last executing test programs: 9m2.200756503s ago: executing program 32 (id=25): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) (fail_nth: 4) 5m41.714100361s ago: executing program 33 (id=2815): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f0000000400)={[{@grpquota}, {@delalloc}, {@resuid}, {@nodioread_nolock}, {@dioread_nolock}, {@nojournal_checksum}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x20, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, {0x0, 0x0, 0xffffffdc, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x4f3e, 0x1c881, 0x8, 0x2aa}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000140)={{0x80, 0x5}, 'port0\x00', 0x5, 0x250012, 0x0, 0x2c1d, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810de}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x8, 0x7, 0x43}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x73e9, 0x1c410, 0x2, 0x20002f7}) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x3c1c, 0xc000, 0x3, 0x3c}) 5m40.391905423s ago: executing program 34 (id=2837): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x348, 0xffffffff, 0xffffffff, 0x348, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz1\x00', {0x10000}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x42}, [0x0, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xff, 0xffffff00, 0xffffff00], 'caif0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x3c, 0x9, 0xe, 0x10}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x2, 0xfffffff7, 0x200000, 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000000306010100000000f7ffffff0100000a0500010007000000006ebd92"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0xfffffffc, @remote, 0x9}], 0x1c) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'none\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e26, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5m36.126331419s ago: executing program 35 (id=2872): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000400)={[{@resuid}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$eJzs3c9vG1kdAPDvTOI4/bGbFvYAq4UWWCioqtOku9VqL9teQGi1EmLFAXHohsSNQp261M6yCZXI/g0ggeAEfwIHJA5Ie+LAjSMSB4S0HJAKVKAGAZLRjKep24xVt3bsTfL5SNP58ebN9z014/f8bM8L4Mg6GxHbETETEe9ExFxxPCmWuNJdsvPu37uzvHPvznISnc7bf0/y9OxY9OTJnCiuORsRX/9KxLeTvXFbm1s3lhqN+u1if769fmu+tbl1YW19abW+Wr+5uHh54fLF1y69ujiyup5Z/+XdL6+9+Y3f/PpTH/5++0vfz4p1skjrrccodate2Y2TmY6IN/cj2ARMFeuZPSkvlWe4sr/l4emkEfGxiPhsfv/PxVT+1wkAHGadzk+jM9e7DwAcdtn7/5OzSVqLiDQtOgG17hjeC3E8bTRb7fPXmxs3V7pjZaeikl5fa9Qvnq7+8bv5yZUk21/I0/L0fH/xsf1LEXE6In5UPZbv15abjZXJdHkA4Mg7kX8GVrT/EfGvaprWagNlLflUDwA4MGYnkBMAmKzeVrw6wXIAAOPjXTwAHD0DtP/Fh/3b+14WAGA8vP8HgKNH+w8AR8/Ttv++IwgAB9rX3norWzo7xfOvV97d3Kg0372wUm/dqK1vLNeWm7dv1VabzdX8mT3rj2Q+1rNd9AkazeathVdi4735dr3Vnm9tbl1bb27cbF/Ln+t9rV4Za+0AgDKnz3zwhyQitl8/li/RM5eDthoOt3TSBQAmZurhZv3E02bWQYAD7dlm+/rPyMsBjF9lkF/05Z2E3+1/YYCJKH2Y92zp5qN+8hRBfM8YPlLOfXLw8f+9czwDB5nxfzi6pp4p1xsjLwcwfs82/g8cBp1O8vic/zO7SQDAoTTEV/g6PxhVJwSYqCdN5j2Sz/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgkDkZEd+JJK3lc4Gn2b9prRbxXEScikpyfa1RvxgRz8eZiKhUs/2FSRcaABhS+tekmP/r3NzLJx9PnUn+Xc3XEfG9n7394/eW2u3bC9nxf+wer5bMDjbEvIIAwGA61QFPzNvvxWLd80b+/r07yw+W/SpkmbtX43/FVMTLO/fu5Es3ZTqygxGzeV/i+D+TmC7yZL2NFyNiagTxt9+PiE+U1T/Jx0ZOFX2b3vhRxH5urPHTR+KneVp3nfXdPj6CssBR88HViLhSdv+lcTZfl9//s/kr1PDuXu1e7MFr307P6+90EWmqJH52z58dNMYrv/3qnoOduW7a+xEvTpfFT3bjJ33ivzxg/D+99OkfvtEnrfPziHNRHr831nx7/dZ8a3Prwtr60mp9dTYWFy8vXL742qVXF+fzMer5ByPVe/3t9fPP9ytbVv/jfeLPltZ/Zjfv5wes/y/++863PvNwt/p4/C9+rix+Gi+Uxu/K2sQvPBqm0y/+0vFf9Z2+O4u/0qf+T/r/Pz9I5SPiw79srQx4KgAwBq3NrRtLjUb99lAbaex0RnGdPRtZEQc7+UF3cbigf479qMUzblSGrs6kNqZ3+4qjvfI3syuOuTrpyGsx1Mb9ccWa3GsSMB4Pb/pJlwQAAAAAAAAAAAAAAOhnHD9dmnQdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLz+HwAA//85T9KE") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) r2 = openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xb}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) 5m27.806673859s ago: executing program 36 (id=2994): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1400) 5m12.3576365s ago: executing program 37 (id=3113): r0 = socket(0x40000000015, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000002300)) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f00000005c0)=[0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) r4 = eventfd(0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESHEX=r6, @ANYBLOB="edfdea2573ab70ab2d85faf3dc04d8436eee9a1aec0df35f65d6920a9e8d7a6c579a135cb2cfb6812c7c574ae2bccb6dfa67be942893f67a026ddb88ac895682a7335e496d3bf8afceb44b457f98beca8f8af121db25c6b51ebdcd1c1bdcdf334b05ea8764fc04528b9d5cca43cd61c2a622d9d330f0980243154bac90f9e220c60b5638cc3810e079e4b62b9ad064a81d0f", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f00000002c0)) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) keyctl$get_persistent(0x16, r8, r9) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r11) chown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, r11) r12 = gettid() r13 = geteuid() r14 = getgid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000680)={0x0, 0x0}) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) r17 = accept4$x25(r0, 0x0, &(0x7f00000007c0), 0x0) sendmsg$unix(r0, &(0x7f0000000940)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)="a784c49c83cad3b87936a1ee1af69b6224d6f08b3bca5899d96471160301f41e0c4f4677b9288b24a36dad0b45285d673da714eff5638540c98b86cd", 0x3c}, {&(0x7f0000000140)="c58183f0919837811f0e0b351f899f02be7aac77503f8ece1b28e87ce89478b55f9bfe6157191167433acb84b253faf3d19b266bccf5e4c9c5b598cf72173d3e7423c31559827b6e2c5b8713e8793cb4f67012e5815398f65fb3740055d8e1d20ac2e33e45981abb955170e004b2080233188fb00c7d287c31dd2c05f48556d494a37a46abee2f101ff036a1fc2e57dc3cea0f03c0401b34190c4d2b7170c503ad852b62de8f7a8a64f595a11f64ab974cd4a6be75ec3e6f47e9d402bd82f108f00cdbca25d38f1269f76fe532ce9714399c7da4c901bf3ba989c7acf5a7a86620f83f0f37f02d7c11ac5c4435641f633a977c187527", 0xf6}], 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="1c000800000000000000220005000000", @ANYRES32=r5, @ANYRES32=r8, @ANYRES32=r11, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="000000001b2bc30b3b676d4201060000002a1a30e32034b8c877c89264000000020000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=0xee01, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r17, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1], 0x128}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 4m47.787349781s ago: executing program 6 (id=3636): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbmon(&(0x7f0000000080), 0x8001, 0x4000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006400002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) fstat(r2, &(0x7f00000004c0)) open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x138) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161842, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000440)=0x3) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$poke(0x420e, r8, 0x0, 0xfffffffffffffffe) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r7, 0x4b4d, &(0x7f0000000000)={0x0, 0x17}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, 0x1411, 0x200, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$VT_DISALLOCATE(r9, 0x5608) socket$nl_netfilter(0x10, 0x3, 0xc) 4m47.656052704s ago: executing program 6 (id=3637): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000400)={[{@resuid}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) r2 = openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x10, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000181100", @ANYRES32=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000001180)='damon_aggregated\x00', r4, 0x0, 0x800}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5, 0x0, 0xb}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3, 0x1}, 0x10, 0x0, r3}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 4m47.39310271s ago: executing program 6 (id=3638): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0000000400000008", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/25], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0) r2 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0xffff, @multicast1}, 0x10) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) 4m40.794815118s ago: executing program 6 (id=3735): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008842, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x801460, 0x0, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) r3 = syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) migrate_pages(r3, 0x7, 0x0, &(0x7f0000000240)=0x8000000000000001) 4m40.429302284s ago: executing program 6 (id=3741): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 4m39.841655413s ago: executing program 6 (id=3751): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 4m39.76806752s ago: executing program 38 (id=3751): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 4m36.848922302s ago: executing program 2 (id=3782): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r0, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='trusted.overlay.nlink\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='$\x00\x00 ', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1, 0x0, 0x7}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001cc0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES64, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x4b, 0x2eb, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000c000000000000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id\xf7\xff\xffe{') r5 = timerfd_create(0x0, 0x0) readv(r5, &(0x7f00000009c0)=[{&(0x7f0000000200)=""/33, 0x21}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000feffffffffffffff00000000000000e40000", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r10, r9, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x0) 4m35.934118903s ago: executing program 2 (id=3789): r0 = socket(0x40000000015, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000002300)) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x640100fe}, 0x10) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f00000005c0)=[0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) r4 = eventfd(0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESHEX=r6, @ANYBLOB="edfdea2573ab70ab2d85faf3dc04d8436eee9a1aec0df35f65d6920a9e8d7a6c579a135cb2cfb6812c7c574ae2bccb6dfa67be942893f67a026ddb88ac895682a7335e496d3bf8afceb44b457f98beca8f8af121db25c6b51ebdcd1c1bdcdf334b05ea8764fc04528b9d5cca43cd61c2a622d9d330f0980243154bac90f9e220c60b5638cc3810e079e4b62b9ad064a81d0f", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f00000002c0)) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) keyctl$get_persistent(0x16, r8, r9) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r11) chown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, r11) r12 = gettid() r13 = geteuid() r14 = getgid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000680)={0x0, 0x0}) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) r17 = accept4$x25(r0, 0x0, &(0x7f00000007c0), 0x0) sendmsg$unix(r0, &(0x7f0000000940)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)="a784c49c83cad3b87936a1ee1af69b6224d6f08b3bca5899d96471160301f41e0c4f4677b9288b24a36dad0b45285d673da714eff5638540c98b86cd", 0x3c}, {&(0x7f0000000140)="c58183f0919837811f0e0b351f899f02be7aac77503f8ece1b28e87ce89478b55f9bfe6157191167433acb84b253faf3d19b266bccf5e4c9c5b598cf72173d3e7423c31559827b6e2c5b8713e8793cb4f67012e5815398f65fb3740055d8e1d20ac2e33e45981abb955170e004b2080233188fb00c7d287c31dd2c05f48556d494a37a46abee2f101ff036a1fc2e57dc3cea0f03c0401b34190c4d2b7170c503ad852b62de8f7a8a64f595a11f64ab974cd4a6be75ec3e6f47e9d402bd82f108f00cdbca25d38f1269f76fe532ce9714399c7da4c901bf3ba989c7acf5a7a86620f83f0f37f02d7c11ac5c4435641f633a977c187527", 0xf6}], 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="1c000800000000000000220005000000", @ANYRES32=r5, @ANYRES32=r8, @ANYRES32=r11, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="000000001b2bc30b3b676d4201060000002a1a30e32034b8c877c89264000000020000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=0xee01, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r17, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1], 0x128}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 4m35.652915551s ago: executing program 2 (id=3791): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x2, 0x7fffffe, 0x7d8, 0x308, 0x220, 0x0, 0x308, 0x4d8, 0x708, 0x708, 0x708, 0x708, 0x708, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x118, 0x140, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0x0, 0xffffffff, 0xff000000], 0x4e20, 0x2f, 0x6, 0x4e22, 0x20, 0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @dev, [0xff000000], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x20}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0x5, 0x2, 0x8000, 0xc, 0x4]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1, @private1, @empty, @private2={0xfc, 0x2, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x838) 4m35.16386253s ago: executing program 2 (id=3805): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008842, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x801460, 0x0, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) r4 = syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) migrate_pages(r4, 0x7, 0x0, &(0x7f0000000240)=0x8000000000000001) 4m34.824786414s ago: executing program 2 (id=3811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a01040000000000001f000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff0e000000000000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c000180060001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4m34.343067372s ago: executing program 2 (id=3824): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, 0x0, 0x107b42, 0x32) ftruncate(r1, 0x6000000) copy_file_range(r1, 0x0, r1, &(0x7f00000004c0)=0x102, 0x9, 0x0) 4m34.319813144s ago: executing program 39 (id=3824): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, 0x0, 0x107b42, 0x32) ftruncate(r1, 0x6000000) copy_file_range(r1, 0x0, r1, &(0x7f00000004c0)=0x102, 0x9, 0x0) 2m6.862534405s ago: executing program 5 (id=6174): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r1, 0xffffffffffffffff, 0x18, 0x0, @val=@iter={0x0}}, 0x20) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140)="100000000000000001000200005710783e20ff01ffffffffffff88c031", 0x1d) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x7}, 0x13748, 0x10000, 0x0, 0x5, 0xa, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 2m6.448914627s ago: executing program 5 (id=6178): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, @in6=@local, 0x4e22, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x60, 0x0, 0x0, 0xee01}, {0x0, 0x1000000000000401, 0x0, 0x40000000, 0x0, 0x12, 0x1, 0xfffffffffffffffe}, {0x10000, 0x3, 0x0, 0x100000000007fff}, 0x0, 0x6e6bb1, 0x1, 0x1, 0x3}}, 0xb8}}, 0x0) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = io_uring_setup(0x2c4c, &(0x7f00000003c0)={0x0, 0xf7d6, 0x10000, 0x0, 0x29f, 0x0, r0}) io_uring_enter(r5, 0x5a28, 0x4719, 0x10, &(0x7f0000000300), 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x5}, 0x18) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) close_range(r0, r1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2, 0x922000000001, 0x106) 2m6.327104779s ago: executing program 5 (id=6182): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@dioread_lock}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 2m5.998589662s ago: executing program 5 (id=6185): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010000000000000006400000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r7 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x26642) fsetxattr$security_capability(r7, &(0x7f0000000280), &(0x7f0000000380)=@v3={0x3000000, [{0x5, 0x82}, {0x80000000, 0xffffaf0a}]}, 0x18, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000002480)={[{@norecovery}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x400}}, {@resuid}, {@usrquota}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@delalloc}, {@nolazytime}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r8 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r8, 0x0, 0x0, 0x1001f0) copy_file_range(r8, 0x0, r8, &(0x7f00000000c0)=0xc615, 0x101, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000fa", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000f9ffffff000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) syz_mount_image$ext4(&(0x7f0000002340)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0xbeab564b763f4b5d, &(0x7f0000002580)={[{@errors_continue}, {@quota}, {@inlinecrypt}, {@discard}, {@data_writeback}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x4db, &(0x7f0000001680)="$eJzs3M9vVNUeAPDvnXbaAo/3+ng8FEQpoLExsYWCwsINJiYuNDHiQpZNWwlSwNAuhBApicE1iXvj0rjTxK0ujSv/AFy4MDEkxLABXI25M/dO58edaQf6gzKfTzKdc+49955z5t5z58w5vTeAvjWW/kki/hURtyPiP7Voc4Kx2tuDe9dmHt67NhNLlcrpv5JquvtpPJNvtyOLjJciSp8nLTusWbhy9fz0/Pzc5Sw+uXjhk8mFK1dfPXdh+uzc2bmLUydPHj929MTrU6/1XqmC/NJ63d/32aX9e98+c+vdmcF8+Uj23liPjgZ7K8ZYl3Uv9barJ97OhnDS/jld39DCsGrl7LRO329fmz90ZrMLBGyYSqVSGe68eqnS6kbbEmDLSmKzSwBsjvyLPv39m782qOvxRLh7qvYDKK33g+xVWzMYpSxNueX37Voai4gPl/7+Kn1Ft3GI39epAABA3/npVN4TbO3/lWJPQ7p/Z3MooxHx34jYFRH/i4jdEfH/iGraZyLi2dYMkohKl/x3t8SX8/8+m0Uo3XnsSnaR9v/eyOa2mvt/ee8vRgey2M6IvMM8dyT7TMajPPzRufm5ox32P7RC/o39v/SV5p/3BbNy3BlsGaCbnV6cfrTatrt7I2LfYGv9k8H0wOXTOElE7I2IfT3sd7QhfO6Vb/bXI+XmdCvXv6pSMKXX83xckcrXES/Xjv9SNB3/5RyT7vOTkyMxP3dkMj0LjhTm8cuvN9/rlP+K9f/hj9ZN3jrx4+nHrXZdevy3N5z/kc/fLtd/NIlI6vO1CxGVgd7yuPnbF9X9jh1uX/eo5/9Q8kE1nLevT6cXFy8fjRhK3mlfPrW8bR7P06f1Hz9c3P53Zdukn8RzEZGexM9HxAsRcSAr+8GIOBQRBVWr+/nNFz/utG6V5/+6Ses/W3j9azr+y/P1qwzkG6dLBs4fvP2ww8Vjdcf/eDU0ni0pvv4lTZeI1Zb08T49AAAA2BpKUf3f/9JEPVwqTUzUxoB2x/bS/KWFxQMRcXG2do/AaJRL+UhXbTy4nOTjn6MN8amW+LFs3PjLgW3V+MTMpfnZza489Lkd1TaftLX/1J89jvMCW9AazKMBW9RK7X/PrQ0qCLDhfP9D/2po/0sdkiz5Txl4Ovn+h/5V1P6vx7dd711wzYCtr6ItQ1/T/qF/Dcb79XD1tufCu22Bp5Hvf+hLvd7X31ugMly8aiQKnhgwsla554+LqC3ZVpDXpgTSntUa7rAcEQWrhiKiJfG2R8ki7wJ2fsJDqbcdDkf7qoHWojYFkh6e45AHyvXj3iXx2T1rfvLnz0RZ69Pmu+V2Wu58LNYjsOGXIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHXxTwAAAP//+ETRTA==") bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r9 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r9, 0x13) tkill(r9, 0x12) wait4(r9, 0x0, 0xe000000b, &(0x7f0000000000)) fcntl$notify(r1, 0x402, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x8) 2m4.989332353s ago: executing program 5 (id=6192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) 2m4.681082853s ago: executing program 5 (id=6196): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0x58, 0xd, 0x6, 0x40, @mcast2, @remote, 0x0, 0x80, 0x0, 0x400000}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x9, [@enum64={0xc, 0x2, 0x0, 0x13, 0x0, 0xe, [{0x2, 0x6, 0x9}, {0x4, 0x1, 0xe}]}, @volatile={0xa, 0x0, 0x0, 0x9, 0x2}, @fwd={0xf}, @func={0xd, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x2e, 0x61, 0x1e, 0x0, 0x30, 0x2e, 0x0]}}, &(0x7f0000000340)=""/49, 0x69, 0x31, 0x1, 0x800}, 0x28) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001580)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0xc5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000480)='GPL\x00', 0x7, 0x1000, &(0x7f00000004c0)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000001500)=[{0x0, 0x3, 0xa, 0x4}, {0x2, 0x1, 0x7, 0x1}, {0x1, 0x5, 0xb, 0x8}, {0x1, 0x2, 0x8, 0x3}, {0x0, 0x5, 0x8, 0x5}, {0x5, 0x2, 0xe, 0x4}, {0x0, 0x4, 0xf, 0x8}, {0x3, 0x1, 0x8, 0x7}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000016c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001640), &(0x7f0000001680)}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001780)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001800), &(0x7f0000001840)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x17, 0x16, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [@map_idx={0x18, 0xe, 0x5, 0x0, 0xc}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x76a}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x2, 0x5e, &(0x7f0000000180)=""/94, 0xc0e00, 0x10, '\x00', r1, @cgroup_sysctl, r2, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, &(0x7f00000018c0)=[r4, 0x1, r5, r6, r7, r8], 0x0, 0x10, 0xcdad}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000019c0)={0x1b, 0x0, 0x0, 0x4, 0x0, r8, 0x4, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001a40), 0x80880, 0x0) ioctl$SNAPSHOT_S2RAM(r9, 0x330b) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001a80)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r10 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000001ac0), 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b80)={{r8, 0xffffffffffffffff}, &(0x7f0000001b00), &(0x7f0000001b40)=r6}, 0x20) ioctl$TIOCSCTTY(r6, 0x540e, 0xfff) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000001bc0)={0x3, 0x3, 0x3}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000001c00)={0x8, 0x5, {0x100000000, @struct={0x2}, 0x0, 0x8, 0xafae, 0x3, 0x7f, 0x1, 0xc0, @usage, 0xe, 0x7c, [0x1, 0x1, 0x8000, 0x1, 0x400000000000, 0x1]}, {0x4, @struct={0xca3, 0x6}, 0x0, 0x0, 0xf, 0xc3a6, 0xff, 0x10000000000, 0xa0, @usage=0x401, 0x1, 0xd, [0x0, 0xbe2, 0x8000000000000000, 0x0, 0x1ff, 0x9]}, {0x0, @usage=0x1, 0x0, 0x930, 0x0, 0x8001, 0x2, 0x0, 0x4, @struct={0x5, 0x9}, 0x0, 0x3, [0xc, 0x0, 0x400, 0x7, 0x5, 0x9361]}, {0x7ff, 0x9}}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000002000)={r12, "b742fdf9bad8b5a54d00ebd6b0ea8e13"}) mkdirat(r6, &(0x7f0000003000)='./file0\x00', 0xc) r13 = syz_io_uring_complete(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003240)={r6, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003340)={0x6, 0x15, &(0x7f0000003040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ldst={0x3, 0x3, 0x1, 0x4, 0x7, 0x0, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @call={0x85, 0x0, 0x0, 0x72}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003100)='syzkaller\x00', 0x56d, 0x6d, &(0x7f0000003140)=""/109, 0x40f00, 0x20, '\x00', r1, 0x25, r6, 0x8, &(0x7f00000031c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000003200)={0x1, 0xf, 0x9, 0xef}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000003280)=[r13, r14, r11], &(0x7f00000032c0)=[{0x3, 0x5, 0x4, 0x5}, {0x1, 0x1, 0x9, 0x1}, {0x3, 0x2, 0xc, 0x9}, {0x3, 0x2, 0x3, 0xb}, {0x4, 0x4, 0x10, 0x3}, {0x0, 0x1, 0xb, 0xb}, {0x5, 0x5, 0xf, 0x4}, {0x3, 0x1, 0xc}], 0x10, 0x4}, 0x94) ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003400)) r15 = openat2(0xffffffffffffff9c, &(0x7f0000003440)='./file0\x00', &(0x7f0000003480)={0x42040, 0x22, 0x2c}, 0x18) ioctl$sock_inet_SIOCGARP(r15, 0x8954, &(0x7f00000034c0)={{0x2, 0x4e20, @multicast2}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x20, {0x2, 0x4e24, @empty}, 'ip6gre0\x00'}) setsockopt$inet_IP_XFRM_POLICY(r15, 0x0, 0x11, &(0x7f0000003540)={{{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x7fff, 0x4e22, 0x7fff, 0xa, 0x20, 0x0, 0xc, 0x0, 0xee01}, {0x3, 0x4, 0x1a00000, 0x0, 0x410, 0x401, 0x4, 0xeb}, {0x3, 0x6, 0x4, 0x3}, 0x400, 0x0, 0x0, 0x1, 0x5}, {{@in6=@rand_addr=' \x01\x00', 0x4d3, 0xff}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x33, 0x1, 0x101, 0x29d}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_READY(r13, 0xc0189376, &(0x7f0000003640)={{0x1, 0x1, 0x18, r10, {0x6}}, './file1\x00'}) sendto(r16, &(0x7f0000003680), 0x0, 0x44000, &(0x7f0000003780)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x2, {0xa, 0x4e23, 0x7, @mcast2, 0x7}}}, 0x80) 2m4.676254304s ago: executing program 40 (id=6196): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0x58, 0xd, 0x6, 0x40, @mcast2, @remote, 0x0, 0x80, 0x0, 0x400000}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x9, [@enum64={0xc, 0x2, 0x0, 0x13, 0x0, 0xe, [{0x2, 0x6, 0x9}, {0x4, 0x1, 0xe}]}, @volatile={0xa, 0x0, 0x0, 0x9, 0x2}, @fwd={0xf}, @func={0xd, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x2e, 0x61, 0x1e, 0x0, 0x30, 0x2e, 0x0]}}, &(0x7f0000000340)=""/49, 0x69, 0x31, 0x1, 0x800}, 0x28) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001580)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0xc5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000480)='GPL\x00', 0x7, 0x1000, &(0x7f00000004c0)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000001500)=[{0x0, 0x3, 0xa, 0x4}, {0x2, 0x1, 0x7, 0x1}, {0x1, 0x5, 0xb, 0x8}, {0x1, 0x2, 0x8, 0x3}, {0x0, 0x5, 0x8, 0x5}, {0x5, 0x2, 0xe, 0x4}, {0x0, 0x4, 0xf, 0x8}, {0x3, 0x1, 0x8, 0x7}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000016c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001640), &(0x7f0000001680)}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001780)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001800), &(0x7f0000001840)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x17, 0x16, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [@map_idx={0x18, 0xe, 0x5, 0x0, 0xc}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x76a}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x2, 0x5e, &(0x7f0000000180)=""/94, 0xc0e00, 0x10, '\x00', r1, @cgroup_sysctl, r2, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, &(0x7f00000018c0)=[r4, 0x1, r5, r6, r7, r8], 0x0, 0x10, 0xcdad}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000019c0)={0x1b, 0x0, 0x0, 0x4, 0x0, r8, 0x4, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001a40), 0x80880, 0x0) ioctl$SNAPSHOT_S2RAM(r9, 0x330b) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001a80)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r10 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000001ac0), 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b80)={{r8, 0xffffffffffffffff}, &(0x7f0000001b00), &(0x7f0000001b40)=r6}, 0x20) ioctl$TIOCSCTTY(r6, 0x540e, 0xfff) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000001bc0)={0x3, 0x3, 0x3}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000001c00)={0x8, 0x5, {0x100000000, @struct={0x2}, 0x0, 0x8, 0xafae, 0x3, 0x7f, 0x1, 0xc0, @usage, 0xe, 0x7c, [0x1, 0x1, 0x8000, 0x1, 0x400000000000, 0x1]}, {0x4, @struct={0xca3, 0x6}, 0x0, 0x0, 0xf, 0xc3a6, 0xff, 0x10000000000, 0xa0, @usage=0x401, 0x1, 0xd, [0x0, 0xbe2, 0x8000000000000000, 0x0, 0x1ff, 0x9]}, {0x0, @usage=0x1, 0x0, 0x930, 0x0, 0x8001, 0x2, 0x0, 0x4, @struct={0x5, 0x9}, 0x0, 0x3, [0xc, 0x0, 0x400, 0x7, 0x5, 0x9361]}, {0x7ff, 0x9}}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000002000)={r12, "b742fdf9bad8b5a54d00ebd6b0ea8e13"}) mkdirat(r6, &(0x7f0000003000)='./file0\x00', 0xc) r13 = syz_io_uring_complete(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003240)={r6, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003340)={0x6, 0x15, &(0x7f0000003040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ldst={0x3, 0x3, 0x1, 0x4, 0x7, 0x0, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @call={0x85, 0x0, 0x0, 0x72}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003100)='syzkaller\x00', 0x56d, 0x6d, &(0x7f0000003140)=""/109, 0x40f00, 0x20, '\x00', r1, 0x25, r6, 0x8, &(0x7f00000031c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000003200)={0x1, 0xf, 0x9, 0xef}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000003280)=[r13, r14, r11], &(0x7f00000032c0)=[{0x3, 0x5, 0x4, 0x5}, {0x1, 0x1, 0x9, 0x1}, {0x3, 0x2, 0xc, 0x9}, {0x3, 0x2, 0x3, 0xb}, {0x4, 0x4, 0x10, 0x3}, {0x0, 0x1, 0xb, 0xb}, {0x5, 0x5, 0xf, 0x4}, {0x3, 0x1, 0xc}], 0x10, 0x4}, 0x94) ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003400)) r15 = openat2(0xffffffffffffff9c, &(0x7f0000003440)='./file0\x00', &(0x7f0000003480)={0x42040, 0x22, 0x2c}, 0x18) ioctl$sock_inet_SIOCGARP(r15, 0x8954, &(0x7f00000034c0)={{0x2, 0x4e20, @multicast2}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x20, {0x2, 0x4e24, @empty}, 'ip6gre0\x00'}) setsockopt$inet_IP_XFRM_POLICY(r15, 0x0, 0x11, &(0x7f0000003540)={{{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x7fff, 0x4e22, 0x7fff, 0xa, 0x20, 0x0, 0xc, 0x0, 0xee01}, {0x3, 0x4, 0x1a00000, 0x0, 0x410, 0x401, 0x4, 0xeb}, {0x3, 0x6, 0x4, 0x3}, 0x400, 0x0, 0x0, 0x1, 0x5}, {{@in6=@rand_addr=' \x01\x00', 0x4d3, 0xff}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x33, 0x1, 0x101, 0x29d}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_READY(r13, 0xc0189376, &(0x7f0000003640)={{0x1, 0x1, 0x18, r10, {0x6}}, './file1\x00'}) sendto(r16, &(0x7f0000003680), 0x0, 0x44000, &(0x7f0000003780)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x2, {0xa, 0x4e23, 0x7, @mcast2, 0x7}}}, 0x80) 1m36.480915696s ago: executing program 1 (id=6473): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000140)='\x00', &(0x7f0000000640)='./file0\x00', 0xffffffffffffffff) 1m36.392623035s ago: executing program 1 (id=6476): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000160602000fff52007607000010000000d60700000ee60000bf050000000000001f63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999f9d60bb39d0af449deaa27ea94"], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = socket$kcm(0xa, 0x1, 0x106) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x4000c00) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f0000000400), &(0x7f0000000500)}, 0x20) r4 = socket(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000380)=ANY=[], 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x19, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xa, 0x4, 0x100, 0xffffffffffffffff, 0xffffff60, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2, 0x7}, 0x50) 1m34.497414104s ago: executing program 1 (id=6489): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) preadv2(r1, &(0x7f0000000840)=[{&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000080)=""/40, 0x28}, {&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000140)=""/55, 0x37}, {0x0}, {&(0x7f0000000540)=""/93, 0x5d}, {&(0x7f00000005c0)=""/14, 0xe}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000006c0)=""/253, 0xfd}, {&(0x7f0000000900)=""/103, 0x67}], 0xa, 0x7fffffff, 0x100, 0xa) 1m34.24489899s ago: executing program 1 (id=6494): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001540)=@assoc_value={r3, 0x2}, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) recvmsg$unix(r0, &(0x7f0000000680)={&(0x7f0000000280), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000300)=""/248, 0xf8}, {&(0x7f00000004c0)=""/198, 0xc6}], 0x2, &(0x7f00000005c0)=[@rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x10103) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) socket$rds(0x15, 0x5, 0x0) (async) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=0x0], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=0x0], 0x48) r5 = syz_io_uring_setup(0x2439, &(0x7f0000000380)={0x0, 0x1064, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140), 0x81, 0x477, &(0x7f0000000a40)="$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") (async) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140), 0x81, 0x477, &(0x7f0000000a40)="$eJzs3MtvG0UcAODfrpP0RZOolEcfUENBRBSSJhTogQsIpF6QkOAAx5CGqtRtURMkWlW0IFSOiDsScETiL+AEFwScQFzhjpAq1AuFA1q09m7rxE7qODVO8PdJa8/swzOzs5PMzngdwMCq5i9JRBYRv0TEWCO6dIdq4+36tYtzf127OJdElr38R1Lf789rF+fKXcvjdhSRiTQi/SCJfW3SXTh/4dRsrTZ/rohPLZ5+a2rh/IXHT56ePTF/Yv7MzNGjR56YfvqpmSdvSzl35nnd++7Z/XuOvfbxi3NZvP79l3l+7yi2N5ejYXzdaVajuvRc1o3UXx9e96dvLDubwslQHzPCmlQiIq+u4Xr7H4tK3Ky8sXjh/b5mDuipLMuyLS1rK2Xgcgb8jyXR7xwA/VH+o8/vf8vlP+x+9N3VZxs3QHm5rxdLY8tQpPnb1sYd+84epV+NiFcv//1pvkTbcQgAgNvr67z/81i7/t9ocnfTfqPF3NB4RByKiF0RcWdE7I6IuyIi3/eeiLh3jelXl8Vb+z8/beuqYB3K+3/PFHNbS/t/abnLeKUxTnapHonh5I2TtfnDxTmZiOEteXx6lTS+ef7nj1ba1tz/y5c8/bIvWOTj96FlA3THZxdn11HkJa6+F7F3qF35kxszAUlE7ImIvV18ft5vPvnoF/vz8OiO1u37b1n+VdyGeabs84hHGvV/OZaVv5Q0UlppfnJqa9TmD0+VV0WrH3688lJzfLgpfOv67628/re3vf6L8pfNoJyvXVh7Gld+/XDFe5pur/+R5JV6eKRY987s4uK56YiRYsWS9TM3jy3j5f55+ScOtiv/aLIr4p/PitOwr7hW74uI+yPiQJH3ByLiwYg4uEr5v3vuoTdXP0P9rf/jq9V/xHjSPF/fRaBy6tuvVkq/s/o/Ug9NFGs6+fvXaQbXc+4AAABgs0jr34FP0skb4TSdnGx8h393bE9rZxcWD1Xj7TPHG9+VH4/htBzpGmsaD50uxobL+MyyeDnmlWXb6vHJubO1Xs2pA53ZsUL7z/1W6XfugJ5b0zxa6xNtwCbmeU0YXNo/DC7tHwbX2tp/688FAJtXu/Z/KeJ6U7SnD2EA/aP/D4NL+4fBpf3D4NL+YSC1PhJfjvR186T/zcCuY+s6vB+BT/qTeqVHnxzNP9rRg0CkG6XiugikGyEbB4rAlojo9KhLPa3T5dcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA5vdvAAAA///5IuKJ") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000002c0)=0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x3800) (async) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x3800) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r9, @ANYRES64=r4], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000018c0)={&(0x7f00000001c0)='f2fs_readdir\x00', r10, 0x0, 0x4}, 0x18) syz_io_uring_submit(r6, r7, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r5, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) io_uring_enter(r5, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) (async) io_uring_enter(r5, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000740000000081069059640101006b08b402005356", @ANYRES32=0x41424344, @ANYBLOB="8c1000ca90781000080a8000000000000fbc080a0000000200000002fe"], 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) pipe(&(0x7f0000000200)) 1m33.375071736s ago: executing program 1 (id=6507): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="080000000100000005000000000000003dbe1feec0ea9f414d658dfd1f18510aa99f74f740d985455b89476df9a8b4371481679fc3"], 0x604001) 1m33.272136976s ago: executing program 1 (id=6509): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000002c0)={0xf, r0, 'id1\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ed6000/0x4000)=nil, 0x0, 0x0, r1}, 0x68) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000002c0)=0xa, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x1, &(0x7f0000000180)={0xa, 0x4e20, 0x8041, @empty, 0x627bcafb}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x3, &(0x7f00000001c0)) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffff8, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095", @ANYRES64=0x0, @ANYRES8=r0, @ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10b5e3a2511bdb3a, 0xc, &(0x7f0000001640)=ANY=[@ANYBLOB="ce0d6375a5f660d1f1b65601b9dc717d9d3077cd134bcd15a678484798ac29d598cb37f58ffafb44c8c374ded2a4586832e04d61049edae8c00804bfcb8592f11f5cc023d034c7ffd956a4ed66d0e2bec06a7250f44af3e8508099464f", @ANYRES16=r3, @ANYBLOB="5db11872b1cfb262a8c7e808c655b2a6b112ee1cba1fdfd8fdc6a63088bf7b63bd2c7493c0b1d44b36d1c07d75a0a05fd185ba7af207f5be71bd06a4b80fba8ed3128798770f940e3bedc36631b7f201fe969d68f453c87b00cb76a5a9495b22984cfcce568d0b5840d63940d88b7a1fb3272c0f284df83974187abe647df510aaa877110809e327598b82263dc6b03002408078702014a5a82fbd2a68953b7cc6f3bcb1b76f9950912a02bbe4112961e2ff1fd196ea38e9f1785b0b11a575b16ef1c2c001f6a5eb10a0cc407fa9cf568516f748f1d641da803bf3866dc7f202c6fb2a4c174d53887bdf33a98965e470bc8cce07226ee8935d96610a6b615802e6d3c82d12f87d87a2e0826a15f24ba9736640e5233d0f5aad27f103b49a82a53f1d2b89b5d89c732755171377106ae0f322c5bb10e48e876336d95c4b482c112311507f6ab35dd6152cc8e3ecd544762649ba41cde5053cf920b21feec828c823fb85ee7d82d5611faeee19ae3446c43d878d4d623b516c443458f4d80c5cd4c66c8acf102bd60eece85bb4a190e57817c362ed3ddbae8f93efbb1814daade652e56378d1bee54d42168fe7a9d63233cc9d2844039c7779fa6c6bc7821c1d2db8c7fb0d5efd3304453dff65f2fde2599baf45c7a250f34b7a8c8a4e9d88b008f36e81faea30205da812aae82baa716102237502e8f6ff76b4dbbf917797c85a16b3eca0f8d8c5ea4c3907dfa79bd8261532a0ded38a40c5204e0a5803e12a41386d6185ade6b2ed2c517f5a3595e7e4aadef81449bedc5c3eade70833d3d08db127e9c49466887cee3318981db5bb7c056e0438d0eb4da326ffed1debef38a1273fbc6b117f48ae04e1287875a06fd9da11183f0d5d5bd227c5de77d9299803f1b21b4efe3687873e04b2cd94796b2e5a81e77dd705ea47cbf28c14c35c1fb98a9f5cd9fdd1e9ea7d5756edd006dbab7def4d57cb9939e519b8bc393004f9cb80c86c7ed10ff4b74f33ad4452fd3bd154e4d6245a5737a81dbffc64e3e70e8c0112c14ed185774dd6fcb3c8154eb8b34973e6f21bffd5c88d663c127e67263854bed52c71824791a1b796a3a2a0f8ab593684828a31c2b662a74519851c4c4718d7f3a2d579765065ed8f8a01d238af572fb6535beec0332920d8ec222797aedfd42a10629d47583c7256706e18448d19802f0b337dfae6124f3d83f976b8a14fce9b17304e73ef84a96a03103798ac086824dfa821d9f6d5f6e4dd12f746aef7069ace17aad082273fd95587430a8b26b66d2b328dbeeabe1861fd16c18a8f40aa01513035dcff7394d678e907d2450345e129be030ee20a2f7744b6f8cffea702ddcbd9a1fb589308d26a6e76c937520e15cfba227b39eca8288550afd2023edeb4e6503065239078739df4c86026506300fe2980150b3d9215c7a2c2340a98acecb7b0004c17df1d4de6e9b09bf2d67c02d8c9e9fb41fd0c7e19bfbfceb1725543e380bd3508f4620c38166776e8f75d9e95f2c9c4f0ddf03b2c12b2da2c1ed82aa1837b4c6945d309039794899ad155d713076113fb34fb03cd0736725b40062028e4f867461f1a2fe41fd29ccdd3f0ad6fa27113933e8f016de53a78d11969edd1c65a0e064755501a73fadbf08df01ae48cf4060f2f0e480c2958d0bbb20f7b0192bb0aac1dd6b07fb3d23d90fd45e3d23d7ed802ff61b1c26822a9f985bfb0f2a807b113c433a8ece525d2aa10bf41eb293473231d717fab94067abae96e5c140641aaba3e9e76bdffbcde2c84255c8ceb3a7831161d8d37f91482ebc5ac3dfdd0126a93639380e5ce7e6eb1fae603b751eae565d09b567eeae27c1bbb43fad4e7bea14a74ab51d116fb912295497a9e3bb86653c7f0c6f02025f478fab8ab701a6a169bec90b8517bca65249f04ca45a05844d9cf82e6876bbdccdd59a68249954ef3b4b2cb9fa56effe2cc91c589aa59a6afc9ee6533b4016b19b4a4c69382e818c27880cd19023f1eeacf01d0bc48c0868d3827204272410ba8bbc5b8007c81d34d4281857eb6256de5ea3ce21bae7e8ca21cfc5b5aaaf56b738d5e995c1320b06e5dab6964c2fa01ceb162aa9e591382fd8709a911bae42bd4c9b1ab8d5996fab79a62f6c706ef9f91a07157998fa2c42b68d29f9c8d7e894b1ed786778cc1c839ebc5ed96763ecc5a8530a7d6fc00dff575c2dad836de9e7c15b3d8b2dd584c42796da206c4f5b319ce29d112b4f763f78df39d31a281e8fecf014a2fcacea0dcf7cb3b8dbbb9804c44dcfbb7d4f03076532e02585a14afd5fed08cbb7b45ed7024f71d68cf3806b0a3595c7f4b329090f0c131e45f653cb05522d4a90a688faea32cfb9d4a1c77531112435b864cad089f68bcfa2bb51a4a08a82c713fc40cf0d30b3024d906caa579109ccb08de94ce813e845386ed97c926f05c0affa6e6d2c1372b40797c9239477e0c08ff843343acedacd64afc72d3e81b4f7b65b3228945dc59c384b5bf1c61bacc8f194e9c09e6a9aa03f05fbf5b44b0ec592c4bac70493e831e4f5fbb1a4963ba58b50b9aca384c77afff99e8c5df44e0997e03b2f2baa86ac7be5cb0498dd4f5c4db12cc6f60ebed4d9bca706d033d86e618f6a11d362c6a5a305e5f1583f55ed71b0447d2f314597387cf3b6b11f119f988e75bc3d9e7aee727d88261d0e4d4430c652b5240bf4d9b53b2b4216ce65430660ad3db059c1202fb5bf75f469e9c72e4c2cee27693f2ebbd6f10ef4ec9bdb476f06249f530210e75f61b3eea0c7271119809e6bf56f2b88f97d3a8fe2092e56056d249814cdd2ac285cf645aeb7a0763a655b0c0276ae041e59647dd0d118ef11747acc47a06af1568e742d4b8d7983beb415ab0651fcc058f5d7ae11aba4910ed9bdf8b6c2860285e44aa9726cb9ad8b9edc96da4992d14bbd24978e2c0ce796579f876a1b139a90068992789e33aad010139fb63b925abea307afa38624f5ad6c966d257b3f33c3a5c11df5ad71588dd2109f0d5c9f7d8baaa7eec096dea98e33e3297e0aad0b25329c09bb9c715fa67ddd086b4c0e5c6c5559715a897b29c59a7a5c0e2c6129106cc834b3df90827ca0261cea2cdb484e359c66191cd6641859fc5aeb221aea43ebb55cb4a8192a5a767b677f7887b2225cb190f76c8eeb7fe082eddddbfc1f0964777015a9fde18f1e7c30ab2303c90ff3624872e94846ff355f9dcbcc4b5fcb939a759216997db9e20e615817532652fb2f0ea0029175d48db1566e089f8d3d034d78b7ee5c228a5bc1d1d10c0ae4ec0276b9bf430ca41be8baf0098e412a9a6f41ac785ebbf52ada926e52378fb361cd350b4770548edcf8a461655263eda6b069234c6c77c9ef7e0b0107c5aa353fc96a0c1cbb30360354e6b4774f4195694d4f4e2a66222f633ae777f0e90a9699a1908057c534619ac5a9779f07c7f41770fe26c0b6d73c468c90891ad2f61dd0174cfc0d12311ffc8e8388e39fcfe13e3f8ddbbbf68e96b885792da0725a87ddfa9cd46e5440979006a419e26dfaf54a4879cfee4bad553e35148ee2b781274a5b8b35e568b06e8ecccec5f1cb52b97875f7cc223a179473ed6cb8ccfa782240ca9887017d6e0883ee81616368feb28806e9dfc5d723baf672e9b6b58991990a77833f71e644619faee3d69fa3b82331d25825615fb9470976e4cd66b7926f83fedd227d814dcd799596ea1ebd38d641e5fa8098c0f41342f2a3aab35212bcd37e6e8acef0fd7693ad76b1c38dd830297a62ec68c668bbc4efebb10e0a108d429dd4dd6a274dc876f2b251931483aaad2334192e8b600471ae655fa3315276971f2091ace5ac7498ecf9b5f44a16c9c3912532997e7acef20d1d90d5730d5b8be62e5e629aa01cdaabbef7385d7d7fca69f45870efb3e7156d1f0f65e0ba675a93c9c449697562efb89122ab43d0a18402803f1575fb2d0ea4e9b8f2dd1390ff04ec10e908ae3fee604857eae7d4bc0e06174d2f1a97b87eff55f0e9fb2b211f49a7e13c54b2a39b8950c782a1a89afd71e7a8e96fc7c3700bdf8f09a37cb826a42acb0eb9a6b87c5904a089b2075df31e747f4916fef7bf8806fef161d38bd160e49a933a46c891044901b352ef5fc020e716792b2377d2557f57bdce62b442a024222f757a74948fdff54f5f34baec844a5d2c162c78930961148912d7f577e23e8b89831a4cfd261fcaa2171f092700427d0e14af8bf293edf17bae8f46832d9d41fdd9b48e13d8c194d0171876a8db2448c494ba0357b213bfd032f417116afa5c1da5514ebcbed4ae172dd4c1d848ca8a7b1095bbff7031abf5a161a0b8c10e9d515695e7bb922dcd48c2be51d08ce09807679f66c5679de8da456fb2b6aaea85917fb227cf2319385ed4f065798909963ce9a9f0e8b008337f13d8f2f678b7cd0199ce56903ed1c15a6c6ce52e1e604d05264e2a95e911d19b01d458188b9575eca71f82d630e96a57f0246b92cb40aa71c6e53d3b8abb0e9b44fbe9c74350690cbd8cb316b63c1f0b65f1a4869ac59581e8bc83eb895d36acd1beb8b9c9b6c7de69e3a61e39f37fc1b1f919db6262c74c7d965d4fa0d0d32cc4d3f277959b016dfb9b33396945b18f43dea8c0f61a06085695796e0f89cfaef0945b148da88e70025d21060a03b6d463ed913a557428d78da9d2fd220e87df79947be0f8ea676027952ea8f92625e61c6b2531ee03a81bdc1587e4d9230340561e4a380edb5322b7847a02745ec64657c53a1caaf35b655566c784de227f29193c4b09335d530fa25c99a989d2b3874fb55cf576b7dd42fcc6dd0b79f7c49e6e0d6bfa0a2f4955b3563c8aee310cb97fbde26e3fd8c490746f8e722c31c365831133a54aac7d0f246a80c69c424db033eff96bbeec49c8d4810ccee63535c2782e1848b165d45f289138dce029e6e8b43fb1d72e38ffdedd51932e2528e4e1a54dca8abffd06018346375188b284360c2494136ebc043c81736d98a8b1038fe2081158f518397b82cb3a093df4d91ee3ab80ef5edad4a4ac8af03a671e9cc9ac59558368d10dabe1caa6f91cecb09efe72cb7c2365e88c1fb387c286faa1c46562fe52df2ff171c05a3950b67e032a58ccc7155c579fe7eccadc2c26343f093a6ee69517070100c6a41376698c499cfdeb1493d3cdc873955e4c09eb25d864e8f07e2df4141923d8d4826f394730875cbfedf8daa236b0f52a1ba418d71b422922648d48b57a3452ac2eb18b6480a855f88accbee0d966a9155340cedfb1618936e672238bfde3972b114b90b78fa23f5d5c26b90e7afaad533711feb1c4e8cd0c484d7ca415a6fe6037c4179f80d50610d085cb5a7eccf6c081b21c974dd921f5ebd773c7b8b1c9448a23c4c7bc7971969eac1e9aaa122806a6b36674a1aaddac654a9616b94e8842a92a2dd6e04eb2b624b7f6302d8b424f0a47c9e0198562e0fa511734d3e42752ece1084879f5a31e33e46cd538481749b838ea761cf3ceb3e144cdeac7a2451dd0e63fdd0892f6dba93c194fde8eaa99913584e15bb32179cc1d8e3b3df008c4074530011bf4c00e326c319c2fe53960c96b823c8786a596f7ecc42dd4ee356f2c9ff2ef1d6307534f1f70a42acf9b1a210cd3fa8da9e490f1ce1a01e07bb332cedd1382570126e62c6d29f0ceeaaa64368b336555fdaf9b475655f2542e50d9de1552fb6b34a6bf7a882631448a067cd263f5eaf503f649c61b324859933787971df46a4781c91b51aac3bd908d32c60370690a8a249799df4011f2e9d", @ANYRES16=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) 1m33.271821866s ago: executing program 41 (id=6509): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000002c0)={0xf, r0, 'id1\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ed6000/0x4000)=nil, 0x0, 0x0, r1}, 0x68) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000002c0)=0xa, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x1, &(0x7f0000000180)={0xa, 0x4e20, 0x8041, @empty, 0x627bcafb}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x3, &(0x7f00000001c0)) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffff8, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095", @ANYRES64=0x0, @ANYRES8=r0, @ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10b5e3a2511bdb3a, 0xc, &(0x7f0000001640)=ANY=[@ANYBLOB="ce0d6375a5f660d1f1b65601b9dc717d9d3077cd134bcd15a678484798ac29d598cb37f58ffafb44c8c374ded2a4586832e04d61049edae8c00804bfcb8592f11f5cc023d034c7ffd956a4ed66d0e2bec06a7250f44af3e8508099464f", @ANYRES16=r3, @ANYBLOB="5db11872b1cfb262a8c7e808c655b2a6b112ee1cba1fdfd8fdc6a63088bf7b63bd2c7493c0b1d44b36d1c07d75a0a05fd185ba7af207f5be71bd06a4b80fba8ed3128798770f940e3bedc36631b7f201fe969d68f453c87b00cb76a5a9495b22984cfcce568d0b5840d63940d88b7a1fb3272c0f284df83974187abe647df510aaa877110809e327598b82263dc6b03002408078702014a5a82fbd2a68953b7cc6f3bcb1b76f9950912a02bbe4112961e2ff1fd196ea38e9f1785b0b11a575b16ef1c2c001f6a5eb10a0cc407fa9cf568516f748f1d641da803bf3866dc7f202c6fb2a4c174d53887bdf33a98965e470bc8cce07226ee8935d96610a6b615802e6d3c82d12f87d87a2e0826a15f24ba9736640e5233d0f5aad27f103b49a82a53f1d2b89b5d89c732755171377106ae0f322c5bb10e48e876336d95c4b482c112311507f6ab35dd6152cc8e3ecd544762649ba41cde5053cf920b21feec828c823fb85ee7d82d5611faeee19ae3446c43d878d4d623b516c443458f4d80c5cd4c66c8acf102bd60eece85bb4a190e57817c362ed3ddbae8f93efbb1814daade652e56378d1bee54d42168fe7a9d63233cc9d2844039c7779fa6c6bc7821c1d2db8c7fb0d5efd3304453dff65f2fde2599baf45c7a250f34b7a8c8a4e9d88b008f36e81faea30205da812aae82baa716102237502e8f6ff76b4dbbf917797c85a16b3eca0f8d8c5ea4c3907dfa79bd8261532a0ded38a40c5204e0a5803e12a41386d6185ade6b2ed2c517f5a3595e7e4aadef81449bedc5c3eade70833d3d08db127e9c49466887cee3318981db5bb7c056e0438d0eb4da326ffed1debef38a1273fbc6b117f48ae04e1287875a06fd9da11183f0d5d5bd227c5de77d9299803f1b21b4efe3687873e04b2cd94796b2e5a81e77dd705ea47cbf28c14c35c1fb98a9f5cd9fdd1e9ea7d5756edd006dbab7def4d57cb9939e519b8bc393004f9cb80c86c7ed10ff4b74f33ad4452fd3bd154e4d6245a5737a81dbffc64e3e70e8c0112c14ed185774dd6fcb3c8154eb8b34973e6f21bffd5c88d663c127e67263854bed52c71824791a1b796a3a2a0f8ab593684828a31c2b662a74519851c4c4718d7f3a2d579765065ed8f8a01d238af572fb6535beec0332920d8ec222797aedfd42a10629d47583c7256706e18448d19802f0b337dfae6124f3d83f976b8a14fce9b17304e73ef84a96a03103798ac086824dfa821d9f6d5f6e4dd12f746aef7069ace17aad082273fd95587430a8b26b66d2b328dbeeabe1861fd16c18a8f40aa01513035dcff7394d678e907d2450345e129be030ee20a2f7744b6f8cffea702ddcbd9a1fb589308d26a6e76c937520e15cfba227b39eca8288550afd2023edeb4e6503065239078739df4c86026506300fe2980150b3d9215c7a2c2340a98acecb7b0004c17df1d4de6e9b09bf2d67c02d8c9e9fb41fd0c7e19bfbfceb1725543e380bd3508f4620c38166776e8f75d9e95f2c9c4f0ddf03b2c12b2da2c1ed82aa1837b4c6945d309039794899ad155d713076113fb34fb03cd0736725b40062028e4f867461f1a2fe41fd29ccdd3f0ad6fa27113933e8f016de53a78d11969edd1c65a0e064755501a73fadbf08df01ae48cf4060f2f0e480c2958d0bbb20f7b0192bb0aac1dd6b07fb3d23d90fd45e3d23d7ed802ff61b1c26822a9f985bfb0f2a807b113c433a8ece525d2aa10bf41eb293473231d717fab94067abae96e5c140641aaba3e9e76bdffbcde2c84255c8ceb3a7831161d8d37f91482ebc5ac3dfdd0126a93639380e5ce7e6eb1fae603b751eae565d09b567eeae27c1bbb43fad4e7bea14a74ab51d116fb912295497a9e3bb86653c7f0c6f02025f478fab8ab701a6a169bec90b8517bca65249f04ca45a05844d9cf82e6876bbdccdd59a68249954ef3b4b2cb9fa56effe2cc91c589aa59a6afc9ee6533b4016b19b4a4c69382e818c27880cd19023f1eeacf01d0bc48c0868d3827204272410ba8bbc5b8007c81d34d4281857eb6256de5ea3ce21bae7e8ca21cfc5b5aaaf56b738d5e995c1320b06e5dab6964c2fa01ceb162aa9e591382fd8709a911bae42bd4c9b1ab8d5996fab79a62f6c706ef9f91a07157998fa2c42b68d29f9c8d7e894b1ed786778cc1c839ebc5ed96763ecc5a8530a7d6fc00dff575c2dad836de9e7c15b3d8b2dd584c42796da206c4f5b319ce29d112b4f763f78df39d31a281e8fecf014a2fcacea0dcf7cb3b8dbbb9804c44dcfbb7d4f03076532e02585a14afd5fed08cbb7b45ed7024f71d68cf3806b0a3595c7f4b329090f0c131e45f653cb05522d4a90a688faea32cfb9d4a1c77531112435b864cad089f68bcfa2bb51a4a08a82c713fc40cf0d30b3024d906caa579109ccb08de94ce813e845386ed97c926f05c0affa6e6d2c1372b40797c9239477e0c08ff843343acedacd64afc72d3e81b4f7b65b3228945dc59c384b5bf1c61bacc8f194e9c09e6a9aa03f05fbf5b44b0ec592c4bac70493e831e4f5fbb1a4963ba58b50b9aca384c77afff99e8c5df44e0997e03b2f2baa86ac7be5cb0498dd4f5c4db12cc6f60ebed4d9bca706d033d86e618f6a11d362c6a5a305e5f1583f55ed71b0447d2f314597387cf3b6b11f119f988e75bc3d9e7aee727d88261d0e4d4430c652b5240bf4d9b53b2b4216ce65430660ad3db059c1202fb5bf75f469e9c72e4c2cee27693f2ebbd6f10ef4ec9bdb476f06249f530210e75f61b3eea0c7271119809e6bf56f2b88f97d3a8fe2092e56056d249814cdd2ac285cf645aeb7a0763a655b0c0276ae041e59647dd0d118ef11747acc47a06af1568e742d4b8d7983beb415ab0651fcc058f5d7ae11aba4910ed9bdf8b6c2860285e44aa9726cb9ad8b9edc96da4992d14bbd24978e2c0ce796579f876a1b139a90068992789e33aad010139fb63b925abea307afa38624f5ad6c966d257b3f33c3a5c11df5ad71588dd2109f0d5c9f7d8baaa7eec096dea98e33e3297e0aad0b25329c09bb9c715fa67ddd086b4c0e5c6c5559715a897b29c59a7a5c0e2c6129106cc834b3df90827ca0261cea2cdb484e359c66191cd6641859fc5aeb221aea43ebb55cb4a8192a5a767b677f7887b2225cb190f76c8eeb7fe082eddddbfc1f0964777015a9fde18f1e7c30ab2303c90ff3624872e94846ff355f9dcbcc4b5fcb939a759216997db9e20e615817532652fb2f0ea0029175d48db1566e089f8d3d034d78b7ee5c228a5bc1d1d10c0ae4ec0276b9bf430ca41be8baf0098e412a9a6f41ac785ebbf52ada926e52378fb361cd350b4770548edcf8a461655263eda6b069234c6c77c9ef7e0b0107c5aa353fc96a0c1cbb30360354e6b4774f4195694d4f4e2a66222f633ae777f0e90a9699a1908057c534619ac5a9779f07c7f41770fe26c0b6d73c468c90891ad2f61dd0174cfc0d12311ffc8e8388e39fcfe13e3f8ddbbbf68e96b885792da0725a87ddfa9cd46e5440979006a419e26dfaf54a4879cfee4bad553e35148ee2b781274a5b8b35e568b06e8ecccec5f1cb52b97875f7cc223a179473ed6cb8ccfa782240ca9887017d6e0883ee81616368feb28806e9dfc5d723baf672e9b6b58991990a77833f71e644619faee3d69fa3b82331d25825615fb9470976e4cd66b7926f83fedd227d814dcd799596ea1ebd38d641e5fa8098c0f41342f2a3aab35212bcd37e6e8acef0fd7693ad76b1c38dd830297a62ec68c668bbc4efebb10e0a108d429dd4dd6a274dc876f2b251931483aaad2334192e8b600471ae655fa3315276971f2091ace5ac7498ecf9b5f44a16c9c3912532997e7acef20d1d90d5730d5b8be62e5e629aa01cdaabbef7385d7d7fca69f45870efb3e7156d1f0f65e0ba675a93c9c449697562efb89122ab43d0a18402803f1575fb2d0ea4e9b8f2dd1390ff04ec10e908ae3fee604857eae7d4bc0e06174d2f1a97b87eff55f0e9fb2b211f49a7e13c54b2a39b8950c782a1a89afd71e7a8e96fc7c3700bdf8f09a37cb826a42acb0eb9a6b87c5904a089b2075df31e747f4916fef7bf8806fef161d38bd160e49a933a46c891044901b352ef5fc020e716792b2377d2557f57bdce62b442a024222f757a74948fdff54f5f34baec844a5d2c162c78930961148912d7f577e23e8b89831a4cfd261fcaa2171f092700427d0e14af8bf293edf17bae8f46832d9d41fdd9b48e13d8c194d0171876a8db2448c494ba0357b213bfd032f417116afa5c1da5514ebcbed4ae172dd4c1d848ca8a7b1095bbff7031abf5a161a0b8c10e9d515695e7bb922dcd48c2be51d08ce09807679f66c5679de8da456fb2b6aaea85917fb227cf2319385ed4f065798909963ce9a9f0e8b008337f13d8f2f678b7cd0199ce56903ed1c15a6c6ce52e1e604d05264e2a95e911d19b01d458188b9575eca71f82d630e96a57f0246b92cb40aa71c6e53d3b8abb0e9b44fbe9c74350690cbd8cb316b63c1f0b65f1a4869ac59581e8bc83eb895d36acd1beb8b9c9b6c7de69e3a61e39f37fc1b1f919db6262c74c7d965d4fa0d0d32cc4d3f277959b016dfb9b33396945b18f43dea8c0f61a06085695796e0f89cfaef0945b148da88e70025d21060a03b6d463ed913a557428d78da9d2fd220e87df79947be0f8ea676027952ea8f92625e61c6b2531ee03a81bdc1587e4d9230340561e4a380edb5322b7847a02745ec64657c53a1caaf35b655566c784de227f29193c4b09335d530fa25c99a989d2b3874fb55cf576b7dd42fcc6dd0b79f7c49e6e0d6bfa0a2f4955b3563c8aee310cb97fbde26e3fd8c490746f8e722c31c365831133a54aac7d0f246a80c69c424db033eff96bbeec49c8d4810ccee63535c2782e1848b165d45f289138dce029e6e8b43fb1d72e38ffdedd51932e2528e4e1a54dca8abffd06018346375188b284360c2494136ebc043c81736d98a8b1038fe2081158f518397b82cb3a093df4d91ee3ab80ef5edad4a4ac8af03a671e9cc9ac59558368d10dabe1caa6f91cecb09efe72cb7c2365e88c1fb387c286faa1c46562fe52df2ff171c05a3950b67e032a58ccc7155c579fe7eccadc2c26343f093a6ee69517070100c6a41376698c499cfdeb1493d3cdc873955e4c09eb25d864e8f07e2df4141923d8d4826f394730875cbfedf8daa236b0f52a1ba418d71b422922648d48b57a3452ac2eb18b6480a855f88accbee0d966a9155340cedfb1618936e672238bfde3972b114b90b78fa23f5d5c26b90e7afaad533711feb1c4e8cd0c484d7ca415a6fe6037c4179f80d50610d085cb5a7eccf6c081b21c974dd921f5ebd773c7b8b1c9448a23c4c7bc7971969eac1e9aaa122806a6b36674a1aaddac654a9616b94e8842a92a2dd6e04eb2b624b7f6302d8b424f0a47c9e0198562e0fa511734d3e42752ece1084879f5a31e33e46cd538481749b838ea761cf3ceb3e144cdeac7a2451dd0e63fdd0892f6dba93c194fde8eaa99913584e15bb32179cc1d8e3b3df008c4074530011bf4c00e326c319c2fe53960c96b823c8786a596f7ecc42dd4ee356f2c9ff2ef1d6307534f1f70a42acf9b1a210cd3fa8da9e490f1ce1a01e07bb332cedd1382570126e62c6d29f0ceeaaa64368b336555fdaf9b475655f2542e50d9de1552fb6b34a6bf7a882631448a067cd263f5eaf503f649c61b324859933787971df46a4781c91b51aac3bd908d32c60370690a8a249799df4011f2e9d", @ANYRES16=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) 1m27.637938379s ago: executing program 7 (id=6594): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r0, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='trusted.overlay.nlink\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='$\x00', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1, 0x0, 0x7}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001cc0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES64, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x4b, 0x2eb, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000c000000000000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id\xf7\xff\xffe{') r5 = timerfd_create(0x0, 0x0) readv(r5, &(0x7f00000009c0)=[{&(0x7f0000000200)=""/33, 0x21}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000feffffffffffffff00000000000000e40000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r10, r9, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x0) 1m26.809889291s ago: executing program 7 (id=6608): r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x200001, 0x40000b33}, &(0x7f00000006c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r0, 0x847ba, 0x79c, 0xe, 0x0, 0x0) 1m26.760579826s ago: executing program 7 (id=6609): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000ff3fb9c548c540cf0389ce756de3", @ANYRES32=0x0, @ANYBLOB="17200000ef7b3e69400012800c0001006d6163766c616e003000028008000300", @ANYRES8], 0x68}}, 0x20000880) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = accept(r1, &(0x7f0000000100)=@generic, &(0x7f0000000080)=0x80) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x44, 0x0, 0x1, 0x0, 0x0, 0x10004c00}, 0x4) write$selinux_load(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="8cff7cf908"], 0x20) 1m26.689264853s ago: executing program 7 (id=6610): r0 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x81) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0cd3000000040000000015000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000a707009845a75552a0eaa7e1755787e3000000000085000000100000001811000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a0104000000000c0000000700000208000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000230c0001400000000000000101500000000c0a010100000000000000000700fffc0900020073797a31000000000900010073797a300000000024000380200000800800034000000002140007800c000100636f756e746572"], 0x100}, 0x1, 0x0, 0x0, 0x4040854}, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) ioctl$FITRIM(r1, 0xc0185879, 0x0) 1m26.689126323s ago: executing program 7 (id=6611): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="8cff7cf908"], 0x20) (fail_nth: 2) 1m26.62168956s ago: executing program 7 (id=6612): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000004c0)=[{0x1, 0x2, {0x1, 0xff, 0x3}, {0x0, 0xff, 0x2}, 0xff, 0x2}, {0x1, 0x3, {0x2, 0xff, 0x2}, {0x2, 0xff}, 0xfd, 0xff}, {0x2, 0x1, {0x1, 0x1, 0x2}, {0x1, 0x1, 0x1}, 0xfd, 0x1}, {0x3, 0x1, {0x0, 0x0, 0x1}, {0x0, 0xff, 0x2}}, {0x2, 0x2, {0x1, 0x0, 0x2}, {0x1, 0x0, 0x2}, 0xfd, 0xfd}, {0x2, 0x0, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x2}, 0xfe, 0x3}, {0x1, 0x2, {0x0, 0x0, 0x1}, {0x0, 0xf0, 0x2}}], 0xe0) (fail_nth: 5) shmdt(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x300000a, 0x13, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000440)=0x10) 1m26.595900952s ago: executing program 42 (id=6612): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000004c0)=[{0x1, 0x2, {0x1, 0xff, 0x3}, {0x0, 0xff, 0x2}, 0xff, 0x2}, {0x1, 0x3, {0x2, 0xff, 0x2}, {0x2, 0xff}, 0xfd, 0xff}, {0x2, 0x1, {0x1, 0x1, 0x2}, {0x1, 0x1, 0x1}, 0xfd, 0x1}, {0x3, 0x1, {0x0, 0x0, 0x1}, {0x0, 0xff, 0x2}}, {0x2, 0x2, {0x1, 0x0, 0x2}, {0x1, 0x0, 0x2}, 0xfd, 0xfd}, {0x2, 0x0, {0x0, 0xf0, 0x4}, {0x1, 0x1, 0x2}, 0xfe, 0x3}, {0x1, 0x2, {0x0, 0x0, 0x1}, {0x0, 0xf0, 0x2}}], 0xe0) (fail_nth: 5) shmdt(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x300000a, 0x13, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000440)=0x10) 2.463846355s ago: executing program 0 (id=8280): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r1, 0x6, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, 0x0, 0x25, 0x0, @val=@netkit={@void, @value=r1, @void, @void, r2}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r1}, 0x18) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000dc0)=[@rdma_args={0x48, 0x114, 0x1, {{0xc, 0x8}, {0x0}, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1, 0x4, 0x200}}], 0x48}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x4}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 2.398028352s ago: executing program 0 (id=8281): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/25], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="03", 0x1}, {&(0x7f0000000540)="cf597f56376fd90e8f5e68bb012986a1be1cc721139578aefea50b0fd4ca8f937bf3742604d45fdfd814c33b49ce06353952a9f670e400a094a652345aaa825ee777e6fb842ee8f6300b78d0b8534d70b949a0c393896c586d427d70dabfd90ee9805f8d893989640616207d572846a17396335546d94c2e2b23c484f7534e24eb868bd07f6a86598e0d2757ba6bae990ea6919da1d088b8378d1601219d82092209f11de43aec74474d3141f152e9e09b33826f252c795244e7b12cd1f7d57d3d1470f24ba8e9f3e3", 0xc9}, {&(0x7f0000000340)="306a50be5c210e457d4341c4dd", 0xd}, {&(0x7f00000007c0)="111857b6045567a03c9b55055bf9dbfde419b7a79ab021219872e422acf78c3bba6a78d6fa22736696b75f5d476f9f7f0f3d90f0917f8777e9c87895926c2abefc04a9d7713a052fd48849869cdb43893f3982d3f5e3203ffaef5e1f7c14719f715eb39072c987779e7336cac1d59d96e4a4a29fe963c0bd6b1f", 0x7a}], 0x4}], 0x1, 0x0) r2 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r2, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0xffff, @multicast1}, 0x10) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0xfffffffffffffcd5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000101000000000600", @ANYRES32=0x0, @ANYBLOB="04"], 0x1c}], 0x1}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x2, 'veth0_macvtap\x00', {0x1}}) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) 2.10623918s ago: executing program 4 (id=8288): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x8000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x1000000}, {}, {}, {}, {0xfffffffc}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1da75a56}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x1, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x3}, {0x4, 0xc000000}, {}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x10, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x6, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {0x2}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x6, 0x747}, {0x8, 0xfffffffd, 0x0, 0xffffffff}, {0x0, 0x0, 0x200}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x400}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x401}, {}, {0x0, 0x1e2d}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x800) 2.087423112s ago: executing program 0 (id=8289): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x30120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd31) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4, 0x0, 0x40000000003}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x94, 0x0, 0x2, 0x11}]}) syz_clone(0x60002080, 0x0, 0x0, 0x0, 0x0, 0x0) 1.151647086s ago: executing program 4 (id=8296): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r0, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='trusted.overlay.nlink\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='$\x00\x00 ', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1, 0x0, 0x7}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001cc0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES64, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x4b, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000c000000000000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id\xf7\xff\xffe{') r5 = timerfd_create(0x0, 0x0) readv(r5, &(0x7f00000009c0)=[{&(0x7f0000000200)=""/33, 0x21}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000feffffffffffffff00000000000000e40000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r10, r9, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x0) 998.232331ms ago: executing program 0 (id=8303): r0 = socket(0x40000000015, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000002300)) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x640100fe}, 0x10) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f00000005c0)=[0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) r4 = eventfd(0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESHEX=r6, @ANYBLOB="edfdea2573ab70ab2d85faf3dc04d8436eee9a1aec0df35f65d6920a9e8d7a6c579a135cb2cfb6812c7c574ae2bccb6dfa67be942893f67a026ddb88ac895682a7335e496d3bf8afceb44b457f98beca8f8af121db25c6b51ebdcd1c1bdcdf334b05ea8764fc04528b9d5cca43cd61c2a622d9d330f0980243154bac90f9e220c60b5638cc3810e079e4b62b9ad064a81d0f", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f00000002c0)) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) keyctl$get_persistent(0x16, r8, r9) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r11) chown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, r11) r12 = gettid() r13 = geteuid() r14 = getgid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000680)={0x0, 0x0}) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) r17 = accept4$x25(r0, 0x0, &(0x7f00000007c0), 0x0) sendmsg$unix(r0, &(0x7f0000000940)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)="a784c49c83cad3b87936a1ee1af69b6224d6f08b3bca5899d96471160301f41e0c4f4677b9288b24a36dad0b45285d673da714eff5638540c98b86cd", 0x3c}, {&(0x7f0000000140)="c58183f0919837811f0e0b351f899f02be7aac77503f8ece1b28e87ce89478b55f9bfe6157191167433acb84b253faf3d19b266bccf5e4c9c5b598cf72173d3e7423c31559827b6e2c5b8713e8793cb4f67012e5815398f65fb3740055d8e1d20ac2e33e45981abb955170e004b2080233188fb00c7d287c31dd2c05f48556d494a37a46abee2f101ff036a1fc2e57dc3cea0f03c0401b34190c4d2b7170c503ad852b62de8f7a8a64f595a11f64ab974cd4a6be75ec3e6f47e9d402bd82f108f00cdbca25d38f1269f76fe532ce9714399c7da4c901bf3ba989c7acf5a7a86620f83f0f37f02d7c11ac5c4435641f633a977c187527", 0xf6}], 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="1c000800000000000000220005000000", @ANYRES32=r5, @ANYRES32=r8, @ANYRES32=r11, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="000000001b2bc30b3b676d4201060000002a1a30e32034b8c877c89264000000020000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=0xee01, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r17, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1], 0x128}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 967.428164ms ago: executing program 0 (id=8305): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x1cc0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 934.084797ms ago: executing program 9 (id=8308): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000400)='./file0\x00', 0x143142, 0x43) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000002b19b51528481d0c9dd4985003c96625a659ff2"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x2c}, @empty}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r6}, &(0x7f00000002c0), &(0x7f0000000380)='%-5lx \x00'}, 0x30) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x8000003d) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) 657.388025ms ago: executing program 9 (id=8315): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') 529.245558ms ago: executing program 3 (id=8318): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 516.947469ms ago: executing program 3 (id=8319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r2, &(0x7f0000000a80), &(0x7f0000000ac0)=""/68}, 0x20) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0xc0045878, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 499.86766ms ago: executing program 9 (id=8320): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r1, 0x6, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, 0x0, 0x25, 0x0, @val=@netkit={@void, @value=r1, @void, @void, r2}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r1}, 0x18) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000dc0)=[@rdma_args={0x48, 0x114, 0x1, {{0xc, 0x8}, {0x0}, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1, 0x4, 0x200}}], 0x48}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x4}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 488.903332ms ago: executing program 8 (id=8321): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) read(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES16=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYRESDEC=r2, @ANYRES8=r1, @ANYRES64], 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000c00)=""/199, 0xc7, 0x0, &(0x7f0000000d00)=""/110, 0x6e}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x9}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0xa) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r8, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) 473.381914ms ago: executing program 3 (id=8322): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/464], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = socket$kcm(0xa, 0x1, 0x106) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x4000c00) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f0000000400), &(0x7f0000000500)}, 0x20) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000380)=ANY=[], 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x19, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xa, 0x4, 0x100, 0xffffffffffffffff, 0xffffff60, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2, 0x7}, 0x50) 451.719535ms ago: executing program 9 (id=8323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, 0x0, &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1400) 432.280497ms ago: executing program 3 (id=8324): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x5}, 0x18) listen(r1, 0x4) close_range(r0, r1, 0x0) 375.545113ms ago: executing program 9 (id=8325): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000400)='./file0\x00', 0x143142, 0x43) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000002b19b51528481d0c9dd4985003c96625a659ff2"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x2c}, @empty}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r6}, &(0x7f00000002c0), &(0x7f0000000380)='%-5lx \x00'}, 0x30) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x8000003d) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) 353.540315ms ago: executing program 3 (id=8326): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r1}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000dc0)=[@rdma_args={0x48, 0x114, 0x1, {{0xc, 0x8}, {0x0}, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1, 0x4, 0x200}}], 0x48}, 0x0) 307.63109ms ago: executing program 8 (id=8327): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}]}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2, 0xd7, 0x8c, 0x1ff, 0x61, @local, @mcast2, 0x3f10235c0e30c815, 0x1, 0xfffffff9, 0x80000003}}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='ext4_insert_range\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xab, 0x1, 0x40, 0x0, 0x0, 0x3, 0x1d459d, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x17f, 0x6}, 0x6025, 0x4, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x1) 301.51211ms ago: executing program 3 (id=8328): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/25], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="03", 0x1}, {&(0x7f0000000540)="cf597f56376fd90e8f5e68bb012986a1be1cc721139578aefea50b0fd4ca8f937bf3742604d45fdfd814c33b49ce06353952a9f670e400a094a652345aaa825ee777e6fb842ee8f6300b78d0b8534d70b949a0c393896c586d427d70dabfd90ee9805f8d893989640616207d572846a17396335546d94c2e2b23c484f7534e24eb868bd07f6a86598e0d2757ba6bae990ea6919da1d088b8378d1601219d82092209f11de43aec74474d3141f152e9e09b33826f252c795244e7b12cd1f7d57d3d1470f24ba8e9f3e3", 0xc9}, {&(0x7f0000000340)="306a50be5c210e457d4341c4dd", 0xd}, {&(0x7f00000007c0)="111857b6045567a03c9b55055bf9dbfde419b7a79ab021219872e422acf78c3bba6a78d6fa22736696b75f5d476f9f7f0f3d90f0917f8777e9c87895926c2abefc04a9d7713a052fd48849869cdb43893f3982d3f5e3203ffaef5e1f7c14719f715eb39072c987779e7336cac1d59d96e4a4a29fe963c0bd6b1f", 0x7a}], 0x4}], 0x1, 0x0) r2 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r2, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0xffff, @multicast1}, 0x10) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0xfffffffffffffcd5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000101000000000600", @ANYRES32=0x0, @ANYBLOB="04"], 0x1c}], 0x1}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x2, 'veth0_macvtap\x00', {0x1}}) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) 281.809912ms ago: executing program 4 (id=8329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 248.836665ms ago: executing program 4 (id=8330): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x9d}, 0x18) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0xffff8000}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x42}}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 209.08902ms ago: executing program 8 (id=8331): r0 = socket(0x40000000015, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000002300)) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x640100fe}, 0x10) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f00000005c0)=[0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) r4 = eventfd(0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESHEX=r6, @ANYBLOB="edfdea2573ab70ab2d85faf3dc04d8436eee9a1aec0df35f65d6920a9e8d7a6c579a135cb2cfb6812c7c574ae2bccb6dfa67be942893f67a026ddb88ac895682a7335e496d3bf8afceb44b457f98beca8f8af121db25c6b51ebdcd1c1bdcdf334b05ea8764fc04528b9d5cca43cd61c2a622d9d330f0980243154bac90f9e220c60b5638cc3810e079e4b62b9ad064a81d0f", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f00000002c0)) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) keyctl$get_persistent(0x16, r8, r9) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r11) chown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, r11) r12 = gettid() r13 = geteuid() r14 = getgid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000680)={0x0, 0x0}) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) r17 = accept4$x25(r0, 0x0, &(0x7f00000007c0), 0x0) sendmsg$unix(r0, &(0x7f0000000940)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)="a784c49c83cad3b87936a1ee1af69b6224d6f08b3bca5899d96471160301f41e0c4f4677b9288b24a36dad0b45285d673da714eff5638540c98b86cd", 0x3c}, {&(0x7f0000000140)="c58183f0919837811f0e0b351f899f02be7aac77503f8ece1b28e87ce89478b55f9bfe6157191167433acb84b253faf3d19b266bccf5e4c9c5b598cf72173d3e7423c31559827b6e2c5b8713e8793cb4f67012e5815398f65fb3740055d8e1d20ac2e33e45981abb955170e004b2080233188fb00c7d287c31dd2c05f48556d494a37a46abee2f101ff036a1fc2e57dc3cea0f03c0401b34190c4d2b7170c503ad852b62de8f7a8a64f595a11f64ab974cd4a6be75ec3e6f47e9d402bd82f108f00cdbca25d38f1269f76fe532ce9714399c7da4c901bf3ba989c7acf5a7a86620f83f0f37f02d7c11ac5c4435641f633a977c187527", 0xf6}], 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="1c000800000000000000220005000000", @ANYRES32=r5, @ANYRES32=r8, @ANYRES32=r11, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="000000001b2bc30b3b676d4201060000002a1a30e32034b8c877c89264000000020000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=0xee01, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r17, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1], 0x128}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 155.820625ms ago: executing program 4 (id=8332): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) rename(0x0, &(0x7f0000000100)='./file2\x00') 145.586716ms ago: executing program 8 (id=8333): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r1, 0x6, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, 0x0, 0x25, 0x0, @val=@netkit={@void, @value=r1, @void, @void, r2}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r1}, 0x18) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x4}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 88.178552ms ago: executing program 9 (id=8334): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/464], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = socket$kcm(0xa, 0x1, 0x106) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x4000c00) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f0000000400), &(0x7f0000000500)}, 0x20) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000380)=ANY=[], 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x19, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xa, 0x4, 0x100, 0xffffffffffffffff, 0xffffff60, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2, 0x7}, 0x50) 83.749662ms ago: executing program 0 (id=8335): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x5}, 0x18) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) close_range(r0, r1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2, 0x922000000001, 0x106) 58.817344ms ago: executing program 8 (id=8336): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x5}, 0x18) listen(r1, 0x4) close_range(r0, r1, 0x0) 13.155919ms ago: executing program 4 (id=8337): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) read(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES16=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYRESDEC=r2, @ANYRES8=r1, @ANYRES64], 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000c00)=""/199, 0xc7, 0x0, &(0x7f0000000d00)=""/110, 0x6e}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x9}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0xa) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r8, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) 0s ago: executing program 8 (id=8338): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r1}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000dc0)=[@rdma_args={0x48, 0x114, 0x1, {{0xc, 0x8}, {0x0}, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1, 0x4, 0x200}}], 0x48}, 0x0) kernel console output (not intermixed with test programs): .987945][T24570] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 535.009235][T24562] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.7172: bad orphan inode 11862016 [ 535.022037][T24562] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 535.034941][T24562] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.053045][T24570] netlink: 256 bytes leftover after parsing attributes in process `/dev/snd/seq'. [ 535.071613][T24575] netlink: 'syz.3.7178': attribute type 1 has an invalid length. [ 535.152427][T20226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 535.182863][T24592] loop9: detected capacity change from 0 to 512 [ 535.190717][T24592] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 535.215321][T24592] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 535.231090][T24598] loop0: detected capacity change from 0 to 512 [ 535.238825][T24592] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.260349][T24598] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.7184: bad orphan inode 11862016 [ 535.298220][T24598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 535.323127][T24598] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.339282][T20226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 535.373887][T24610] loop8: detected capacity change from 0 to 512 [ 535.419133][T24617] loop4: detected capacity change from 0 to 512 [ 535.427014][T19969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 535.434526][T24617] EXT4-fs: Ignoring removed mblk_io_submit option [ 535.442837][T24617] EXT4-fs: dax option not supported [ 535.503113][T24622] loop8: detected capacity change from 0 to 1024 [ 535.547387][T24629] loop0: detected capacity change from 0 to 512 [ 535.554537][T24629] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 535.574900][T24629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 535.588162][T24629] ext4 filesystem being mounted at /380/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.648339][T19969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 535.675360][T24647] loop0: detected capacity change from 0 to 512 [ 535.682685][T24647] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 535.697311][T24641] infiniband syz0: set down [ 535.701971][T24641] infiniband syz0: added bond_slave_0 [ 535.712403][T24647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 535.729116][T24641] RDS/IB: syz0: added [ 535.733290][T24647] ext4 filesystem being mounted at /381/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.743878][T24641] smc: adding ib device syz0 with port count 1 [ 535.750183][T24641] smc: ib device syz0 port 1 has no pnetid [ 535.779790][T24652] loop9: detected capacity change from 0 to 512 [ 535.786538][T24652] EXT4-fs: Ignoring removed mblk_io_submit option [ 535.793347][T24652] EXT4-fs: dax option not supported [ 535.927127][T19969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 535.967018][T24655] loop9: detected capacity change from 0 to 2048 [ 536.001369][T24655] loop9: p1 < > p3 p4 [ 536.011370][T24655] loop9: p3 start 458752 is beyond EOD, truncated [ 536.017886][T24655] loop9: p4 start 268435456 is beyond EOD, truncated [ 536.126928][T24676] loop0: detected capacity change from 0 to 512 [ 536.133714][T24676] EXT4-fs: Ignoring removed mblk_io_submit option [ 536.140346][T24676] EXT4-fs: dax option not supported [ 536.188599][ T560] Bluetooth: hci0: Frame reassembly failed (-84) [ 536.228538][T24682] loop3: detected capacity change from 0 to 512 [ 536.236588][T24682] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 536.252621][T24682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 536.277036][T24682] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.309730][T24687] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 536.332843][T24688] 9pnet_fd: Insufficient options for proto=fd [ 536.381488][T24375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 536.557268][T24706] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 536.618723][T24710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.628111][T24710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.719306][T24713] loop3: detected capacity change from 0 to 128 [ 537.007983][T24717] loop9: detected capacity change from 0 to 1024 [ 537.026429][T24717] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.154284][T20226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.243118][T24729] loop9: detected capacity change from 0 to 512 [ 537.258290][T24729] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 537.288828][T24729] EXT4-fs (loop9): 1 truncate cleaned up [ 537.296275][T24729] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.388516][T20226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.407867][T24730] loop8: detected capacity change from 0 to 512 [ 537.557124][T24746] loop9: detected capacity change from 0 to 2048 [ 537.565506][T24748] loop8: detected capacity change from 0 to 1024 [ 537.586233][T24750] __nla_validate_parse: 21 callbacks suppressed [ 537.586249][T24750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7242'. [ 537.625618][T24752] netlink: 'syz.3.7243': attribute type 1 has an invalid length. [ 537.633501][T24752] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7243'. [ 537.643034][T24746] loop9: p1 < > p3 p4 [ 537.648587][T24746] loop9: p3 start 458752 is beyond EOD, truncated [ 537.655074][T24746] loop9: p4 start 268435456 is beyond EOD, truncated [ 537.671376][T24746] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7240'. [ 537.821107][T24766] loop0: detected capacity change from 0 to 512 [ 537.828277][T24766] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 537.840181][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 537.840197][ T29] audit: type=1326 audit(2000000189.720:22887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.9.7248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 537.885915][ T29] audit: type=1326 audit(2000000189.720:22888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.9.7248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 537.887142][T24766] EXT4-fs (loop0): 1 truncate cleaned up [ 537.909668][ T29] audit: type=1326 audit(2000000189.720:22889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.9.7248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 537.909749][ T29] audit: type=1326 audit(2000000189.720:22890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.9.7248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 537.945632][T24766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.962878][ T29] audit: type=1326 audit(2000000189.720:22891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.9.7248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 537.962936][ T29] audit: type=1326 audit(2000000189.720:22892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.9.7248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 538.022272][ T29] audit: type=1326 audit(2000000189.720:22893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.9.7248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 538.046138][ T29] audit: type=1326 audit(2000000189.720:22894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.9.7248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 538.070187][ T29] audit: type=1326 audit(2000000189.720:22895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.9.7248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 538.071679][T24771] loop3: detected capacity change from 0 to 512 [ 538.094345][ T29] audit: type=1326 audit(2000000189.750:22896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.9.7248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 538.128255][T24766] netlink: 280 bytes leftover after parsing attributes in process `syz.0.7247'. [ 538.149021][T24771] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.7246: bad orphan inode 11862016 [ 538.160398][T24771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 538.162131][T19969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.173046][T24771] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.197534][ T6962] Bluetooth: hci0: command 0x1003 tx timeout [ 538.197549][ T7315] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 538.219101][T24779] loop0: detected capacity change from 0 to 512 [ 538.236025][T24779] EXT4-fs (loop0): orphan cleanup on readonly fs [ 538.249711][T24782] loop4: detected capacity change from 0 to 512 [ 538.254775][T24779] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7251: bg 0: block 248: padding at end of block bitmap is not set [ 538.271181][T24779] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.7251: Failed to acquire dquot type 1 [ 538.274742][T24782] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 538.298045][T24779] EXT4-fs (loop0): 1 truncate cleaned up [ 538.309716][T24782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 538.323112][T24779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 538.341855][T24788] netlink: 'syz.9.7254': attribute type 1 has an invalid length. [ 538.346342][T24782] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.349748][T24788] netlink: 224 bytes leftover after parsing attributes in process `syz.9.7254'. [ 538.370401][T24779] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 538.371289][T24375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 538.387902][T24779] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 0 [ 538.406251][T24779] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 538.430223][T19969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.474290][T24799] loop8: detected capacity change from 0 to 512 [ 538.526944][T23012] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 538.547588][T24802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7257'. [ 538.556612][T24802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7257'. [ 538.705665][T24807] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7261'. [ 538.715564][T24807] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7261'. [ 538.751273][T24811] netlink: 'syz.0.7262': attribute type 13 has an invalid length. [ 538.892378][T24817] netlink: 'syz.4.7266': attribute type 1 has an invalid length. [ 538.900264][T24817] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7266'. [ 539.021326][T24830] loop9: detected capacity change from 0 to 512 [ 539.028269][T24830] EXT4-fs: Ignoring removed bh option [ 539.043201][T24830] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 539.052347][T24830] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 539.067946][T24830] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 539.077400][T24830] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 539.088216][T24830] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.141146][T24842] syz0: rxe_newlink: already configured on bond_slave_0 [ 539.150328][T24824] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 539.161703][T24844] loop8: detected capacity change from 0 to 128 [ 539.193870][T20226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.337960][T24857] loop9: detected capacity change from 0 to 512 [ 539.358758][T24857] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 539.401140][T24857] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 539.417664][T24857] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.501204][T20226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 539.857944][T24863] loop9: detected capacity change from 0 to 512 [ 539.881896][T24875] loop0: detected capacity change from 0 to 512 [ 539.899443][T24875] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 539.916013][T24863] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.7279: bad orphan inode 11862016 [ 539.918373][T24875] EXT4-fs (loop0): 1 truncate cleaned up [ 539.938726][T24882] syz0: rxe_newlink: already configured on bond_slave_0 [ 539.946568][T24863] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 539.946604][T24875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.987605][T24863] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.027641][T19969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.163727][T20226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 540.389803][T24904] loop9: detected capacity change from 0 to 128 [ 540.419000][T24906] bond1: option ad_user_port_key: invalid value (1136) [ 540.425907][T24906] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 540.478462][T24906] bond1 (unregistering): Released all slaves [ 540.528094][T24913] FAULT_INJECTION: forcing a failure. [ 540.528094][T24913] name failslab, interval 1, probability 0, space 0, times 0 [ 540.540863][T24913] CPU: 1 UID: 0 PID: 24913 Comm: syz.4.7299 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 540.540895][T24913] Tainted: [W]=WARN [ 540.540902][T24913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 540.540917][T24913] Call Trace: [ 540.540925][T24913] [ 540.540936][T24913] __dump_stack+0x1d/0x30 [ 540.541002][T24913] dump_stack_lvl+0xe8/0x140 [ 540.541022][T24913] dump_stack+0x15/0x1b [ 540.541044][T24913] should_fail_ex+0x265/0x280 [ 540.541086][T24913] should_failslab+0x8c/0xb0 [ 540.541141][T24913] kmem_cache_alloc_noprof+0x50/0x480 [ 540.541177][T24913] ? alloc_empty_file+0x76/0x200 [ 540.541274][T24913] alloc_empty_file+0x76/0x200 [ 540.541317][T24913] alloc_file_pseudo+0xc6/0x160 [ 540.541379][T24913] __shmem_file_setup+0x1de/0x210 [ 540.541409][T24913] shmem_file_setup+0x3b/0x50 [ 540.541428][T24913] __se_sys_memfd_create+0x2c3/0x590 [ 540.541452][T24913] __x64_sys_memfd_create+0x31/0x40 [ 540.541477][T24913] x64_sys_call+0x2ac2/0x3000 [ 540.541523][T24913] do_syscall_64+0xd2/0x200 [ 540.541547][T24913] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 540.541590][T24913] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 540.541668][T24913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.541694][T24913] RIP: 0033:0x7f3da7dbf6c9 [ 540.541714][T24913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.541733][T24913] RSP: 002b:00007f3da6826e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 540.541780][T24913] RAX: ffffffffffffffda RBX: 0000000000000441 RCX: 00007f3da7dbf6c9 [ 540.541796][T24913] RDX: 00007f3da6826ef0 RSI: 0000000000000000 RDI: 00007f3da7e42960 [ 540.541819][T24913] RBP: 00002000000011c0 R08: 00007f3da6826bb7 R09: 00007f3da6826e40 [ 540.541837][T24913] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 540.541945][T24913] R13: 00007f3da6826ef0 R14: 00007f3da6826eb0 R15: 00002000000003c0 [ 540.542019][T24913] [ 540.765177][T24915] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 541.023388][T24932] loop4: detected capacity change from 0 to 512 [ 541.036566][T24932] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 541.090081][T24932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 541.108193][T24932] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.282795][T23012] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 541.470221][T24965] loop4: detected capacity change from 0 to 512 [ 541.473571][T24964] ip6gretap0: entered promiscuous mode [ 541.483132][T24965] EXT4-fs: Ignoring removed mblk_io_submit option [ 541.483179][T24965] EXT4-fs: dax option not supported [ 541.500411][T24964] syz_tun: entered promiscuous mode [ 541.501962][T24964] debugfs: 'hsr1' already exists in 'hsr' [ 541.512846][T24964] Cannot create hsr debugfs directory [ 541.700015][T24977] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 541.925610][T25001] loop4: detected capacity change from 0 to 512 [ 541.939994][T25001] EXT4-fs: Ignoring removed mblk_io_submit option [ 541.957628][T25001] EXT4-fs: dax option not supported [ 542.055600][T25006] loop9: detected capacity change from 0 to 1024 [ 542.081208][T25006] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.131515][T25012] loop0: detected capacity change from 0 to 512 [ 542.142659][T25010] syz0: rxe_newlink: already configured on bond_slave_0 [ 542.161973][T25012] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 542.174341][T20226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.184064][T25012] EXT4-fs (loop0): 1 truncate cleaned up [ 542.193474][T25012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.260548][T19969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.306513][T25033] loop3: detected capacity change from 0 to 512 [ 542.320901][T25033] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 542.341116][T25033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 542.414319][T25033] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.441578][T25044] netlink: 'syz.0.7354': attribute type 1 has an invalid length. [ 542.550826][T25047] bond1: entered promiscuous mode [ 542.555940][T25047] bond1: entered allmulticast mode [ 542.577699][T25047] 8021q: adding VLAN 0 to HW filter on device bond1 [ 542.594028][T25047] bond1 (unregistering): Released all slaves [ 542.606976][T24375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 542.672086][T25054] loop3: detected capacity change from 0 to 2048 [ 542.682824][T25049] loop0: detected capacity change from 0 to 512 [ 542.708005][T25054] loop3: p1 < > p3 p4 [ 542.708954][T25049] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.7355: bad orphan inode 11862016 [ 542.712820][T25054] loop3: p3 start 458752 is beyond EOD, truncated [ 542.729409][T25054] loop3: p4 start 268435456 is beyond EOD, truncated [ 542.750259][T25049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 542.766487][T25054] __nla_validate_parse: 24 callbacks suppressed [ 542.766510][T25054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7357'. [ 542.781892][T25054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7357'. [ 542.793260][T25049] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.805262][ T3957] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.807896][T25054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7357'. [ 542.834212][T25062] syz0: rxe_newlink: already configured on bond_slave_0 [ 542.838254][ T3957] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.849973][ T3957] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.858755][ T3957] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.878444][T25066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7361'. [ 542.924121][T25073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7356'. [ 543.034634][T25080] loop3: detected capacity change from 0 to 512 [ 543.041373][T25080] EXT4-fs: Ignoring removed bh option [ 543.047329][T25080] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 543.056454][T25080] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 543.080057][T25080] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 543.086357][T25084] netlink: 'syz.8.7367': attribute type 13 has an invalid length. [ 543.101514][T19969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 543.113576][T25080] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 543.136530][T25080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.260552][T25084] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.262266][T25075] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 543.267845][T25084] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.330659][T25084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.341528][T25084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.357382][T24375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.511046][ T3680] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.546998][ T3680] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.583999][T25093] loop3: detected capacity change from 0 to 2048 [ 543.616964][T25095] loop8: detected capacity change from 0 to 2048 [ 543.618261][ T3680] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.657542][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 543.657560][ T29] audit: type=1400 audit(2000000195.530:23136): avc: denied { bind } for pid=25098 comm="syz.0.7373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 543.678961][ T3680] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.685151][T25093] loop3: p1 < > p3 p4 [ 543.735943][T25093] loop3: p3 start 458752 is beyond EOD, truncated [ 543.738271][T25095] loop8: p1 < > p3 p4 [ 543.742587][T25093] loop3: p4 start 268435456 is beyond EOD, truncated [ 543.755781][T25095] loop8: p3 start 458752 is beyond EOD, truncated [ 543.762356][T25095] loop8: p4 start 268435456 is beyond EOD, truncated [ 543.777440][ T29] audit: type=1400 audit(2000000195.590:23137): avc: denied { setopt } for pid=25098 comm="syz.0.7373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 543.817671][T25093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7369'. [ 543.850079][ T29] audit: type=1400 audit(2000000195.660:23138): avc: denied { read write } for pid=25104 comm="syz.0.7376" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 543.874955][ T29] audit: type=1400 audit(2000000195.660:23139): avc: denied { open } for pid=25104 comm="syz.0.7376" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 543.899601][ T29] audit: type=1326 audit(2000000195.710:23140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25092 comm="syz.3.7369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b95aff6c9 code=0x7ffc0000 [ 543.923432][ T29] audit: type=1326 audit(2000000195.710:23141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25092 comm="syz.3.7369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b95aff6c9 code=0x7ffc0000 [ 543.973096][T25095] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7371'. [ 543.982060][T25095] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7371'. [ 544.024269][ T3680] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.034559][T25095] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7371'. [ 544.043926][ T3680] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.063333][ T29] audit: type=1326 audit(2000000195.940:23142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25094 comm="syz.8.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944858f6c9 code=0x7ffc0000 [ 544.087709][ T3680] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.112917][ T3680] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.130391][T25128] netlink: 'syz.9.7382': attribute type 13 has an invalid length. [ 544.209592][ T29] audit: type=1326 audit(2000000196.040:23143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25129 comm="syz.9.7383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 544.221735][T25133] loop9: detected capacity change from 0 to 512 [ 544.233290][ T29] audit: type=1326 audit(2000000196.040:23144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25129 comm="syz.9.7383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 544.263796][ T29] audit: type=1326 audit(2000000196.040:23145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25129 comm="syz.9.7383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 544.287325][T25133] EXT4-fs: Ignoring removed mblk_io_submit option [ 544.308545][T25133] EXT4-fs: dax option not supported [ 544.338841][T25136] loop8: detected capacity change from 0 to 1024 [ 544.350032][T25138] loop4: detected capacity change from 0 to 1024 [ 544.360798][T25138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.402331][T25142] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7387'. [ 544.458505][T23012] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.478037][T25148] loop8: detected capacity change from 0 to 1024 [ 544.564090][T25157] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 544.636455][T25160] loop0: detected capacity change from 0 to 2048 [ 544.753086][T25160] loop0: p1 < > p3 p4 [ 544.760248][T25160] loop0: p3 start 458752 is beyond EOD, truncated [ 544.767201][T25160] loop0: p4 start 268435456 is beyond EOD, truncated [ 544.854092][T25169] loop3: detected capacity change from 0 to 512 [ 544.882253][T25169] EXT4-fs: Ignoring removed mblk_io_submit option [ 544.900631][T25169] EXT4-fs: dax option not supported [ 545.042272][T25180] netlink: 'syz.3.7403': attribute type 13 has an invalid length. [ 545.076697][T25182] loop0: detected capacity change from 0 to 512 [ 545.106052][T25182] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 545.129959][T25180] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.137342][T25180] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.147933][T25182] EXT4-fs (loop0): 1 truncate cleaned up [ 545.154003][T25182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.203144][T19969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.222800][T25180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.237049][T25180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.300729][ T3694] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.309877][ T3694] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.327775][ T3694] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.336769][ T3694] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.348850][ T3694] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.357809][ T3694] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.401298][T25192] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 545.412891][T25196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.419748][T25195] loop3: detected capacity change from 0 to 2048 [ 545.421677][T25196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.449171][ T3694] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.458190][ T3694] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.498237][T25195] loop3: p1 < > p3 p4 [ 545.503086][T25195] loop3: p3 start 458752 is beyond EOD, truncated [ 545.509750][T25195] loop3: p4 start 268435456 is beyond EOD, truncated [ 545.705093][T25218] loop9: detected capacity change from 0 to 512 [ 545.728121][T25216] loop8: detected capacity change from 0 to 1024 [ 545.749611][T25218] EXT4-fs: Ignoring removed mblk_io_submit option [ 545.762622][T25218] EXT4-fs: dax option not supported [ 545.790553][T25222] netlink: 'syz.3.7419': attribute type 13 has an invalid length. [ 545.909065][T25232] loop4: detected capacity change from 0 to 2048 [ 545.928357][T25232] loop4: p1 < > p3 p4 [ 545.933924][T25232] loop4: p3 start 458752 is beyond EOD, truncated [ 545.940470][T25232] loop4: p4 start 268435456 is beyond EOD, truncated [ 545.956832][T25234] loop3: detected capacity change from 0 to 1024 [ 545.987728][ T560] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.000627][ T3679] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.015136][T25234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.027755][ T3679] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.036519][ T3679] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.067673][T25224] loop8: detected capacity change from 0 to 512 [ 546.078629][T25246] loop0: detected capacity change from 0 to 512 [ 546.085229][T25246] EXT4-fs: Ignoring removed bh option [ 546.091296][T25246] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 546.100392][T25246] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 546.141253][T25246] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 546.174167][T25252] loop8: detected capacity change from 0 to 1024 [ 546.180756][T25246] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 546.191965][T25246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.204770][T24375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.226555][T25256] loop4: detected capacity change from 0 to 512 [ 546.233826][T25256] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 546.245235][T25246] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 546.262690][T25256] EXT4-fs (loop4): 1 truncate cleaned up [ 546.269487][T25256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.270311][T25260] netlink: 'syz.3.7432': attribute type 13 has an invalid length. [ 546.314371][T19969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.327056][T23012] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.346525][T25263] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 546.381271][T25271] loop9: detected capacity change from 0 to 2048 [ 546.420922][T25271] loop9: p1 < > p3 p4 [ 546.427353][T25271] loop9: p3 start 458752 is beyond EOD, truncated [ 546.433861][T25271] loop9: p4 start 268435456 is beyond EOD, truncated [ 546.457208][ T3957] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.469651][ T3957] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.479331][ T3957] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.488937][ T3957] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.498951][T25287] veth0_vlan: entered allmulticast mode [ 546.505492][T25287] veth0_vlan: left allmulticast mode [ 546.526739][T25290] netlink: 'syz.3.7447': attribute type 13 has an invalid length. [ 546.670225][T25281] loop4: detected capacity change from 0 to 512 [ 546.689048][T25281] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.7441: bad orphan inode 11862016 [ 546.699779][T25313] loop9: detected capacity change from 0 to 512 [ 546.700414][T25281] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.706508][T25313] EXT4-fs: Ignoring removed bh option [ 546.723080][T25312] loop0: detected capacity change from 0 to 2048 [ 546.732392][T25313] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 546.741642][T25313] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 546.750931][T25312] loop0: p1 < > p3 p4 [ 546.755574][T25312] loop0: p3 start 458752 is beyond EOD, truncated [ 546.762078][T25312] loop0: p4 start 268435456 is beyond EOD, truncated [ 546.770678][T25313] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 546.784964][T25313] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 546.838473][T25301] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 546.966870][T25339] loop4: detected capacity change from 0 to 2048 [ 546.998103][T25339] loop4: p1 < > p3 p4 [ 547.003204][T25339] loop4: p3 start 458752 is beyond EOD, truncated [ 547.009724][T25339] loop4: p4 start 268435456 is beyond EOD, truncated [ 547.067852][T25353] netlink: 'syz.4.7473': attribute type 12 has an invalid length. [ 547.082054][T25353] netlink: 'syz.4.7473': attribute type 1 has an invalid length. [ 547.190202][T25349] loop0: detected capacity change from 0 to 512 [ 547.204303][T25365] loop9: detected capacity change from 0 to 1024 [ 547.219021][T25349] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.7471: bad orphan inode 11862016 [ 547.230728][T25349] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.337122][T25375] loop8: detected capacity change from 0 to 2048 [ 547.393827][T25375] loop8: p1 < > p3 p4 [ 547.408637][T25385] loop9: detected capacity change from 0 to 512 [ 547.418270][T25375] loop8: p3 start 458752 is beyond EOD, truncated [ 547.424866][T25375] loop8: p4 start 268435456 is beyond EOD, truncated [ 547.438012][T25385] EXT4-fs: Ignoring removed mblk_io_submit option [ 547.451923][T25385] EXT4-fs: dax option not supported [ 547.827534][T25407] __nla_validate_parse: 47 callbacks suppressed [ 547.827552][T25407] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7492'. [ 548.100178][T25402] loop3: detected capacity change from 0 to 512 [ 548.108911][T25422] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7498'. [ 548.117972][T25422] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7498'. [ 548.141433][T25402] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.7491: bad orphan inode 11862016 [ 548.157542][T25402] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.295811][T25433] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7501'. [ 548.321112][T25433] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7501'. [ 548.368058][T25437] loop4: detected capacity change from 0 to 512 [ 548.375620][T25437] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 548.446335][T25439] loop9: detected capacity change from 0 to 2048 [ 548.482896][T25437] EXT4-fs (loop4): 1 truncate cleaned up [ 548.529190][T25439] loop9: p1 < > p3 p4 [ 548.533867][T25439] loop9: p3 start 458752 is beyond EOD, truncated [ 548.540415][T25439] loop9: p4 start 268435456 is beyond EOD, truncated [ 548.590900][T25439] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7503'. [ 548.599975][T25439] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7503'. [ 548.615623][T25450] loop4: detected capacity change from 0 to 512 [ 548.628198][T25439] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7503'. [ 548.637996][T25450] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 548.663609][T25435] loop3: detected capacity change from 0 to 512 [ 548.684155][T25450] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.700056][T25435] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.7502: bad orphan inode 11862016 [ 548.726162][T25435] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.822069][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 548.822086][ T29] audit: type=1400 audit(2000000200.700:23388): avc: denied { setopt } for pid=25453 comm="syz.9.7509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 548.938837][T25464] loop9: detected capacity change from 0 to 128 [ 548.959203][T25466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7513'. [ 548.970907][T25468] FAULT_INJECTION: forcing a failure. [ 548.970907][T25468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.984042][T25468] CPU: 0 UID: 0 PID: 25468 Comm: syz.8.7515 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 548.984150][T25468] Tainted: [W]=WARN [ 548.984159][T25468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 548.984175][T25468] Call Trace: [ 548.984182][T25468] [ 548.984191][T25468] __dump_stack+0x1d/0x30 [ 548.984219][T25468] dump_stack_lvl+0xe8/0x140 [ 548.984247][T25468] dump_stack+0x15/0x1b [ 548.984309][T25468] should_fail_ex+0x265/0x280 [ 548.984351][T25468] should_fail+0xb/0x20 [ 548.984392][T25468] should_fail_usercopy+0x1a/0x20 [ 548.984419][T25468] strncpy_from_user+0x25/0x230 [ 548.984503][T25468] ? kmem_cache_alloc_noprof+0x242/0x480 [ 548.984599][T25468] ? getname_flags+0x80/0x3b0 [ 548.984657][T25468] getname_flags+0xae/0x3b0 [ 548.984688][T25468] do_sys_openat2+0x60/0x110 [ 548.984739][T25468] __x64_sys_openat+0xf2/0x120 [ 548.984794][T25468] x64_sys_call+0x2eab/0x3000 [ 548.984816][T25468] do_syscall_64+0xd2/0x200 [ 548.984836][T25468] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 548.984869][T25468] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 548.984984][T25468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.985012][T25468] RIP: 0033:0x7f944858df10 [ 548.985033][T25468] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 548.985052][T25468] RSP: 002b:00007f9446feef70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 548.985071][T25468] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f944858df10 [ 548.985087][T25468] RDX: 0000000000000000 RSI: 00007f944861207e RDI: 00000000ffffff9c [ 548.985102][T25468] RBP: 00007f944861207e R08: 0000000000000000 R09: 0000000000000000 [ 548.985206][T25468] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 548.985219][T25468] R13: 00007f94487e6038 R14: 00007f94487e5fa0 R15: 00007ffcfd5395d8 [ 548.985243][T25468] [ 549.199616][T25466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7513'. [ 549.258250][ T29] audit: type=1326 audit(2000000201.140:23389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25473 comm="syz.4.7518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da7dbf6c9 code=0x7ffc0000 [ 549.282165][ T29] audit: type=1326 audit(2000000201.140:23390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25473 comm="syz.4.7518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da7dbf6c9 code=0x7ffc0000 [ 549.331306][T25478] loop3: detected capacity change from 0 to 2048 [ 549.346367][ T29] audit: type=1326 audit(2000000201.180:23391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25473 comm="syz.4.7518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3da7dbf6c9 code=0x7ffc0000 [ 549.370043][ T29] audit: type=1326 audit(2000000201.180:23392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25473 comm="syz.4.7518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3da7dbf703 code=0x7ffc0000 [ 549.393622][ T29] audit: type=1326 audit(2000000201.180:23393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25473 comm="syz.4.7518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3da7dbf703 code=0x7ffc0000 [ 549.417171][ T29] audit: type=1326 audit(2000000201.180:23394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25473 comm="syz.4.7518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da7dbf6c9 code=0x7ffc0000 [ 549.441455][ T29] audit: type=1326 audit(2000000201.180:23395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25473 comm="syz.4.7518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da7dbf6c9 code=0x7ffc0000 [ 549.465336][ T29] audit: type=1326 audit(2000000201.180:23396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25473 comm="syz.4.7518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da7dbf6c9 code=0x7ffc0000 [ 549.489014][ T29] audit: type=1326 audit(2000000201.180:23397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25473 comm="syz.4.7518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da7dbf6c9 code=0x7ffc0000 [ 549.513047][T25481] loop4: detected capacity change from 0 to 512 [ 549.519629][T25481] EXT4-fs: Ignoring removed mblk_io_submit option [ 549.526257][T25481] EXT4-fs: dax option not supported [ 549.538007][T25478] loop3: p1 < > p3 p4 [ 549.542925][T25478] loop3: p3 start 458752 is beyond EOD, truncated [ 549.549565][T25478] loop3: p4 start 268435456 is beyond EOD, truncated [ 549.602206][T25487] loop3: detected capacity change from 0 to 128 [ 549.626656][T25489] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 549.659784][T25492] loop4: detected capacity change from 0 to 512 [ 549.667006][T25492] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 549.679630][T25492] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.734222][T25499] loop0: detected capacity change from 0 to 512 [ 549.741256][T25499] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 549.753091][T25499] EXT4-fs (loop0): 1 truncate cleaned up [ 549.754597][T25502] netlink: 'syz.4.7526': attribute type 13 has an invalid length. [ 549.783055][ T3957] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.806723][ T3957] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.816271][ T3957] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.827543][ T3957] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.886021][T25520] loop9: detected capacity change from 0 to 2048 [ 549.938646][T25520] loop9: p1 < > p3 p4 [ 549.943395][T25520] loop9: p3 start 458752 is beyond EOD, truncated [ 549.949925][T25520] loop9: p4 start 268435456 is beyond EOD, truncated [ 550.056243][T25532] loop9: detected capacity change from 0 to 512 [ 550.072469][T25532] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 550.112274][T25532] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.207632][T25543] netlink: 'syz.4.7539': attribute type 13 has an invalid length. [ 550.239226][T25545] loop9: detected capacity change from 0 to 512 [ 550.246990][T25535] loop0: detected capacity change from 0 to 512 [ 550.253667][T25545] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 550.262936][T25545] EXT4-fs (loop9): orphan cleanup on readonly fs [ 550.270134][T25545] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 550.285445][T25545] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 550.292439][T25545] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #13: comm syz.9.7540: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 550.310851][T25545] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.7540: couldn't read orphan inode 13 (err -117) [ 550.337258][T25545] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 550.358520][T25545] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 550.368202][T25535] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.7538: bad orphan inode 11862016 [ 550.389352][T25535] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.459256][T25545] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 550.531613][T25545] EXT4-fs error (device loop9): ext4_lookup:1791: inode #2: comm syz.9.7540: deleted inode referenced: 12 [ 550.568496][T25545] EXT4-fs error (device loop9): ext4_lookup:1791: inode #2: comm syz.9.7540: deleted inode referenced: 12 [ 550.596619][T25545] xt_connbytes: Forcing CT accounting to be enabled [ 550.607535][T25545] set match dimension is over the limit! [ 550.659948][T25565] loop0: detected capacity change from 0 to 2048 [ 550.742466][T25565] loop0: p1 < > p3 p4 [ 550.747362][T25565] loop0: p3 start 458752 is beyond EOD, truncated [ 550.753928][T25565] loop0: p4 start 268435456 is beyond EOD, truncated [ 550.823278][T25573] loop0: detected capacity change from 0 to 512 [ 550.830674][T25573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 550.859445][T25573] ext4 filesystem being mounted at /452/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.186945][T25584] netlink: 'syz.0.7552': attribute type 13 has an invalid length. [ 551.358899][T25592] loop9: detected capacity change from 0 to 128 [ 551.563916][T25594] loop3: detected capacity change from 0 to 512 [ 551.578806][T25594] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.7556: bad orphan inode 11862016 [ 551.590139][T25594] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.753268][T25609] loop4: detected capacity change from 0 to 2048 [ 551.761972][T25610] loop3: detected capacity change from 0 to 512 [ 551.768750][T25610] EXT4-fs: Ignoring removed bh option [ 551.774709][T25610] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 551.783827][T25610] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 551.788244][T25609] loop4: p1 < > p3 p4 [ 551.797021][T25609] loop4: p3 start 458752 is beyond EOD, truncated [ 551.797655][T25610] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 551.803495][T25609] loop4: p4 start 268435456 is beyond EOD, truncated [ 551.817640][T25610] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 551.830389][T25610] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 551.888816][T25615] loop4: detected capacity change from 0 to 512 [ 551.896087][T25615] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 551.913760][T25615] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.018657][T25626] binfmt_misc: register: failed to install interpreter file ./file2 [ 552.088937][T25633] hub 1-0:1.0: USB hub found [ 552.093869][T25633] hub 1-0:1.0: 8 ports detected [ 552.137691][T25637] loop4: detected capacity change from 0 to 2048 [ 552.178713][T25637] loop4: p1 < > p3 p4 [ 552.183998][T25637] loop4: p3 start 458752 is beyond EOD, truncated [ 552.190581][T25637] loop4: p4 start 268435456 is beyond EOD, truncated [ 552.268273][T25654] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 552.289157][T25656] loop3: detected capacity change from 0 to 512 [ 552.295738][T25656] EXT4-fs: Ignoring removed bh option [ 552.302602][T25656] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 552.311838][T25656] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 552.321222][T25656] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 552.330938][T25656] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 552.364182][T25656] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 552.449251][T25668] netlink: 'syz.3.7584': attribute type 13 has an invalid length. [ 552.482277][T25671] loop8: detected capacity change from 0 to 1024 [ 552.543107][T25650] loop9: detected capacity change from 0 to 512 [ 552.571093][T25650] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.7577: bad orphan inode 11862016 [ 552.573870][T25680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.591819][T25650] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.608223][T25680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.655306][T25691] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 552.767343][T25696] netlink: 'syz.9.7596': attribute type 13 has an invalid length. [ 552.799172][ T3957] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.829812][ T3957] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.859329][ T3957] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.877523][ T3957] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.894258][T25708] loop3: detected capacity change from 0 to 2048 [ 552.937935][T25708] loop3: p1 < > p3 p4 [ 552.942816][T25708] loop3: p3 start 458752 is beyond EOD, truncated [ 552.949330][T25708] loop3: p4 start 268435456 is beyond EOD, truncated [ 552.960822][T25708] __nla_validate_parse: 24 callbacks suppressed [ 552.960858][T25708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7601'. [ 552.976222][T25708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7601'. [ 552.986217][T25708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7601'. [ 553.043045][T25712] loop3: detected capacity change from 0 to 512 [ 553.050497][T25712] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 553.077227][T25712] EXT4-fs (loop3): 1 truncate cleaned up [ 553.131096][T25726] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7608'. [ 553.140304][T25726] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7608'. [ 553.141946][T25719] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 553.192826][T25730] loop9: detected capacity change from 0 to 512 [ 553.198626][T25731] netlink: 'syz.0.7611': attribute type 13 has an invalid length. [ 553.200173][T25730] EXT4-fs: Ignoring removed bh option [ 553.237763][T25738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7613'. [ 553.246774][T25739] loop4: detected capacity change from 0 to 2048 [ 553.253809][T25730] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 553.262944][T25730] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 553.271569][T25738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7613'. [ 553.272267][T25730] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 553.290163][T25730] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 553.308012][T25739] loop4: p1 < > p3 p4 [ 553.312750][T25723] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 553.321913][T25739] loop4: p3 start 458752 is beyond EOD, truncated [ 553.328539][T25739] loop4: p4 start 268435456 is beyond EOD, truncated [ 553.351408][T25739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7612'. [ 553.360407][T25739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7612'. [ 553.377673][T25739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7612'. [ 553.479394][T25763] loop9: detected capacity change from 0 to 1024 [ 553.488263][T25761] syz0: rxe_newlink: already configured on bond_slave_0 [ 553.501278][T25765] loop3: detected capacity change from 0 to 1024 [ 553.523249][T25771] FAULT_INJECTION: forcing a failure. [ 553.523249][T25771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.536419][T25771] CPU: 0 UID: 0 PID: 25771 Comm: syz.0.7627 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 553.536459][T25771] Tainted: [W]=WARN [ 553.536469][T25771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 553.536501][T25771] Call Trace: [ 553.536509][T25771] [ 553.536518][T25771] __dump_stack+0x1d/0x30 [ 553.536546][T25771] dump_stack_lvl+0xe8/0x140 [ 553.536586][T25771] dump_stack+0x15/0x1b [ 553.536607][T25771] should_fail_ex+0x265/0x280 [ 553.536675][T25771] should_fail+0xb/0x20 [ 553.536709][T25771] should_fail_usercopy+0x1a/0x20 [ 553.536735][T25771] _copy_from_user+0x1c/0xb0 [ 553.536760][T25771] vmemdup_user+0x5e/0xd0 [ 553.536826][T25771] path_setxattrat+0x1b6/0x310 [ 553.536941][T25771] __x64_sys_lsetxattr+0x71/0x90 [ 553.537005][T25771] x64_sys_call+0x287b/0x3000 [ 553.537025][T25771] do_syscall_64+0xd2/0x200 [ 553.537098][T25771] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 553.537124][T25771] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 553.537219][T25771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.537238][T25771] RIP: 0033:0x7f533620f6c9 [ 553.537252][T25771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.537268][T25771] RSP: 002b:00007f5334c77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 553.537299][T25771] RAX: ffffffffffffffda RBX: 00007f5336465fa0 RCX: 00007f533620f6c9 [ 553.537310][T25771] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 553.537349][T25771] RBP: 00007f5334c77090 R08: 0000000000000000 R09: 0000000000000000 [ 553.537359][T25771] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000001 [ 553.537370][T25771] R13: 00007f5336466038 R14: 00007f5336465fa0 R15: 00007ffe62b1baf8 [ 553.537415][T25771] [ 553.825517][T25785] loop3: detected capacity change from 0 to 2048 [ 553.865820][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 553.865842][ T29] audit: type=1326 audit(2000000205.730:23558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25794 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533620f6c9 code=0x7ffc0000 [ 553.896198][ T29] audit: type=1326 audit(2000000205.730:23559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25794 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533620f6c9 code=0x7ffc0000 [ 553.920126][ T29] audit: type=1326 audit(2000000205.730:23560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25794 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f533620f6c9 code=0x7ffc0000 [ 553.945120][ T29] audit: type=1326 audit(2000000205.730:23561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25794 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533620f6c9 code=0x7ffc0000 [ 553.970234][ T29] audit: type=1326 audit(2000000205.730:23562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25794 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533620f6c9 code=0x7ffc0000 [ 553.994784][ T29] audit: type=1326 audit(2000000205.730:23563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25794 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f533620f6c9 code=0x7ffc0000 [ 554.018601][ T29] audit: type=1326 audit(2000000205.740:23564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25794 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533620f6c9 code=0x7ffc0000 [ 554.042303][ T29] audit: type=1326 audit(2000000205.740:23565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25794 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f533620f6c9 code=0x7ffc0000 [ 554.066036][ T29] audit: type=1326 audit(2000000205.740:23566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25794 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533620f6c9 code=0x7ffc0000 [ 554.089788][ T29] audit: type=1326 audit(2000000205.740:23567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25794 comm="syz.0.7637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f533620f6c9 code=0x7ffc0000 [ 554.133452][T25785] loop3: p1 < > p3 p4 [ 554.138951][T25785] loop3: p3 start 458752 is beyond EOD, truncated [ 554.145433][T25785] loop3: p4 start 268435456 is beyond EOD, truncated [ 554.212505][T25807] syz0: rxe_newlink: already configured on bond_slave_0 [ 554.221229][T25810] FAULT_INJECTION: forcing a failure. [ 554.221229][T25810] name failslab, interval 1, probability 0, space 0, times 0 [ 554.233933][T25810] CPU: 0 UID: 0 PID: 25810 Comm: syz.8.7643 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 554.234030][T25810] Tainted: [W]=WARN [ 554.234037][T25810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 554.234050][T25810] Call Trace: [ 554.234055][T25810] [ 554.234062][T25810] __dump_stack+0x1d/0x30 [ 554.234092][T25810] dump_stack_lvl+0xe8/0x140 [ 554.234117][T25810] dump_stack+0x15/0x1b [ 554.234139][T25810] should_fail_ex+0x265/0x280 [ 554.234183][T25810] should_failslab+0x8c/0xb0 [ 554.234244][T25810] kmem_cache_alloc_noprof+0x50/0x480 [ 554.234295][T25810] ? sctp_get_port_local+0x438/0xae0 [ 554.234386][T25810] sctp_get_port_local+0x438/0xae0 [ 554.234425][T25810] sctp_do_bind+0x398/0x4b0 [ 554.234451][T25810] sctp_connect_new_asoc+0x153/0x3a0 [ 554.234488][T25810] sctp_sendmsg+0xf10/0x18d0 [ 554.234604][T25810] ? selinux_socket_sendmsg+0x131/0x1b0 [ 554.234631][T25810] ? __pfx_sctp_sendmsg+0x10/0x10 [ 554.234654][T25810] inet_sendmsg+0xc5/0xd0 [ 554.234683][T25810] __sock_sendmsg+0x102/0x180 [ 554.234715][T25810] __sys_sendto+0x268/0x330 [ 554.234786][T25810] __x64_sys_sendto+0x76/0x90 [ 554.234827][T25810] x64_sys_call+0x2d14/0x3000 [ 554.234855][T25810] do_syscall_64+0xd2/0x200 [ 554.234882][T25810] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 554.234910][T25810] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 554.234977][T25810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.235072][T25810] RIP: 0033:0x7f944858f6c9 [ 554.235090][T25810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.235139][T25810] RSP: 002b:00007f9446fef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 554.235163][T25810] RAX: ffffffffffffffda RBX: 00007f94487e5fa0 RCX: 00007f944858f6c9 [ 554.235179][T25810] RDX: 000000000000fffd RSI: 0000200000000080 RDI: 0000000000000003 [ 554.235193][T25810] RBP: 00007f9446fef090 R08: 0000200000000100 R09: 000000000000001c [ 554.235205][T25810] R10: 0000000000044004 R11: 0000000000000246 R12: 0000000000000001 [ 554.235217][T25810] R13: 00007f94487e6038 R14: 00007f94487e5fa0 R15: 00007ffcfd5395d8 [ 554.235236][T25810] [ 554.607662][T25829] loop4: detected capacity change from 0 to 2048 [ 554.649925][T25829] loop4: p1 < > p3 p4 [ 554.657926][T25829] loop4: p3 start 458752 is beyond EOD, truncated [ 554.664520][T25829] loop4: p4 start 268435456 is beyond EOD, truncated [ 554.690053][T25815] loop3: detected capacity change from 0 to 512 [ 554.722708][T25815] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.7642: bad orphan inode 11862016 [ 554.734204][T25815] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.855065][T25857] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 554.969194][T25864] loop3: detected capacity change from 0 to 512 [ 554.976223][T25864] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 554.993653][T25841] loop9: detected capacity change from 0 to 512 [ 554.996552][T25864] EXT4-fs (loop3): 1 truncate cleaned up [ 555.035909][T25841] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.7657: bad orphan inode 11862016 [ 555.049611][T25841] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 555.160893][T25884] loop4: detected capacity change from 0 to 512 [ 555.172277][T25886] veth0_vlan: entered allmulticast mode [ 555.178624][T25886] veth0_vlan: left allmulticast mode [ 555.187875][T25884] EXT4-fs: Ignoring removed bh option [ 555.204904][T25884] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 555.214041][T25884] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 555.230486][T25884] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 555.241377][T25884] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 555.270421][T25884] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 555.323162][T25903] veth0_vlan: entered allmulticast mode [ 555.359280][T25903] veth0_vlan: left allmulticast mode [ 555.416635][T25915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.416746][T25915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.453127][T25917] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.7686' sets config #0 [ 555.453215][T25917] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.7686' sets config #1 [ 555.828525][T25936] loop3: detected capacity change from 0 to 1024 [ 556.031978][T25947] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 556.135528][T25956] loop3: detected capacity change from 0 to 512 [ 556.142523][T25956] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 556.158166][T25956] EXT4-fs (loop3): 1 truncate cleaned up [ 556.288885][T25969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.303114][T25967] loop9: detected capacity change from 0 to 1024 [ 556.315567][T25969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.396597][T25981] loop4: detected capacity change from 0 to 512 [ 556.403420][T25981] EXT4-fs: Ignoring removed bh option [ 556.412193][T25981] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 556.421412][T25981] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 556.430886][T25981] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 556.440468][T25981] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 556.450442][T25981] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 556.530784][T25996] loop4: detected capacity change from 0 to 512 [ 556.555801][T25996] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 556.567886][T25996] EXT4-fs (loop4): 1 truncate cleaned up [ 556.617297][T26007] loop4: detected capacity change from 0 to 1024 [ 556.697829][T26016] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.7723' sets config #0 [ 556.743946][T26022] loop4: detected capacity change from 0 to 512 [ 556.744199][T26022] ext4: Unknown parameter 'silent' [ 556.793350][ T3694] Bluetooth: hci0: Frame reassembly failed (-84) [ 556.968288][T26033] 9pnet_fd: Insufficient options for proto=fd [ 557.027682][T26038] loop4: detected capacity change from 0 to 128 [ 557.028000][T26038] vfat: Unknown parameter '' [ 557.054630][T26039] loop4: detected capacity change from 0 to 128 [ 557.054829][T26039] vfat: Unknown parameter '' [ 557.101147][T26045] netlink: 'syz.8.7734': attribute type 13 has an invalid length. [ 557.115616][ T3957] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.115673][ T3957] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.115714][ T3957] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.115815][ T3957] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.145921][T26047] loop4: detected capacity change from 0 to 1024 [ 557.196959][T26053] loop8: detected capacity change from 0 to 128 [ 557.233007][T26055] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.7738' sets config #0 [ 557.258276][T26055] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.7738' sets config #1 [ 557.515730][T26058] loop4: detected capacity change from 0 to 512 [ 557.530932][T26058] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.7739: bad orphan inode 11862016 [ 557.560816][T26058] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.583484][T26063] loop9: detected capacity change from 0 to 512 [ 557.618449][T26063] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.7741: bad orphan inode 11862016 [ 557.634272][T26063] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.741140][T26087] loop4: detected capacity change from 0 to 1024 [ 557.759145][T26089] loop3: detected capacity change from 0 to 512 [ 557.766690][T26089] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 557.779394][T26089] EXT4-fs (loop3): 1 truncate cleaned up [ 558.141572][T26112] veth0_vlan: entered allmulticast mode [ 558.148543][T26112] veth0_vlan: left allmulticast mode [ 558.312664][T26116] __nla_validate_parse: 55 callbacks suppressed [ 558.312685][T26116] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7759'. [ 558.312711][T26116] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7759'. [ 558.312729][T26116] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7759'. [ 558.417643][T26124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7764'. [ 558.417682][T26126] loop9: detected capacity change from 0 to 512 [ 558.427138][T26126] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 558.433134][T26124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7764'. [ 558.469800][T26126] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.607851][T26134] loop4: detected capacity change from 0 to 1024 [ 558.639091][T26138] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7769'. [ 558.639119][T26138] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7769'. [ 558.785013][T26155] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7776'. [ 558.794236][T26155] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7776'. [ 558.825156][T26157] loop4: detected capacity change from 0 to 512 [ 558.832729][T26157] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 558.837542][ T7315] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 558.841286][ T6962] Bluetooth: hci0: command 0x1003 tx timeout [ 558.860888][T26157] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.047542][T26163] loop9: detected capacity change from 0 to 512 [ 559.080756][T26163] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.7779: bad orphan inode 11862016 [ 559.085544][T26163] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.111100][T26176] loop8: detected capacity change from 0 to 1024 [ 559.127841][T26181] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.7786' sets config #1 [ 559.189014][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 559.189032][ T29] audit: type=1400 audit(2000000211.070:23586): avc: denied { mounton } for pid=26182 comm="syz.8.7787" path="/239/file0" dev="tmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 559.228950][T26185] loop4: detected capacity change from 0 to 1024 [ 559.321819][T26189] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7789'. [ 559.348062][T26193] veth0_vlan: entered allmulticast mode [ 559.348590][T26193] veth0_vlan: left allmulticast mode [ 559.396291][T26199] loop8: detected capacity change from 0 to 512 [ 559.414928][T26195] loop9: detected capacity change from 0 to 512 [ 559.415866][T26195] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 559.433735][T26195] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.557062][T26209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.557146][T26209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.592331][T26211] loop3: detected capacity change from 0 to 1024 [ 559.599736][T26213] loop9: detected capacity change from 0 to 512 [ 559.600068][T26213] EXT4-fs: Ignoring removed bh option [ 559.600512][T26213] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 559.600528][T26213] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 559.612949][T26213] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 559.613087][T26213] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 559.621976][T26213] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 559.787404][T26220] loop9: detected capacity change from 0 to 1024 [ 559.808020][T26223] veth0_vlan: entered allmulticast mode [ 559.818376][T26223] veth0_vlan: left allmulticast mode [ 559.874185][T26230] loop9: detected capacity change from 0 to 512 [ 559.898080][T26230] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 559.902033][ T29] audit: type=1326 audit(2000000211.780:23587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26233 comm="syz.8.7807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944858f6c9 code=0x7ffc0000 [ 559.943018][ T29] audit: type=1326 audit(2000000211.810:23588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26233 comm="syz.8.7807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f944858f6c9 code=0x7ffc0000 [ 559.966686][ T29] audit: type=1326 audit(2000000211.810:23589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26233 comm="syz.8.7807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944858f6c9 code=0x7ffc0000 [ 559.990373][ T29] audit: type=1326 audit(2000000211.810:23590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26233 comm="syz.8.7807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944858f6c9 code=0x7ffc0000 [ 559.999555][T26230] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 560.013973][ T29] audit: type=1326 audit(2000000211.810:23591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26233 comm="syz.8.7807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f944858f6c9 code=0x7ffc0000 [ 560.048055][ T29] audit: type=1326 audit(2000000211.810:23592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26233 comm="syz.8.7807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944858f6c9 code=0x7ffc0000 [ 560.071754][ T29] audit: type=1326 audit(2000000211.810:23593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26233 comm="syz.8.7807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944858f6c9 code=0x7ffc0000 [ 560.095483][ T29] audit: type=1326 audit(2000000211.810:23594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26233 comm="syz.8.7807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f944858f6c9 code=0x7ffc0000 [ 560.119156][ T29] audit: type=1326 audit(2000000211.810:23595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26233 comm="syz.8.7807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944858f6c9 code=0x7ffc0000 [ 560.179910][T26245] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.7810' sets config #1 [ 560.248501][T26248] loop4: detected capacity change from 0 to 1024 [ 560.269706][T26252] netlink: 'syz.9.7811': attribute type 13 has an invalid length. [ 560.305411][T26259] FAULT_INJECTION: forcing a failure. [ 560.305411][T26259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.318656][T26259] CPU: 1 UID: 0 PID: 26259 Comm: syz.9.7816 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 560.318709][T26259] Tainted: [W]=WARN [ 560.318718][T26259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 560.318734][T26259] Call Trace: [ 560.318817][T26259] [ 560.318825][T26259] __dump_stack+0x1d/0x30 [ 560.318847][T26259] dump_stack_lvl+0xe8/0x140 [ 560.318873][T26259] dump_stack+0x15/0x1b [ 560.318896][T26259] should_fail_ex+0x265/0x280 [ 560.318957][T26259] should_fail+0xb/0x20 [ 560.318992][T26259] should_fail_usercopy+0x1a/0x20 [ 560.319019][T26259] _copy_from_user+0x1c/0xb0 [ 560.319047][T26259] ____sys_sendmsg+0x1c5/0x4e0 [ 560.319075][T26259] ___sys_sendmsg+0x17b/0x1d0 [ 560.319141][T26259] __x64_sys_sendmsg+0xd4/0x160 [ 560.319165][T26259] x64_sys_call+0x191e/0x3000 [ 560.319188][T26259] do_syscall_64+0xd2/0x200 [ 560.319248][T26259] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 560.319275][T26259] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 560.319309][T26259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.319351][T26259] RIP: 0033:0x7fbfcd0cf6c9 [ 560.319369][T26259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.319389][T26259] RSP: 002b:00007fbfcbb2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.319411][T26259] RAX: ffffffffffffffda RBX: 00007fbfcd325fa0 RCX: 00007fbfcd0cf6c9 [ 560.319426][T26259] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 560.319440][T26259] RBP: 00007fbfcbb2f090 R08: 0000000000000000 R09: 0000000000000000 [ 560.319453][T26259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.319468][T26259] R13: 00007fbfcd326038 R14: 00007fbfcd325fa0 R15: 00007ffc676d5348 [ 560.319544][T26259] [ 560.559276][T26266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.559419][T26266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.891514][T26286] loop4: detected capacity change from 0 to 1024 [ 560.929228][T26290] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 561.149125][T26303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.149317][T26303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.250728][T26308] loop8: detected capacity change from 0 to 1024 [ 561.435690][T26331] loop3: detected capacity change from 0 to 512 [ 561.468080][T26331] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 561.489893][T26331] EXT4-fs (loop3): 1 truncate cleaned up [ 561.824131][ T3957] Bluetooth: hci0: Frame reassembly failed (-84) [ 561.872588][T26360] loop3: detected capacity change from 0 to 512 [ 561.880027][T26360] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 561.921257][T26360] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.001067][T26371] 9pnet_fd: Insufficient options for proto=fd [ 562.077604][T26373] loop3: detected capacity change from 0 to 128 [ 562.946390][T26398] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.7871' sets config #0 [ 562.992935][T26398] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.7871' sets config #1 [ 563.086269][T26402] loop3: detected capacity change from 0 to 512 [ 563.093470][T26402] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 563.121179][T26402] EXT4-fs mount: 104 callbacks suppressed [ 563.121197][T26402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 563.147634][T26402] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 563.292399][T24375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 563.456700][T26417] netlink: 'syz.9.7878': attribute type 13 has an invalid length. [ 563.710365][T26425] loop9: detected capacity change from 0 to 128 [ 563.821274][T26436] loop8: detected capacity change from 0 to 2048 [ 563.821485][T26434] loop3: detected capacity change from 0 to 1024 [ 563.849319][T26434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.877584][ T7315] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 563.878488][T26436] loop8: p1 < > p3 p4 [ 563.894654][T26436] loop8: p3 start 458752 is beyond EOD, truncated [ 563.901229][T26436] loop8: p4 start 268435456 is beyond EOD, truncated [ 563.946095][T24375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.963381][T26436] __nla_validate_parse: 27 callbacks suppressed [ 563.963402][T26436] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7886'. [ 563.978821][T26436] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7886'. [ 564.227870][T26465] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7897'. [ 564.236897][T26465] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7897'. [ 564.585759][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 564.585794][ T29] audit: type=1326 audit(2000000216.460:23704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26481 comm="syz.9.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 564.615841][ T29] audit: type=1326 audit(2000000216.460:23705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26481 comm="syz.9.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 564.677344][ T29] audit: type=1326 audit(2000000216.520:23706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26481 comm="syz.9.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 564.701122][ T29] audit: type=1326 audit(2000000216.520:23707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26481 comm="syz.9.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 564.724855][ T29] audit: type=1326 audit(2000000216.520:23708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26481 comm="syz.9.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 564.748737][ T29] audit: type=1326 audit(2000000216.520:23709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26481 comm="syz.9.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 564.772488][ T29] audit: type=1326 audit(2000000216.520:23710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26481 comm="syz.9.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 564.796691][ T29] audit: type=1326 audit(2000000216.520:23711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26481 comm="syz.9.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 564.820391][ T29] audit: type=1326 audit(2000000216.520:23712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26481 comm="syz.9.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 564.844295][ T29] audit: type=1326 audit(2000000216.520:23713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26481 comm="syz.9.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 565.056212][T26498] loop4: detected capacity change from 0 to 1024 [ 565.096716][T26500] loop8: detected capacity change from 0 to 128 [ 565.106756][T26498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.362826][T23012] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.451564][T26521] loop9: detected capacity change from 0 to 512 [ 565.482126][T26521] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 565.509765][T26521] EXT4-fs (loop9): 1 truncate cleaned up [ 565.515951][T26521] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.535659][T26526] netlink: 'syz.3.7918': attribute type 13 has an invalid length. [ 565.602761][T20226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.616981][T26528] loop3: detected capacity change from 0 to 512 [ 565.633801][T26528] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 565.661009][T26532] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.7920' sets config #0 [ 565.670886][T26532] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.7920' sets config #1 [ 565.692906][T26528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 565.711913][T26528] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.719314][T26538] netlink: 72 bytes leftover after parsing attributes in process `syz.9.7923'. [ 565.734020][T26536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7922'. [ 565.743141][T26536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7922'. [ 565.749413][T26538] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7923'. [ 565.761129][T26538] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7923'. [ 565.783431][T26538] netlink: 72 bytes leftover after parsing attributes in process `syz.9.7923'. [ 565.827974][T24375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 565.866655][T26549] netlink: 'syz.3.7927': attribute type 4 has an invalid length. [ 565.880478][T26549] .`: renamed from bond0 [ 565.911425][T26555] netlink: 'syz.4.7930': attribute type 13 has an invalid length. [ 565.929336][T26558] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.7932' sets config #0 [ 565.939083][T26558] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.7932' sets config #1 [ 565.984355][T26567] loop9: detected capacity change from 0 to 512 [ 565.992802][T26567] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 566.026835][T26567] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 566.058196][T26567] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.170325][T20226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 566.196170][T26583] loop4: detected capacity change from 0 to 128 [ 566.280294][T26606] futex_wake_op: syz.3.7952 tries to shift op by -1; fix this program [ 566.291335][T26606] random: crng reseeded on system resumption [ 566.302427][T26606] Restarting kernel threads ... [ 566.307629][T26606] Done restarting kernel threads. [ 566.600528][T26621] loop8: detected capacity change from 0 to 512 [ 566.683532][T26640] loop9: detected capacity change from 0 to 512 [ 566.691560][T26638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.700917][T26640] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 566.710921][T26638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.721993][T26640] EXT4-fs (loop9): 1 truncate cleaned up [ 566.728639][T26640] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.759653][T26647] loop8: detected capacity change from 0 to 1024 [ 566.769059][T20226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.852446][T26655] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 567.012144][T26659] loop9: detected capacity change from 0 to 512 [ 567.028742][T26659] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.7975: bad orphan inode 11862016 [ 567.042691][T26659] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 567.055854][T26659] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.156732][T20226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 567.392865][T26705] loop9: detected capacity change from 0 to 512 [ 567.414848][T26705] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 567.445319][T26705] EXT4-fs (loop9): 1 truncate cleaned up [ 567.464662][T26705] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.536048][T20226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.773350][T26722] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 567.936673][T26739] loop8: detected capacity change from 0 to 512 [ 567.990768][T26741] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.8006' sets config #0 [ 568.001753][T26741] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.8006' sets config #1 [ 568.153122][T26754] netlink: 'syz.4.8011': attribute type 13 has an invalid length. [ 568.243482][T26738] loop9: detected capacity change from 0 to 512 [ 568.259885][T26758] syz0: rxe_newlink: already configured on bond_slave_0 [ 568.273225][T26738] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.8005: bad orphan inode 11862016 [ 568.285168][T26738] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 568.316977][T26738] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.452590][T20226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 568.500731][T26772] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.8018' sets config #0 [ 568.510435][T26749] loop8: detected capacity change from 0 to 512 [ 568.527745][T26772] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.8018' sets config #1 [ 568.754549][T26785] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.8023' sets config #0 [ 568.764630][T26785] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.8023' sets config #1 [ 569.109381][T26789] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 569.304264][T26793] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 569.407109][T26806] __nla_validate_parse: 40 callbacks suppressed [ 569.407205][T26806] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8025'. [ 569.477370][T26810] loop9: detected capacity change from 0 to 512 [ 569.509027][T26810] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 569.531801][T26810] EXT4-fs (loop9): 1 truncate cleaned up [ 569.538050][T26810] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.564026][T26814] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.8034' sets config #0 [ 569.617723][T26814] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.8034' sets config #1 [ 569.664687][T20226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.673980][T26801] loop3: detected capacity change from 0 to 512 [ 569.715242][T26801] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.8027: bad orphan inode 11862016 [ 569.727696][T26801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 569.743166][T26808] loop4: detected capacity change from 0 to 512 [ 569.751025][T26801] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 569.784896][T26808] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.8031: bad orphan inode 11862016 [ 569.838799][T26808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 569.960680][T26808] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.016615][T24375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 570.071917][T26846] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 570.089994][T26847] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8044'. [ 570.099164][T26847] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8044'. [ 570.124296][T26848] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8045'. [ 570.133375][T26848] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8045'. [ 570.148017][T26851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8043'. [ 570.170097][T23012] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 570.191385][T26855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.203740][T26855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.301196][T26863] veth0_vlan: entered allmulticast mode [ 570.308252][T26863] veth0_vlan: left allmulticast mode [ 570.478762][T26859] serio: Serial port ptm0 [ 570.928741][T26875] loop8: detected capacity change from 0 to 1024 [ 570.952916][T26873] loop4: detected capacity change from 0 to 512 [ 570.969492][T26873] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.8054: bad orphan inode 11862016 [ 570.981228][T26873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 571.005571][T26873] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.023846][T26887] loop8: detected capacity change from 0 to 128 [ 571.136313][T26882] loop9: detected capacity change from 0 to 512 [ 571.156753][T26882] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.8058: bad orphan inode 11862016 [ 571.178340][T26882] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 571.178660][T26895] loop3: detected capacity change from 0 to 1024 [ 571.191028][T26882] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.209161][T23012] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 571.249852][T26895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.282971][T24375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.308466][T20226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 571.322619][T26911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8067'. [ 571.344594][T26911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8067'. [ 571.364883][T26914] loop3: detected capacity change from 0 to 1024 [ 571.373595][T26917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8066'. [ 571.377008][T26914] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 571.382762][T26917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8066'. [ 571.396588][T26914] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 571.409993][T26914] EXT4-fs (loop3): orphan cleanup on readonly fs [ 571.422343][T26914] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.8065: Invalid inode table block 0 in block_group 0 [ 571.435456][T26914] EXT4-fs (loop3): Remounting filesystem read-only [ 571.442087][T26914] __quota_error: 288 callbacks suppressed [ 571.442104][T26914] Quota error (device loop3): write_blk: dquota write failed [ 571.455337][T26914] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 571.465419][T26914] EXT4-fs (loop3): 1 truncate cleaned up [ 571.472423][T26914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 571.522393][T26934] loop4: detected capacity change from 0 to 2048 [ 571.537083][T24375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.558498][T26934] loop4: p1 < > p3 p4 [ 571.563287][T26934] loop4: p3 start 458752 is beyond EOD, truncated [ 571.569811][T26934] loop4: p4 start 268435456 is beyond EOD, truncated [ 571.603967][ T29] audit: type=1326 audit(2000000223.470:24002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26931 comm="syz.4.8074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da7dbf6c9 code=0x7ffc0000 [ 571.641547][T26940] loop9: detected capacity change from 0 to 1024 [ 571.659900][T26940] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.692433][T20226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.761485][T26958] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 571.881366][T26962] loop3: detected capacity change from 0 to 512 [ 571.888816][T26962] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 571.949774][T26962] EXT4-fs (loop3): 1 truncate cleaned up [ 571.956032][T26962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.004425][T24375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.085860][T26974] loop3: detected capacity change from 0 to 2048 [ 572.198485][T26974] loop3: p1 < > p3 p4 [ 572.224780][T26974] loop3: p3 start 458752 is beyond EOD, truncated [ 572.231394][T26974] loop3: p4 start 268435456 is beyond EOD, truncated [ 572.254239][T26985] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 572.274562][T26982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.289985][T26982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.314141][ T29] audit: type=1326 audit(2000000224.180:24003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26973 comm="syz.3.8089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b95aff6c9 code=0x7ffc0000 [ 572.499272][T26997] loop9: detected capacity change from 0 to 1024 [ 572.543888][T26997] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.578765][T20226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.638175][T27014] loop3: detected capacity change from 0 to 2048 [ 572.681754][T27014] loop3: p1 < > p3 p4 [ 572.686498][T27014] loop3: p3 start 458752 is beyond EOD, truncated [ 572.693011][T27014] loop3: p4 start 268435456 is beyond EOD, truncated [ 572.717694][ T29] audit: type=1326 audit(2000000224.580:24004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27013 comm="syz.3.8105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b95aff6c9 code=0x7ffc0000 [ 572.898662][T27036] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.8115' sets config #0 [ 572.951146][T27037] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.8115' sets config #1 [ 573.004671][T27042] loop4: detected capacity change from 0 to 2048 [ 573.048755][T27042] loop4: p1 < > p3 p4 [ 573.053960][T27025] loop9: detected capacity change from 0 to 512 [ 573.057402][T27042] loop4: p3 start 458752 is beyond EOD, truncated [ 573.066837][T27042] loop4: p4 start 268435456 is beyond EOD, truncated [ 573.080802][T27025] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.8110: bad orphan inode 11862016 [ 573.108057][ T29] audit: type=1326 audit(2000000224.980:24005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27041 comm="syz.4.8117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da7dbf6c9 code=0x7ffc0000 [ 573.143717][T27025] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 573.158521][T27025] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.287804][T27062] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.8126' sets config #0 [ 573.313830][T27062] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.8126' sets config #1 [ 573.340849][T20226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 573.362080][T27065] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.8128' sets config #0 [ 573.372027][T27065] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.8128' sets config #1 [ 573.464551][T27081] loop8: detected capacity change from 0 to 512 [ 573.485308][T27081] EXT4-fs: Ignoring removed mblk_io_submit option [ 573.512694][T27081] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 573.520120][T27084] loop3: detected capacity change from 0 to 1024 [ 573.540095][T27084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.550786][T27081] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 573.588364][T24375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.620994][T27081] EXT4-fs (loop8): write access unavailable, skipping orphan cleanup [ 573.624040][T27093] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.8139' sets config #0 [ 573.640460][T27093] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.8139' sets config #1 [ 573.646922][T27081] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 573.729148][T22698] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.741881][T27097] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.8140' sets config #0 [ 573.751462][T27097] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.8140' sets config #1 [ 573.862676][ T29] audit: type=1326 audit(2000000225.740:24006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27103 comm="syz.9.8143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 573.886460][ T29] audit: type=1326 audit(2000000225.740:24007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27103 comm="syz.9.8143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 573.910320][ T29] audit: type=1326 audit(2000000225.740:24008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27103 comm="syz.9.8143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 573.933959][ T29] audit: type=1326 audit(2000000225.740:24009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27103 comm="syz.9.8143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfcd0cf6c9 code=0x7ffc0000 [ 573.938957][T27095] loop3: detected capacity change from 0 to 512 [ 574.009330][T27095] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.8138: bad orphan inode 11862016 [ 574.037168][T27095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 574.049899][T27095] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.110013][T27107] ip6gre2: entered allmulticast mode [ 574.193321][T24375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 574.212163][T27123] loop9: detected capacity change from 0 to 1024 [ 574.237432][T27127] loop4: detected capacity change from 0 to 512 [ 574.245266][T27123] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.257781][T27127] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 574.278840][T27127] EXT4-fs (loop4): 1 truncate cleaned up [ 574.285124][T27127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.322909][T20226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.361787][T27137] loop9: detected capacity change from 0 to 512 [ 574.369745][T27137] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 574.378882][T23012] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.403161][T27137] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 574.443221][T27137] ext4 filesystem being mounted at /475/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.446669][T27147] __nla_validate_parse: 35 callbacks suppressed [ 574.446691][T27147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8157'. [ 574.477969][T27147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8157'. [ 574.549634][T20226] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 574.678802][T27165] loop3: detected capacity change from 0 to 1024 [ 574.691931][T27170] loop8: detected capacity change from 0 to 512 [ 574.700641][T27165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.778166][T27181] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8169'. [ 574.812508][T27149] loop4: detected capacity change from 0 to 512 [ 574.835028][T24375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.849117][T27149] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.8158: bad orphan inode 11862016 [ 574.865175][T27149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 574.891120][T27149] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.116178][T27196] loop8: detected capacity change from 0 to 2048 [ 575.218603][T27202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8177'. [ 575.227776][T27202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8177'. [ 575.238714][T23012] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 575.248435][T27202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8177'. [ 575.316839][T27207] loop4: detected capacity change from 0 to 512 [ 575.325428][T27209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8181'. [ 575.326964][T27207] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 575.358955][T27210] netlink: 'syz.0.8180': attribute type 13 has an invalid length. [ 575.399296][T27207] EXT4-fs (loop4): 1 truncate cleaned up [ 575.405370][T27207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.501702][T23012] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.512259][T27215] loop3: detected capacity change from 0 to 1024 [ 575.518870][T27196] SELinux: failed to load policy [ 575.535713][T27215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.983930][T24375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.329443][T27237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8190'. [ 576.338445][T27237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8190'. [ 576.404978][T27238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8190'. [ 576.596355][T27252] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.8195' sets config #0 [ 576.605713][T27252] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.8195' sets config #1 [ 576.689970][T27254] loop4: detected capacity change from 0 to 1024 [ 576.699458][T27254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.738315][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 576.738334][ T29] audit: type=1326 audit(2000000228.620:24164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27263 comm="syz.8.8199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944858f6c9 code=0x7ffc0000 [ 576.777552][ T29] audit: type=1326 audit(2000000228.620:24165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27263 comm="syz.8.8199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944858f6c9 code=0x7ffc0000 [ 576.801517][ T29] audit: type=1326 audit(2000000228.620:24166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27263 comm="syz.8.8199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f944858f6c9 code=0x7ffc0000 [ 576.825139][ T29] audit: type=1326 audit(2000000228.620:24167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27263 comm="syz.8.8199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944858f6c9 code=0x7ffc0000 [ 576.825785][T23012] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.848967][ T29] audit: type=1326 audit(2000000228.620:24168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27263 comm="syz.8.8199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944858f6c9 code=0x7ffc0000 [ 576.881286][ T29] audit: type=1326 audit(2000000228.620:24169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27263 comm="syz.8.8199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f944858f6c9 code=0x7ffc0000 [ 576.904922][ T29] audit: type=1326 audit(2000000228.620:24170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27263 comm="syz.8.8199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944858f6c9 code=0x7ffc0000 [ 576.928542][ T29] audit: type=1326 audit(2000000228.620:24171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27263 comm="syz.8.8199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f944858f6c9 code=0x7ffc0000 [ 576.952403][ T29] audit: type=1326 audit(2000000228.620:24172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27263 comm="syz.8.8199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944858f6c9 code=0x7ffc0000 [ 576.976104][ T29] audit: type=1326 audit(2000000228.620:24173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27263 comm="syz.8.8199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f944858f6c9 code=0x7ffc0000 [ 577.002556][T27269] loop8: detected capacity change from 0 to 512 [ 577.035927][T27270] loop3: detected capacity change from 0 to 512 [ 577.367007][T27291] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.8207' sets config #0 [ 577.388580][T27291] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.8207' sets config #1 [ 578.491569][T27302] loop3: detected capacity change from 0 to 1024 [ 578.636954][T27314] loop8: detected capacity change from 0 to 512 [ 578.709649][T27318] netlink: 'syz.3.8213': attribute type 13 has an invalid length. [ 578.818489][T27323] loop3: detected capacity change from 0 to 512 [ 578.837152][T27323] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 578.845340][T27323] FAT-fs (loop3): Filesystem has been set read-only [ 578.874315][T27323] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 578.901216][T27323] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 578.934254][T27323] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 578.943261][T27323] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 578.951721][T27323] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 578.960067][T27323] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 578.971849][T27323] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 578.996931][T27323] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 579.035709][T27323] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 579.047633][T27323] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 579.075152][T27323] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 579.093669][T27323] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 579.117788][T27323] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 579.142287][T27323] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 579.157600][T27323] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 579.180230][T27323] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 579.184820][T27330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.307668][T27330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.113345][T27348] loop8: detected capacity change from 0 to 1024 [ 580.249815][T27350] loop3: detected capacity change from 0 to 512 [ 580.270035][T27350] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 580.445520][T27350] EXT4-fs (loop3): 1 truncate cleaned up [ 580.481052][T27354] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 580.504036][T27361] loop4: detected capacity change from 0 to 128 [ 581.197811][T27377] FAULT_INJECTION: forcing a failure. [ 581.197811][T27377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.210974][T27377] CPU: 0 UID: 0 PID: 27377 Comm: syz.3.8232 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 581.211016][T27377] Tainted: [W]=WARN [ 581.211025][T27377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 581.211042][T27377] Call Trace: [ 581.211051][T27377] [ 581.211062][T27377] __dump_stack+0x1d/0x30 [ 581.211111][T27377] dump_stack_lvl+0xe8/0x140 [ 581.211131][T27377] dump_stack+0x15/0x1b [ 581.211189][T27377] should_fail_ex+0x265/0x280 [ 581.211261][T27377] should_fail+0xb/0x20 [ 581.211313][T27377] should_fail_usercopy+0x1a/0x20 [ 581.211336][T27377] strncpy_from_user+0x25/0x230 [ 581.211372][T27377] ? kmem_cache_alloc_noprof+0x242/0x480 [ 581.211406][T27377] ? getname_flags+0x80/0x3b0 [ 581.211587][T27377] getname_flags+0xae/0x3b0 [ 581.211618][T27377] do_sys_openat2+0x60/0x110 [ 581.211639][T27377] __x64_sys_openat+0xf2/0x120 [ 581.211662][T27377] x64_sys_call+0x2eab/0x3000 [ 581.211704][T27377] do_syscall_64+0xd2/0x200 [ 581.211732][T27377] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 581.211774][T27377] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 581.211822][T27377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.211852][T27377] RIP: 0033:0x7f1b95aff6c9 [ 581.211872][T27377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.211896][T27377] RSP: 002b:00007f1b94567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 581.211916][T27377] RAX: ffffffffffffffda RBX: 00007f1b95d55fa0 RCX: 00007f1b95aff6c9 [ 581.211972][T27377] RDX: 0000000000084040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 581.211988][T27377] RBP: 00007f1b94567090 R08: 0000000000000000 R09: 0000000000000000 [ 581.212005][T27377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.212017][T27377] R13: 00007f1b95d56038 R14: 00007f1b95d55fa0 R15: 00007fff1e84c0e8 [ 581.212056][T27377] [ 581.439917][T27380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.448490][T27380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.565386][T27387] loop9: detected capacity change from 0 to 1024 [ 582.126007][T27385] __nla_validate_parse: 4 callbacks suppressed [ 582.126027][T27385] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8236'. [ 582.150328][T27400] loop9: detected capacity change from 0 to 512 [ 582.158471][T27400] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 582.280255][T27400] EXT4-fs (loop9): 1 truncate cleaned up [ 582.301739][T27406] netlink: 'syz.3.8241': attribute type 13 has an invalid length. [ 582.371730][T27409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8243'. [ 582.394165][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 582.394183][ T29] audit: type=1400 audit(2000000234.270:24287): avc: denied { create } for pid=27407 comm="syz.4.8242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 582.437669][T27409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8243'. [ 582.473806][ T29] audit: type=1400 audit(2000000234.300:24288): avc: denied { bind } for pid=27407 comm="syz.4.8242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 582.493302][ T29] audit: type=1400 audit(2000000234.310:24289): avc: denied { write } for pid=27407 comm="syz.4.8242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 582.512866][ T29] audit: type=1400 audit(2000000234.310:24290): avc: denied { setopt } for pid=27408 comm="syz.3.8243" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 582.560870][T27421] loop9: detected capacity change from 0 to 128 [ 582.572498][ T29] audit: type=1400 audit(2000000234.430:24291): avc: denied { create } for pid=27417 comm="syz.0.8245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 582.592234][ T29] audit: type=1400 audit(2000000234.430:24292): avc: denied { setopt } for pid=27417 comm="syz.0.8245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 582.611909][ T29] audit: type=1400 audit(2000000234.430:24293): avc: denied { watch watch_reads } for pid=27417 comm="syz.0.8245" path="/584" dev="tmpfs" ino=3131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 582.635129][ T29] audit: type=1400 audit(2000000234.430:24294): avc: denied { tracepoint } for pid=27417 comm="syz.0.8245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 582.655215][ T29] audit: type=1400 audit(2000000234.430:24295): avc: denied { create } for pid=27417 comm="syz.0.8245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 582.675135][ T29] audit: type=1400 audit(2000000234.430:24296): avc: denied { setopt } for pid=27417 comm="syz.0.8245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 582.747755][T27433] loop3: detected capacity change from 0 to 2048 [ 582.774639][T27424] FAULT_INJECTION: forcing a failure. [ 582.774639][T27424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.787905][T27424] CPU: 1 UID: 0 PID: 27424 Comm: syz.8.8246 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 582.787990][T27424] Tainted: [W]=WARN [ 582.787999][T27424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 582.788015][T27424] Call Trace: [ 582.788021][T27424] [ 582.788106][T27424] __dump_stack+0x1d/0x30 [ 582.788135][T27424] dump_stack_lvl+0xe8/0x140 [ 582.788155][T27424] dump_stack+0x15/0x1b [ 582.788182][T27424] should_fail_ex+0x265/0x280 [ 582.788224][T27424] should_fail+0xb/0x20 [ 582.788264][T27424] should_fail_usercopy+0x1a/0x20 [ 582.788291][T27424] copy_fpstate_to_sigframe+0x628/0x7d0 [ 582.788426][T27424] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 582.788511][T27424] ? x86_task_fpu+0x36/0x60 [ 582.788548][T27424] get_sigframe+0x34d/0x490 [ 582.788573][T27424] ? get_signal+0xdc7/0xf70 [ 582.788604][T27424] x64_setup_rt_frame+0xa8/0x580 [ 582.788634][T27424] arch_do_signal_or_restart+0x23e/0x440 [ 582.788719][T27424] exit_to_user_mode_loop+0x77/0x110 [ 582.788819][T27424] do_syscall_64+0x1d6/0x200 [ 582.788841][T27424] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 582.788874][T27424] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 582.788915][T27424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.789022][T27424] RIP: 0033:0x7f944858f6c7 [ 582.789041][T27424] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 582.789074][T27424] RSP: 002b:00007f9446fef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 582.789142][T27424] RAX: 000000000000002f RBX: 00007f94487e5fa0 RCX: 00007f944858f6c9 [ 582.789158][T27424] RDX: 0000000000000100 RSI: 0000200000000040 RDI: 0000000000000007 [ 582.789174][T27424] RBP: 00007f9446fef090 R08: 0000000000000000 R09: 0000000000000000 [ 582.789189][T27424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.789205][T27424] R13: 00007f94487e6038 R14: 00007f94487e5fa0 R15: 00007ffcfd5395d8 [ 582.789229][T27424] [ 582.797088][T27433] loop3: p1 < > p3 p4 [ 583.003203][T27433] loop3: p3 start 458752 is beyond EOD, truncated [ 583.009865][T27433] loop3: p4 start 268435456 is beyond EOD, truncated [ 583.023839][T27433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8251'. [ 583.032810][T27433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8251'. [ 583.059017][T27433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8251'. [ 583.115375][T27448] netlink: 'syz.8.8254': attribute type 13 has an invalid length. [ 583.361562][T27464] loop8: detected capacity change from 0 to 1024 [ 583.955036][T27479] loop9: detected capacity change from 0 to 2048 [ 583.961718][T27477] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 583.998775][T27479] loop9: p1 < > p3 p4 [ 584.003505][T27479] loop9: p3 start 458752 is beyond EOD, truncated [ 584.009986][T27479] loop9: p4 start 268435456 is beyond EOD, truncated [ 584.022832][T27479] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8265'. [ 584.031871][T27479] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8265'. [ 584.061637][T27479] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8265'. [ 584.198916][T27486] loop4: detected capacity change from 0 to 2048 [ 584.210804][T27494] netlink: 'syz.3.8269': attribute type 13 has an invalid length. [ 584.269080][T27486] Alternate GPT is invalid, using primary GPT. [ 584.275473][T27486] loop4: p1 p2 p3 [ 584.279242][T27486] loop4: partition table partially beyond EOD, truncated [ 584.363372][T27500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.397550][T27500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.495036][T27509] loop4: detected capacity change from 0 to 2048 [ 584.538016][T27509] loop4: p1 < > p3 p4 [ 584.591011][T27509] loop4: p3 start 458752 is beyond EOD, truncated [ 584.597519][T27509] loop4: p4 start 268435456 is beyond EOD, truncated [ 584.623765][T27509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8277'. [ 584.684291][T27520] netlink: 'syz.9.8282': attribute type 13 has an invalid length. [ 584.737069][T27524] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.8284' sets config #0 [ 584.752673][T27524] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.8284' sets config #1 [ 584.777045][T27526] loop4: detected capacity change from 0 to 512 [ 584.789021][T27526] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 584.820119][T27526] ext4 filesystem being mounted at /331/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 584.878728][T27535] veth0_vlan: entered allmulticast mode [ 585.123259][T27547] loop8: detected capacity change from 0 to 512 [ 585.549126][T27553] loop3: detected capacity change from 0 to 2048 [ 585.618004][T27553] loop3: p1 < > p3 p4 [ 585.652476][T27530] veth0_vlan: left allmulticast mode [ 585.709811][T27553] loop3: p3 start 458752 is beyond EOD, truncated [ 585.716325][T27553] loop3: p4 start 268435456 is beyond EOD, truncated [ 585.865827][T27561] loop4: detected capacity change from 0 to 128 [ 585.899702][T27563] loop3: detected capacity change from 0 to 512 [ 585.926269][T27563] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 585.958445][T27563] EXT4-fs (loop3): 1 truncate cleaned up [ 586.072281][ T3680] Bluetooth: hci0: Frame reassembly failed (-84) [ 586.093602][T19362] IPVS: starting estimator thread 0... [ 586.108148][T27596] netlink: 'syz.3.8310': attribute type 13 has an invalid length. [ 586.117058][T27595] loop8: detected capacity change from 0 to 512 [ 586.187735][T27591] IPVS: using max 2352 ests per chain, 117600 per kthread [ 586.437417][T27613] loop9: detected capacity change from 0 to 512 [ 586.444974][T27613] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 586.458714][T27613] EXT4-fs (loop9): 1 truncate cleaned up [ 586.485845][T27618] IPVS: Error connecting to the multicast addr [ 586.520434][T27624] netlink: 'syz.3.8322': attribute type 13 has an invalid length. [ 586.692880][T27639] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.8327' sets config #0 [ 586.723972][T27639] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.8327' sets config #1 [ 586.793259][T27651] loop4: detected capacity change from 0 to 512 [ 586.818906][T27651] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 586.893015][T27651] EXT4-fs (loop4): 1 truncate cleaned up [ 587.044177][T27671] netlink: 'syz.9.8334': attribute type 13 has an invalid length. [ 587.044324][T27641] ================================================================== [ 587.060194][T27641] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 587.066811][T27641] [ 587.069145][T27641] write to 0xffffffff86876620 of 8 bytes by task 27671 on cpu 1: [ 587.077058][T27641] data_alloc+0x280/0x2e0 [ 587.081405][T27641] prb_reserve+0x807/0xaf0 [ 587.085843][T27641] vprintk_store+0x56d/0x860 [ 587.090450][T27641] vprintk_emit+0x10d/0x580 [ 587.094963][T27641] vprintk_default+0x26/0x30 [ 587.099564][T27641] vprintk+0x1d/0x30 [ 587.103496][T27641] _printk+0x79/0xa0 [ 587.107409][T27641] __nla_validate_parse+0x1227/0x1d00 [ 587.112802][T27641] __nla_parse+0x40/0x60 [ 587.117054][T27641] rtnl_newlink+0xf1/0x12d0 [ 587.121579][T27641] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 587.126818][T27641] netlink_rcv_skb+0x123/0x220 [ 587.131627][T27641] rtnetlink_rcv+0x1c/0x30 [ 587.136073][T27641] netlink_unicast+0x5c0/0x690 [ 587.140913][T27641] netlink_sendmsg+0x58b/0x6b0 [ 587.145698][T27641] __sock_sendmsg+0x145/0x180 [ 587.150393][T27641] ____sys_sendmsg+0x31e/0x4e0 [ 587.155162][T27641] ___sys_sendmsg+0x17b/0x1d0 [ 587.159870][T27641] __x64_sys_sendmsg+0xd4/0x160 [ 587.164738][T27641] x64_sys_call+0x191e/0x3000 [ 587.169437][T27641] do_syscall_64+0xd2/0x200 [ 587.173965][T27641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.179870][T27641] [ 587.182196][T27641] read to 0xffffffff86876620 of 8 bytes by task 27641 on cpu 0: [ 587.189833][T27641] prb_reserve+0x220/0xaf0 [ 587.194257][T27641] vprintk_store+0x56d/0x860 [ 587.198854][T27641] vprintk_emit+0x10d/0x580 [ 587.203371][T27641] vprintk_default+0x26/0x30 [ 587.207975][T27641] vprintk+0x1d/0x30 [ 587.211892][T27641] _printk+0x79/0xa0 [ 587.216503][T27641] set_capacity_and_notify+0x14c/0x1f0 [ 587.222267][T27641] loop_set_size+0x2e/0x70 [ 587.226715][T27641] loop_configure+0x828/0x9c0 [ 587.231501][T27641] lo_ioctl+0x1e1/0x12b0 [ 587.235762][T27641] blkdev_ioctl+0x356/0x440 [ 587.240309][T27641] __se_sys_ioctl+0xce/0x140 [ 587.244924][T27641] __x64_sys_ioctl+0x43/0x50 [ 587.249526][T27641] x64_sys_call+0x1816/0x3000 [ 587.254309][T27641] do_syscall_64+0xd2/0x200 [ 587.258830][T27641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.264747][T27641] [ 587.267073][T27641] value changed: 0x00000000000b61c8 -> 0x0000000000165970 [ 587.274187][T27641] [ 587.276512][T27641] Reported by Kernel Concurrency Sanitizer on: [ 587.282673][T27641] CPU: 0 UID: 0 PID: 27641 Comm: syz.3.8328 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 587.294149][T27641] Tainted: [W]=WARN [ 587.297960][T27641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 587.308020][T27641] ================================================================== [ 587.044190][T27641] loop3: detected capacity change from 0 to 512 [ 587.358965][T27641] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.8328: bad orphan inode 11862016 [ 587.370716][T27641] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.117566][ T6962] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 588.117608][ T7315] Bluetooth: hci0: command 0x1003 tx timeout