last executing test programs: 9m58.509246351s ago: executing program 32 (id=661): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0xa401, 0x0) write$P9_RWALK(r0, 0x0, 0x30) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r7 = creat(&(0x7f0000000400)='./file0\x00', 0xc9028ba210c11ff0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x3c, r9, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x29, 0x40, 0x0, 0x8, 0x52, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x20, 0x6, 0x12b158ca}}) getpeername$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000600)={'gre0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x20, 0x8000, 0x31, 0xb5da, {{0x16, 0x4, 0x1, 0x4, 0x58, 0x67, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}, {[@cipso={0x86, 0x2c, 0x2, [{0x1, 0x6, "1d246d9b"}, {0x6, 0x7, "5b5be344e0"}, {0x0, 0xb, "7f3c7a3b7c8e4716ce"}, {0x1, 0x3, "b5"}, {0x2, 0xb, "a584f62e2eac052cf9"}]}, @timestamp={0x44, 0x18, 0x12, 0x0, 0xe, [0x9, 0x1, 0x9, 0x1, 0x6]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r4, 0x58, &(0x7f0000000640)}, 0x10) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000880), &(0x7f00000008c0)=0x4) timerfd_settime(r7, 0x2, &(0x7f0000000980)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000b80)) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80400, 0x200000002006, 0x7fc}) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000018c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000001d0900020073797a310000000008000a40fffffffc4c0000000c0a0101000000000000000007b14c060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a3100"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m52.598212168s ago: executing program 33 (id=741): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYBLOB="00008c002a8d5c1563dd779e9a3550701326518c9ca1360100002077bbe439599b05ce43c676fb56ca01f371733e5a065fee195fe79d93f828f6984b837c23a35e9c6cc15acd07edeed84d67906f5ac5155038bdfca0073811ab61ed05105109e34b2ef9aacbf7ab565fb60ab5fcdeb15580282ef0d3a630a0e606cc60ed"], 0x94) 9m47.172641043s ago: executing program 34 (id=811): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) 9m45.249456807s ago: executing program 35 (id=830): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x4001) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r1, r4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r4, &(0x7f0000000080)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYBLOB="00008c002a8d5c1563dd779e9a3550701326518c9ca1360100002077bbe439599b05ce43c676fb56ca01f371733e5a065fee195fe79d93f828f6984b837c23a35e9c6cc15acd07edeed84d67906f5ac5155038bdfca0073811ab61ed05105109e34b2ef9aacbf7ab565fb60ab5fcdeb15580282ef0d3a630a0e606cc60ed"], 0x94) 9m43.564878s ago: executing program 36 (id=844): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpid() perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0xe, 0x0, 0x0, 0x0, 0x808, 0x4858c, 0xee353cc557df3748, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x2012, 0x4, 0x2, 0x2, 0x3, 0x2, 0x4, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) 9m42.294943576s ago: executing program 37 (id=851): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newtclass={0x50, 0x28, 0x100, 0x2, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x9}, {0x5, 0x5}, {0x0, 0x1}}, [@tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_sfq={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048005}, 0x20044040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfdee) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000002"], 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0xb, &(0x7f0000000000)=0x1a, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@gettaction={0x14, 0x32, 0x605, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x4004000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x7c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x80000000, 0x0, 0x9, 0xd, 0x25, 0x2, 0x0, 0x1, 0x81}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1, 0x2, 0x9, 0x1, 0x4, 0xd}}, {0x4}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r8, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) writev(r3, &(0x7f0000000180)=[{&(0x7f00000002c0)='=', 0x1}], 0x1) signalfd4(r2, &(0x7f0000000300)={[0x1]}, 0x8, 0x800) sendto$inet6(r8, 0x0, 0xfc00, 0x700, 0x0, 0x0) 7m29.566753879s ago: executing program 38 (id=2679): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, 0x0, 0x0) 6m52.634222353s ago: executing program 39 (id=3572): r0 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x4ed}], 0x1}}], 0x1, 0x0) 6m30.916824705s ago: executing program 40 (id=3661): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffe, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x9, 0x1d, "534a85015f0f2b8f5dd68b0cb81a0553fbc127b115288b938a4a82f15e7fe002c05a09fb03ce28eefc8e36339f3329659065f6bd44cfabfd3fc6a206342bf35e", "4eb50fabe4d9a620f7327881d26a2b29a8e1f42f7907521c250cacdcb6f027ac9ff0cc0ac6a807db43e82b13d8bc1bb0ad752906a0a2c501ecab0549c519248f", "e892038420710000009c8400", [0x4, 0xfffffffffffffffc]}) 5m43.003174886s ago: executing program 4 (id=4690): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x482, &(0x7f0000000700)=ANY=[@ANYBLOB="6e72322c00000000000000c600d27ada9695089cd0913792b4e0e424595d290fa22dcf5afe12844fbe7e5611e352f91c940c518baed85cb481d638d00e16b0a76a7a98d83a9119151e22b3b1b6"]) chdir(&(0x7f0000000140)='./file0\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x14, 0xb8, &(0x7f0000000280)="ef23c27808409da6d4bf86ea009a62b6978ce5ae7974ad6a7bc80ea695ee66e2951504d6ba52670d80b9eb2f69722867f936a6a30914190d7c5df2dee7669914fdbe65c567e88c86f1738e93fc892a7eb9fce9554a1edee798b9f7a7c68bfe6180a895396b4c3eed3c1b245daf0c874bc836eaaba139a6d9c7677427983e88c5ec1114714e4b4a5731639b4a8e9e22b9bc2a43a8be002a964c45674c7887ae9518dbf0cc0bdbabd8194743cc136404d2e717134ee717efbd81f6e06f3b5a85a931ec045a2df14f05be6c3cc6e2bc8935f1a7be7861586307759f56daf4e1a09fd3887abf3b10debbdf18c16f5365efdb9daa17d8fcd4f858c758a795da274bbb21bdf16a653a17696a98ae48f3bedf9c8f0b33bed9926f4d7032c28f441a8a4e716ccd4656f513acf55680f48209dfe426922184e4c307f98b6cd90e9ea0171c762f612fdda863bda0625e16db30986da98abcea638d9d635dda1d021baea57dcb2d57edb517a95944768c80bc3f17eb2bc520afcc9a0ec3b057ec1dee74e58005051470a9d2b320c5418b77619b20051f2ada18ab037bc9fd958cfd06d02fb0bdc8f90f29d6c08a94ca13642f67c4a23b302372ff1db2385b123478f6ed0e3a67f13c0d4253c7a178ad10c7045c097836068f7afbd956ea469128ac533dff0664b7f253625c77a1274834d4e90635628e6df0d18b686c99a215ce3fe9fc2e4bb44ad843da7eb6c1fb302c16ee2d40371268cb32a14a4572b3b6707b011a374a127d9e580a7370fb303a176c4b903dddc498ae7ca437186b8a5688c879f1eeb6755b9b26ed1682131ab789b09250982a8caa6f9b978539f62505ba28550afe87906b03c42b00347123e4c51e9d7d643d0ab1dbd06262822422531c216f2221ad002f9bdb0134a88f7c9b86569016dcdeb7aca81d84c2e02f7eb71f73ddfbb01dc485ef4101378a6c3c8c298887304ee9aca61e432e08be59438b72daef2ec8454bd16a8ebe3e0bee547f6fe3847e39d770519dde47e92c8e09edd4a8068d21f68a4a77dec54531874de1dcb64b76f7bb30a860b1538df3c3e78f94ac5b979c4d3e7e3afcac364185e1e5e1e2a4edce1562c898bf5aca3c37b7db9f677173d7722416c3f924f04f03dfef7c53388b5028f1d1f600b16e7be59b86150b4eec2f10653f58ea8d82f2f7834bc5db2e69cc8c608d3397fae66e496cc24c64d8dd0cbae87e14d4d5aeefa38ed34dade634a78e92c329dc579b4ea4a4e574093927ccd5aad8f731c6750f787aa3479e2a4e06473f22b37f9f092e33fb56aa24f6a832530e19dc86c5e8808191dccdfaa3756859a8807053ce9e9be7465a8e44362dae1a160494d35bd76203cfcf0c2e190719f40a6c803728cd02bc45419c5d586aff3edc84c246b0fa09f2cf9565364426934120646322e1410f2e1ddadfe3867b26b4"}) syz_init_net_socket$llc(0x1a, 0x802, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffd}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x24040095}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) io_uring_setup(0x2662, &(0x7f0000000680)={0x0, 0x2637, 0x2, 0x2, 0x10001d4}) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r7], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 5m41.834154687s ago: executing program 4 (id=4704): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newtclass={0x50, 0x28, 0x100, 0x2, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x9}, {0x5, 0x5}, {0x0, 0x1}}, [@tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_sfq={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048005}, 0x20044040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfdee) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000002"], 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x1a, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@gettaction={0x14, 0x32, 0x605, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x4004000) 5m40.936870116s ago: executing program 4 (id=4726): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000040bf91000000000000b7020000010000008500000084000000b700000000000000950000000000000052a39ba0fc2e6948c8ba8f106bf8a9c83c4af61d31b65ad92fae45c80f6815481ca8c5b8d7a123ef3e84fb6a13c135bd83d917bd4d51f70b098d61c34e2e656a887db51bf6d555c5389ea6c674fb1b12d9cd816a9fda7207f2e1b7642c3bce62ee0aa1cc05f273a38da273cac997e58cd0f0078f9031fc38ed9dd501eb5a8ddd6895eb66e57f456812455177c9b6584badb58131c7cd4ce86ebc0097a5ec7422c026410878a3c462979341dc94e9ab27008120d621333138e094786e0f31124e4966834d5d9d86bd1214ae3803619e6930"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x1a00404, &(0x7f0000000080)={[{@noblock_validity}, {@grpquota}]}, 0x1, 0xbb9, &(0x7f00000017c0)="$eJzs3M1rHGUYAPBnJpvv2KQiaotgQKqiuE2bUqGn1rOooAePjcmmhGw/TCKY0ENa7+pBxENB+icI3u3Fk+ChHrT+BUUsUvTS9rAy+5Gu2WwSk81Om/5+8Gbed97JPs+T2e68AzsN4Ik1nv1IIw5FxNkkYrS+P42IvmpvIGK1dtz9u5ens5ZEpfL+X0kkEXHv7uXpxmsl9e1wfTAQETffSuLpz1rjLi6vzE+Vy6WF+vjo0vlLRxeXV96YOz91rnSudOHE5JsnJk9OTnaw1tuXPvrmhV/eefnq9c8n3v36wE9JnI6R+lxzHZ0yHuNrf5NmhYiY6nSwnPTU62muMynkmBAAAJtKm9Zwz8Zo9MTDxdto/PhrrskBAAAAHVHpiagAAAAA+1zi/h8AAAD2ucb3AO7dvTzdaPl+I6G77pyJiLFa/Y3nm2szhVitbgeiNyKG/k6i+bHWpPZruzaeRfr+51LWYqvnkAc7EHCd1SsR8fxG5z+p1j9WfYq7tf40IiY6EH983bjb77/d1H+6A/Hzrh+AJ9ONM7ULWev1L62tf/pro/XXv8IG166dyPv611j/3W9Z/6Vr67+eNuu/97YZ4/CD1262m2te/334xe8zWfxsu6ui/oc7VyIOFzaqP1mrP2lT/9ltxhievn2t3VxWf1Zvo3W7/sr1iCPV1Vxr/Q3JZv8/0dHZuXJpovZzg9dfPrl5/Obzn7UsfuNeoBuy8z8UOzv/l7YZY+y5Pw+1m9u6/vSPvuSDaq+vvufTqaWlhWMRfcnbrfuPb55L45jGa2T1v/rS5v/+N6o/+0xYrf8dsnfPlfo2G19dF3P4yPHvdl7/3srqn9nh+f9ymzG+/eHax+3m8q4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMdDGhEjkaTFtX6aFosRwxHxTAyl5YuLS6/PXvzkwkw2FzEWvensXLk0ERGjtXGSjY9V+w/Hx9eNJyPiYER8NTpYHRenL5Zn8i4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANcMRMRJJWoyINCL+GU3TYjHvrAAAAICOG8s7AQAAAGDPuf8HAACA/a/l/r/wn9FAN3MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgXzr44o1bSUSsnhqstkxffa4318yAvZZu77Chvc4D6L6evBMAclNo6lcqlUqOqQBd5h4fSLaYH2g709/xXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4dL1y6MatJCJWTw1WW6avPteba2bAXkvzTgDITc9mk8mWO4DHWCHvBIDcuMcHaiv7B5Wa1vmBtr/Zv+uoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw+RqotSYsRkVb7aVosRjwVEWPRm8zOlUsTEXEgIn4b7e3PxsfyThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICOW1xemZ8ql0sLOvu2U6mf60clnyejMxhdizVYP8FtjulvP7VJJ8cPJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcrO4vDI/VS6XFhbzzgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI2+LyyvxUuVxa2MNO3jUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCffwMAAP//xB0HRA==") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4e0, 0x0, 0x0, 0x0) r3 = gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0xc4642, 0x1eb) 5m40.537953394s ago: executing program 4 (id=4738): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@jqfmt_vfsv1}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x100000000000006a) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa666ae27a87c986dd6900000000140601fe8000000000000000000000000039fe8000000000000000000000000000aa4e224e2400", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) ptrace$setregs(0xd, r3, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r3, 0x80000001, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000002000000000000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf9100000000f3ffb7e0c889020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r7}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r8) syz_open_pts(r6, 0x141601) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setresuid(0xee00, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f00000000c0)={0x200000000005, 0x8000000000200003}, 0x0) setpriority(0x2, 0x0, 0xffffffffffffffcd) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000e00)={0x17c04, r0, 0x6, 0x24000003, 0x400000006, 0x7}) 5m39.857006993s ago: executing program 4 (id=4740): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x78, 0x6}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) 5m39.508976908s ago: executing program 4 (id=4743): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYRESOCT=r1], &(0x7f0000000680)='syzkaller\x00', 0x5a3b, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20042005) connect$unix(r2, &(0x7f0000000080)=@abs, 0x6e) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101002, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r3, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) 5m39.508171838s ago: executing program 41 (id=4743): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYRESOCT=r1], &(0x7f0000000680)='syzkaller\x00', 0x5a3b, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20042005) connect$unix(r2, &(0x7f0000000080)=@abs, 0x6e) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101002, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r3, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) 4m52.310109477s ago: executing program 5 (id=5358): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x1a00404, &(0x7f0000000080)={[{@noblock_validity}, {@grpquota}]}, 0x1, 0xbb9, &(0x7f00000017c0)="$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") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4e0, 0x0, 0x0, 0x0) r3 = gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_writev(r3, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0xc4642, 0x1eb) 4m51.048842052s ago: executing program 5 (id=5363): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xff}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 4m50.403271351s ago: executing program 5 (id=5367): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 4m50.335656983s ago: executing program 5 (id=5368): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x1000090, &(0x7f0000003240)=ANY=[], 0x6, 0x368, &(0x7f0000000680)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r3 = eventfd(0x0) io_submit(r2, 0x2, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x100, r3, &(0x7f0000000100)="0000fd6000000000", 0x8, 0x3}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r3, 0x0, 0x0, 0x1000a, 0x0, 0x1, r3}]) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000000000000f8fb86fdf603c3f90199d947000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xe, &(0x7f0000000a00)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @exit, @map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x9b5}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x61}], 0x0, 0x200, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x22, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000, 0x2000}]) 4m50.147395991s ago: executing program 5 (id=5372): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x4051}, 0x20048010) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b000000000000001000e3ff01000000050000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='kmem_cache_free\x00'}, 0x18) socket$kcm(0xa, 0x5, 0x106) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x3, {0x2, 0xff}, 0xfe}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 4m49.921376851s ago: executing program 5 (id=5376): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x182000, 0xa8) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) close(0x3) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) (async) fcntl$setstatus(r0, 0x4, 0x42000) (async) openat(r0, &(0x7f0000000040)='./file0\x00', 0x182000, 0xa8) (async) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) (async) fcntl$setstatus(r1, 0x4, 0x2400) (async) close(0x3) (async) 4m49.891586832s ago: executing program 42 (id=5376): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x182000, 0xa8) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) close(0x3) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) (async) fcntl$setstatus(r0, 0x4, 0x42000) (async) openat(r0, &(0x7f0000000040)='./file0\x00', 0x182000, 0xa8) (async) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) (async) fcntl$setstatus(r1, 0x4, 0x2400) (async) close(0x3) (async) 4m38.456699158s ago: executing program 0 (id=5547): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 4m38.384931632s ago: executing program 0 (id=5548): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='kfree\x00', r0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4m38.276427537s ago: executing program 0 (id=5549): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d0000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='ib_mad_recv_done_handler\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x3, 0xfc, 0x0, 0x7ffc0002}]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x31, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2208810, &(0x7f0000000080), 0xfe, 0x581, &(0x7f0000000780)="$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") r3 = creat(&(0x7f0000000100)='./bus\x00', 0x32) mount(&(0x7f0000000140)=@sr0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x800, 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r4, &(0x7f0000000200)=[{&(0x7f0000004300)=""/4096, 0x1000}], 0x1, 0x3400, 0x2, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000bc0)={@local, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "19f14d", 0x10, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, "1d00"}}}}}}}, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0xfd44) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000070000000cf00680080012a91b3c5cff0500010006000000058005000200000400000000000900020073797a31466db60000000011000300686173683a69702c6d61726b00000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000340)={@loopback, @multicast2}) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x100000001, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x4000000000000, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) 4m38.102892784s ago: executing program 0 (id=5553): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000180)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x2000000) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x25c, &(0x7f0000000440)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r4, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x17b, 0x0, 0x0, 0x10, 0x8, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) (async) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x17b, 0x0, 0x0, 0x10, 0x8, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r7, 0x0, 0x4}, 0x18) socket(0x1e, 0x4, 0x0) (async) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000180)=@req={0x401, 0xd07, 0x0, 0xffffffff}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) close(r8) write$cgroup_int(r0, &(0x7f0000000380), 0x1040c) (async) write$cgroup_int(r0, &(0x7f0000000380), 0x1040c) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="000000000000000010011a80100003800400058008000000000000000800038030000180050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839fda9d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675000018014000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000000500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e83c000c"], 0x270}}, 0x0) close(r0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x802) (async) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x802) syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) (async) r12 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r13, r14, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r12, 0x207a98, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r12, 0x207a98, 0x0, 0x0, 0x0, 0x0) dup2(r2, r3) (async) dup2(r2, r3) 4m37.819755627s ago: executing program 0 (id=5558): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 4m37.124849537s ago: executing program 0 (id=5564): bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x24000845}, 0x4008840) 4m37.088189638s ago: executing program 43 (id=5564): bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x24000845}, 0x4008840) 4m4.403389697s ago: executing program 6 (id=6118): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcfffffa, 0x4031, 0xffffffffffffffff, 0x41d1000) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001, 0x1ff}, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000a80)={{0x80, 0x7}, 'port1\x00', 0x44, 0xa04f2, 0x10000000, 0x0, 0x6, 0x6, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000004c0)={0x800100, 0xfffffffd, 0x0, 0x8, 0x9, 0x6}) 4m4.211055685s ago: executing program 6 (id=6119): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20042005) connect$unix(r1, &(0x7f0000000080)=@abs, 0x6e) getsockname$packet(r1, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101002, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r2, 0x0) write$cgroup_subtree(r2, 0x0, 0x32600) 4m3.339172124s ago: executing program 6 (id=6132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='io_uring_cqring_wait\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x6148, 0x0, &(0x7f0000000040), &(0x7f0000000140)) io_uring_enter(r1, 0x2241, 0x1b86, 0x1, 0x0, 0x0) 4m3.263909646s ago: executing program 6 (id=6133): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x240) getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r2, 0x0, 0x1000000000000000}, 0x18) socket$caif_stream(0x25, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x88) r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x103642, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x1ffffffffffffffd}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) dup(r3) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pipe(&(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001780)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00R'], 0x54}, 0x1, 0x0, 0x0, 0x200048c1}, 0x0) 4m3.19697709s ago: executing program 6 (id=6136): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) writev(r1, &(0x7f0000000a80)=[{&(0x7f0000000880)="76b0", 0x2}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendfile(r1, r0, 0x0, 0x7fffeff9) (fail_nth: 5) 4m2.915665942s ago: executing program 6 (id=6138): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x97}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffb1}, 0x48) 4m2.891808003s ago: executing program 44 (id=6138): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x97}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffb1}, 0x48) 3m40.308785093s ago: executing program 8 (id=6490): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x290800, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x2000000000000095, &(0x7f0000000900)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000076", @ANYRESOCT=r2, @ANYRESDEC=r1, @ANYRES64=r0], &(0x7f00000004c0)='GPL\x00', 0x8001, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) r5 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) fcntl$setlease(r4, 0x400, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) semtimedop(0x0, &(0x7f0000000300)=[{0x3, 0xfff7, 0x1000}], 0x1, 0x0) semctl$SETVAL(0x0, 0x3, 0x10, &(0x7f0000000040)=0x4) 3m40.271895115s ago: executing program 8 (id=6492): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='ib_mad_recv_done_handler\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x3, 0xfc, 0x0, 0x7ffc0002}]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x31, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2208810, &(0x7f0000000080), 0xfe, 0x581, &(0x7f0000000780)="$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") r3 = creat(&(0x7f0000000100)='./bus\x00', 0x32) mount(&(0x7f0000000140)=@sr0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x800, 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r4, &(0x7f0000000200)=[{&(0x7f0000004300)=""/4096, 0x1000}], 0x1, 0x3400, 0x2, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000bc0)={@local, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "19f14d", 0x10, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, "1d00"}}}}}}}, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0xfd44) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000070000000cf00680080012a91b3c5cff0500010006000000058005000200000400000000000900020073797a31466db60000000011000300686173683a69702c6d61726b00000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000340)={@loopback, @multicast2}) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x100000001, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x4000000000000, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) 3m40.048582394s ago: executing program 8 (id=6498): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1210888, &(0x7f00000005c0)=ANY=[], 0x4a, 0x2e4, &(0x7f0000000340)="$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") syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount(0x0, &(0x7f0000000200)='.\x00', 0x0, 0x208904, 0x0) r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0xffffffff, 0x10100}, &(0x7f0000000480), &(0x7f0000000300)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0xc5f7}, &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@secondary) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400000008000000080000000000", @ANYRES32, @ANYBLOB="9b5800"/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000000000000000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000f7ff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x80000001}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000fdffff1419110000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000190a01"], 0x2c}}, 0x0) (fail_nth: 2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000001380), 0x1, 0x20442) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 3m39.800814145s ago: executing program 8 (id=6501): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x700, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102}}}}) r1 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@discard}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fef000/0xf000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r1}, 0x68) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setreuid(0xee01, 0xee01) r6 = getpgid(0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x2, r6}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r7}, 0x10) syz_read_part_table(0x5d6, &(0x7f0000000600)="$eJzs3LFrU2sYB+AvRSIKIm5uBjNEXFLIGCJoiIcSMCF40UFEtzpk0ckhRjAgDsYlIrjUQRFqUC46iQiCiIlDIVNpae/SltLhUugSKCWXS0/+gN5LCsLzwDd8L7/zveflcMZzAr+1qfD3aDRKhBBGRw9+9R/zpcszqerF2tUQEuFGCGH6z/zs/rn7xqeejfer8T735Uj96Xz0uN05cfpTavfXOP8wXhv9lzf/93BM3Ll757+dGQ5OfS6HV70Lvfzx+vXZbqbY7C5UP156k3o7fu7ZCfX/UPhx8lHrbtS+X7izGDXWos2pne3oyou5bPJZs5bZmo5ztybUv753Lfnu9fdia/1Y7me5Uum8X36ebpS+th4M+uml4ZPbcW7lP7xdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcvnP3zn87Mxyc+lwOr3oXevnj9euz3Uyx2V2ofrz0JvX2bJzLTqj/h8KPk49ad6P2/cKdxaixFm1O7WxHV17MZZPPmrXM1nScuzWh/vW9a8l3r78XW+vHcj/LlUrn/fLzdKP0tfVg0E8vDZ/cjnMrRyd0AwAAAAAAAAAAAAAAAAAAABBCKF2eSVUv1q6GkAg3Qgj5uZnlf+uj+Hv3RJwb/wdgNa7nvhypP52PHrc7J05/Su3++iuuP4zXRv/lzUMfhgP7JwAA//9Cp4ox") sendmmsg$unix(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x15) sendfile(r3, r2, 0x0, 0x3ffff) 3m39.604340954s ago: executing program 8 (id=6507): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000002000007b8af8ff00000000b7080000081000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4, 0x0, 0x4}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x8000) 3m39.277809617s ago: executing program 8 (id=6513): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x290800, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x2000000000000095, &(0x7f0000000900)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000076", @ANYRESOCT=r2, @ANYRESDEC=r1, @ANYRES64=r0], &(0x7f00000004c0)='GPL\x00', 0x8001, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) r5 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) fcntl$setlease(r4, 0x400, 0x1) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r6, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) semtimedop(0x0, &(0x7f0000000300)=[{0x3, 0xfff7, 0x1000}], 0x1, 0x0) semctl$SETVAL(0x0, 0x3, 0x10, &(0x7f0000000040)=0x4) 3m39.208557171s ago: executing program 45 (id=6513): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x290800, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x2000000000000095, &(0x7f0000000900)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000076", @ANYRESOCT=r2, @ANYRESDEC=r1, @ANYRES64=r0], &(0x7f00000004c0)='GPL\x00', 0x8001, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) r5 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) fcntl$setlease(r4, 0x400, 0x1) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r6, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) semtimedop(0x0, &(0x7f0000000300)=[{0x3, 0xfff7, 0x1000}], 0x1, 0x0) semctl$SETVAL(0x0, 0x3, 0x10, &(0x7f0000000040)=0x4) 4.689270649s ago: executing program 3 (id=9521): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}], 0x1, 0x60010000, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ftruncate(r3, 0x3) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@local, @in=@local}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r6, &(0x7f00000000c0)=[{0x4, 0x0, 0x800}, {0x2}], 0x2) semop(r6, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) semctl$IPC_RMID(r6, 0x0, 0x0) setregid(0xffffffffffffffff, r5) r7 = getgid() lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="02000000010006000000000002000100", @ANYRES32=r4, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="02000000", @ANYRES32, @ANYBLOB="02000000", @ANYRES32, @ANYBLOB="02000200", @ANYRES32, @ANYBLOB="040001000000000008000000", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="10000400000000002000060000000000"], 0x74, 0x4745d7f32fab0666) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x0, 0xffffffffffffffff}}, './file0\x00'}) getresgid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) statx(r3, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x400, &(0x7f0000000480)) 4.206985549s ago: executing program 3 (id=9524): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800400, &(0x7f0000000080)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@user_xattr}, {@errors_remount}, {@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}]}, 0xfe, 0x45d, &(0x7f0000001480)="$eJzs3MtvG0UYAPBvnTjpg5JQyqMvCBRExSNp0gc9cCkCiQNISHAo4hTStCp1G9QEiVYVFA7hiCpxRxyR+Au4UC4IOCFxhTtCqlAvFE5Gu95NXcd27MaNof79pFVndiee+XZ36vGM1wEMrImI2B0R90TErxExFhFJY4GJ2j83rl+a+/v6pbkkqtU3/kyycn9dvzRXFC3+bmstUx1qU+/y2xGzlcr8+Tw/tXT2vanFCxefO3129tT8qflzM0ePHjq4d+TIzOGexLktbeuuDxf27HzlrSuvzR2/8s6PXyd53NEQR69MZGctM7bccOzJXlfWZ9vq0slwHxtCV8YjIr1c5az/j8VQbF45NhYvf9LXxgF3VLVaqo7euqtcl75cBe5i6WgeGETFG336+bfYNnD40XfXjsXKPMaNfKsdGY5SXqZ8B+ufiIjjl//5It3iDs1DAADUu3osIp5tNv4rxYN15e7N14bGI+K+iNgeEfdHxI6IeCAiK/tQRDzcZf0TDfnV45/q2G0F1qF0/PdCvrZ16/ivGP3F+FCe25bFX05Onq7MH8jPyf4oj6b56TZ1fPfSL5+1OlY//ku3tP5iLJi344/hhgm6E7Pl2fXEXO/ax7UFgNXxJ1Es46Tj450RsauL1y1nc4s1p5/+ak+rcmvH30YP1pmqX0Y8Vbv+l6Mh/kLScn1y+vkjM4enNkVl/sBUcVes9tPPy6+3qn9d8ffAtavV2NL0/l+JfzzZFLF44eKZbL12sfs6ln/7tOVnmtu7/5dmR5I3s/RIvu+D2aWl89MRI8mrq/fP3PzbIl+UT+///fua9//tcfNM7I6I9CbeGxGPRMSjedsfi4jHI2Jfm/h/ePGJd1ca1HH8o21esXfS+E+sdf2j/vp3nxg68/03rerv7PofylL78z3p9V8rrk4buJ5zBwAAAP8Xpew78ElpciVdKk1O1r7DvyO2lCoLi0vPnFx4/9yJ2nflx6NcKma6xurmQ6fzueEiP9OQP5jPG38+tDnLT84tVLqZTwR6b2uL/p/6vd0DPMDdwfNaMLj0fxhc+j8MLv0fBpf+D4OrWf//qA/tADbeGu//mzeqHcDGM/6HwaX/w+DS/2EgtXw2vrSuR/4l+pT4dmR9v9XQeSJK/5GQ75pEOZoeGu74xyxuI5FExGjTQ/3+nwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA3/g0AAP//wMnoQw==") 3.96825816s ago: executing program 3 (id=9528): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[], 0x0) 3.833855845s ago: executing program 3 (id=9531): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syslog(0x4, &(0x7f00000001c0)=""/138, 0x8a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100002100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(0xffffffffffffffff, 0x0, 0xff40) write$ppp(0xffffffffffffffff, &(0x7f0000000200)="bc72", 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x2ae, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0xf, 0x7, 0xe, 0xff, 0xe0}, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x42d}}]}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000600)={0xa0000013}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2e, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100004001ea1c003d37ceefc0300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x20008050}, 0x24040050) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@sr0, 0xee01, &(0x7f0000000180)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) 3.134873086s ago: executing program 9 (id=9541): unshare(0x24020400) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 3.065276688s ago: executing program 9 (id=9542): r0 = socket(0xa, 0x1, 0x10000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pidfd_send_signal(0xffffffffffffffff, 0x5, 0x0, 0x0) semop(0x0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semtimedop(0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e0000002e00810804fb7fec598f866b0a9a5972130000005e14060868bdc7f6c817b5b948000000007a0000a718", 0x2e}], 0x1}, 0x4) getsockopt$bt_hci(r0, 0x84, 0x2, 0x0, &(0x7f0000000080)) 2.940729754s ago: executing program 9 (id=9545): add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, &(0x7f0000000800)="3080", 0x2, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000980)={0x0, 0xfffffffffffffff9, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) lsm_set_self_attr(0x66, &(0x7f0000000500)=ANY=[@ANYBLOB="6500000000000000030000000000000043"], 0x43, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000740)={0x54, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xc1d}, {0xc, 0x90, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8064}, 0x40000) 2.899053495s ago: executing program 9 (id=9547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa083de, &(0x7f0000000140)={[], [{@smackfsdef}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}]}, 0x2, 0x474, &(0x7f00000012c0)="$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") r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f00000000c0)=0x5da, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4000a}, 0x1c) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) get_robust_list(0x0, 0x0, 0x0) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000000)={0x1, 0xe1}, 0x8) sendmsg(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000780)="ea", 0x1}], 0x1}, 0xc010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008000000b70d000000000000850400003400000095"], &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c000180060006008035"], 0x24}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r10) close_range(r8, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)='system.posix_acl_access\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="0200000001000200000000000400000000000000100003000000000020000700000000006d977ad6b3a0cd9f4e2143518c8234ee279a4fcbf9600cafe1c9ed3b23bed5cfb16de846214cbd80dfb2265efc490fd7e71c4e3474722c1226c1ed4404ac8cff8aca2a1cead788e5ae2492030e0b54ef9b8284657f3bab5fea45e46b33749beed1dbae945b3e6216e863c1a57d3322777842281a351654e6daa91154f535327d91a32364c334bcfeab5481135d0c784262aa8a67a20bde8e822824943a2558385008d1592533"], 0x24, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYRES64=0x0, @ANYRES16=r6, @ANYBLOB="0b06fdffffff000000003000000008000200", @ANYRES32=r7, @ANYRES64=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.363420738s ago: executing program 7 (id=9551): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffc}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) fcntl$lock(r3, 0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x200}) fadvise64(r1, 0x6d4, 0x1, 0x2) socket(0x840000000002, 0x3, 0x100) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000001000)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="06900000fffffffff96a9228fc7cf3fe1eef426f0b5c5c0bf8546359891c8f5679c9c39ce8f5dbd25bc9669804273e1f8498799c83fb19740a9030cfc4de540660146391ccb7bf1e10a97a31e57f7e12af0a5aae1be4"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="7800000010000100"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb3c002b800800030000000000080003000700000008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="5dfc030000000000080003000000000008000800", @ANYRES32, @ANYBLOB], 0x78}, 0x1, 0x2}, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x200026, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 2.038266592s ago: executing program 9 (id=9554): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001900010025bd7000fbcbdf250a101400ff02fe01aa3ca15408001f"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) link(&(0x7f00000019c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="080003"], 0x44}}, 0x0) 2.037566842s ago: executing program 7 (id=9555): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x200000, 0x0, 0x13}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c6d3e00194dd77ca56362b91567d581672ea5963380d5193d4c4e7dbb415c6c1ee5522d031ba132945142e983145c0efca7fb1df4848de46925a5251a91c9f9487b4356169f0e618175b929d81f593efa5439942bf58a9a852e7e1e96101a487bb0d20f4bad6afcb590d58e9e06d6220e0d1dd998640f7203968b41c4f4ccb317fe6200daff2fb87807ff30ce04d05334110a9c8dde7af40da1a21c746e7734fd5be937d67b3704fd30648addff6c197c", @ANYRES16=0x0, @ANYBLOB="000128bd7000fcffffff4f0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b00000000000600110001000000"], 0x4c}}, 0x20000011) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) r4 = msgget$private(0x0, 0x0) msgsnd(r4, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffffa0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r8}, 0x10) msgrcv(r4, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r4, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) r9 = creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53048d6) write$binfmt_elf32(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000d30000007f00000004"], 0x58) 1.792597483s ago: executing program 1 (id=9558): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd53) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 'queue1\x00', 0x2}) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000000)="238292", 0xfff6}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x18) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x1) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[], 0x288}}, 0x4000080) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x664, 0x101000) 1.778911423s ago: executing program 9 (id=9559): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = dup2(r4, r4) write$selinux_load(r5, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x43) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="10", 0x1, r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) r11 = dup(r3) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000001c0)=0x19) write$binfmt_script(r11, &(0x7f0000000000)={'#! ', './file0'}, 0xb) r12 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r13, 0x0, 0x39}, 0x18) write$UHID_CREATE2(r12, 0x0, 0x8) 1.459257457s ago: executing program 7 (id=9560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev2(r3, &(0x7f0000000780)=[{&(0x7f0000000700)="c1872d5f81af9b26d62e10aead8a1245a9b9fe07a09af089eb0f1ecadff7f30e8ab6a72da24c54b9f1b54df925df892e565a62d52ec3f0052d1c6b1657c3b51b7f6490b9f6eaeddd7225ecd36649df343c270f8bae546b00b2ea7990", 0x5c}], 0x1, 0x3, 0x7, 0x0) r6 = gettid() r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000180)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xcd, &(0x7f0000000300)=""/205, 0x40f00, 0x5c, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000240)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x10, 0xa, 0x8000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000400)=[r0, r0, r0, r3], &(0x7f0000000540)=[{0x2, 0x2, 0x9, 0x6}, {0x4, 0x3, 0x2}], 0x10, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='xdp_exception\x00', r7, 0x0, 0xfffffffffffffff8}, 0x18) sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="a7", 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) getpeername$inet6(r3, &(0x7f0000000800)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000840)=0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca, 0x9}]}, 0x10) 1.293200765s ago: executing program 7 (id=9561): bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x2, 0x37a, &(0x7f00000001c0)="$eJzs3U9oI1UcwPFf0mSapGyTgygK0oeLoJehjZ7FILsgBFy6G3FXEKbtREPGpGRCNSK2PXlUvHsSPJTeLHgoaM9CL970IoK3XgQFK6gj8y+ZZJI2DWnDtt8PlLy8934z8/Je4DdTJnPy1ufv16u2XjXakswoSYiInIoUJCmhRPCa9MqayGc/dNt25MWFP3569v7DSsavUHdLD14qKqUWl7774ONs0O1wXo4L75z8Xvzt+Mnjp0/+e/BezVY1WzWabWWoteYvbWPNMtVGza7rSt2zTMM2Va1hmy2//ZtgO1Zzc7OjjMbGrdxmy7RtZTQ6qm52VLup2q2OMt41ag2l67q6lZOYdLzqZqvsra4apQmD16d8MLgkrVbJmBORbKylsjeTAwIAADM1mP8n3ZT+vPw/opv/P5LFcvnOqnI79/L//eeO2gtvHiwG+f+hNiz/f/lnf1t9+b97OtHL/5v++UH1/Pz/Sxmd/8fEM6KbZeL8v3AJB4PJLGmxqkTfOzf/zwXfX8/u2/vLXoH8HwAAAAAAAAAAAAAAAAAAAACAx8Gp4+Qdx8mHr+Ff7xaC4D2upVHzPy8iGXf2Heb/Orv/8JFkvBv33Dm2Pt2qbFX816DDkYhYYv7rDHLXRnjnkXIV5HtrO4jf3qrMeS2lqtTceFmRvBS89RSJd5y7r5fvrChfEN+9TSkXjS9KXp6Ixn/rrU43vtgfH+xfkxduR+J1ycuP69IUSza8yN7+P1lR6rU3ygPxWa+fiPx65ZMCAAAAAMCU6apr6Pm7ro9q939lpFT1LhOZsix5+Wf4+f3y0PPzVP6Z1KxHDwAAAADAzWB3PqobkjRbXsGyhhWyMrJpCoVUX01aRIZ21gZq0mdteS4ywnGPRxP/CSZ+TUJEJhvXV+GnepEoLbgU4h54tyl4oopM9vGG4/eHk3r+z6Dp74tOU2JHvAWwE21KyhjhqcGDX3Ir1NDOt0duZzcYSLcmvGykjfic5V58O8kzVkI6VuMkYlteGGchPfXF139N7wvyykGwAj48v/OuZTrbMs6kDBTcXcSbeFIOAAAAcA31kv6w5tVoc/RBItGH5fCfewAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApuhSftJvoDB67/NXOVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg5v4PAAD//wEU8z8=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x121002, 0x161) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r1, 0x0) 922.63233ms ago: executing program 2 (id=9522): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 875.828272ms ago: executing program 1 (id=9562): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev2(r3, &(0x7f0000000780)=[{&(0x7f0000000700)="c1872d5f81af9b26d62e10aead8a1245a9b9fe07a09af089eb0f1ecadff7f30e8ab6a72da24c54b9f1b54df925df892e565a62d52ec3f0052d1c6b1657c3b51b7f6490b9f6eaeddd7225ecd36649df343c270f8bae546b00b2ea7990", 0x5c}], 0x1, 0x3, 0x7, 0x0) r6 = gettid() r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000180)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xcd, &(0x7f0000000300)=""/205, 0x40f00, 0x5c, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000240)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x10, 0xa, 0x8000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000400)=[r0, r0, r0, r3], &(0x7f0000000540)=[{0x2, 0x2, 0x9, 0x6}, {0x4, 0x3, 0x2}], 0x10, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='xdp_exception\x00', r7, 0x0, 0xfffffffffffffff8}, 0x18) sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="a7", 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) getpeername$inet6(r3, &(0x7f0000000800)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000840)=0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x9d}, 0x18) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca, 0x9}]}, 0x10) 873.922993ms ago: executing program 2 (id=9563): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 796.236406ms ago: executing program 2 (id=9565): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC], 0x48) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=@framed={{}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 759.958228ms ago: executing program 1 (id=9566): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001b40)=""/4082, 0xff2}], 0x1, 0x1, 0x0, 0xb) 743.305718ms ago: executing program 3 (id=9567): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = getpid() timer_create(0x7, &(0x7f0000000000)={0x0, 0x2d, 0xcbbc48433744eb72}, 0x0) syz_pidfd_open(r4, 0x0) r5 = socket(0x1e, 0xa, 0xff) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="aac4aaaaaaaaffffffffffff0800450000300000000000019078ac1e0001ac1414aa0b049078030000004500000000000000002f0000ac14140ae000000146a88c882fdc395673614cadeacfa3d5eae4bd31e0b2bcd5bde3ff264945c8619fabe1ad04c422db0b48fed984cb363afe6861eaaeb054d9ec59d6c00280a36631244c7249165482faea427af47216bbcb385dbff326103f4c2ee4385b17c2c1cc68239741213f84ab038d7419315885d6e3ec2493"], 0x0) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000002080)=0x800008a, 0x4) setsockopt$inet_int(r5, 0x0, 0x3, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r6, @ANYRES64=r1], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r7, 0x0, 0xbc3}, 0x18) r8 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r9 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) r12 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r12, 0x4b68, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000340)=@chain={'key_or_keyring:', r8}) r13 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="0100000200373a4541062101a59ea940d2cb0b36b8f5020000a00000050000000000eb000000a5e5be21c44e328e68f3922af831e4e51bfb30f7788fd57e51bc464355bd646d037ccc16ddb08a7b3a697aedb66ddd793acf37119e61f502d8bbb016f701890700000068d945af468c1c9090c76906b94e0f27761c75e58c82da54d010078660684a4106855beaf5e813ed18aa4acabb5bee7f082d24a16b01fc91471eba59152e716af8776ab90ac48bcbee6570df22513808ecab7a9680aa613a56aa11bfa73af4c4e94b5cfc855f0e910186d7e68ac24f8b125140ac5f7f4819168ce1c25550c6773b41011999d8d9827757d96c5e8aa4617cc54c5e67060a92661f84e698d1fe3cee10a85882cbecb29f2a22535ac50e64d95ecbab66f54373b94475e05b79a0a61bc2ae1e", 0x13b, r13) keyctl$KEYCTL_MOVE(0x1e, r8, r9, r9, 0x0) 600.165144ms ago: executing program 1 (id=9568): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001900010025bd7000fbcbdf250a101400ff02fe01aa3ca15408001f"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r6, @ANYBLOB="080003"], 0x44}}, 0x0) 575.173545ms ago: executing program 2 (id=9569): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r5, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r4, 0x407, 0x176) vmsplice(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)='{', 0x1}, {0x0}, {&(0x7f00000006c0)}], 0x3, 0xd) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r6, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180), 0x0, 0x1, 0x1}}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 339.459285ms ago: executing program 1 (id=9570): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 234.6705ms ago: executing program 2 (id=9571): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000000040), 0x840, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=rdma']) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) accept(r2, 0x0, 0x0) shutdown(r2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0xd0, 0x0, 0x4, 0x0, 0x7, 0x1018, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x40000008, 0x3}, 0x8240, 0x10000, 0x0, 0x6, 0x8, 0x20003, 0x5, 0x0, 0x200, 0x0, 0x20000004}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf12be83c3775454d}, 0xc, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="cc000000060101012bbd7000fcdbdf250700000a92b0a55d3c04455c2a707b43060000003a5280a4b77b33b8ac2a6b39644efe7e94e216aca15bb56246049c0639632d1c596ab6cd69bae823ddd23b8ae284caaa37b14b8431a7983066b635fd02d91df179bc059211435292accc6a705e075d4b0ed78260203ccb7b37aaab62927a0913d5ceaa874552012d8fa6f3d8d305c9d8091508974e104659cc7e1d035886e5a3a73451559996b2e0e16d49fa91cc5985972511174bba79362ed90c000100060000000000000000de"], 0xcc}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000900020073797a32000000000500010007000000050005000a2700000c00078008001240fffffffa050004000000000011000300686173683a69702c6d61726b00"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0xa, 0x2, 0x0) 227.20892ms ago: executing program 7 (id=9572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev2(r3, &(0x7f0000000780)=[{&(0x7f0000000700)="c1872d5f81af9b26d62e10aead8a1245a9b9fe07a09af089eb0f1ecadff7f30e8ab6a72da24c54b9f1b54df925df892e565a62d52ec3f0052d1c6b1657c3b51b7f6490b9f6eaeddd7225ecd36649df343c270f8bae546b00b2ea7990", 0x5c}], 0x1, 0x3, 0x7, 0x0) r6 = gettid() r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000180)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xcd, &(0x7f0000000300)=""/205, 0x40f00, 0x5c, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000240)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x10, 0xa, 0x8000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000400)=[r0, r0, r0, r3], &(0x7f0000000540)=[{0x2, 0x2, 0x9, 0x6}, {0x4, 0x3, 0x2}], 0x10, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='xdp_exception\x00', r7, 0x0, 0xfffffffffffffff8}, 0x18) sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="a7", 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) getpeername$inet6(r3, &(0x7f0000000800)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000840)=0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9d}, 0x18) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca, 0x9}]}, 0x10) 201.419071ms ago: executing program 1 (id=9573): r0 = socket$netlink(0x10, 0x3, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async, rerun: 64) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) (async) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 136.990334ms ago: executing program 3 (id=9574): bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x2, 0x37a, &(0x7f00000001c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x121002, 0x161) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r1, 0x0) 123.646744ms ago: executing program 7 (id=9575): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e0"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffc}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) fcntl$lock(r3, 0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x200}) fadvise64(r1, 0x6d4, 0x1, 0x2) socket(0x840000000002, 0x3, 0x100) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000001000)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="06900000fffffffff96a9228fc7cf3fe1eef426f0b5c5c0bf8546359891c8f5679c9c39ce8f5dbd25bc9669804273e1f8498799c83fb19740a9030cfc4de540660146391ccb7bf1e10a97a31e57f7e12af0a5aae1be4"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="7800000010000100"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb3c002b800800030000000000080003000700000008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="5dfc030000000000080003000000000008000800", @ANYRES32, @ANYBLOB], 0x78}, 0x1, 0x2}, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x200026, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 0s ago: executing program 2 (id=9576): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syslog(0x4, &(0x7f00000001c0)=""/138, 0x8a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100002100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(0xffffffffffffffff, 0x0, 0xff40) write$ppp(0xffffffffffffffff, &(0x7f0000000200)="bc72", 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x2ae, &(0x7f00000006c0)=ANY=[@ANYBLOB="12011002527dab403a09032640840102030109029c02010e05a00c09060000000000000006240600002405240030000d240f01000100000000ff00090c2407a2090001000004090008241c09000e000109050402bf05070d101e08eb233d4d92160656d4fdd8f66668a83fcf6d5649761cf9d22a99bbcc072501027fff0709050f1020000b4f0022221b7140692f5bd717630950eca52e9a0a9931de3d6c898a34f2835daebc47b6a20709c99a84536409050202ff0307081009050a1010000aaa07072501800307000725010006070209058a1020000f00040725010282060009050003000400430007250182060300072501029d00000905070c00027f0ce70725010007090009050c0c40000906080905073600040207076f07e83fffb2f66f89240987dda9cf1d9e2d76fffd15ebf165c2cc0f9ff4c68bdc1195060692877652e589ed2de26b468e38b776a7bb95d35c43794ac228614c4394abe4154617d95ce70d15710aa52eba1fa172cfcef15f2971951830d841169aabf4fb2a61e845e942814d29a0c2061076a3289e09050308ff0307070e09050e10200007070d09050403ff030a3a689801e4887dca70831e83920c7b619fdc685403efa458556c9045486b39ad2c4cab71d5193eb206fa1baa8aab8129bf20ae8e117fa8cc5f1108234cea5731de0fe4f86b6c02a8045e7b0d65e8e6882fe3724473b8763bc03ed61195ba860ca02b436a7fdcedb66d9fdcf98a9d7cebe43deca0cd8b67b1de53bd2a5818cb1357c31aa29e5f805b737207b778b522871b29203f039419033ebc090580030002050502072501808108005d0681d8136a86fe088103cb332def5b4d433f5831fe50eff0ab897e607566c65865d1e906977af57fe7a9546fa92086d464236ba7551a2e595d7bd9c641c136b63be9422ea8124f5e1576f3bb87857136d20a6d7b6ab8401243117ad3"], &(0x7f0000000480)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0xf, 0x7, 0xe, 0xff, 0xe0}, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x42d}}]}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000600)={0xa0000013}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2e, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100004001ea1c003d37ceefc0300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x20008050}, 0x24040050) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@sr0, 0xee01, &(0x7f0000000180)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) kernel console output (not intermixed with test programs): 7] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9109'. [ 666.658670][T31812] x_tables: duplicate underflow at hook 3 [ 666.720361][T31817] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9115'. [ 666.772881][T31816] loop2: detected capacity change from 0 to 8192 [ 666.840075][T31816] loop2: p1 p2 p3 p4 [ 666.844447][T31816] loop2: p1 size 196608 extends beyond EOD, truncated [ 666.854566][T31816] loop2: p2 start 164919041 is beyond EOD, truncated [ 666.861368][T31816] loop2: p3 size 66846464 extends beyond EOD, truncated [ 666.872104][T31816] loop2: p4 size 37048832 extends beyond EOD, truncated [ 667.284966][T31837] loop9: detected capacity change from 0 to 128 [ 667.298131][T31837] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 667.306094][T31837] FAT-fs (loop9): Filesystem has been set read-only [ 667.320374][T31837] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 667.328291][T31837] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 667.377946][T31830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.394083][T31830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.440139][T31844] loop7: detected capacity change from 0 to 128 [ 667.462186][T31844] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 667.470089][T31844] FAT-fs (loop7): Filesystem has been set read-only [ 667.494192][T31844] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 667.502148][T31844] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 667.522026][T31852] Buffer I/O error on dev loop7, logical block 2065, async page read [ 667.543215][T31852] Buffer I/O error on dev loop7, logical block 2066, async page read [ 667.558817][T31852] Buffer I/O error on dev loop7, logical block 2067, async page read [ 667.567547][T31852] Buffer I/O error on dev loop7, logical block 2068, async page read [ 667.575812][T31852] Buffer I/O error on dev loop7, logical block 2069, async page read [ 667.584058][T31852] Buffer I/O error on dev loop7, logical block 2070, async page read [ 667.592226][T31852] Buffer I/O error on dev loop7, logical block 2071, async page read [ 667.600440][T31852] Buffer I/O error on dev loop7, logical block 2072, async page read [ 667.608555][T31844] Buffer I/O error on dev loop7, logical block 2065, async page read [ 667.614077][T31851] loop1: detected capacity change from 0 to 8192 [ 667.625169][T31844] Buffer I/O error on dev loop7, logical block 2066, async page read [ 667.690293][T31851] loop1: p1 p2 p3 p4 [ 667.699402][T31851] loop1: p1 size 196608 extends beyond EOD, truncated [ 667.722535][T31851] loop1: p2 start 164919041 is beyond EOD, truncated [ 667.729265][T31851] loop1: p3 size 66846464 extends beyond EOD, truncated [ 667.757625][T31851] loop1: p4 size 37048832 extends beyond EOD, truncated [ 667.912251][T31867] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9135'. [ 667.965694][T31861] loop1: detected capacity change from 0 to 512 [ 667.983985][T31861] EXT4-fs (loop1): orphan cleanup on readonly fs [ 667.984136][T31861] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm +}[@: corrupted inode contents [ 667.984256][T31861] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 667.984405][T31861] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm +}[@: corrupted inode contents [ 667.984583][T31861] EXT4-fs error (device loop1): ext4_evict_inode:301: inode #15: comm +}[@: mark_inode_dirty error [ 667.984765][T31861] EXT4-fs (loop1): 1 orphan inode deleted [ 667.985291][T31861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 668.140332][T29042] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.188035][T31876] FAULT_INJECTION: forcing a failure. [ 668.188035][T31876] name failslab, interval 1, probability 0, space 0, times 0 [ 668.200775][T31876] CPU: 0 UID: 0 PID: 31876 Comm: syz.3.9139 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 668.200805][T31876] Tainted: [W]=WARN [ 668.200814][T31876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 668.200889][T31876] Call Trace: [ 668.200898][T31876] [ 668.200909][T31876] __dump_stack+0x1d/0x30 [ 668.200939][T31876] dump_stack_lvl+0xe8/0x140 [ 668.200960][T31876] dump_stack+0x15/0x1b [ 668.201022][T31876] should_fail_ex+0x265/0x280 [ 668.201051][T31876] should_failslab+0x8c/0xb0 [ 668.201137][T31876] __kmalloc_cache_noprof+0x65/0x4c0 [ 668.201240][T31876] ? sctp_add_bind_addr+0x71/0x1e0 [ 668.201261][T31876] sctp_add_bind_addr+0x71/0x1e0 [ 668.201280][T31876] sctp_copy_local_addr_list+0x199/0x220 [ 668.201307][T31876] sctp_copy_one_addr+0x7f/0x280 [ 668.201395][T31876] sctp_bind_addr_copy+0x79/0x290 [ 668.201414][T31876] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 668.201445][T31876] sctp_connect_new_asoc+0x1c3/0x3a0 [ 668.201561][T31876] sctp_sendmsg+0xf10/0x18d0 [ 668.201624][T31876] ? selinux_socket_sendmsg+0x81/0x1b0 [ 668.201664][T31876] ? __pfx_sctp_sendmsg+0x10/0x10 [ 668.201719][T31876] inet_sendmsg+0xc5/0xd0 [ 668.201760][T31876] __sock_sendmsg+0x102/0x180 [ 668.201854][T31876] ____sys_sendmsg+0x345/0x4a0 [ 668.201885][T31876] ___sys_sendmsg+0x17b/0x1d0 [ 668.201927][T31876] __sys_sendmmsg+0x178/0x300 [ 668.202008][T31876] __x64_sys_sendmmsg+0x57/0x70 [ 668.202036][T31876] x64_sys_call+0x1e28/0x3000 [ 668.202132][T31876] do_syscall_64+0xd8/0x2a0 [ 668.202200][T31876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.202219][T31876] RIP: 0033:0x7fd4bba5f749 [ 668.202233][T31876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.202304][T31876] RSP: 002b:00007fd4ba4c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 668.202324][T31876] RAX: ffffffffffffffda RBX: 00007fd4bbcb5fa0 RCX: 00007fd4bba5f749 [ 668.202340][T31876] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000006 [ 668.202355][T31876] RBP: 00007fd4ba4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 668.202370][T31876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 668.202465][T31876] R13: 00007fd4bbcb6038 R14: 00007fd4bbcb5fa0 R15: 00007ffdb20b5a48 [ 668.202482][T31876] [ 668.508975][T31884] bridge0: entered promiscuous mode [ 668.516902][T31884] bridge0: port 3(macvtap1) entered blocking state [ 668.523558][T31884] bridge0: port 3(macvtap1) entered disabled state [ 668.531108][T31884] macvtap1: entered allmulticast mode [ 668.536549][T31884] bridge0: entered allmulticast mode [ 668.544390][T31878] loop9: detected capacity change from 0 to 128 [ 668.552376][T31878] vfat: Unknown parameter 's#̃SZ;)k i'BL8' [ 668.562927][T31884] macvtap1: left allmulticast mode [ 668.568086][T31884] bridge0: left allmulticast mode [ 668.584173][T31884] bridge0: left promiscuous mode [ 668.621345][T31886] loop7: detected capacity change from 0 to 8192 [ 668.693495][T31886] loop7: p1 p2 p3 p4 [ 668.698429][T31886] loop7: p1 size 196608 extends beyond EOD, truncated [ 668.707689][T31886] loop7: p2 start 164919041 is beyond EOD, truncated [ 668.714481][T31886] loop7: p3 size 66846464 extends beyond EOD, truncated [ 668.726918][T31886] loop7: p4 size 37048832 extends beyond EOD, truncated [ 668.774739][T31893] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9146'. [ 669.056510][T31908] loop9: detected capacity change from 0 to 128 [ 669.071436][T31908] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 669.079321][T31908] FAT-fs (loop9): Filesystem has been set read-only [ 669.086808][T31908] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 669.094847][T31908] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 669.162192][T31919] bridge0: entered promiscuous mode [ 669.170741][T31919] bridge0: port 3(macvtap1) entered blocking state [ 669.177331][T31919] bridge0: port 3(macvtap1) entered disabled state [ 669.184084][T31919] macvtap1: entered allmulticast mode [ 669.189491][T31919] bridge0: entered allmulticast mode [ 669.195657][T31919] macvtap1: left allmulticast mode [ 669.200880][T31919] bridge0: left allmulticast mode [ 669.206512][T31919] bridge0: left promiscuous mode [ 669.380695][ T29] kauditd_printk_skb: 1573 callbacks suppressed [ 669.380710][ T29] audit: type=1400 audit(1765088260.914:154712): avc: denied { read write } for pid=31440 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 669.392663][T31926] loop1: detected capacity change from 0 to 512 [ 669.420123][ T29] audit: type=1400 audit(1765088260.914:154713): avc: denied { open } for pid=31440 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 669.444577][ T29] audit: type=1400 audit(1765088260.914:154714): avc: denied { ioctl } for pid=31440 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 669.470698][ T29] audit: type=1400 audit(1765088260.914:154715): avc: denied { read write } for pid=31925 comm="syz.1.9159" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 669.495118][ T29] audit: type=1400 audit(1765088260.914:154716): avc: denied { open } for pid=31925 comm="syz.1.9159" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 669.519342][ T29] audit: type=1400 audit(1765088260.914:154717): avc: denied { ioctl } for pid=31925 comm="syz.1.9159" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 669.545096][ T29] audit: type=1400 audit(1765088260.944:154718): avc: denied { mounton } for pid=31925 comm="syz.1.9159" path="/198/file1" dev="tmpfs" ino=1096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 669.579103][T31929] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9158'. [ 669.594857][T31926] EXT4-fs (loop1): 1 orphan inode deleted [ 669.601149][T31926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.616608][T23439] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 669.626605][T23439] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:20: Failed to release dquot type 1 [ 669.639095][T31926] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 669.700534][T31926] audit: audit_backlog=65 > audit_backlog_limit=64 [ 669.707121][T31926] audit: audit_lost=195 audit_rate_limit=0 audit_backlog_limit=64 [ 669.774365][T31940] batman_adv: batadv0: Adding interface: dummy0 [ 669.780766][T31940] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.807555][T31940] batman_adv: batadv0: Interface activated: dummy0 [ 669.819353][T31940] batadv0: mtu less than device minimum [ 669.825687][T31940] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.836985][T31940] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.848117][T31940] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.859005][T31940] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.870087][T31940] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.881288][T31940] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.882208][T31945] xt_CT: You must specify a L4 protocol and not use inversions on it [ 669.892416][T31940] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.910860][T31940] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.921903][T31940] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 669.950994][T29042] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.018291][T31950] FAULT_INJECTION: forcing a failure. [ 670.018291][T31950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.031615][T31950] CPU: 0 UID: 0 PID: 31950 Comm: syz.7.9165 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 670.031650][T31950] Tainted: [W]=WARN [ 670.031732][T31950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 670.031747][T31950] Call Trace: [ 670.031755][T31950] [ 670.031762][T31950] __dump_stack+0x1d/0x30 [ 670.031831][T31950] dump_stack_lvl+0xe8/0x140 [ 670.031867][T31950] dump_stack+0x15/0x1b [ 670.031891][T31950] should_fail_ex+0x265/0x280 [ 670.031932][T31950] should_fail+0xb/0x20 [ 670.031950][T31950] should_fail_usercopy+0x1a/0x20 [ 670.031972][T31950] _copy_from_user+0x1c/0xb0 [ 670.032008][T31950] __sys_bpf+0x183/0x7c0 [ 670.032100][T31950] __x64_sys_bpf+0x41/0x50 [ 670.032139][T31950] x64_sys_call+0x28e1/0x3000 [ 670.032161][T31950] do_syscall_64+0xd8/0x2a0 [ 670.032243][T31950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.032269][T31950] RIP: 0033:0x7f07888cf749 [ 670.032321][T31950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.032339][T31950] RSP: 002b:00007f0787337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 670.032360][T31950] RAX: ffffffffffffffda RBX: 00007f0788b25fa0 RCX: 00007f07888cf749 [ 670.032371][T31950] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 670.032383][T31950] RBP: 00007f0787337090 R08: 0000000000000000 R09: 0000000000000000 [ 670.032396][T31950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.032467][T31950] R13: 00007f0788b26038 R14: 00007f0788b25fa0 R15: 00007ffc190e0058 [ 670.032492][T31950] [ 670.245969][T31945] netlink: 'syz.3.9162': attribute type 12 has an invalid length. [ 670.253957][T31945] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9162'. [ 670.349667][T31945] netlink: 'syz.3.9162': attribute type 1 has an invalid length. [ 670.357541][T31945] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9162'. [ 670.723743][T31987] loop2: detected capacity change from 0 to 128 [ 670.744713][T31987] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 670.752627][T31987] FAT-fs (loop2): Filesystem has been set read-only [ 670.760711][T31987] bio_check_eod: 71805 callbacks suppressed [ 670.760754][T31987] syz.2.9175: attempt to access beyond end of device [ 670.760754][T31987] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 670.780772][T31987] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 670.788633][T31987] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 670.800083][T31987] syz.2.9175: attempt to access beyond end of device [ 670.800083][T31987] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 670.826276][T31989] loop7: detected capacity change from 0 to 8192 [ 670.833367][T31987] syz.2.9175: attempt to access beyond end of device [ 670.833367][T31987] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 670.848675][T31987] syz.2.9175: attempt to access beyond end of device [ 670.848675][T31987] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 670.863261][T31987] syz.2.9175: attempt to access beyond end of device [ 670.863261][T31987] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 670.876937][T31989] loop7: p1 p2 p3 p4 [ 670.881174][T31989] loop7: p1 size 196608 extends beyond EOD, truncated [ 670.888740][T31987] syz.2.9175: attempt to access beyond end of device [ 670.888740][T31987] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 670.902705][T31989] loop7: p2 start 164919041 is beyond EOD, truncated [ 670.909452][T31989] loop7: p3 size 66846464 extends beyond EOD, truncated [ 670.916882][T31987] syz.2.9175: attempt to access beyond end of device [ 670.916882][T31987] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 670.930938][T31987] syz.2.9175: attempt to access beyond end of device [ 670.930938][T31987] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 670.944579][T31987] syz.2.9175: attempt to access beyond end of device [ 670.944579][T31987] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 670.964968][T31987] syz.2.9175: attempt to access beyond end of device [ 670.964968][T31987] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 670.986319][T31989] loop7: p4 size 37048832 extends beyond EOD, truncated [ 671.524770][T32000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.535957][T31998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9173'. [ 671.547400][T32000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.559769][T32007] bridge0: entered promiscuous mode [ 671.567002][T32007] bridge0: port 3(macvtap1) entered blocking state [ 671.573643][T32007] bridge0: port 3(macvtap1) entered disabled state [ 671.580570][T32007] macvtap1: entered allmulticast mode [ 671.586099][T32007] bridge0: entered allmulticast mode [ 671.592314][T32007] macvtap1: left allmulticast mode [ 671.597471][T32007] bridge0: left allmulticast mode [ 671.603242][T32007] bridge0: left promiscuous mode [ 671.623717][T32009] netlink: 140 bytes leftover after parsing attributes in process `syz.2.9181'. [ 671.773817][T32018] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 671.781746][T32018] FAT-fs (loop7): Filesystem has been set read-only [ 671.801392][T32020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9183'. [ 671.814765][T32018] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 671.822805][T32018] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 671.995800][T32035] FAULT_INJECTION: forcing a failure. [ 671.995800][T32035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.008987][T32035] CPU: 1 UID: 0 PID: 32035 Comm: syz.1.9189 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 672.009098][T32035] Tainted: [W]=WARN [ 672.009107][T32035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 672.009121][T32035] Call Trace: [ 672.009128][T32035] [ 672.009135][T32035] __dump_stack+0x1d/0x30 [ 672.009159][T32035] dump_stack_lvl+0xe8/0x140 [ 672.009181][T32035] dump_stack+0x15/0x1b [ 672.009220][T32035] should_fail_ex+0x265/0x280 [ 672.009254][T32035] should_fail+0xb/0x20 [ 672.009272][T32035] should_fail_usercopy+0x1a/0x20 [ 672.009294][T32035] _copy_from_iter+0xcf/0xe70 [ 672.009369][T32035] ? __alloc_skb+0x3bb/0x4d0 [ 672.009398][T32035] ? __alloc_skb+0x24d/0x4d0 [ 672.009425][T32035] netlink_sendmsg+0x471/0x6b0 [ 672.009462][T32035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.009497][T32035] __sock_sendmsg+0x145/0x180 [ 672.009597][T32035] ____sys_sendmsg+0x345/0x4a0 [ 672.009626][T32035] ___sys_sendmsg+0x17b/0x1d0 [ 672.009709][T32035] __sys_sendmmsg+0x178/0x300 [ 672.009750][T32035] __x64_sys_sendmmsg+0x57/0x70 [ 672.009838][T32035] x64_sys_call+0x1e28/0x3000 [ 672.009871][T32035] do_syscall_64+0xd8/0x2a0 [ 672.009904][T32035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.009965][T32035] RIP: 0033:0x7f25cbc5f749 [ 672.009984][T32035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.010060][T32035] RSP: 002b:00007f25ca6bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 672.010084][T32035] RAX: ffffffffffffffda RBX: 00007f25cbeb5fa0 RCX: 00007f25cbc5f749 [ 672.010101][T32035] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 672.010118][T32035] RBP: 00007f25ca6bf090 R08: 0000000000000000 R09: 0000000000000000 [ 672.010132][T32035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.010205][T32035] R13: 00007f25cbeb6038 R14: 00007f25cbeb5fa0 R15: 00007ffd2e9a18d8 [ 672.010224][T32035] [ 672.240066][T32032] loop3: p1 p2 p3 p4 [ 672.244277][T32032] loop3: p1 size 196608 extends beyond EOD, truncated [ 672.256393][T32032] loop3: p2 start 164919041 is beyond EOD, truncated [ 672.263149][T32032] loop3: p3 size 66846464 extends beyond EOD, truncated [ 672.275341][T32032] loop3: p4 size 37048832 extends beyond EOD, truncated [ 672.298955][T32038] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 672.306887][T32038] FAT-fs (loop1): Filesystem has been set read-only [ 672.317792][T32038] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 672.325748][T32038] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 672.474677][T32046] set_capacity_and_notify: 3 callbacks suppressed [ 672.474697][T32046] loop2: detected capacity change from 0 to 128 [ 672.529917][T32018] buffer_io_error: 60446 callbacks suppressed [ 672.529947][T32018] Buffer I/O error on dev loop7, logical block 2065, async page read [ 672.545267][T32018] Buffer I/O error on dev loop7, logical block 2066, async page read [ 672.553472][T32018] Buffer I/O error on dev loop7, logical block 2067, async page read [ 672.562300][T32018] Buffer I/O error on dev loop7, logical block 2068, async page read [ 672.571758][T32018] Buffer I/O error on dev loop7, logical block 2069, async page read [ 672.583879][T32018] Buffer I/O error on dev loop7, logical block 2070, async page read [ 672.626980][T32018] Buffer I/O error on dev loop7, logical block 2071, async page read [ 672.659364][T32018] Buffer I/O error on dev loop7, logical block 2072, async page read [ 672.674676][T32018] Buffer I/O error on dev loop7, logical block 2065, async page read [ 672.699891][T32018] Buffer I/O error on dev loop7, logical block 2066, async page read [ 672.758255][T32056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9199'. [ 672.782509][T32058] FAULT_INJECTION: forcing a failure. [ 672.782509][T32058] name failslab, interval 1, probability 0, space 0, times 0 [ 672.795312][T32058] CPU: 1 UID: 0 PID: 32058 Comm: syz.7.9200 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 672.795344][T32058] Tainted: [W]=WARN [ 672.795370][T32058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 672.795387][T32058] Call Trace: [ 672.795395][T32058] [ 672.795405][T32058] __dump_stack+0x1d/0x30 [ 672.795446][T32058] dump_stack_lvl+0xe8/0x140 [ 672.795472][T32058] dump_stack+0x15/0x1b [ 672.795492][T32058] should_fail_ex+0x265/0x280 [ 672.795513][T32058] should_failslab+0x8c/0xb0 [ 672.795556][T32058] __kmalloc_cache_noprof+0x65/0x4c0 [ 672.795586][T32058] ? assoc_array_insert+0x75/0x1990 [ 672.795681][T32058] assoc_array_insert+0x75/0x1990 [ 672.795742][T32058] ? avc_has_perm+0xf7/0x180 [ 672.795790][T32058] __key_link_begin+0x8a/0x140 [ 672.795823][T32058] __key_create_or_update+0x30f/0x750 [ 672.795894][T32058] ? key_validate+0xad/0xd0 [ 672.795925][T32058] key_create_or_update+0x42/0x60 [ 672.795982][T32058] __se_sys_add_key+0x29b/0x350 [ 672.796057][T32058] __x64_sys_add_key+0x67/0x80 [ 672.796130][T32058] x64_sys_call+0x2ea3/0x3000 [ 672.796192][T32058] do_syscall_64+0xd8/0x2a0 [ 672.796228][T32058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.796264][T32058] RIP: 0033:0x7f07888cf749 [ 672.796282][T32058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.796347][T32058] RSP: 002b:00007f0787337038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 672.796373][T32058] RAX: ffffffffffffffda RBX: 00007f0788b25fa0 RCX: 00007f07888cf749 [ 672.796390][T32058] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000040 [ 672.796407][T32058] RBP: 00007f0787337090 R08: 000000001aaf177b R09: 0000000000000000 [ 672.796424][T32058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.796447][T32058] R13: 00007f0788b26038 R14: 00007f0788b25fa0 R15: 00007ffc190e0058 [ 672.796471][T32058] [ 673.006677][T32060] bridge0: entered promiscuous mode [ 673.013270][T32060] bridge0: port 3(macvtap1) entered blocking state [ 673.019918][T32060] bridge0: port 3(macvtap1) entered disabled state [ 673.026726][T32060] macvtap1: entered allmulticast mode [ 673.032171][T32060] bridge0: entered allmulticast mode [ 673.038125][T32060] macvtap1: left allmulticast mode [ 673.043363][T32060] bridge0: left allmulticast mode [ 673.049259][T32060] bridge0: left promiscuous mode [ 673.100609][T32062] FAULT_INJECTION: forcing a failure. [ 673.100609][T32062] name failslab, interval 1, probability 0, space 0, times 0 [ 673.113398][T32062] CPU: 0 UID: 0 PID: 32062 Comm: syz.7.9202 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 673.113442][T32062] Tainted: [W]=WARN [ 673.113452][T32062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 673.113468][T32062] Call Trace: [ 673.113477][T32062] [ 673.113487][T32062] __dump_stack+0x1d/0x30 [ 673.113586][T32062] dump_stack_lvl+0xe8/0x140 [ 673.113615][T32062] dump_stack+0x15/0x1b [ 673.113682][T32062] should_fail_ex+0x265/0x280 [ 673.113709][T32062] should_failslab+0x8c/0xb0 [ 673.113738][T32062] __kmalloc_cache_noprof+0x65/0x4c0 [ 673.113767][T32062] ? audit_log_d_path+0x8d/0x150 [ 673.113896][T32062] audit_log_d_path+0x8d/0x150 [ 673.113924][T32062] audit_log_d_path_exe+0x42/0x70 [ 673.113953][T32062] audit_log_task+0x1e9/0x250 [ 673.114048][T32062] ? kstrtouint+0x76/0xc0 [ 673.114073][T32062] audit_seccomp+0x61/0x100 [ 673.114110][T32062] ? __seccomp_filter+0x832/0x1260 [ 673.114187][T32062] __seccomp_filter+0x843/0x1260 [ 673.114293][T32062] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 673.114323][T32062] ? vfs_write+0x7e8/0x960 [ 673.114360][T32062] ? __rcu_read_unlock+0x4f/0x70 [ 673.114391][T32062] ? __fget_files+0x184/0x1c0 [ 673.114451][T32062] __secure_computing+0x82/0x150 [ 673.114554][T32062] syscall_trace_enter+0xcf/0x1e0 [ 673.114585][T32062] do_syscall_64+0xb2/0x2a0 [ 673.114622][T32062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.114659][T32062] RIP: 0033:0x7f07888cf749 [ 673.114678][T32062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.114701][T32062] RSP: 002b:00007f0787337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 673.114742][T32062] RAX: ffffffffffffffda RBX: 00007f0788b25fa0 RCX: 00007f07888cf749 [ 673.114758][T32062] RDX: 0000200000000180 RSI: 000000008008551c RDI: 0000000000000003 [ 673.114773][T32062] RBP: 00007f0787337090 R08: 0000000000000000 R09: 0000000000000000 [ 673.114788][T32062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.114803][T32062] R13: 00007f0788b26038 R14: 00007f0788b25fa0 R15: 00007ffc190e0058 [ 673.114943][T32062] [ 673.393754][T32068] loop7: detected capacity change from 0 to 128 [ 673.425033][T32068] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 673.432946][T32068] FAT-fs (loop7): Filesystem has been set read-only [ 673.451646][T32068] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 673.459522][T32068] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 673.711274][ T910] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.778367][ T910] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.806475][T32070] chnl_net:caif_netlink_parms(): no params data found [ 673.843795][ T910] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.884598][T32070] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.891701][T32070] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.898993][T32070] bridge_slave_0: entered allmulticast mode [ 673.906264][T32070] bridge_slave_0: entered promiscuous mode [ 673.915170][ T910] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.927460][T32070] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.934669][T32070] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.956491][T32070] bridge_slave_1: entered allmulticast mode [ 673.962665][T32099] netlink: 140 bytes leftover after parsing attributes in process `syz.2.9212'. [ 673.969981][T32070] bridge_slave_1: entered promiscuous mode [ 674.023071][T32070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.033681][T32070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.074243][T32070] team0: Port device team_slave_0 added [ 674.087962][ T910] bridge_slave_1: left allmulticast mode [ 674.093672][ T910] bridge_slave_1: left promiscuous mode [ 674.099384][ T910] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.112931][T32103] netlink: 140 bytes leftover after parsing attributes in process `syz.2.9213'. [ 674.124280][ T910] bridge_slave_0: left allmulticast mode [ 674.129993][ T910] bridge_slave_0: left promiscuous mode [ 674.135728][ T910] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.261961][ T910] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.272600][ T910] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.282194][ T910] .` (unregistering): (slave team0): Releasing backup interface [ 674.283226][T32110] loop1: detected capacity change from 0 to 128 [ 674.301300][T32110] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 674.304069][ T910] .` (unregistering): Released all slaves [ 674.309163][T32110] FAT-fs (loop1): Filesystem has been set read-only [ 674.321704][T32110] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 674.329518][T32110] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 674.334094][ T910] bond0 (unregistering): Released all slaves [ 674.347698][T32070] team0: Port device team_slave_1 added [ 674.397479][ T29] kauditd_printk_skb: 987 callbacks suppressed [ 674.397541][ T29] audit: type=1400 audit(1765088265.924:155705): avc: denied { create } for pid=32114 comm="syz.2.9216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 674.424656][ T910] hsr_slave_0: left promiscuous mode [ 674.427989][ T29] audit: type=1400 audit(1765088265.954:155706): avc: denied { bind } for pid=32114 comm="syz.2.9216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 674.449540][ T29] audit: type=1400 audit(1765088265.954:155707): avc: denied { map_create } for pid=32114 comm="syz.2.9216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 674.469146][ T29] audit: type=1400 audit(1765088265.954:155708): avc: denied { map_read map_write } for pid=32114 comm="syz.2.9216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 674.489329][ T29] audit: type=1400 audit(1765088265.954:155709): avc: denied { prog_load } for pid=32114 comm="syz.2.9216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 674.508685][ T29] audit: type=1400 audit(1765088265.954:155710): avc: denied { bpf } for pid=32114 comm="syz.2.9216" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 674.529529][ T29] audit: type=1400 audit(1765088265.954:155711): avc: denied { perfmon } for pid=32114 comm="syz.2.9216" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 674.550710][ T29] audit: type=1400 audit(1765088265.954:155712): avc: denied { read } for pid=32114 comm="syz.2.9216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 674.571303][ T910] hsr_slave_1: left promiscuous mode [ 674.573651][ T29] audit: type=1400 audit(1765088265.984:155713): avc: denied { read write } for pid=24227 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 674.587477][ T910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.601064][ T29] audit: type=1400 audit(1765088265.984:155714): avc: denied { open } for pid=24227 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 674.632844][ T910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.642863][ T910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.650578][ T910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.660994][ T910] veth1_macvtap: left promiscuous mode [ 674.666566][ T910] veth0_macvtap: left promiscuous mode [ 674.750077][ T910] team0 (unregistering): Port device team_slave_1 removed [ 674.770965][ T910] team0 (unregistering): Port device team_slave_0 removed [ 674.810650][T32126] loop2: detected capacity change from 0 to 8192 [ 674.835885][T32070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.843006][T32070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.868929][T32070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.880222][T32126] loop2: p1 p2 p3 p4 [ 674.884340][T32126] loop2: p1 size 196608 extends beyond EOD, truncated [ 674.887552][T32070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.898245][T32070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.924235][T32070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.926588][T32126] loop2: p2 start 164919041 is beyond EOD, truncated [ 674.941501][T32126] loop2: p3 size 66846464 extends beyond EOD, truncated [ 674.967111][T32126] loop2: p4 size 37048832 extends beyond EOD, truncated [ 674.994780][T32070] hsr_slave_0: entered promiscuous mode [ 675.010214][T32070] hsr_slave_1: entered promiscuous mode [ 675.020536][T32070] debugfs: 'hsr0' already exists in 'hsr' [ 675.026310][T32070] Cannot create hsr debugfs directory [ 675.079076][T32131] loop2: detected capacity change from 0 to 128 [ 675.115845][T32131] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 675.123853][T32131] FAT-fs (loop2): Filesystem has been set read-only [ 675.264055][T32131] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 675.271991][T32131] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 675.691715][T32070] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 675.709196][T32070] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 675.729644][T32070] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 675.744195][T32070] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 675.778398][T32131] bio_check_eod: 83332 callbacks suppressed [ 675.778417][T32131] syz.2.9223: attempt to access beyond end of device [ 675.778417][T32131] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 675.833237][T32131] syz.2.9223: attempt to access beyond end of device [ 675.833237][T32131] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 675.879677][T32131] syz.2.9223: attempt to access beyond end of device [ 675.879677][T32131] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 675.898263][T32070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.918934][T32131] syz.2.9223: attempt to access beyond end of device [ 675.918934][T32131] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 675.941789][T32070] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.951444][ T6034] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.958537][ T6034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.002546][ T6937] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.009655][ T6937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.193443][T32070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.255726][T32157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.294120][T32157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.423391][T32070] veth0_vlan: entered promiscuous mode [ 676.431746][T32070] veth1_vlan: entered promiscuous mode [ 676.474947][T32070] veth0_macvtap: entered promiscuous mode [ 676.495716][T32070] veth1_macvtap: entered promiscuous mode [ 676.521049][T32070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.547684][T32070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.573651][ T6937] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.586813][ T6937] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.597434][T32184] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9233'. [ 676.607180][T32180] loop9: detected capacity change from 0 to 8192 [ 676.609410][ T6937] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.626593][ T6937] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.650117][T32180] loop9: p1 p2 p3 p4 [ 676.654202][T32180] loop9: p1 size 196608 extends beyond EOD, truncated [ 676.662985][T32180] loop9: p2 start 164919041 is beyond EOD, truncated [ 676.669699][T32180] loop9: p3 size 66846464 extends beyond EOD, truncated [ 676.680446][T32180] loop9: p4 size 37048832 extends beyond EOD, truncated [ 677.309046][T32215] loop9: detected capacity change from 0 to 1024 [ 677.337827][T32215] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.549591][T32215] FAULT_INJECTION: forcing a failure. [ 677.549591][T32215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.562758][T32215] CPU: 0 UID: 0 PID: 32215 Comm: syz.9.9242 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 677.562792][T32215] Tainted: [W]=WARN [ 677.562799][T32215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 677.562813][T32215] Call Trace: [ 677.562822][T32215] [ 677.562832][T32215] __dump_stack+0x1d/0x30 [ 677.562857][T32215] dump_stack_lvl+0xe8/0x140 [ 677.562877][T32215] dump_stack+0x15/0x1b [ 677.562962][T32215] should_fail_ex+0x265/0x280 [ 677.562989][T32215] should_fail+0xb/0x20 [ 677.563014][T32215] should_fail_usercopy+0x1a/0x20 [ 677.563090][T32215] fpu__restore_sig+0x12d/0xaa0 [ 677.563191][T32215] ? x86_task_fpu+0x36/0x60 [ 677.563212][T32215] ? should_fail_ex+0xdb/0x280 [ 677.563246][T32215] __ia32_sys_rt_sigreturn+0x29f/0x350 [ 677.563288][T32215] x64_sys_call+0x274a/0x3000 [ 677.563378][T32215] do_syscall_64+0xd8/0x2a0 [ 677.563415][T32215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.563436][T32215] RIP: 0033:0x7f9d82c4f747 [ 677.563478][T32215] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 677.563502][T32215] RSP: 002b:00007f9d816af038 EFLAGS: 00000246 [ 677.563520][T32215] RAX: 0000000000000000 RBX: 00007f9d82ea5fa0 RCX: 00007f9d82c4f749 [ 677.563533][T32215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 677.563566][T32215] RBP: 00007f9d816af090 R08: 0000000000000000 R09: 0000000000000000 [ 677.563578][T32215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.563613][T32215] R13: 00007f9d82ea6038 R14: 00007f9d82ea5fa0 R15: 00007ffe055f9808 [ 677.563631][T32215] [ 677.980780][T24227] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.076010][T32242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9249'. [ 678.486379][T32258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.509954][T32258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.774309][T32268] loop7: detected capacity change from 0 to 8192 [ 678.830694][T32268] loop7: p1 p2 p3 p4 [ 678.839795][T32268] loop7: p1 size 196608 extends beyond EOD, truncated [ 678.857783][T32268] loop7: p2 start 164919041 is beyond EOD, truncated [ 678.864535][T32268] loop7: p3 size 66846464 extends beyond EOD, truncated [ 678.891201][T32268] loop7: p4 size 37048832 extends beyond EOD, truncated [ 678.897074][T32270] FAULT_INJECTION: forcing a failure. [ 678.897074][T32270] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 678.911527][T32270] CPU: 0 UID: 0 PID: 32270 Comm: syz.3.9260 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 678.911588][T32270] Tainted: [W]=WARN [ 678.911597][T32270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 678.911647][T32270] Call Trace: [ 678.911656][T32270] [ 678.911667][T32270] __dump_stack+0x1d/0x30 [ 678.911694][T32270] dump_stack_lvl+0xe8/0x140 [ 678.911715][T32270] dump_stack+0x15/0x1b [ 678.911773][T32270] should_fail_ex+0x265/0x280 [ 678.911801][T32270] should_fail_alloc_page+0xf2/0x100 [ 678.911829][T32270] __alloc_frozen_pages_noprof+0x109/0x360 [ 678.911870][T32270] alloc_pages_mpol+0xb3/0x260 [ 678.911916][T32270] alloc_pages_noprof+0x90/0x130 [ 678.911952][T32270] pte_alloc_one+0x1e/0xd0 [ 678.912025][T32270] __pte_alloc+0x32/0x2c0 [ 678.912048][T32270] handle_mm_fault+0x1c8e/0x2c60 [ 678.912153][T32270] do_user_addr_fault+0x630/0x1080 [ 678.912187][T32270] ? ksys_mmap_pgoff+0xc2/0x310 [ 678.912218][T32270] ? __x64_sys_mmap+0x49/0x70 [ 678.912290][T32270] exc_page_fault+0x62/0xa0 [ 678.912403][T32270] asm_exc_page_fault+0x26/0x30 [ 678.912428][T32270] RIP: 0033:0x7faa6c7409e6 [ 678.912447][T32270] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 678.912469][T32270] RSP: 002b:00007faa6b2e64a0 EFLAGS: 00010246 [ 678.912488][T32270] RAX: 0000000000000001 RBX: 00007faa6b2e6540 RCX: 0000000000000101 [ 678.912502][T32270] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007faa6b2e65e0 [ 678.912569][T32270] RBP: 0000000000000102 R08: 00007faa62ec7000 R09: 0000000000000000 [ 678.912585][T32270] R10: 0000000000000000 R11: 00007faa6b2e6550 R12: 0000000000000001 [ 678.912606][T32270] R13: 00007faa6c91fc40 R14: 0000000000000000 R15: 00007faa6b2e65e0 [ 678.912670][T32270] [ 678.912682][T32270] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 679.034362][T32272] netlink: 140 bytes leftover after parsing attributes in process `syz.7.9261'. [ 679.049983][T32270] loop3: detected capacity change from 0 to 512 [ 679.153125][T32270] EXT4-fs (loop3): 1 orphan inode deleted [ 679.159292][T32270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.171961][ T53] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 679.193312][T32270] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 679.231636][T32270] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.238928][T32270] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.276284][T32279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9262'. [ 679.400879][ T29] kauditd_printk_skb: 825 callbacks suppressed [ 679.400895][ T29] audit: type=1400 audit(1765088270.934:156539): avc: denied { map_create } for pid=32283 comm="syz.7.9264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 679.401078][ T29] audit: type=1400 audit(1765088270.934:156540): avc: denied { map_read map_write } for pid=32283 comm="syz.7.9264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 679.457833][ T29] audit: type=1400 audit(1765088270.964:156541): avc: denied { read write } for pid=31440 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 679.457919][ T29] audit: type=1400 audit(1765088270.964:156542): avc: denied { open } for pid=31440 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 679.457947][ T29] audit: type=1400 audit(1765088270.964:156543): avc: denied { ioctl } for pid=31440 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 679.472413][ T29] audit: type=1400 audit(1765088271.004:156544): avc: denied { read write } for pid=24467 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 679.472523][ T29] audit: type=1400 audit(1765088271.004:156545): avc: denied { open } for pid=24467 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 679.472681][ T29] audit: type=1400 audit(1765088271.004:156546): avc: denied { ioctl } for pid=24467 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 679.478711][ T29] audit: type=1400 audit(1765088271.004:156547): avc: denied { read write } for pid=32285 comm="syz.7.9265" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 679.478744][ T29] audit: type=1400 audit(1765088271.004:156548): avc: denied { read write open } for pid=32285 comm="syz.7.9265" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 679.554782][T32288] loop2: detected capacity change from 0 to 512 [ 679.579385][T32288] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.579625][T32288] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.886317][T32300] loop7: detected capacity change from 0 to 512 [ 679.890321][T32300] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 679.890350][T32300] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 679.890366][T32300] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.9269: Corrupt directory, running e2fsck is recommended [ 679.953856][T32300] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 679.956334][T32300] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.9269: corrupted in-inode xattr: invalid ea_ino [ 679.956538][T32300] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.9269: couldn't read orphan inode 15 (err -117) [ 679.957165][T32300] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.971923][T32300] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 679.971952][T32300] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 679.971975][T32300] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.9269: Corrupt directory, running e2fsck is recommended [ 680.196467][T32070] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.478725][T32309] loop2: detected capacity change from 0 to 8192 [ 680.529971][T32309] loop2: p1 p2 p3 p4 [ 680.534129][T32309] loop2: p1 size 196608 extends beyond EOD, truncated [ 680.556768][T32309] loop2: p2 start 164919041 is beyond EOD, truncated [ 680.563610][T32309] loop2: p3 size 66846464 extends beyond EOD, truncated [ 680.600288][T32309] loop2: p4 size 37048832 extends beyond EOD, truncated [ 680.656210][T31440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.796741][T32320] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9276'. [ 680.866904][T32329] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 680.897371][T32332] FAULT_INJECTION: forcing a failure. [ 680.897371][T32332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.910532][T32332] CPU: 0 UID: 0 PID: 32332 Comm: syz.3.9281 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 680.910614][T32332] Tainted: [W]=WARN [ 680.910623][T32332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 680.910718][T32332] Call Trace: [ 680.910726][T32332] [ 680.910736][T32332] __dump_stack+0x1d/0x30 [ 680.910765][T32332] dump_stack_lvl+0xe8/0x140 [ 680.910793][T32332] dump_stack+0x15/0x1b [ 680.910835][T32332] should_fail_ex+0x265/0x280 [ 680.910864][T32332] should_fail+0xb/0x20 [ 680.910892][T32332] should_fail_usercopy+0x1a/0x20 [ 680.910920][T32332] _copy_to_user+0x20/0xa0 [ 680.910953][T32332] simple_read_from_buffer+0xb5/0x130 [ 680.911042][T32332] proc_fail_nth_read+0x10e/0x150 [ 680.911089][T32332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 680.911114][T32332] vfs_read+0x1a8/0x770 [ 680.911131][T32332] ? __rcu_read_unlock+0x4f/0x70 [ 680.911205][T32332] ? __fget_files+0x184/0x1c0 [ 680.911276][T32332] ? mutex_lock+0x58/0x90 [ 680.911298][T32332] ksys_read+0xda/0x1a0 [ 680.911321][T32332] __x64_sys_read+0x40/0x50 [ 680.911344][T32332] x64_sys_call+0x2889/0x3000 [ 680.911376][T32332] do_syscall_64+0xd8/0x2a0 [ 680.911410][T32332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.911490][T32332] RIP: 0033:0x7faa6c87e15c [ 680.911505][T32332] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 680.911522][T32332] RSP: 002b:00007faa6b2e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 680.911540][T32332] RAX: ffffffffffffffda RBX: 00007faa6cad5fa0 RCX: 00007faa6c87e15c [ 680.911553][T32332] RDX: 000000000000000f RSI: 00007faa6b2e70a0 RDI: 0000000000000003 [ 680.911569][T32332] RBP: 00007faa6b2e7090 R08: 0000000000000000 R09: 0000000000000000 [ 680.911646][T32332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.911704][T32332] R13: 00007faa6cad6038 R14: 00007faa6cad5fa0 R15: 00007fff7d7a8518 [ 680.911728][T32332] [ 681.168823][T32338] loop1: detected capacity change from 0 to 128 [ 681.189068][T32338] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 681.197011][T32338] FAT-fs (loop1): Filesystem has been set read-only [ 681.217625][T32338] syz.1.9284: attempt to access beyond end of device [ 681.217625][T32338] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 681.233532][T32338] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 681.241412][T32338] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 681.253689][T32339] loop7: detected capacity change from 0 to 8192 [ 681.264409][T32338] syz.1.9284: attempt to access beyond end of device [ 681.264409][T32338] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 681.277872][T32338] syz.1.9284: attempt to access beyond end of device [ 681.277872][T32338] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 681.298134][T32338] syz.1.9284: attempt to access beyond end of device [ 681.298134][T32338] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 681.311906][T32339] loop7: p1 p2 p3 p4 [ 681.315763][T32338] syz.1.9284: attempt to access beyond end of device [ 681.315763][T32338] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 681.329264][T32338] syz.1.9284: attempt to access beyond end of device [ 681.329264][T32338] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 681.331387][T32339] loop7: p1 size 196608 extends beyond EOD, truncated [ 681.342545][T32338] syz.1.9284: attempt to access beyond end of device [ 681.342545][T32338] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 681.363267][T32338] syz.1.9284: attempt to access beyond end of device [ 681.363267][T32338] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 681.365806][T32339] loop7: p2 start 164919041 is beyond EOD, truncated [ 681.383493][T32339] loop7: p3 size 66846464 extends beyond EOD, truncated [ 681.386262][T32338] syz.1.9284: attempt to access beyond end of device [ 681.386262][T32338] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 681.396189][T32339] loop7: p4 size 37048832 extends beyond EOD, truncated [ 681.420210][T32338] syz.1.9284: attempt to access beyond end of device [ 681.420210][T32338] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 681.463365][T32346] loop3: detected capacity change from 0 to 128 [ 681.515486][T32350] loop7: detected capacity change from 0 to 128 [ 681.525735][T32346] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 681.533817][T32346] FAT-fs (loop3): Filesystem has been set read-only [ 681.562051][T32346] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 681.569974][T32346] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 682.074165][T32365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9292'. [ 682.118186][T32365] FAULT_INJECTION: forcing a failure. [ 682.118186][T32365] name failslab, interval 1, probability 0, space 0, times 0 [ 682.130958][T32365] CPU: 0 UID: 0 PID: 32365 Comm: syz.1.9292 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 682.131075][T32365] Tainted: [W]=WARN [ 682.131085][T32365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 682.131101][T32365] Call Trace: [ 682.131110][T32365] [ 682.131121][T32365] __dump_stack+0x1d/0x30 [ 682.131196][T32365] dump_stack_lvl+0xe8/0x140 [ 682.131225][T32365] dump_stack+0x15/0x1b [ 682.131259][T32365] should_fail_ex+0x265/0x280 [ 682.131283][T32365] should_failslab+0x8c/0xb0 [ 682.131389][T32365] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 682.131499][T32365] ? __alloc_skb+0x324/0x4d0 [ 682.131527][T32365] __alloc_skb+0x324/0x4d0 [ 682.131551][T32365] ? __alloc_skb+0x24d/0x4d0 [ 682.131576][T32365] netlink_alloc_large_skb+0xbf/0xf0 [ 682.131615][T32365] netlink_sendmsg+0x3cf/0x6b0 [ 682.131687][T32365] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.131717][T32365] __sock_sendmsg+0x145/0x180 [ 682.131777][T32365] ____sys_sendmsg+0x31e/0x4a0 [ 682.131806][T32365] ___sys_sendmsg+0x17b/0x1d0 [ 682.131899][T32365] __x64_sys_sendmsg+0xd4/0x160 [ 682.131926][T32365] x64_sys_call+0x17ba/0x3000 [ 682.131954][T32365] do_syscall_64+0xd8/0x2a0 [ 682.132052][T32365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.132073][T32365] RIP: 0033:0x7f25cbc5f749 [ 682.132090][T32365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.132110][T32365] RSP: 002b:00007f25ca6bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.132131][T32365] RAX: ffffffffffffffda RBX: 00007f25cbeb5fa0 RCX: 00007f25cbc5f749 [ 682.132178][T32365] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 682.132194][T32365] RBP: 00007f25ca6bf090 R08: 0000000000000000 R09: 0000000000000000 [ 682.132206][T32365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.132220][T32365] R13: 00007f25cbeb6038 R14: 00007f25cbeb5fa0 R15: 00007ffd2e9a18d8 [ 682.132254][T32365] [ 682.394338][T32360] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9290'. [ 682.413845][T32368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9293'. [ 682.504099][T32370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9294'. [ 682.692278][T32383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.692738][T32384] netlink: 140 bytes leftover after parsing attributes in process `syz.7.9300'. [ 682.710292][T32383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.730944][T32387] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 682.815458][T32395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9304'. [ 682.824550][T32395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9304'. [ 683.691190][T32413] loop9: detected capacity change from 0 to 8192 [ 683.750256][T32413] loop9: p1 p2 p3 p4 [ 683.759745][T32413] loop9: p1 size 196608 extends beyond EOD, truncated [ 683.772068][T32413] loop9: p2 start 164919041 is beyond EOD, truncated [ 683.778937][T32413] loop9: p3 size 66846464 extends beyond EOD, truncated [ 683.798000][T32413] loop9: p4 size 37048832 extends beyond EOD, truncated [ 684.231399][T32437] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.298116][T32437] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.316948][T32444] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 684.364717][T32446] loop9: detected capacity change from 0 to 128 [ 684.375044][T32437] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.387202][T32446] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 684.401874][T32446] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 684.417736][ T29] kauditd_printk_skb: 691 callbacks suppressed [ 684.417752][ T29] audit: type=1400 audit(1765088275.944:157240): avc: denied { mount } for pid=32445 comm="syz.9.9319" name="/" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 684.447158][ T29] audit: type=1400 audit(1765088275.944:157241): avc: denied { read write } for pid=32445 comm="syz.9.9319" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 684.471625][ T29] audit: type=1400 audit(1765088275.944:157242): avc: denied { open } for pid=32445 comm="syz.9.9319" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 684.495875][ T29] audit: type=1400 audit(1765088275.954:157243): avc: denied { map_create } for pid=32445 comm="syz.9.9319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 684.515366][ T29] audit: type=1400 audit(1765088275.954:157244): avc: denied { bpf } for pid=32445 comm="syz.9.9319" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 684.536234][ T29] audit: type=1400 audit(1765088275.954:157245): avc: denied { map_read map_write } for pid=32445 comm="syz.9.9319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 684.556494][ T29] audit: type=1400 audit(1765088275.954:157246): avc: denied { prog_load } for pid=32445 comm="syz.9.9319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 684.575823][ T29] audit: type=1400 audit(1765088275.954:157247): avc: denied { perfmon } for pid=32445 comm="syz.9.9319" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 684.596984][ T29] audit: type=1400 audit(1765088275.964:157248): avc: denied { create } for pid=32445 comm="syz.9.9319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 684.616682][ T29] audit: type=1400 audit(1765088275.964:157249): avc: denied { setopt } for pid=32445 comm="syz.9.9319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 684.638112][ T53] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 684.649626][T32437] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.797538][ T6937] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.808263][ T6937] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.820604][ T6937] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.837400][ T6937] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.264660][T32456] loop1: detected capacity change from 0 to 128 [ 685.276331][T32456] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 685.284218][T32456] FAT-fs (loop1): Filesystem has been set read-only [ 685.291109][T32456] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 685.298969][T32456] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 685.478518][T32458] __nla_validate_parse: 1 callbacks suppressed [ 685.478538][T32458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9323'. [ 685.734004][T32469] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9328'. [ 686.117555][T32492] FAULT_INJECTION: forcing a failure. [ 686.117555][T32492] name failslab, interval 1, probability 0, space 0, times 0 [ 686.130359][T32492] CPU: 1 UID: 0 PID: 32492 Comm: syz.9.9336 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 686.130415][T32492] Tainted: [W]=WARN [ 686.130423][T32492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 686.130436][T32492] Call Trace: [ 686.130454][T32492] [ 686.130461][T32492] __dump_stack+0x1d/0x30 [ 686.130485][T32492] dump_stack_lvl+0xe8/0x140 [ 686.130564][T32492] dump_stack+0x15/0x1b [ 686.130587][T32492] should_fail_ex+0x265/0x280 [ 686.130612][T32492] should_failslab+0x8c/0xb0 [ 686.130632][T32492] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 686.130654][T32492] ? __d_alloc+0x37/0x340 [ 686.130724][T32492] __d_alloc+0x37/0x340 [ 686.130756][T32492] d_alloc+0x2e/0x100 [ 686.130788][T32492] lookup_one_qstr_excl+0x99/0x250 [ 686.130847][T32492] __start_renaming+0x13f/0x2a0 [ 686.130883][T32492] do_renameat2+0x2b4/0x810 [ 686.130922][T32492] __x64_sys_renameat2+0x7e/0x90 [ 686.130999][T32492] x64_sys_call+0x35f/0x3000 [ 686.131030][T32492] do_syscall_64+0xd8/0x2a0 [ 686.131084][T32492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.131110][T32492] RIP: 0033:0x7f9d82c4f749 [ 686.131124][T32492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 686.131141][T32492] RSP: 002b:00007f9d816af038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 686.131158][T32492] RAX: ffffffffffffffda RBX: 00007f9d82ea5fa0 RCX: 00007f9d82c4f749 [ 686.131238][T32492] RDX: ffffffffffffff9c RSI: 0000200000000580 RDI: ffffffffffffff9c [ 686.131253][T32492] RBP: 00007f9d816af090 R08: 0000000000000005 R09: 0000000000000000 [ 686.131269][T32492] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 686.131285][T32492] R13: 00007f9d82ea6038 R14: 00007f9d82ea5fa0 R15: 00007ffe055f9808 [ 686.131372][T32492] [ 686.363507][T32495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.393073][T32495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.635671][T32514] 9pnet_fd: Insufficient options for proto=fd [ 686.687644][T32514] loop2: detected capacity change from 0 to 512 [ 686.714041][T32514] EXT4-fs: Ignoring removed i_version option [ 686.720119][T32514] EXT4-fs: Ignoring removed bh option [ 686.756834][T32514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.810409][T32514] ext4 filesystem being mounted at /559/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 686.995486][T32523] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9343'. [ 687.009517][T32509] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9339'. [ 687.065750][T32520] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9342'. [ 687.217290][T32530] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9346'. [ 687.272460][T32530] tipc: Started in network mode [ 687.277401][T32530] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 687.287779][T32530] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 687.296025][T32530] tipc: Enabled bearer , priority 10 [ 687.344402][T32513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9341'. [ 687.381165][T32537] veth2: entered promiscuous mode [ 687.386288][T32537] veth2: entered allmulticast mode [ 687.438795][T32541] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9350'. [ 687.470523][T24467] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.586643][T32551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9354'. [ 687.619849][T32551] loop2: detected capacity change from 0 to 2048 [ 687.651300][T32554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9355'. [ 687.652424][T32551] Alternate GPT is invalid, using primary GPT. [ 687.666763][T32551] loop2: p2 p3 p7 [ 688.106324][T32588] loop1: detected capacity change from 0 to 1024 [ 688.114819][T32588] EXT4-fs: Ignoring removed orlov option [ 688.133730][T32588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.419997][ T3428] tipc: Node number set to 1 [ 688.627739][T29042] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.890587][T32624] loop1: detected capacity change from 0 to 512 [ 688.910912][T32624] EXT4-fs (loop1): orphan cleanup on readonly fs [ 688.917301][T32624] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 688.978366][T32624] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 688.994072][T32624] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.9377: attempt to clear invalid blocks 2 len 1 [ 689.007175][T32624] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.9377: invalid indirect mapped block 1819239214 (level 0) [ 689.030366][T32624] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.9377: invalid indirect mapped block 1819239214 (level 1) [ 689.044798][T32624] EXT4-fs (loop1): 1 truncate cleaned up [ 689.052449][T32624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 689.071799][T32624] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 689.081615][T32624] EXT4-fs error (device loop1): __ext4_remount:6789: comm syz.1.9377: Abort forced by user [ 689.091932][T32624] EXT4-fs (loop1): Remounting filesystem read-only [ 689.098455][T32624] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 689.133569][T29042] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.161526][T32638] bond1: ARP target 9.0.0.0 is already present [ 689.167755][T32638] bond1: option arp_ip_target: invalid value (9) [ 689.175665][T32638] bond1 (unregistering): Released all slaves [ 689.244244][T32643] loop1: detected capacity change from 0 to 512 [ 689.278141][T32643] EXT4-fs (loop1): orphan cleanup on readonly fs [ 689.284654][T32643] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 689.335899][T32643] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 689.376195][T32643] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.9382: attempt to clear invalid blocks 2 len 1 [ 689.420682][ T29] kauditd_printk_skb: 900 callbacks suppressed [ 689.420699][ T29] audit: type=1400 audit(1765088280.954:158150): avc: denied { sys_module } for pid=32649 comm="syz.9.9385" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 689.424349][T32643] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.9382: invalid indirect mapped block 1819239214 (level 0) [ 689.434797][ T29] audit: type=1400 audit(1765088280.954:158151): avc: denied { module_request } for pid=32649 comm="syz.9.9385" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 689.531619][T32643] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.9382: invalid indirect mapped block 1819239214 (level 1) [ 689.558280][ T29] audit: type=1400 audit(1765088281.024:158152): avc: denied { map_create } for pid=32649 comm="syz.9.9385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 689.577776][ T29] audit: type=1400 audit(1765088281.024:158153): avc: denied { perfmon } for pid=32649 comm="syz.9.9385" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 689.598999][ T29] audit: type=1400 audit(1765088281.024:158154): avc: denied { map_read map_write } for pid=32649 comm="syz.9.9385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 689.619116][ T29] audit: type=1400 audit(1765088281.024:158155): avc: denied { map_create } for pid=32655 comm="syz.2.9386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 689.638546][ T29] audit: type=1400 audit(1765088281.024:158156): avc: denied { prog_load } for pid=32655 comm="syz.2.9386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 689.658049][ T29] audit: type=1400 audit(1765088281.024:158157): avc: denied { bpf } for pid=32655 comm="syz.2.9386" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 689.678907][ T29] audit: type=1400 audit(1765088281.024:158158): avc: denied { perfmon } for pid=32655 comm="syz.2.9386" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 689.700729][ T29] audit: type=1400 audit(1765088281.044:158159): avc: denied { read write } for pid=24467 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 689.717629][T32643] EXT4-fs (loop1): 1 truncate cleaned up [ 689.762430][T32643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 689.825435][T32669] loop2: detected capacity change from 0 to 512 [ 689.836203][T32643] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 689.852507][T32643] EXT4-fs error (device loop1): __ext4_remount:6789: comm syz.1.9382: Abort forced by user [ 689.866563][T32669] EXT4-fs (loop2): orphan cleanup on readonly fs [ 689.873007][T32669] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 689.881314][T32643] EXT4-fs (loop1): Remounting filesystem read-only [ 689.887896][T32643] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 689.898877][T32669] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 689.914219][T32669] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.9390: attempt to clear invalid blocks 2 len 1 [ 689.927597][T32669] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.9390: invalid indirect mapped block 1819239214 (level 0) [ 689.942320][T32669] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.9390: invalid indirect mapped block 1819239214 (level 1) [ 690.027701][T32669] EXT4-fs (loop2): 1 truncate cleaned up [ 690.040906][T32669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 690.584162][T32669] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 690.596812][T32669] EXT4-fs error (device loop2): __ext4_remount:6789: comm syz.2.9390: Abort forced by user [ 690.611232][T32669] EXT4-fs (loop2): Remounting filesystem read-only [ 690.617824][T32669] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 690.637332][T29042] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.768915][T24467] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.850391][T32686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.876899][T32686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.996006][T32699] __nla_validate_parse: 8 callbacks suppressed [ 690.996027][T32699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9399'. [ 691.064639][T32705] netlink: 'syz.9.9402': attribute type 2 has an invalid length. [ 691.074027][T32705] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9402'. [ 691.098356][T32705] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9402'. [ 691.766144][T32735] FAULT_INJECTION: forcing a failure. [ 691.766144][T32735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.779319][T32735] CPU: 0 UID: 0 PID: 32735 Comm: syz.3.9411 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 691.779363][T32735] Tainted: [W]=WARN [ 691.779378][T32735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 691.779395][T32735] Call Trace: [ 691.779404][T32735] [ 691.779482][T32735] __dump_stack+0x1d/0x30 [ 691.779510][T32735] dump_stack_lvl+0xe8/0x140 [ 691.779547][T32735] dump_stack+0x15/0x1b [ 691.779574][T32735] should_fail_ex+0x265/0x280 [ 691.779605][T32735] should_fail+0xb/0x20 [ 691.779709][T32735] should_fail_usercopy+0x1a/0x20 [ 691.779818][T32735] _copy_from_user+0x1c/0xb0 [ 691.779932][T32735] ___sys_sendmsg+0xc1/0x1d0 [ 691.779974][T32735] __sys_sendmmsg+0x178/0x300 [ 691.780008][T32735] __x64_sys_sendmmsg+0x57/0x70 [ 691.780041][T32735] x64_sys_call+0x1e28/0x3000 [ 691.780094][T32735] do_syscall_64+0xd8/0x2a0 [ 691.780132][T32735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.780213][T32735] RIP: 0033:0x7faa6c87f749 [ 691.780234][T32735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.780265][T32735] RSP: 002b:00007faa6b2e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 691.780289][T32735] RAX: ffffffffffffffda RBX: 00007faa6cad5fa0 RCX: 00007faa6c87f749 [ 691.780307][T32735] RDX: 0000000000000001 RSI: 0000200000007180 RDI: 0000000000000003 [ 691.780323][T32735] RBP: 00007faa6b2e7090 R08: 0000000000000000 R09: 0000000000000000 [ 691.780339][T32735] R10: 0000000000040810 R11: 0000000000000246 R12: 0000000000000001 [ 691.780403][T32735] R13: 00007faa6cad6038 R14: 00007faa6cad5fa0 R15: 00007fff7d7a8518 [ 691.780429][T32735] [ 691.797373][T32736] netlink: 'wޣ': attribute type 12 has an invalid length. [ 691.966806][T32736] loop2: detected capacity change from 0 to 1024 [ 691.974541][T32736] EXT4-fs: inline encryption not supported [ 692.008182][T32736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.037218][T32745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9415'. [ 692.097689][T32741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9412'. [ 692.107681][T32741] net_ratelimit: 10 callbacks suppressed [ 692.107694][T32741] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 692.146408][T32741] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 692.207763][T32741] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 692.307876][T32762] loop9: detected capacity change from 0 to 1024 [ 692.326335][T32762] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 692.340705][T32755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32755 comm=syz.7.9416 [ 692.360971][T32762] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 692.371988][T32762] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 692.422646][T32762] JBD2: no valid journal superblock found [ 692.428421][T32762] EXT4-fs (loop9): Could not load journal inode [ 692.435487][T24467] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.515498][T32748] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9416'. [ 692.525294][ T304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9423'. [ 692.546122][ T302] syzkaller0: entered promiscuous mode [ 692.551790][ T302] syzkaller0: entered allmulticast mode [ 692.580931][T32748] loop7: detected capacity change from 0 to 1024 [ 692.596410][ T304] loop2: detected capacity change from 0 to 2048 [ 692.603117][T32748] EXT4-fs: Ignoring removed orlov option [ 692.608802][T32748] EXT4-fs: Ignoring removed nomblk_io_submit option [ 692.616072][T32748] ext4: Unknown parameter 'subj_role' [ 692.652742][ T304] Alternate GPT is invalid, using primary GPT. [ 692.659132][ T304] loop2: p2 p3 p7 [ 692.869758][ T319] tmpfs: Bad value for 'mpol' [ 693.696994][ T335] bridge0: entered promiscuous mode [ 693.818449][ T342] netlink: 'wޣ': attribute type 12 has an invalid length. [ 693.871138][ T342] loop9: detected capacity change from 0 to 1024 [ 693.873224][ T347] FAULT_INJECTION: forcing a failure. [ 693.873224][ T347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.890592][ T347] CPU: 0 UID: 0 PID: 347 Comm: syz.7.9440 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 693.890671][ T347] Tainted: [W]=WARN [ 693.890677][ T347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 693.890688][ T347] Call Trace: [ 693.890694][ T347] [ 693.890700][ T347] __dump_stack+0x1d/0x30 [ 693.890723][ T347] dump_stack_lvl+0xe8/0x140 [ 693.890743][ T347] dump_stack+0x15/0x1b [ 693.890795][ T347] should_fail_ex+0x265/0x280 [ 693.890820][ T347] should_fail+0xb/0x20 [ 693.890840][ T347] should_fail_usercopy+0x1a/0x20 [ 693.890866][ T347] _copy_from_user+0x1c/0xb0 [ 693.890937][ T347] ucma_write+0xd9/0x250 [ 693.890963][ T347] vfs_writev+0x406/0x8b0 [ 693.891002][ T347] ? __pfx_ucma_write+0x10/0x10 [ 693.891032][ T347] do_writev+0xe7/0x210 [ 693.891054][ T347] __x64_sys_writev+0x45/0x50 [ 693.891101][ T342] EXT4-fs: inline encryption not supported [ 693.891140][ T347] x64_sys_call+0x1ba5/0x3000 [ 693.891228][ T347] do_syscall_64+0xd8/0x2a0 [ 693.891285][ T347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.891312][ T347] RIP: 0033:0x7f07888cf749 [ 693.891332][ T347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.891355][ T347] RSP: 002b:00007f0787337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 693.891379][ T347] RAX: ffffffffffffffda RBX: 00007f0788b25fa0 RCX: 00007f07888cf749 [ 693.891456][ T347] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000009 [ 693.891472][ T347] RBP: 00007f0787337090 R08: 0000000000000000 R09: 0000000000000000 [ 693.891488][ T347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.891548][ T347] R13: 00007f0788b26038 R14: 00007f0788b25fa0 R15: 00007ffc190e0058 [ 693.891573][ T347] [ 693.977741][ T352] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9439'. [ 694.107870][ T342] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 694.204615][ T362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9443'. [ 694.232833][ T364] FAULT_INJECTION: forcing a failure. [ 694.232833][ T364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.245935][ T364] CPU: 0 UID: 0 PID: 364 Comm: wg1 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 694.245975][ T364] Tainted: [W]=WARN [ 694.245983][ T364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 694.246049][ T364] Call Trace: [ 694.246057][ T364] [ 694.246066][ T364] __dump_stack+0x1d/0x30 [ 694.246151][ T364] dump_stack_lvl+0xe8/0x140 [ 694.246177][ T364] dump_stack+0x15/0x1b [ 694.246206][ T364] should_fail_ex+0x265/0x280 [ 694.246231][ T364] should_fail+0xb/0x20 [ 694.246290][ T364] should_fail_usercopy+0x1a/0x20 [ 694.246319][ T364] _copy_from_user+0x1c/0xb0 [ 694.246351][ T364] bpf_test_init+0xb9/0x140 [ 694.246447][ T364] bpf_prog_test_run_xdp+0x305/0x970 [ 694.246508][ T364] ? _kstrtol+0x51/0x90 [ 694.246526][ T364] ? __rcu_read_unlock+0x4f/0x70 [ 694.246553][ T364] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 694.246611][ T364] bpf_prog_test_run+0x22a/0x390 [ 694.246638][ T364] __sys_bpf+0x4c0/0x7c0 [ 694.246666][ T364] __x64_sys_bpf+0x41/0x50 [ 694.246701][ T364] x64_sys_call+0x28e1/0x3000 [ 694.246757][ T364] do_syscall_64+0xd8/0x2a0 [ 694.246802][ T364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.246828][ T364] RIP: 0033:0x7f07888cf749 [ 694.246844][ T364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.246940][ T364] RSP: 002b:00007f0787337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 694.246962][ T364] RAX: ffffffffffffffda RBX: 00007f0788b25fa0 RCX: 00007f07888cf749 [ 694.246977][ T364] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 694.246991][ T364] RBP: 00007f0787337090 R08: 0000000000000000 R09: 0000000000000000 [ 694.247005][ T364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.247015][ T364] R13: 00007f0788b26038 R14: 00007f0788b25fa0 R15: 00007ffc190e0058 [ 694.247032][ T364] [ 694.460126][ T29] kauditd_printk_skb: 912 callbacks suppressed [ 694.460144][ T29] audit: type=1400 audit(1765088285.994:159070): avc: denied { unmount } for pid=31440 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 694.488661][ T29] audit: type=1400 audit(1765088286.024:159071): avc: denied { read write } for pid=31440 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 694.519531][ T29] audit: type=1400 audit(1765088286.024:159072): avc: denied { open } for pid=31440 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 694.543929][ T29] audit: type=1400 audit(1765088286.024:159073): avc: denied { ioctl } for pid=31440 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 694.569948][ T29] audit: type=1400 audit(1765088286.044:159074): avc: denied { read } for pid=368 comm="syz.7.9447" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 694.593745][ T29] audit: type=1400 audit(1765088286.044:159075): avc: denied { open } for pid=368 comm="syz.7.9447" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 694.617839][ T29] audit: type=1400 audit(1765088286.044:159076): avc: denied { map_create } for pid=365 comm="syz.2.9446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 694.637156][ T29] audit: type=1400 audit(1765088286.044:159077): avc: denied { map_read map_write } for pid=365 comm="syz.2.9446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 694.657155][ T29] audit: type=1400 audit(1765088286.044:159078): avc: denied { prog_load } for pid=365 comm="syz.2.9446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 694.676360][ T29] audit: type=1400 audit(1765088286.044:159079): avc: denied { bpf } for pid=365 comm="syz.2.9446" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 694.698511][ T342] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 694.722802][ T370] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 694.804918][T24227] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.831680][ T378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.841606][ T378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.901777][ T383] bond1: entered promiscuous mode [ 694.906952][ T383] bond1: entered allmulticast mode [ 694.913283][ T383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 695.408504][ T383] bond1 (unregistering): Released all slaves [ 695.487655][ T380] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9448'. [ 695.701380][ T402] FAULT_INJECTION: forcing a failure. [ 695.701380][ T402] name failslab, interval 1, probability 0, space 0, times 0 [ 695.714362][ T402] CPU: 1 UID: 0 PID: 402 Comm: syz.3.9456 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 695.714400][ T402] Tainted: [W]=WARN [ 695.714409][ T402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 695.714424][ T402] Call Trace: [ 695.714432][ T402] [ 695.714441][ T402] __dump_stack+0x1d/0x30 [ 695.714464][ T402] dump_stack_lvl+0xe8/0x140 [ 695.714563][ T402] dump_stack+0x15/0x1b [ 695.714586][ T402] should_fail_ex+0x265/0x280 [ 695.714613][ T402] should_failslab+0x8c/0xb0 [ 695.714649][ T402] __kmalloc_cache_noprof+0x65/0x4c0 [ 695.714720][ T402] ? proc_pid_stack+0x5d/0x180 [ 695.714802][ T402] proc_pid_stack+0x5d/0x180 [ 695.714828][ T402] proc_single_show+0x8c/0x120 [ 695.714857][ T402] traverse+0x149/0x3a0 [ 695.714924][ T402] seq_read_iter+0x85f/0x950 [ 695.714982][ T402] ? _parse_integer+0x27/0x40 [ 695.715065][ T402] seq_read+0x270/0x2b0 [ 695.715203][ T402] ? __pfx_seq_read+0x10/0x10 [ 695.715260][ T402] vfs_readv+0x3fb/0x690 [ 695.715295][ T402] __x64_sys_preadv+0xfd/0x1c0 [ 695.715368][ T402] x64_sys_call+0x2805/0x3000 [ 695.715392][ T402] do_syscall_64+0xd8/0x2a0 [ 695.715422][ T402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.715516][ T402] RIP: 0033:0x7faa6c87f749 [ 695.715530][ T402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.715548][ T402] RSP: 002b:00007faa6b2e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 695.715567][ T402] RAX: ffffffffffffffda RBX: 00007faa6cad5fa0 RCX: 00007faa6c87f749 [ 695.715676][ T402] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000005 [ 695.715802][ T402] RBP: 00007faa6b2e7090 R08: 00000000fffff25a R09: 0000000000000000 [ 695.715814][ T402] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 695.715827][ T402] R13: 00007faa6cad6038 R14: 00007faa6cad5fa0 R15: 00007fff7d7a8518 [ 695.715847][ T402] [ 696.012847][ T407] loop2: detected capacity change from 0 to 2048 [ 696.065540][ T412] netlink: 'wޣ': attribute type 12 has an invalid length. [ 696.084327][ T412] loop9: detected capacity change from 0 to 1024 [ 696.092378][ T412] EXT4-fs: inline encryption not supported [ 696.099173][ T407] Alternate GPT is invalid, using primary GPT. [ 696.105722][ T407] loop2: p2 p3 p7 [ 696.129239][ T412] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.435997][ T412] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 696.484414][ T412] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 696.586432][ T447] FAULT_INJECTION: forcing a failure. [ 696.586432][ T447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.599625][ T447] CPU: 0 UID: 0 PID: 447 Comm: syz.2.9472 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 696.599702][ T447] Tainted: [W]=WARN [ 696.599711][ T447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 696.599727][ T447] Call Trace: [ 696.599736][ T447] [ 696.599772][ T447] __dump_stack+0x1d/0x30 [ 696.599843][ T447] dump_stack_lvl+0xe8/0x140 [ 696.599871][ T447] dump_stack+0x15/0x1b [ 696.599897][ T447] should_fail_ex+0x265/0x280 [ 696.599920][ T447] should_fail+0xb/0x20 [ 696.600015][ T447] should_fail_usercopy+0x1a/0x20 [ 696.600038][ T447] _copy_from_iter+0xcf/0xe70 [ 696.600076][ T447] ? __alloc_skb+0x3bb/0x4d0 [ 696.600100][ T447] ? __alloc_skb+0x24d/0x4d0 [ 696.600146][ T447] netlink_sendmsg+0x471/0x6b0 [ 696.600216][ T447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.600242][ T447] __sock_sendmsg+0x145/0x180 [ 696.600271][ T447] ____sys_sendmsg+0x31e/0x4a0 [ 696.600342][ T447] ___sys_sendmsg+0x17b/0x1d0 [ 696.600380][ T447] __x64_sys_sendmsg+0xd4/0x160 [ 696.600469][ T447] x64_sys_call+0x17ba/0x3000 [ 696.600493][ T447] do_syscall_64+0xd8/0x2a0 [ 696.600532][ T447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.600566][ T447] RIP: 0033:0x7f93c5e7f749 [ 696.600585][ T447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.600608][ T447] RSP: 002b:00007f93c48df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.600628][ T447] RAX: ffffffffffffffda RBX: 00007f93c60d5fa0 RCX: 00007f93c5e7f749 [ 696.600655][ T447] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000005 [ 696.600671][ T447] RBP: 00007f93c48df090 R08: 0000000000000000 R09: 0000000000000000 [ 696.600730][ T447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.600742][ T447] R13: 00007f93c60d6038 R14: 00007f93c60d5fa0 R15: 00007ffcb88813e8 [ 696.600761][ T447] [ 696.814220][T24227] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.892021][ T451] loop9: detected capacity change from 0 to 128 [ 696.924437][ T451] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 696.932326][ T451] FAT-fs (loop9): Filesystem has been set read-only [ 696.954608][ T451] bio_check_eod: 31599 callbacks suppressed [ 696.954623][ T451] syz.9.9473: attempt to access beyond end of device [ 696.954623][ T451] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 696.993937][ T451] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 697.001942][ T451] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 697.046170][ T451] syz.9.9473: attempt to access beyond end of device [ 697.046170][ T451] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 697.076394][ T451] syz.9.9473: attempt to access beyond end of device [ 697.076394][ T451] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 697.121080][ T451] syz.9.9473: attempt to access beyond end of device [ 697.121080][ T451] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 697.150275][ T457] loop2: detected capacity change from 0 to 512 [ 697.166484][ T457] EXT4-fs: inline encryption not supported [ 697.168095][ T451] syz.9.9473: attempt to access beyond end of device [ 697.168095][ T451] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 697.190532][ T457] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 697.216141][ T451] syz.9.9473: attempt to access beyond end of device [ 697.216141][ T451] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 697.231131][ T451] syz.9.9473: attempt to access beyond end of device [ 697.231131][ T451] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 697.245498][ T451] syz.9.9473: attempt to access beyond end of device [ 697.245498][ T451] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 697.260895][ T459] __nla_validate_parse: 1 callbacks suppressed [ 697.260955][ T459] netlink: 52 bytes leftover after parsing attributes in process `syz.7.9477'. [ 697.269587][ T457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9476'. [ 697.289792][ T451] syz.9.9473: attempt to access beyond end of device [ 697.289792][ T451] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 697.312238][ T451] syz.9.9473: attempt to access beyond end of device [ 697.312238][ T451] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 697.421730][ T468] netlink: 140 bytes leftover after parsing attributes in process `syz.2.9480'. [ 697.454879][ T465] loop3: detected capacity change from 0 to 8192 [ 697.616105][ T478] loop3: detected capacity change from 0 to 128 [ 697.630448][ T478] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 697.638314][ T478] FAT-fs (loop3): Filesystem has been set read-only [ 697.645373][ T478] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 697.653237][ T478] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 697.672739][ T480] netlink: 'wޣ': attribute type 12 has an invalid length. [ 697.692943][ T480] loop7: detected capacity change from 0 to 1024 [ 697.707086][ T480] EXT4-fs: inline encryption not supported [ 697.735151][ T480] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 697.899918][ T489] FAULT_INJECTION: forcing a failure. [ 697.899918][ T489] name failslab, interval 1, probability 0, space 0, times 0 [ 697.912778][ T489] CPU: 1 UID: 0 PID: 489 Comm: syz.2.9487 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 697.912809][ T489] Tainted: [W]=WARN [ 697.912817][ T489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 697.912833][ T489] Call Trace: [ 697.912841][ T489] [ 697.912851][ T489] __dump_stack+0x1d/0x30 [ 697.912924][ T489] dump_stack_lvl+0xe8/0x140 [ 697.912946][ T489] dump_stack+0x15/0x1b [ 697.912971][ T489] should_fail_ex+0x265/0x280 [ 697.913060][ T489] should_failslab+0x8c/0xb0 [ 697.913088][ T489] __kmalloc_cache_noprof+0x65/0x4c0 [ 697.913152][ T489] ? audit_log_d_path+0x8d/0x150 [ 697.913182][ T489] audit_log_d_path+0x8d/0x150 [ 697.913210][ T489] audit_log_d_path_exe+0x42/0x70 [ 697.913238][ T489] audit_log_task+0x1e9/0x250 [ 697.913339][ T489] ? kstrtouint+0x76/0xc0 [ 697.913358][ T489] audit_seccomp+0x61/0x100 [ 697.913445][ T489] ? __seccomp_filter+0x832/0x1260 [ 697.913476][ T489] __seccomp_filter+0x843/0x1260 [ 697.913578][ T489] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 697.913605][ T489] ? vfs_write+0x7e8/0x960 [ 697.913622][ T489] ? __cond_resched+0x4e/0x90 [ 697.913655][ T489] __secure_computing+0x82/0x150 [ 697.913685][ T489] syscall_trace_enter+0xcf/0x1e0 [ 697.913795][ T489] do_syscall_64+0xb2/0x2a0 [ 697.913902][ T489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.913989][ T489] RIP: 0033:0x7f93c5e7f749 [ 697.914004][ T489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.914021][ T489] RSP: 002b:00007f93c48df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 697.914040][ T489] RAX: ffffffffffffffda RBX: 00007f93c60d5fa0 RCX: 00007f93c5e7f749 [ 697.914056][ T489] RDX: 0000000000000008 RSI: 0000200000000040 RDI: 0000000000000002 [ 697.914073][ T489] RBP: 00007f93c48df090 R08: 0000000000000000 R09: 0000000000000000 [ 697.914144][ T489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.914156][ T489] R13: 00007f93c60d6038 R14: 00007f93c60d5fa0 R15: 00007ffcb88813e8 [ 697.914179][ T489] [ 697.942782][ T492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9488'. [ 698.189870][ T498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9490'. [ 698.219090][ T480] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 698.269816][ T480] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 698.283942][ T498] loop2: detected capacity change from 0 to 2048 [ 698.337197][ T498] Alternate GPT is invalid, using primary GPT. [ 698.343627][ T498] loop2: p2 p3 p7 [ 698.415275][T31440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.550631][ T514] loop3: detected capacity change from 0 to 256 [ 698.593546][ T520] loop9: detected capacity change from 0 to 512 [ 698.602885][ T520] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 698.623420][ T520] EXT4-fs (loop9): 1 truncate cleaned up [ 698.631916][ T520] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 698.668113][ T520] EXT4-fs error (device loop9): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.9.9498: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 698.756693][ T520] EXT4-fs (loop9): Remounting filesystem read-only [ 698.763369][ T520] EXT4-fs warning (device loop9): ext4_rename_delete:3729: inode #2: comm syz.9.9498: Deleting old file: nlink 5, error=-117 [ 698.835009][T24227] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.894675][ T535] FAULT_INJECTION: forcing a failure. [ 698.894675][ T535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.907809][ T535] CPU: 1 UID: 0 PID: 535 Comm: syz.7.9502 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 698.907912][ T535] Tainted: [W]=WARN [ 698.907922][ T535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 698.907963][ T535] Call Trace: [ 698.907971][ T535] [ 698.907981][ T535] __dump_stack+0x1d/0x30 [ 698.908006][ T535] dump_stack_lvl+0xe8/0x140 [ 698.908027][ T535] dump_stack+0x15/0x1b [ 698.908115][ T535] should_fail_ex+0x265/0x280 [ 698.908147][ T535] should_fail+0xb/0x20 [ 698.908284][ T535] should_fail_usercopy+0x1a/0x20 [ 698.908312][ T535] _copy_from_user+0x1c/0xb0 [ 698.908343][ T535] ___sys_recvmsg+0xaa/0x370 [ 698.908376][ T535] do_recvmmsg+0x1ef/0x540 [ 698.908414][ T535] ? fput+0x8f/0xc0 [ 698.908449][ T535] __x64_sys_recvmmsg+0xe5/0x170 [ 698.908552][ T535] x64_sys_call+0x2b75/0x3000 [ 698.908582][ T535] do_syscall_64+0xd8/0x2a0 [ 698.908646][ T535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.908671][ T535] RIP: 0033:0x7f07888cf749 [ 698.908685][ T535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.908765][ T535] RSP: 002b:00007f0787337038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 698.908787][ T535] RAX: ffffffffffffffda RBX: 00007f0788b25fa0 RCX: 00007f07888cf749 [ 698.908878][ T535] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000005 [ 698.908896][ T535] RBP: 00007f0787337090 R08: 0000000000000000 R09: 0000000000000000 [ 698.908912][ T535] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 698.908929][ T535] R13: 00007f0788b26038 R14: 00007f0788b25fa0 R15: 00007ffc190e0058 [ 698.908954][ T535] [ 699.198776][ T521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9494'. [ 699.241017][ T546] netlink: 'syz.7.9503': attribute type 10 has an invalid length. [ 699.303604][ T546] team0 (unregistering): Port device team_slave_0 removed [ 699.338300][ T546] team0 (unregistering): Port device team_slave_1 removed [ 699.495684][ T29] kauditd_printk_skb: 1220 callbacks suppressed [ 699.495729][ T29] audit: type=1400 audit(1765088291.024:160300): avc: denied { read write } for pid=32070 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 699.610484][ T29] audit: type=1400 audit(1765088291.024:160301): avc: denied { open } for pid=32070 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 699.615752][ T556] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 699.634903][ T29] audit: type=1400 audit(1765088291.024:160302): avc: denied { ioctl } for pid=32070 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 699.670259][ T29] audit: type=1400 audit(1765088291.034:160303): avc: denied { map_create } for pid=555 comm="syz.3.9506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 699.689533][ T29] audit: type=1400 audit(1765088291.034:160304): avc: denied { bpf } for pid=555 comm="syz.3.9506" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 699.689566][ T29] audit: type=1400 audit(1765088291.034:160305): avc: denied { map_read map_write } for pid=555 comm="syz.3.9506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 699.689595][ T29] audit: type=1400 audit(1765088291.064:160306): avc: denied { recv } for pid=507 comm="syz.1.9494" saddr=10.128.0.163 src=30036 daddr=10.128.1.85 dest=44464 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 699.689624][ T29] audit: type=1400 audit(1765088291.064:160307): avc: denied { recv } for pid=507 comm="syz.1.9494" saddr=10.128.0.163 src=30036 daddr=10.128.1.85 dest=44464 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 699.689656][ T29] audit: type=1400 audit(1765088291.074:160308): avc: denied { map_create } for pid=555 comm="syz.3.9506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 699.801036][ T29] audit: type=1400 audit(1765088291.074:160309): avc: denied { prog_load } for pid=555 comm="syz.3.9506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 699.902322][ T561] lo speed is unknown, defaulting to 1000 [ 699.913519][ T561] lo speed is unknown, defaulting to 1000 [ 699.925352][ T561] lo speed is unknown, defaulting to 1000 [ 699.977101][ T561] infiniband syz1: set active [ 699.981892][ T561] infiniband syz1: added lo [ 699.987685][ T5145] lo speed is unknown, defaulting to 1000 [ 700.038855][ T572] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9511'. [ 700.073080][ T561] RDS/IB: syz1: added [ 700.093173][ T561] smc: adding ib device syz1 with port count 1 [ 700.114661][ T561] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 700.125570][ T5145] lo speed is unknown, defaulting to 1000 [ 700.172962][ T561] lo speed is unknown, defaulting to 1000 [ 700.279153][ T581] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9513'. [ 700.307633][ T581] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 700.321354][ T561] lo speed is unknown, defaulting to 1000 [ 700.328640][ T581] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 700.343706][ T584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 700.376839][ T561] lo speed is unknown, defaulting to 1000 [ 700.384144][ T584] ext4 filesystem being mounted at /598/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 700.415796][ T561] lo speed is unknown, defaulting to 1000 [ 700.454844][ T561] lo speed is unknown, defaulting to 1000 [ 700.504899][T24467] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.681169][ T598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 700.710228][ T598] ext4 filesystem being mounted at /599/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 700.753796][ T598] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9517: bg 0: block 345: padding at end of block bitmap is not set [ 700.768613][ T598] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 700.838431][ T610] lo speed is unknown, defaulting to 1000 [ 701.312705][ T615] set_capacity_and_notify: 2 callbacks suppressed [ 701.312725][ T615] loop9: detected capacity change from 0 to 512 [ 701.506469][ T615] EXT4-fs: inline encryption not supported [ 701.522446][ T615] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 701.581990][T24467] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.805672][ T632] loop3: detected capacity change from 0 to 512 [ 701.843144][ T632] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.9524: bg 0: block 16: invalid block bitmap [ 701.870916][ T632] EXT4-fs (loop3): Remounting filesystem read-only [ 701.877501][ T632] EXT4-fs (loop3): 1 truncate cleaned up [ 701.890250][ T632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 701.919510][T32070] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.958443][ T646] loop9: detected capacity change from 0 to 1024 [ 701.983014][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 701.993510][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.007721][ T622] lo speed is unknown, defaulting to 1000 [ 702.013973][ T648] Cannot find set identified by id 0 to match [ 702.015319][ T646] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 702.067704][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.078069][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.123303][ T659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.132062][ T659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.193706][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.204079][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.259429][T24227] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.297003][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.307414][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.448950][ T675] bridge0: entered promiscuous mode [ 702.458520][ T675] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 702.500225][ T622] chnl_net:caif_netlink_parms(): no params data found [ 702.516076][ T52] bridge_slave_1: left allmulticast mode [ 702.521870][ T52] bridge_slave_1: left promiscuous mode [ 702.527571][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.550013][ T52] bridge_slave_0: left allmulticast mode [ 702.555743][ T52] bridge_slave_0: left promiscuous mode [ 702.561559][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.580205][ T681] loop1: detected capacity change from 0 to 512 [ 702.588076][ T681] EXT4-fs: inline encryption not supported [ 702.594449][ T681] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 702.611459][ T681] __nla_validate_parse: 2 callbacks suppressed [ 702.611475][ T681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9536'. [ 702.702074][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.713354][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.723291][ T52] bond0 (unregistering): Released all slaves [ 702.733278][ T52] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 702.741466][ T52] vxcan3: left promiscuous mode [ 702.747337][ T52] bond1 (unregistering): Released all slaves [ 702.753271][ T692] loop7: detected capacity change from 0 to 512 [ 702.789221][ T692] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.804905][ T692] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 702.829505][ T52] tipc: Disabling bearer [ 702.834796][ T52] tipc: Left network mode [ 702.861956][T31440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.873765][ T622] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.881053][ T622] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.903256][ T703] netlink: 10 bytes leftover after parsing attributes in process `syz.9.9542'. [ 702.913562][ T622] bridge_slave_0: entered allmulticast mode [ 702.923724][ T622] bridge_slave_0: entered promiscuous mode [ 702.944029][ T705] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9544'. [ 702.949623][ T622] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.960152][ T622] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.976605][ T622] bridge_slave_1: entered allmulticast mode [ 702.984613][ T622] bridge_slave_1: entered promiscuous mode [ 702.993533][ T52] hsr_slave_0: left promiscuous mode [ 703.005154][ T52] hsr_slave_1: left promiscuous mode [ 703.019137][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 703.026668][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.034386][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 703.041889][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.053189][ T52] veth1_macvtap: left promiscuous mode [ 703.056394][ T712] loop9: detected capacity change from 0 to 512 [ 703.058775][ T52] veth0_macvtap: left promiscuous mode [ 703.066887][ T712] ext4: Unknown parameter 'smackfsdef' [ 703.136195][ T52] team0 (unregistering): Port device team_slave_1 removed [ 703.146607][ T52] team0 (unregistering): Port device team_slave_0 removed [ 703.202706][ T622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.210515][ T716] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 703.241554][ T622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.247134][ T719] FAULT_INJECTION: forcing a failure. [ 703.247134][ T719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 703.263728][ T719] CPU: 1 UID: 0 PID: 719 Comm: syz.7.9548 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 703.263815][ T719] Tainted: [W]=WARN [ 703.263821][ T719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 703.263835][ T719] Call Trace: [ 703.263841][ T719] [ 703.263850][ T719] __dump_stack+0x1d/0x30 [ 703.263877][ T719] dump_stack_lvl+0xe8/0x140 [ 703.263967][ T719] dump_stack+0x15/0x1b [ 703.263988][ T719] should_fail_ex+0x265/0x280 [ 703.264014][ T719] should_fail+0xb/0x20 [ 703.264030][ T719] should_fail_usercopy+0x1a/0x20 [ 703.264115][ T719] _copy_to_user+0x20/0xa0 [ 703.264139][ T719] simple_read_from_buffer+0xb5/0x130 [ 703.264161][ T719] proc_fail_nth_read+0x10e/0x150 [ 703.264199][ T719] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 703.264222][ T719] vfs_read+0x1a8/0x770 [ 703.264237][ T719] ? __rcu_read_unlock+0x4f/0x70 [ 703.264257][ T719] ? __fget_files+0x184/0x1c0 [ 703.264339][ T719] ? mutex_lock+0x58/0x90 [ 703.264365][ T719] ksys_read+0xda/0x1a0 [ 703.264382][ T719] __x64_sys_read+0x40/0x50 [ 703.264398][ T719] x64_sys_call+0x2889/0x3000 [ 703.264424][ T719] do_syscall_64+0xd8/0x2a0 [ 703.264503][ T719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.264524][ T719] RIP: 0033:0x7f07888ce15c [ 703.264539][ T719] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 703.264561][ T719] RSP: 002b:00007f0787337030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 703.264577][ T719] RAX: ffffffffffffffda RBX: 00007f0788b25fa0 RCX: 00007f07888ce15c [ 703.264588][ T719] RDX: 000000000000000f RSI: 00007f07873370a0 RDI: 0000000000000003 [ 703.264602][ T719] RBP: 00007f0787337090 R08: 0000000000000000 R09: 0000000000000000 [ 703.264617][ T719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.264629][ T719] R13: 00007f0788b26038 R14: 00007f0788b25fa0 R15: 00007ffc190e0058 [ 703.264649][ T719] [ 703.481639][ T622] team0: Port device team_slave_0 added [ 703.493487][ T622] team0: Port device team_slave_1 added [ 703.514819][ T622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.521909][ T622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.548509][ T622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.559458][ T725] netlink: 'wޣ': attribute type 12 has an invalid length. [ 703.567509][ T622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.574540][ T622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.575353][ T725] loop7: detected capacity change from 0 to 1024 [ 703.601038][ T622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.610096][ T725] EXT4-fs: inline encryption not supported [ 703.631833][ T725] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.661980][ T622] hsr_slave_0: entered promiscuous mode [ 703.668097][ T622] hsr_slave_1: entered promiscuous mode [ 703.674627][ T622] debugfs: 'hsr0' already exists in 'hsr' [ 703.680415][ T622] Cannot create hsr debugfs directory [ 703.787606][ T730] Unsupported ieee802154 address type: 0 [ 703.798644][ T725] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 703.810613][ T725] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 703.854505][ T734] loop1: detected capacity change from 0 to 512 [ 703.878607][T31440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.894134][ T734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.910947][ T734] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 703.928585][ T739] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9554'. [ 703.944258][T29042] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.946796][ T740] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9555'. [ 703.962257][ T740] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9555'. [ 703.980771][ T740] erspan0: entered promiscuous mode [ 703.987038][ T740] gretap0: entered promiscuous mode [ 704.002731][ T622] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 704.003246][ T739] loop9: detected capacity change from 0 to 2048 [ 704.021684][ T622] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 704.031650][ T622] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 704.037782][ T742] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 704.053912][ T739] Alternate GPT is invalid, using primary GPT. [ 704.057220][ T622] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 704.060403][ T739] loop9: p2 p3 p7 [ 704.118289][ T749] loop7: detected capacity change from 0 to 512 [ 704.149337][ T749] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 704.195509][ T749] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 704.216606][ T622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.228272][ T749] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.9555: bg 0: block 248: padding at end of block bitmap is not set [ 704.247686][ T622] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.259513][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.266701][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.275449][ T749] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.9555: Failed to acquire dquot type 1 [ 704.293080][ T910] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.300211][ T910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.307692][ T749] EXT4-fs (loop7): 1 truncate cleaned up [ 704.324420][ T749] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 704.421014][ T770] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz.7.9555: deleted inode referenced: 12 [ 704.447470][ T622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.458395][T31440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 704.500580][ T29] kauditd_printk_skb: 1187 callbacks suppressed [ 704.500596][ T29] audit: type=1400 audit(1765088296.034:161495): avc: denied { module_request } for pid=622 comm="syz-executor" kmod="netdev-virt_wifi0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 704.529535][ T29] audit: type=1400 audit(1765088296.034:161496): avc: denied { map_create } for pid=774 comm="syz.7.9560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 704.562969][ T29] audit: type=1400 audit(1765088296.034:161497): avc: denied { sys_module } for pid=622 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 704.584499][ T29] audit: type=1400 audit(1765088296.034:161498): avc: denied { module_request } for pid=622 comm="syz-executor" kmod="virt_wifi0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 704.606575][ T29] audit: type=1400 audit(1765088296.064:161499): avc: denied { module_request } for pid=622 comm="syz-executor" kmod="netdev-virt_wifi0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 704.629359][ T29] audit: type=1400 audit(1765088296.084:161500): avc: denied { map_read map_write } for pid=774 comm="syz.7.9560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 704.640550][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 704.649395][ T29] audit: type=1400 audit(1765088296.084:161501): avc: denied { prog_load } for pid=774 comm="syz.7.9560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 704.655798][ C0] audit: audit_lost=197 audit_rate_limit=0 audit_backlog_limit=64 [ 704.655818][ C0] audit: backlog limit exceeded [ 704.703844][ T781] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 704.709475][ T622] veth0_vlan: entered promiscuous mode [ 704.711827][ T781] FAT-fs (loop7): Filesystem has been set read-only [ 704.723973][ T781] bio_check_eod: 21219 callbacks suppressed [ 704.723990][ T781] syz.7.9561: attempt to access beyond end of device [ 704.723990][ T781] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 704.724338][ T622] veth1_vlan: entered promiscuous mode [ 704.730039][ T781] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 704.757292][ T781] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 704.766274][ T781] syz.7.9561: attempt to access beyond end of device [ 704.766274][ T781] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 704.772066][ T622] veth0_macvtap: entered promiscuous mode [ 704.779849][ T781] syz.7.9561: attempt to access beyond end of device [ 704.779849][ T781] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 704.788154][ T622] veth1_macvtap: entered promiscuous mode [ 704.798867][ T781] syz.7.9561: attempt to access beyond end of device [ 704.798867][ T781] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 704.816423][ T622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.817953][ T781] syz.7.9561: attempt to access beyond end of device [ 704.817953][ T781] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 704.831547][ T622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.838256][ T781] syz.7.9561: attempt to access beyond end of device [ 704.838256][ T781] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 704.851812][ T174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.858718][ T781] syz.7.9561: attempt to access beyond end of device [ 704.858718][ T781] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 704.880570][ T781] syz.7.9561: attempt to access beyond end of device [ 704.880570][ T781] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 704.895837][ T781] syz.7.9561: attempt to access beyond end of device [ 704.895837][ T781] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 704.896063][ T174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.912310][ T781] syz.7.9561: attempt to access beyond end of device [ 704.912310][ T781] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 704.939822][ T174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.958057][ T174] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.213290][ T793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.241588][ T793] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 705.254654][ T791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.279273][ T791] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 705.314300][T29042] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.347974][ T622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.373665][ T174] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.387289][ T806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9568'. [ 705.423849][ T174] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.494670][ T174] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.516792][ T806] Alternate GPT is invalid, using primary GPT. [ 705.517009][ T806] loop1: p2 p3 p7 [ 705.524872][ T174] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.793599][ T174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.815143][ T828] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 705.823153][ T828] FAT-fs (loop3): Filesystem has been set read-only [ 705.831050][ T828] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 705.838898][ T828] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 705.846269][ T820] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9571'. [ 705.856700][ T174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.866393][ T174] bond0 (unregistering): Released all slaves [ 705.888966][ T826] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.928223][T24227] ================================================================== [ 705.936367][T24227] BUG: KCSAN: data-race in free_pid / zap_pid_ns_processes [ 705.943660][T24227] [ 705.945999][T24227] read-write to 0xffff888104556748 of 4 bytes by task 32511 on cpu 1: [ 705.952816][ T834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.954166][T24227] free_pid+0xb9/0x1d0 [ 705.962640][ T834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.966555][T24227] free_pids+0x7a/0xb0 [ 705.978435][T24227] release_task+0x9b1/0xb70 [ 705.982957][T24227] do_exit+0xd91/0x15d0 [ 705.987136][T24227] do_group_exit+0xff/0x140 [ 705.991648][T24227] get_signal+0xe58/0xf70 [ 705.996008][T24227] arch_do_signal_or_restart+0x96/0x450 [ 706.001574][T24227] exit_to_user_mode_loop+0x6a/0x740 [ 706.006887][T24227] do_syscall_64+0x202/0x2a0 [ 706.011514][T24227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.017417][T24227] [ 706.019753][T24227] read to 0xffff888104556748 of 4 bytes by task 24227 on cpu 0: [ 706.027388][T24227] zap_pid_ns_processes+0x1fe/0x2d0 [ 706.032610][T24227] do_exit+0x1424/0x15d0 [ 706.036887][T24227] do_group_exit+0xff/0x140 [ 706.041416][T24227] get_signal+0xe58/0xf70 [ 706.045766][T24227] arch_do_signal_or_restart+0x96/0x450 [ 706.051339][T24227] exit_to_user_mode_loop+0x6a/0x740 [ 706.056644][T24227] do_syscall_64+0x202/0x2a0 [ 706.061263][T24227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.067171][T24227] [ 706.069504][T24227] value changed: 0x00000002 -> 0x00000001 [ 706.075276][T24227] [ 706.077611][T24227] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 706.083772][T24227] CPU: 0 UID: 0 PID: 24227 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 706.095338][T24227] Tainted: [W]=WARN [ 706.099147][T24227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 706.109221][T24227] ================================================================== [ 706.117732][ T831] netlink: 'wޣ': attribute type 12 has an invalid length. [ 706.133000][ T832] EXT4-fs: inline encryption not supported [ 706.143032][ T798] lo speed is unknown, defaulting to 1000 [ 706.153571][ T832] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.167287][ T174] tipc: Left network mode [ 706.185169][ T826] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.335393][ T826] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.354375][ T831] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.386756][ T174] hsr_slave_0: left promiscuous mode [ 706.392534][ T174] hsr_slave_1: left promiscuous mode [ 706.398277][ T174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.405784][ T174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.413414][ T174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.420839][ T174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.432683][ T174] veth1_macvtap: left promiscuous mode [ 706.438273][ T174] veth0_macvtap: left promiscuous mode [ 706.501304][ T174] team0 (unregistering): Port device team_slave_1 removed [ 706.511382][ T174] team0 (unregistering): Port device team_slave_0 removed [ 706.565559][ T826] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.671674][T14718] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.690583][T14718] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.705896][T14718] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.717403][T14718] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.910385][ T174] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.991464][ T174] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.031343][ T174] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.101568][ T174] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.197814][ T174] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.262859][ T174] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.302763][ T174] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.362761][ T174] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.435263][ T174] bridge_slave_1: left allmulticast mode [ 707.441085][ T174] bridge_slave_1: left promiscuous mode [ 707.446827][ T174] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.454870][ T174] bridge_slave_0: left allmulticast mode [ 707.460557][ T174] bridge_slave_0: left promiscuous mode [ 707.466210][ T174] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.474589][ T174] bridge_slave_1: left allmulticast mode [ 707.480285][ T174] bridge_slave_1: left promiscuous mode [ 707.485916][ T174] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.493789][ T174] bridge_slave_0: left allmulticast mode [ 707.499430][ T174] bridge_slave_0: left promiscuous mode [ 707.505161][ T174] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.602345][ T174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.614021][ T174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.623850][ T174] bond0 (unregistering): Released all slaves [ 707.640747][ T174] erspan0 (unregistering): left promiscuous mode [ 707.648985][ T174] gretap0 (unregistering): left promiscuous mode [ 707.712612][ T174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.722513][ T174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.732187][ T174] bond0 (unregistering): Released all slaves [ 707.782721][ T174] tipc: Disabling bearer [ 707.787971][ T174] tipc: Left network mode [ 707.825378][ T174] hsr_slave_0: left promiscuous mode [ 707.836231][ T174] hsr_slave_1: left promiscuous mode [ 707.842901][ T174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.850432][ T174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.858142][ T174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.865544][ T174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.873531][ T174] hsr_slave_0: left promiscuous mode [ 707.879048][ T174] hsr_slave_1: left promiscuous mode [ 707.884711][ T174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.892142][ T174] batadv0: mtu less than device minimum [ 707.898412][ T174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 707.909317][ T174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 707.920259][ T174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 707.931146][ T174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 707.941880][ T174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 707.952772][ T174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 707.963987][ T174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 707.974978][ T174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 707.992055][ T174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.999607][ T174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.018312][ T174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.026059][ T174] batman_adv: batadv0: Interface deactivated: dummy0 [ 708.032831][ T174] batman_adv: batadv0: Removing interface: dummy0 [ 708.043664][ T174] veth1_macvtap: left promiscuous mode [ 708.049154][ T174] veth0_macvtap: left promiscuous mode [ 708.054723][ T174] veth1_vlan: left promiscuous mode [ 708.060078][ T174] veth0_vlan: left promiscuous mode [ 708.065960][ T174] veth1_macvtap: left promiscuous mode [ 708.071507][ T174] veth0_macvtap: left promiscuous mode [ 708.170496][ T174] team0 (unregistering): Port device team_slave_1 removed [ 708.180430][ T174] team0 (unregistering): Port device team_slave_0 removed [ 708.823943][ T174] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.873615][ T174] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.942690][ T174] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.982851][ T174] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.055732][ T174] bridge_slave_1: left allmulticast mode [ 709.061421][ T174] bridge_slave_1: left promiscuous mode [ 709.067114][ T174] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.074853][ T174] bridge_slave_0: left allmulticast mode [ 709.080593][ T174] bridge_slave_0: left promiscuous mode [ 709.086229][ T174] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.221889][ T174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.232020][ T174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.241480][ T174] bond0 (unregistering): Released all slaves [ 709.368373][ T174] hsr_slave_0: left promiscuous mode [ 709.374143][ T174] hsr_slave_1: left promiscuous mode [ 709.379802][ T174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.387229][ T174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.394896][ T174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.402322][ T174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.412439][ T174] veth1_macvtap: left promiscuous mode [ 709.417911][ T174] veth0_macvtap: left promiscuous mode [ 709.423608][ T174] veth1_vlan: left promiscuous mode [ 709.428824][ T174] veth0_vlan: left promiscuous mode [ 709.494623][ T174] team0 (unregistering): Port device team_slave_1 removed [ 709.503938][ T174] team0 (unregistering): Port device team_slave_0 removed [ 710.171029][ T29] kauditd_printk_skb: 519 callbacks suppressed [ 710.171045][ T29] audit: type=1400 audit(1765088301.704:162021): avc: denied { egress } for pid=174 comm="kworker/u8:5" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 710.201137][ T29] audit: type=1400 audit(1765088301.704:162022): avc: denied { sendto } for pid=174 comm="kworker/u8:5" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 710.281958][ T174] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.332265][ T174] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.401310][ T174] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.441335][ T174] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.493691][ T174] bridge_slave_1: left allmulticast mode [ 710.499362][ T174] bridge_slave_1: left promiscuous mode [ 710.505068][ T174] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.512958][ T174] bridge_slave_0: left allmulticast mode [ 710.518595][ T174] bridge_slave_0: left promiscuous mode [ 710.524280][ T174] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.621425][ T174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.631094][ T174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.640474][ T174] bond0 (unregistering): Released all slaves [ 710.677684][ T174] hsr_slave_0: left promiscuous mode [ 710.683343][ T174] hsr_slave_1: left promiscuous mode [ 710.688975][ T174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 710.696373][ T174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.703771][ T174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 710.711181][ T174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.722104][ T174] veth1_macvtap: left promiscuous mode [ 710.727573][ T174] veth0_macvtap: left promiscuous mode [ 710.774971][ T174] team0 (unregistering): Port device team_slave_1 removed [ 710.784290][ T174] team0 (unregistering): Port device team_slave_0 removed [ 710.818095][ T53] smc: removing ib device syz1 [ 710.823212][ T3614] lo speed is unknown, defaulting to 1000 [ 710.828962][ T3614] syz1: Port: 1 Link DOWN