 403.950981][T20974] loop8: detected capacity change from 0 to 8192 [ 403.966297][T20974] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 403.975051][T20974] FAT-fs (loop8): Filesystem has been set read-only [ 404.130635][T20979] loop8: detected capacity change from 0 to 128 [ 404.152268][T20979] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5870'. [ 404.163059][T20979] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fff0000) [ 404.170903][T20979] FAT-fs (loop8): Filesystem has been set read-only [ 404.324721][T20982] ================================================================== [ 404.332802][T20982] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 404.340787][T20982] [ 404.343104][T20982] write to 0xffff88811b576614 of 4 bytes by task 20979 on cpu 1: [ 404.350815][T20982] xas_set_mark+0x12b/0x140 [ 404.355047][T20979] ÿ: attempt to access beyond end of device [ 404.355047][T20979] loop8: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 404.355318][T20982] tag_pages_for_writeback+0xc2/0x290 [ 404.355349][T20982] writeback_iter+0x340/0x820 [ 404.368205][T20979] Buffer I/O error on dev loop8, logical block 128, lost async page write [ 404.373517][T20982] mpage_writepages+0x87/0x1250 [ 404.373548][T20982] fat_writepages+0x24/0x30 [ 404.373571][T20982] do_writepages+0x1c6/0x310 [ 404.373595][T20982] file_write_and_wait_range+0x156/0x2c0 [ 404.373615][T20982] __generic_file_fsync+0x46/0x160 [ 404.373637][T20982] fat_file_fsync+0x49/0x100 [ 404.373657][T20982] vfs_fsync_range+0x10d/0x130 [ 404.420575][T20982] generic_file_write_iter+0x1b8/0x2f0 [ 404.426023][T20982] iter_file_splice_write+0x66b/0xa20 [ 404.431375][T20982] direct_splice_actor+0x156/0x2a0 [ 404.436463][T20982] splice_direct_to_actor+0x312/0x680 [ 404.441813][T20982] do_splice_direct+0xda/0x150 [ 404.446554][T20982] do_sendfile+0x380/0x650 [ 404.450951][T20982] __x64_sys_sendfile64+0x105/0x150 [ 404.456137][T20982] x64_sys_call+0x2db1/0x3000 [ 404.460803][T20982] do_syscall_64+0xd8/0x2a0 [ 404.465312][T20982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.471186][T20982] [ 404.473492][T20982] read to 0xffff88811b576614 of 4 bytes by task 20982 on cpu 0: [ 404.481094][T20982] file_write_and_wait_range+0x10e/0x2c0 [ 404.486712][T20982] __generic_file_fsync+0x46/0x160 [ 404.491819][T20982] fat_file_fsync+0x49/0x100 [ 404.496389][T20982] vfs_fsync_range+0x10d/0x130 [ 404.501134][T20982] generic_file_write_iter+0x1b8/0x2f0 [ 404.506581][T20982] iter_file_splice_write+0x66b/0xa20 [ 404.511942][T20982] direct_splice_actor+0x156/0x2a0 [ 404.517034][T20982] splice_direct_to_actor+0x312/0x680 [ 404.522383][T20982] do_splice_direct+0xda/0x150 [ 404.527123][T20982] do_sendfile+0x380/0x650 [ 404.531530][T20982] __x64_sys_sendfile64+0x105/0x150 [ 404.536708][T20982] x64_sys_call+0x2db1/0x3000 [ 404.541369][T20982] do_syscall_64+0xd8/0x2a0 [ 404.545856][T20982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.551728][T20982] [ 404.554035][T20982] value changed: 0x02000021 -> 0x04000021 [ 404.559726][T20982] [ 404.562028][T20982] Reported by Kernel Concurrency Sanitizer on: [ 404.568152][T20982] CPU: 0 UID: 0 PID: 20982 Comm: syz.8.5870 Not tainted syzkaller #0 PREEMPT(voluntary) [ 404.577948][T20982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 404.587987][T20982] ================================================================== [ 404.611700][T20982] syz.8.5870: attempt to access beyond end of device [ 404.611700][T20982] loop8: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 404.625458][T20982] Buffer I/O error on dev loop8, logical block 128, lost async page write