last executing test programs: 1m50.838053625s ago: executing program 0 (id=488): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=0x0, @ANYRES8=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x729c16dc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='kvm_halt_poll_ns\x00', r1, 0x0, 0xd20}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000000c0)=0x10089, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000006680)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r1, @ANYBLOB="48442033bec21408929f64e95aef9b2fc7a3648c3f7728790b52b215b3930a86ec31f88fd3483caf9a74ee564f137346386eae6cee24489deaf26f5439df31fc9e84822e71a022eab01e601c84d30a15650ddeff62e48115c8fdd6aa8418eefc58c9e0530ab533fff6d03937eb1702fe2409765c2dd2c37ca10ecd394966742ee92245a6f4160c35a9e121de9ce2ba605d3a0bf1c9c786f728af045584d1d00dbc051fdd4036d598d2997a70edf9096d5e64bb42"], 0x48) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095", @ANYRES64=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x13, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xa}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x44}}, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m49.683295756s ago: executing program 0 (id=506): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000900000000000000030000008500000028000000850000000e00000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed36adbe9abc89b6f5bec", 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xb8, 0x6, 0x7ffc1ffb}]}) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x2, 0x15, 0x4, 0x20, 0x80, 0x3, 0xd, 0x3, 0x2, 0x31, 0xa2, 0xa, 0x10, 0x84}, 0xe) sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="bae4e6c90e2c2528899c4dafaadec1", 0xf}, {&(0x7f0000000380)="863df713b27092133340e45590eac45df1f0a54f338c8d702066c10522ae8700000000", 0x23}, {&(0x7f0000000900)="5e9a96da6c96c227926d725c264c8db1743e2a714194d97fd4a96b32f3a0cc57ff3d188ab8257403ab87aac73eb1db3cffb4c9b525154c45716736588985037d", 0x40}, {&(0x7f0000001000)="5e48212599327704ccc5ca940f85ce93d081835a8f8ce527ba414eeb2fac35952374361fa3fe455eae90ef6636e089eeae608c4bb2a0cae5f3d8ebe5294f272023815eacab65c0a92cd792cae6645dcef01758183b1dab679fc8bccc9b2a7c95efda137f6f80e4159ff6295a35f2516454afb609ce2bc852ece0d2234e63a4cfcceb2f628f6425b0b5dd6ba4c20e250c72f658b059079271c6f206a758e87784fd6256d1ee6cd55ea723631572ba4729109fa114f7240bb6776054d1fa9b5c31", 0xc0}], 0x4}}], 0x1, 0x4004) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m48.743590876s ago: executing program 0 (id=523): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001440)=""/126, 0x7e, 0x10000000041) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000002600)=""/4096, 0x1000}], 0x1, 0x3, 0x105e77b0) 1m48.684914861s ago: executing program 0 (id=526): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) pwrite64(r2, &(0x7f0000000080)="cc", 0x1, 0x200980) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000e40)={'erspan0\x00', &(0x7f0000000d00)={'syztnl2\x00', r5, 0x8, 0x700, 0x1ff, 0x0, {{0x40, 0x4, 0x0, 0x2d, 0x100, 0x68, 0x0, 0x5, 0x3b, 0x0, @rand_addr=0x64010102, @remote, {[@generic={0x94, 0x7, "d63e9fce92"}, @rr={0x7, 0xb, 0x7, [@empty, @broadcast]}, @generic={0x83, 0x8, "f99e95787d9a"}, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x1, 0xc, "85b0028f875f20055f13"}, {0x0, 0x10, "61f23a30cea3b979386d63f153dd"}, {0x0, 0xc, "35ec795964d68cd5f943"}]}, @ssrr={0x89, 0x13, 0x29, [@rand_addr=0x64010102, @private=0xa010101, @loopback, @local]}, @cipso={0x86, 0x5e, 0x2, [{0x7, 0xf, "8e0ce77b74906f8d2f41154981"}, {0x2, 0x9, "68ae86bf8dbbbe"}, {0x7, 0x12, "46dc3d1ab6e98f777ed4159c54894fb3"}, {0x0, 0xc, "00b0b11446440572a4d0"}, {0x6, 0x2}, {0x0, 0x2}, {0x5, 0x11, "e10c5916593f4c3b86f4a1cf214fd1"}, {0x6, 0x4, "4be4"}, {0x5, 0x9, "8258e620704b16"}]}, @lsrr={0x83, 0xf, 0xe8, [@dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0x64010100, @loopback]}, @timestamp_addr={0x44, 0x24, 0xba, 0x1, 0x5, [{@rand_addr=0x64010100, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff}, {@loopback, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fffffff}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000e80)=0x0, &(0x7f0000000ec0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001080)={'ip6_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', r5, 0x2f, 0x0, 0x6, 0xe000000, 0x10, @private1, @private1, 0x0, 0x40, 0x9, 0x2}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001940)={&(0x7f00000010c0)={0x874, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x9, 0x4, 0x2, 0x1}, {0x0, 0x9b, 0x40, 0x704}, {0x4, 0x6, 0x88, 0x8}, {0x0, 0x3, 0x8, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6c}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xbec}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x14000000}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x94fb, 0xff, 0x6, 0x10000}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4e1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa2}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r8}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9cb}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x874}, 0x1, 0x0, 0x0, 0x44004}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r5, 0x25, 0x0, @void}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x12, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x6, 0x1, 0x0, r3}, @alu={0x4, 0x0, 0x9, 0x3, 0x5, 0x10, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a40)='GPL\x00', 0xfffffffc, 0x4c, &(0x7f0000000a80)=""/76, 0x40f00, 0x10, '\x00', r5, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x1, 0x0, 0xb, 0x7f}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000b40)=[r2], &(0x7f0000000b80)=[{0x2, 0x4, 0x2, 0x3}, {0x5, 0x4, 0x2}, {0x3, 0x1, 0xb}, {0x4, 0x5, 0xe, 0x7}], 0x10, 0x53c8}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000c80)='sys_enter\x00', r9}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000140)=ANY=[@ANYBLOB=',seclabel']) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m48.019283985s ago: executing program 0 (id=538): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'lo\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r2}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140), r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, 0x0, 0x40006) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x700, 0x7800, 0x7, 0x5, {{0x1a, 0x4, 0x1, 0x9, 0x68, 0x64, 0x0, 0xd, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@lsrr={0x83, 0x13, 0xee, [@remote, @multicast1, @loopback, @local]}, @rr={0x7, 0x7, 0x97, [@remote]}, @end, @lsrr={0x83, 0x7, 0xf, [@rand_addr=0x64010101]}, @ra={0x94, 0x4}, @cipso={0x86, 0x2d, 0x1, [{0x6, 0xe, "b981e1144a3406e8bb4d3a96"}, {0x0, 0x9, "a99164d005aeb1"}, {0x5, 0xd, "7057d1f49221cb1ade7950"}, {0x1, 0x3, "d6"}]}]}}}}}) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x58) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r7, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x81, 0x1, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x7800, 0x101, 0x55b5c3b6}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20ffff2dae9aefa19e4c0000", @ANYRES16=r9, @ANYBLOB="010029bd7000000000001b0000000c00018008000100", @ANYRES32=r10, @ANYBLOB], 0x20}}, 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f0000000000), 0x10) 1m47.96490884s ago: executing program 0 (id=541): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x0, &(0x7f00000000c0)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000002280)="ed", 0x1}], 0x1}, 0x0) recvmmsg(r3, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000340)=""/72, 0x48}}], 0x1, 0x40012000, 0x0) 1m47.926035654s ago: executing program 32 (id=541): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x0, &(0x7f00000000c0)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000002280)="ed", 0x1}], 0x1}, 0x0) recvmmsg(r3, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000340)=""/72, 0x48}}], 0x1, 0x40012000, 0x0) 1m7.503556975s ago: executing program 3 (id=1212): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8b332ebd700000000000150000000c009900040000003a00000004001d"], 0x38}}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000180)={0x17c04, r4, 0x84, 0x75ea, 0x800004}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000880)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYRESDEC=r5, @ANYRESDEC=r6], 0x27) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r7, 0x0, 0x0) write$P9_RRENAMEAT(r4, &(0x7f0000000400)={0x7, 0x4b, 0x1}, 0x7) syz_emit_ethernet(0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604dc58c00200600fe80000000000000000000000000001afe8000000000000000000000000000aafffe4001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="2b2a76e400000000000a0000003d010000000193"], 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x49}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x9}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={&(0x7f00000004c0)="172fb047d67d23e1a14236edb67fcf90a1985ef3f5e1e33defd47deafebf14b9a7ef79948ee800eb114bbe72be2d06bf3e71408fa6ffa20501635d17fd1b", &(0x7f0000000540)=""/32, &(0x7f0000001c00), &(0x7f00000006c0)="587063c8eef091589489dfdec72956c50a56e80a531bb472febffb69d391a7bd03bdd12d6855cb10f97adcc87557ec755b9d0eefd992b36f9b941f29ce9714b04c6c7a047bbf81b138bcaa190e68174f6a8d34938965512a72efa759652d69c8814eb7f01efa7eb33f421e91af905a02c9b114d35b039ae7db1779f9737af6bfa7c3bbb1aaf6c8f410b724b46d0e59661d90a8fe8a6c98279cc6f83c9a64b0e43b03a0186c26325f8ff5cf6031e17c7cf9187aca0def2e30520073fa65b2", 0x7fffffff, r4, 0x4}, 0x38) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a30000000000900030073797a32000000"], 0x78}}, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) 1m7.311632474s ago: executing program 3 (id=1220): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01c21668f6d1d66edb251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m7.207080773s ago: executing program 3 (id=1223): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 1m7.13553492s ago: executing program 3 (id=1224): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x4010) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004055) io_uring_setup(0x1b7a, &(0x7f0000000040)={0x0, 0xfa04, 0x1f480, 0x0, 0x25}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x20}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x55) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRESOCT, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") r1 = creat(&(0x7f0000000100)='./bus\x00', 0x8) fallocate(r1, 0x0, 0x0, 0x1000f4) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file1\x00', &(0x7f0000000440), 0x105cc68, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x4, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1458f421", @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xde6c802f551bc066) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x26, 0x0, 0xffffffffffffff79) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14004000020101030000000000000000070000097a624529307a9fefa8280fbf80515f2c50ef3328495f26dbe945a9425f8531bfed48a7c0cd4127e97a32524c6ce2d6561f3ce1d4c7a093db547a22f4595046a8bc2e6e46b750bfff5cbc5cc443a9b0f02a23891040834db416ee02ef2cd22e3cd2e7413df499f605c1dbf14d0dd96cd5d43bd3308ac7f7b8579c5efde2c4ba8d74a6f2bb62e41aa989f09e1d31bedbc673443f59c699212f83c5ca69fd"], 0x14}, 0x1, 0x0, 0x0, 0x440c0}, 0x10) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x7, 0x6, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffbffffff, 0xffffffffffffffff, 0xa) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r7, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r7, 0x2, &(0x7f0000000740)={0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f00000001c0), 0x4) 1m7.094500215s ago: executing program 3 (id=1226): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@deltaction={0x24, 0x31, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x894) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f00000000000300"], 0x78}}, 0x0) 1m6.862681667s ago: executing program 3 (id=1236): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 1m6.812635481s ago: executing program 33 (id=1236): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 27.66576577s ago: executing program 2 (id=1907): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000010140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01001000000000000000100000"], 0x58}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x10) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x68, 0x24, 0xf0b, 0xc0000, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x3fb, 0x568a77ad, 0x1}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x3, 0x9, 0xffffffd8, 0x2, 0x7, 0x7}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) 27.587190808s ago: executing program 2 (id=1909): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast1, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x32}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7}, {0xa, 0xfffffffffffffffc, 0x0, 0x40000000001}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x2, @in=@rand_addr=0x400, 0x3506, 0x3}}, 0xe4) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff00403a80fc020000000000000000060000000000ff0200a000ea3da62b3c2f36f2000001020090780000000000000000000011002000000000000000000000000000000000000000ffffe000000117c1ff07000000000000e55800000000"], 0x0) socket$kcm(0x10, 0x2, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0xfffffffffffffff2) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) socket(0x10, 0x80002, 0x0) socket$phonet(0x23, 0x2, 0x1) r3 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7730, 0x80, 0x0, 0x34d}, &(0x7f0000000480)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000440)='.\x00', 0x20000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 27.383820117s ago: executing program 2 (id=1912): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@abort}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) pwritev2(r1, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) 27.077069327s ago: executing program 2 (id=1916): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x2, 0x7fff0000}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2c}}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}, {@noload}]}, 0x3, 0x45c, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 26.94192689s ago: executing program 2 (id=1919): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @dev, 0x0}, &(0x7f0000000100)=0xc) bind$packet(r2, &(0x7f0000000140)={0x11, 0x8, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x878, 0x24, 0xf0b, 0x70bd2b, 0x800000, {0x0, 0x0, 0x12, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x84c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1cb38e6a672a3800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x58, 0x2, 0x47e5, 0xdfb, 0x9, 0xbcc59400}, {0x7, 0x2, 0x7f, 0x2, 0x1, 0xc}, 0x9, 0x9c7, 0x125b}}, @TCA_TBF_PTAB={0x404, 0x3, [0x80000001, 0x400, 0x8, 0x5, 0x5, 0x24, 0xfffffff9, 0x9, 0x7, 0x8, 0x200, 0x9, 0x6, 0x950d, 0x200000, 0x40, 0xfffff38f, 0x4, 0x9, 0xf2, 0x4ba1598d, 0x2, 0x10001, 0x2, 0x4, 0x7, 0x4, 0xfffffff7, 0x81, 0x3, 0x1, 0x7, 0xfff, 0x3af, 0xffff00, 0x9, 0x5, 0x9, 0x20, 0x3, 0x6, 0x1000, 0xb, 0x74968000, 0x97, 0xfffffff9, 0x0, 0x1, 0x9, 0x5, 0x1cb11a64, 0x40, 0xff, 0x4, 0x5, 0x40000000, 0x8, 0x0, 0x0, 0x7, 0x7, 0x2, 0x7d43, 0x764, 0x3, 0xffffffff, 0x1000, 0x4a89, 0x8, 0x5, 0xef62, 0x981, 0xa, 0x49aef084, 0x6, 0x10000, 0x7, 0x2186, 0x81, 0x5, 0x9, 0x6, 0x7, 0x9, 0xc95, 0x3, 0x5, 0x280, 0x0, 0x1, 0x9, 0x0, 0x6, 0x2a5cd826, 0x0, 0x8001, 0x40, 0xfffffff7, 0x9, 0xd1f7, 0x7, 0x5, 0xf91, 0x100, 0xcf, 0x1, 0x9, 0x0, 0x40, 0xd, 0x4, 0x3ff, 0x4, 0xffffffff, 0x725, 0x6, 0x4, 0x5, 0x5, 0x0, 0x0, 0x1ff, 0xffffffff, 0xe97c, 0xbad, 0x8, 0x7, 0x101, 0x10, 0x8, 0x5, 0x1, 0xfffffffe, 0x4, 0x8, 0x80000000, 0x2, 0x1, 0x0, 0x9, 0x0, 0x99, 0xa5, 0x6, 0x6, 0xffffff52, 0xffffffff, 0x3ff, 0x10000, 0x7, 0xe36, 0x7, 0x4, 0x3, 0x8001, 0x1, 0x9, 0x81, 0x3, 0x1, 0x4, 0x1fdd, 0x3, 0x7, 0xc7b7, 0x6, 0x203, 0x5, 0x0, 0x5, 0x8, 0x2, 0x0, 0xd, 0x20fac558, 0x3, 0x1, 0x5, 0x4, 0x2, 0xc, 0xf0, 0x5, 0x3, 0xff5, 0x8000, 0x3, 0xfffffff2, 0x7f, 0x800, 0x231000, 0x1, 0x4, 0x4, 0xe, 0x729e, 0x1, 0x5, 0x6, 0x7, 0x6, 0x9, 0x3, 0x6, 0x2, 0x3, 0x81, 0x7, 0xfffffff9, 0x4, 0x8, 0xd, 0xa, 0x4, 0x4, 0x100, 0x9, 0xff, 0x3ff, 0x401, 0xaa, 0x68b, 0xae, 0x6, 0xa, 0xf, 0x2, 0x0, 0x4, 0x3a8b, 0x3, 0x1, 0xdda3, 0xc9b, 0x3ff, 0xfffffffe, 0xf, 0x23ca, 0x0, 0xfffffffd, 0x649b, 0xce, 0xda, 0x5, 0x4, 0x1, 0x2, 0x10000, 0x9c, 0x80, 0x0, 0x5, 0x7, 0x4, 0x1]}, @TCA_TBF_PRATE64={0xc, 0x5, 0x676d0fc71d003c32}, @TCA_TBF_RTAB={0x404, 0x2, [0xac, 0x80, 0x7, 0x0, 0xfffffaa0, 0x4, 0x4, 0xf31, 0x5, 0x3, 0x3, 0x18d8, 0x1d5a, 0xe2, 0x3, 0xb, 0x4, 0x7, 0x2, 0x8, 0xe, 0x10001, 0xb, 0x1, 0x8, 0x3, 0x1000, 0x8, 0xec0, 0x7ff, 0x1, 0x6, 0x6, 0x10001, 0x80000000, 0xffff0001, 0x9, 0x2d, 0x20000, 0x10001, 0x4, 0x101, 0x1000, 0x0, 0x9, 0x3, 0xfff, 0xfffffffc, 0x1, 0x1, 0x7, 0x6, 0x6, 0x3, 0x0, 0x3d8a, 0x7, 0x934, 0xffff, 0x2, 0x83e, 0xfff, 0x8, 0x5, 0x0, 0x7f5, 0x9, 0x6, 0x626, 0x9, 0x3fffc0, 0x1, 0x3, 0xd, 0x100, 0x4e1, 0xfffffffb, 0x1000, 0x84, 0xf472, 0x6, 0x7, 0x9, 0x7fff, 0x7, 0xfff, 0x8, 0xfffff801, 0x0, 0x5b3d, 0x2, 0x49a3, 0x9, 0x10001, 0x6, 0x8ef, 0x6, 0x5, 0x1, 0x7, 0xffff, 0x56c, 0x7, 0x6, 0x51, 0xff, 0x7, 0x800, 0x1000, 0x5, 0x2, 0x7, 0x5, 0xcae, 0x0, 0x101, 0x81, 0x7fffffff, 0x1, 0x0, 0x6, 0x2, 0x3, 0x20, 0x81, 0x2, 0x64, 0x3, 0x2, 0x3, 0xfffffffd, 0x4, 0x10, 0x3, 0x2, 0x100, 0x7, 0x0, 0x9, 0x10000, 0x6d8f, 0x6, 0x401, 0x9, 0x5, 0x0, 0x908f, 0x6ae5304c, 0x80, 0x8, 0x8, 0xfffffff7, 0x401, 0x800, 0x5, 0x1000, 0x70, 0x5, 0x5, 0x10, 0x5, 0x66, 0xfffffffe, 0x4, 0x9, 0x41a, 0x8, 0xa, 0x8000, 0x58f, 0xa, 0xfffffeff, 0x6, 0xc, 0x4, 0x80000001, 0x7, 0x4, 0x9, 0x5, 0x8, 0xffffffc0, 0x80, 0x7, 0x7, 0xa0b, 0x2, 0x1, 0xfba0, 0x6, 0xf, 0xd3, 0x8, 0x6fca, 0x4, 0x7, 0x9, 0x593, 0x5, 0x2b74591d, 0x6, 0x34c6, 0x6, 0x100, 0xbb43, 0x1, 0x0, 0x401, 0x5, 0x8e2, 0x7fff, 0x6, 0x5, 0x7, 0x7, 0x56d2, 0x61, 0xb, 0x10001, 0x6, 0x4, 0x1ff, 0x6, 0x7, 0x8, 0xfffff39c, 0x5027, 0xe, 0x8, 0x40, 0x900000, 0x1af, 0x7, 0x3, 0x1, 0x8, 0xfd, 0x8, 0x1, 0xb8, 0x40, 0xe21b, 0x3c0d, 0x1000, 0x3800000, 0x1963, 0xe, 0x0, 0xc, 0x1, 0x96b, 0xfffffff8, 0x3, 0xfffffffc, 0xfffffff9, 0x2]}]}}]}, 0x878}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) (async) socket$inet(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @dev}, &(0x7f0000000100)=0xc) (async) bind$packet(r2, &(0x7f0000000140)={0x11, 0x8, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x878, 0x24, 0xf0b, 0x70bd2b, 0x800000, {0x0, 0x0, 0x12, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x84c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1cb38e6a672a3800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x58, 0x2, 0x47e5, 0xdfb, 0x9, 0xbcc59400}, {0x7, 0x2, 0x7f, 0x2, 0x1, 0xc}, 0x9, 0x9c7, 0x125b}}, @TCA_TBF_PTAB={0x404, 0x3, [0x80000001, 0x400, 0x8, 0x5, 0x5, 0x24, 0xfffffff9, 0x9, 0x7, 0x8, 0x200, 0x9, 0x6, 0x950d, 0x200000, 0x40, 0xfffff38f, 0x4, 0x9, 0xf2, 0x4ba1598d, 0x2, 0x10001, 0x2, 0x4, 0x7, 0x4, 0xfffffff7, 0x81, 0x3, 0x1, 0x7, 0xfff, 0x3af, 0xffff00, 0x9, 0x5, 0x9, 0x20, 0x3, 0x6, 0x1000, 0xb, 0x74968000, 0x97, 0xfffffff9, 0x0, 0x1, 0x9, 0x5, 0x1cb11a64, 0x40, 0xff, 0x4, 0x5, 0x40000000, 0x8, 0x0, 0x0, 0x7, 0x7, 0x2, 0x7d43, 0x764, 0x3, 0xffffffff, 0x1000, 0x4a89, 0x8, 0x5, 0xef62, 0x981, 0xa, 0x49aef084, 0x6, 0x10000, 0x7, 0x2186, 0x81, 0x5, 0x9, 0x6, 0x7, 0x9, 0xc95, 0x3, 0x5, 0x280, 0x0, 0x1, 0x9, 0x0, 0x6, 0x2a5cd826, 0x0, 0x8001, 0x40, 0xfffffff7, 0x9, 0xd1f7, 0x7, 0x5, 0xf91, 0x100, 0xcf, 0x1, 0x9, 0x0, 0x40, 0xd, 0x4, 0x3ff, 0x4, 0xffffffff, 0x725, 0x6, 0x4, 0x5, 0x5, 0x0, 0x0, 0x1ff, 0xffffffff, 0xe97c, 0xbad, 0x8, 0x7, 0x101, 0x10, 0x8, 0x5, 0x1, 0xfffffffe, 0x4, 0x8, 0x80000000, 0x2, 0x1, 0x0, 0x9, 0x0, 0x99, 0xa5, 0x6, 0x6, 0xffffff52, 0xffffffff, 0x3ff, 0x10000, 0x7, 0xe36, 0x7, 0x4, 0x3, 0x8001, 0x1, 0x9, 0x81, 0x3, 0x1, 0x4, 0x1fdd, 0x3, 0x7, 0xc7b7, 0x6, 0x203, 0x5, 0x0, 0x5, 0x8, 0x2, 0x0, 0xd, 0x20fac558, 0x3, 0x1, 0x5, 0x4, 0x2, 0xc, 0xf0, 0x5, 0x3, 0xff5, 0x8000, 0x3, 0xfffffff2, 0x7f, 0x800, 0x231000, 0x1, 0x4, 0x4, 0xe, 0x729e, 0x1, 0x5, 0x6, 0x7, 0x6, 0x9, 0x3, 0x6, 0x2, 0x3, 0x81, 0x7, 0xfffffff9, 0x4, 0x8, 0xd, 0xa, 0x4, 0x4, 0x100, 0x9, 0xff, 0x3ff, 0x401, 0xaa, 0x68b, 0xae, 0x6, 0xa, 0xf, 0x2, 0x0, 0x4, 0x3a8b, 0x3, 0x1, 0xdda3, 0xc9b, 0x3ff, 0xfffffffe, 0xf, 0x23ca, 0x0, 0xfffffffd, 0x649b, 0xce, 0xda, 0x5, 0x4, 0x1, 0x2, 0x10000, 0x9c, 0x80, 0x0, 0x5, 0x7, 0x4, 0x1]}, @TCA_TBF_PRATE64={0xc, 0x5, 0x676d0fc71d003c32}, @TCA_TBF_RTAB={0x404, 0x2, [0xac, 0x80, 0x7, 0x0, 0xfffffaa0, 0x4, 0x4, 0xf31, 0x5, 0x3, 0x3, 0x18d8, 0x1d5a, 0xe2, 0x3, 0xb, 0x4, 0x7, 0x2, 0x8, 0xe, 0x10001, 0xb, 0x1, 0x8, 0x3, 0x1000, 0x8, 0xec0, 0x7ff, 0x1, 0x6, 0x6, 0x10001, 0x80000000, 0xffff0001, 0x9, 0x2d, 0x20000, 0x10001, 0x4, 0x101, 0x1000, 0x0, 0x9, 0x3, 0xfff, 0xfffffffc, 0x1, 0x1, 0x7, 0x6, 0x6, 0x3, 0x0, 0x3d8a, 0x7, 0x934, 0xffff, 0x2, 0x83e, 0xfff, 0x8, 0x5, 0x0, 0x7f5, 0x9, 0x6, 0x626, 0x9, 0x3fffc0, 0x1, 0x3, 0xd, 0x100, 0x4e1, 0xfffffffb, 0x1000, 0x84, 0xf472, 0x6, 0x7, 0x9, 0x7fff, 0x7, 0xfff, 0x8, 0xfffff801, 0x0, 0x5b3d, 0x2, 0x49a3, 0x9, 0x10001, 0x6, 0x8ef, 0x6, 0x5, 0x1, 0x7, 0xffff, 0x56c, 0x7, 0x6, 0x51, 0xff, 0x7, 0x800, 0x1000, 0x5, 0x2, 0x7, 0x5, 0xcae, 0x0, 0x101, 0x81, 0x7fffffff, 0x1, 0x0, 0x6, 0x2, 0x3, 0x20, 0x81, 0x2, 0x64, 0x3, 0x2, 0x3, 0xfffffffd, 0x4, 0x10, 0x3, 0x2, 0x100, 0x7, 0x0, 0x9, 0x10000, 0x6d8f, 0x6, 0x401, 0x9, 0x5, 0x0, 0x908f, 0x6ae5304c, 0x80, 0x8, 0x8, 0xfffffff7, 0x401, 0x800, 0x5, 0x1000, 0x70, 0x5, 0x5, 0x10, 0x5, 0x66, 0xfffffffe, 0x4, 0x9, 0x41a, 0x8, 0xa, 0x8000, 0x58f, 0xa, 0xfffffeff, 0x6, 0xc, 0x4, 0x80000001, 0x7, 0x4, 0x9, 0x5, 0x8, 0xffffffc0, 0x80, 0x7, 0x7, 0xa0b, 0x2, 0x1, 0xfba0, 0x6, 0xf, 0xd3, 0x8, 0x6fca, 0x4, 0x7, 0x9, 0x593, 0x5, 0x2b74591d, 0x6, 0x34c6, 0x6, 0x100, 0xbb43, 0x1, 0x0, 0x401, 0x5, 0x8e2, 0x7fff, 0x6, 0x5, 0x7, 0x7, 0x56d2, 0x61, 0xb, 0x10001, 0x6, 0x4, 0x1ff, 0x6, 0x7, 0x8, 0xfffff39c, 0x5027, 0xe, 0x8, 0x40, 0x900000, 0x1af, 0x7, 0x3, 0x1, 0x8, 0xfd, 0x8, 0x1, 0xb8, 0x40, 0xe21b, 0x3c0d, 0x1000, 0x3800000, 0x1963, 0xe, 0x0, 0xc, 0x1, 0x96b, 0xfffffff8, 0x3, 0xfffffffc, 0xfffffff9, 0x2]}]}}]}, 0x878}}, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) 26.642364009s ago: executing program 2 (id=1927): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[], 0xb8}}, 0x4004050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x100) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x97a3}, 0x18) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='ext4_drop_inode\x00', r3, 0x0, 0x8}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) execve(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000a40)={[&(0x7f0000000700)='(#', &(0x7f0000000a00)='&\x00']}, &(0x7f0000000b00)={[&(0x7f0000000a80)='kmem_cache_free\x00', &(0x7f0000000ac0)='^\n\'+/\x00']}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000b40)={{0x1, 0x1, 0xffffffffffffff27, r4}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)={r0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703a"], 0x54}}, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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") r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000300000095000000000000001b55e2f2f9e8c044cb0eed982ad26ec64ae6a973680d7a52e6341f4790bb60bcae0145e132ff3da2fec46fd146208fdc63c7586987bd7509c153950ec163faede85a9dc7eceabf3decc421233f8b5e548b7173bf249bbfabb4a9814f0e233ca1c88b00"/133], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10) unlink(0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x1a8, 0xfffffffe, {{@in6=@private2, @in=@empty, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 20.98778893s ago: executing program 5 (id=2010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b000000"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010326bd7000fbdbdf251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 20.88381773s ago: executing program 5 (id=2012): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb0e, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x400, 0x2, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@fwd={0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x50}, 0x28) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 20.238176952s ago: executing program 5 (id=2029): add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed218caa52dd8d39af14c31ed56ad59300000000000000000000004000", 0x27}, 0x48, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x0, 0xff, 0xb}, 0xc) listen(r0, 0xffffffff) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000013c0)={&(0x7f0000000200)="fc7b7c747abaa98deef4aae2cb9095affd89a37bb753578c2bf0361e30f29e6ccc61564c14228c00bc210fc0c6cf6b1b58f6b4201eba097bda4d5d70a709877fbcff97d2e2a8fb5d5d8542e576ab1ac23d8da13bb60fda201a50f7b5a1fe60aee0c54885cf4666b816fcdac31b7b7c5c8a8b744d631e3c567a837354264e83675d79094106e83162ac2d5f174afcd56ce498", &(0x7f00000002c0)=""/231, &(0x7f0000000140)="2ffb3de3831ba66c71cd1172fe65a45592e5e10478d3d184d20421c2c845eeb6d7e5843fb29ce14758789aa4417ba55b08b8256300563bbf949321c6aba0350bc9efd25c12df4811b811125ec59e", &(0x7f00000003c0)="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", 0x1017, r1}, 0x38) openat$null(0xffffffffffffff9c, 0x0, 0x8080, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) geteuid() bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 20.171097628s ago: executing program 5 (id=2031): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x300004e, &(0x7f00000001c0), 0x1, 0x561, &(0x7f0000000200)="$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") mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x21bf, &(0x7f0000000080)={0x0, 0x6b86, 0x18, 0x2, 0x20000000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregs(0xc, r1, 0x800005, &(0x7f0000000100)=""/62) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0xffff5347, 0x7, 0xd, 0x8, 0x4, "fb5abe70fb8e878e44a4711ed7bc04a8369f2e", 0x1e9ad17, 0x10}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x96) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r5, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000) setsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f0000abaff9), 0x10) tkill(r4, 0x7) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, 0x0) pwrite64(r3, 0x0, 0x0, 0x8000c64) 19.893948325s ago: executing program 5 (id=2038): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, r1, &(0x7f0000000140)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x2a200) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b80)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e0852", 0x63}, {&(0x7f0000000580)="bf49498ca8a07dba227599c311a0bf08264860a910e5b37ab4ad33df43fa70ffc79eeeca2f38ba06e1ee93acd310f99a76337ed6de248944844da26865dceabeffe8a47ad8193b82f36fcbb3f27e052690d0c8ccbd8cbf72db", 0x59}, {&(0x7f0000000a00)="7e29d1a3098934975681c85ab33606d77b4970ba01a81851b3eb4ab5", 0x1c}], 0x3, 0x0, 0x0, 0x7400}, 0x4804) 19.31949395s ago: executing program 5 (id=2043): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000002d00)=[{0x6, 0x1, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/93, 0x5d}, {&(0x7f00000000c0)=""/191, 0xbf}, {&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000200)=""/137, 0x89}, {&(0x7f00000002c0)=""/48, 0x30}, {&(0x7f0000000300)=""/130, 0x82}], &(0x7f0000000440)=[0x7fff, 0x7]}, {0x3, 0x1, 0x0, &(0x7f0000000700)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000500)=""/233, 0xe9}, {&(0x7f0000000600)=""/236, 0xec}], &(0x7f0000000740)=[0x2803, 0x9, 0x4, 0x101]}, {0xa, 0x1, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000780)=""/55, 0x37}, {&(0x7f00000007c0)=""/207, 0xcf}, {&(0x7f00000008c0)=""/31, 0x1f}, {&(0x7f0000000900)=""/164, 0xa4}, {&(0x7f00000009c0)=""/58, 0x3a}, {&(0x7f0000000a00)=""/155, 0x9b}, {&(0x7f0000000ac0)=""/57, 0x39}, {&(0x7f0000000b00)=""/176, 0xb0}, {&(0x7f0000000bc0)=""/84, 0x54}, {&(0x7f0000000c40)=""/14, 0xe}], &(0x7f0000000d40)=[0x1, 0x7, 0xb1be, 0xb59, 0x2, 0x8, 0x996a, 0x82b]}, {0x5, 0x1, 0x0, &(0x7f0000002040)=[{&(0x7f0000000d80)=""/192, 0xc0}, {&(0x7f0000000e40)=""/147, 0x93}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/117, 0x75}, {&(0x7f0000001f80)=""/189, 0xbd}], &(0x7f00000020c0)=[0x9, 0x7, 0xffffffff, 0x7]}, {0x4, 0x1, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002100)=""/78, 0x4e}, {&(0x7f0000002180)=""/213, 0xd5}, {&(0x7f0000002280)=""/79, 0x4f}, {&(0x7f0000002300)=""/158, 0x9e}], &(0x7f0000002400)=[0x7, 0x800000]}, {0x5, 0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002440)=""/13, 0xd}, {&(0x7f0000002480)=""/223, 0xdf}, {&(0x7f0000002580)=""/81, 0x51}, {&(0x7f0000002600)=""/232, 0xe8}, {&(0x7f0000002700)=""/209, 0xd1}], &(0x7f0000002880)=[0x9, 0x6, 0x4, 0x2, 0xdc, 0x2]}, {0x4, 0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f00000028c0)=""/59, 0x3b}, {&(0x7f0000002900)=""/129, 0x81}, {&(0x7f00000029c0)=""/90, 0x5a}, {&(0x7f0000002a40)=""/107, 0x6b}], &(0x7f0000002b00)=[0x3]}, {0x1, 0x1, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002b40)=""/11, 0xb}], &(0x7f0000002bc0)=[0x3d, 0x0, 0x80, 0x6, 0x8000, 0x3]}, {0x2, 0x1, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)=""/32, 0x20}, {&(0x7f0000002c40)=""/33, 0x21}], &(0x7f0000002cc0)=[0x3]}], 0x9) fcntl$getownex(r0, 0x10, &(0x7f0000002e40)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000006, 0x10, r0, 0x10000000) close(r0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000002ec0)={0x7, 0x0, &(0x7f0000002e80)=[r0, 0xffffffffffffffff, r0, r0, r0, r0, r0, r0, r0]}, 0x9) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000002f00), 0x2, 0x0) write$selinux_create(r1, &(0x7f0000002f40)=@objname={'system_u:object_r:devicekit_exec_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x4, 0x20, './file0\x00'}, 0x68) listen(0xffffffffffffffff, 0x8001) fcntl$getownex(r0, 0x10, &(0x7f0000002fc0)) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003040), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000003100)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x18, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8df8955ad117425}, 0x2000c045) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000003140)={{0x0, 0x6, 0x8, 0x10, 0x5, 0xe, 0x4, 0x7, 0x100, 0x9, 0x8, 0x0, 0xca, 0x10, 0x8000}, 0x8, [0x0]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000003200), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003240)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000003340)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003300)={&(0x7f0000003280)={0x74, r5, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8002}, 0x20000801) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000003380)={0xf8cc, {{0xa, 0x4e23, 0x7, @loopback, 0xc}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x5, @private1, 0x80000000}}]}, 0x110) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x2e) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000034c0)=0x5, 0x4) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003500), 0x400081, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003540)=@base={0x15, 0x2, 0x6, 0xd, 0x80, r7, 0x4, '\x00', 0x0, r7, 0x1, 0x2, 0x2}, 0x50) r8 = add_key$keyring(&(0x7f0000003740), &(0x7f0000003780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f00000035c0), &(0x7f0000003600)={'syz', 0x1}, &(0x7f0000003640)="e7fb9946329922ce510bc74dc737072fa61f9f68abfcd51f22bb653b4e4252cabb53eadcb896dd99d88424d471dab368af30945fc0e0ef51902f1452f7a6f6dc5f7d9572997fc012631fc7f79e4f8d83620daeba844dad675ebea244a391ae5de43bad7d65b1b31afca0b2d4f9a56abfb7ffefed84a8193c49a53b87af3538267920265c2a7888d82923cdc1727420215f4779bf5465aba91449aefb72b7555deea8bb9c788fdace5edcb8d99311964d191364e067a715f5164cb4a32ce56837fa1b78e0f09bc330322361bb", 0xcc, r8) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f00000037c0)={0x0, 0x8, @status={[0x8000000000000000, 0x0, 0x1a, 0x0, 0xfffffffffffffff9, 0xcd]}, [0x1, 0x1, 0x7fffffff, 0x8000, 0x6, 0x6, 0x0, 0x1, 0x5, 0x4, 0xb98, 0x7fffffffffffffff, 0x200, 0x89, 0xff, 0x0, 0xb04, 0x2, 0x6, 0xdad9, 0x4, 0xff, 0x5, 0x0, 0x0, 0x5, 0x3, 0x80000001, 0x40, 0x5, 0x81, 0xff, 0x4, 0x2, 0xec, 0xe06, 0x4, 0x0, 0x8, 0x5, 0x1, 0x3, 0x7fffffff, 0xca0a, 0x9, 0x0, 0x772f4298, 0x8, 0x10, 0xffffffffffff5356, 0x6, 0x5, 0x31, 0x2, 0x10100, 0x7fffffff, 0x4, 0xbb16, 0x7aba9a8e, 0x2, 0x5, 0x6e5, 0x20, 0xb]}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004300)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000042c0)={&(0x7f0000004280)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000054}, 0x20000800) 19.288614092s ago: executing program 34 (id=2043): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000002d00)=[{0x6, 0x1, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/93, 0x5d}, {&(0x7f00000000c0)=""/191, 0xbf}, {&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000200)=""/137, 0x89}, {&(0x7f00000002c0)=""/48, 0x30}, {&(0x7f0000000300)=""/130, 0x82}], &(0x7f0000000440)=[0x7fff, 0x7]}, {0x3, 0x1, 0x0, &(0x7f0000000700)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000500)=""/233, 0xe9}, {&(0x7f0000000600)=""/236, 0xec}], &(0x7f0000000740)=[0x2803, 0x9, 0x4, 0x101]}, {0xa, 0x1, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000780)=""/55, 0x37}, {&(0x7f00000007c0)=""/207, 0xcf}, {&(0x7f00000008c0)=""/31, 0x1f}, {&(0x7f0000000900)=""/164, 0xa4}, {&(0x7f00000009c0)=""/58, 0x3a}, {&(0x7f0000000a00)=""/155, 0x9b}, {&(0x7f0000000ac0)=""/57, 0x39}, {&(0x7f0000000b00)=""/176, 0xb0}, {&(0x7f0000000bc0)=""/84, 0x54}, {&(0x7f0000000c40)=""/14, 0xe}], &(0x7f0000000d40)=[0x1, 0x7, 0xb1be, 0xb59, 0x2, 0x8, 0x996a, 0x82b]}, {0x5, 0x1, 0x0, &(0x7f0000002040)=[{&(0x7f0000000d80)=""/192, 0xc0}, {&(0x7f0000000e40)=""/147, 0x93}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/117, 0x75}, {&(0x7f0000001f80)=""/189, 0xbd}], &(0x7f00000020c0)=[0x9, 0x7, 0xffffffff, 0x7]}, {0x4, 0x1, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002100)=""/78, 0x4e}, {&(0x7f0000002180)=""/213, 0xd5}, {&(0x7f0000002280)=""/79, 0x4f}, {&(0x7f0000002300)=""/158, 0x9e}], &(0x7f0000002400)=[0x7, 0x800000]}, {0x5, 0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002440)=""/13, 0xd}, {&(0x7f0000002480)=""/223, 0xdf}, {&(0x7f0000002580)=""/81, 0x51}, {&(0x7f0000002600)=""/232, 0xe8}, {&(0x7f0000002700)=""/209, 0xd1}], &(0x7f0000002880)=[0x9, 0x6, 0x4, 0x2, 0xdc, 0x2]}, {0x4, 0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f00000028c0)=""/59, 0x3b}, {&(0x7f0000002900)=""/129, 0x81}, {&(0x7f00000029c0)=""/90, 0x5a}, {&(0x7f0000002a40)=""/107, 0x6b}], &(0x7f0000002b00)=[0x3]}, {0x1, 0x1, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002b40)=""/11, 0xb}], &(0x7f0000002bc0)=[0x3d, 0x0, 0x80, 0x6, 0x8000, 0x3]}, {0x2, 0x1, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)=""/32, 0x20}, {&(0x7f0000002c40)=""/33, 0x21}], &(0x7f0000002cc0)=[0x3]}], 0x9) fcntl$getownex(r0, 0x10, &(0x7f0000002e40)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000006, 0x10, r0, 0x10000000) close(r0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000002ec0)={0x7, 0x0, &(0x7f0000002e80)=[r0, 0xffffffffffffffff, r0, r0, r0, r0, r0, r0, r0]}, 0x9) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000002f00), 0x2, 0x0) write$selinux_create(r1, &(0x7f0000002f40)=@objname={'system_u:object_r:devicekit_exec_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x4, 0x20, './file0\x00'}, 0x68) listen(0xffffffffffffffff, 0x8001) fcntl$getownex(r0, 0x10, &(0x7f0000002fc0)) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003040), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000003100)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x18, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8df8955ad117425}, 0x2000c045) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000003140)={{0x0, 0x6, 0x8, 0x10, 0x5, 0xe, 0x4, 0x7, 0x100, 0x9, 0x8, 0x0, 0xca, 0x10, 0x8000}, 0x8, [0x0]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000003200), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003240)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000003340)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003300)={&(0x7f0000003280)={0x74, r5, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8002}, 0x20000801) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000003380)={0xf8cc, {{0xa, 0x4e23, 0x7, @loopback, 0xc}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x5, @private1, 0x80000000}}]}, 0x110) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x2e) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000034c0)=0x5, 0x4) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003500), 0x400081, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003540)=@base={0x15, 0x2, 0x6, 0xd, 0x80, r7, 0x4, '\x00', 0x0, r7, 0x1, 0x2, 0x2}, 0x50) r8 = add_key$keyring(&(0x7f0000003740), &(0x7f0000003780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f00000035c0), &(0x7f0000003600)={'syz', 0x1}, &(0x7f0000003640)="e7fb9946329922ce510bc74dc737072fa61f9f68abfcd51f22bb653b4e4252cabb53eadcb896dd99d88424d471dab368af30945fc0e0ef51902f1452f7a6f6dc5f7d9572997fc012631fc7f79e4f8d83620daeba844dad675ebea244a391ae5de43bad7d65b1b31afca0b2d4f9a56abfb7ffefed84a8193c49a53b87af3538267920265c2a7888d82923cdc1727420215f4779bf5465aba91449aefb72b7555deea8bb9c788fdace5edcb8d99311964d191364e067a715f5164cb4a32ce56837fa1b78e0f09bc330322361bb", 0xcc, r8) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f00000037c0)={0x0, 0x8, @status={[0x8000000000000000, 0x0, 0x1a, 0x0, 0xfffffffffffffff9, 0xcd]}, [0x1, 0x1, 0x7fffffff, 0x8000, 0x6, 0x6, 0x0, 0x1, 0x5, 0x4, 0xb98, 0x7fffffffffffffff, 0x200, 0x89, 0xff, 0x0, 0xb04, 0x2, 0x6, 0xdad9, 0x4, 0xff, 0x5, 0x0, 0x0, 0x5, 0x3, 0x80000001, 0x40, 0x5, 0x81, 0xff, 0x4, 0x2, 0xec, 0xe06, 0x4, 0x0, 0x8, 0x5, 0x1, 0x3, 0x7fffffff, 0xca0a, 0x9, 0x0, 0x772f4298, 0x8, 0x10, 0xffffffffffff5356, 0x6, 0x5, 0x31, 0x2, 0x10100, 0x7fffffff, 0x4, 0xbb16, 0x7aba9a8e, 0x2, 0x5, 0x6e5, 0x20, 0xb]}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004300)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000042c0)={&(0x7f0000004280)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000054}, 0x20000800) 11.537361405s ago: executing program 35 (id=1927): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[], 0xb8}}, 0x4004050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x100) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x97a3}, 0x18) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='ext4_drop_inode\x00', r3, 0x0, 0x8}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) execve(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000a40)={[&(0x7f0000000700)='(#', &(0x7f0000000a00)='&\x00']}, &(0x7f0000000b00)={[&(0x7f0000000a80)='kmem_cache_free\x00', &(0x7f0000000ac0)='^\n\'+/\x00']}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000b40)={{0x1, 0x1, 0xffffffffffffff27, r4}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)={r0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703a"], 0x54}}, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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") r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000300000095000000000000001b55e2f2f9e8c044cb0eed982ad26ec64ae6a973680d7a52e6341f4790bb60bcae0145e132ff3da2fec46fd146208fdc63c7586987bd7509c153950ec163faede85a9dc7eceabf3decc421233f8b5e548b7173bf249bbfabb4a9814f0e233ca1c88b00"/133], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10) unlink(0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x1a8, 0xfffffffe, {{@in6=@private2, @in=@empty, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.473534163s ago: executing program 7 (id=2306): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1a1081, 0x18) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000f80)='8', 0x1}], 0x1, 0x2, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) 2.473097954s ago: executing program 8 (id=2307): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x8, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) r2 = socket$tipc(0x1e, 0x2, 0x0) bind(r2, &(0x7f0000000180)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x1103, 0x5, @private0, 0x2}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x82, &(0x7f0000000180)={r6, 0x3ff}, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) unshare(0x22020400) r7 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) 2.379451352s ago: executing program 6 (id=2309): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @local, 0x81}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000020000000100000040000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x5, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0x3}, 0x50) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) readv(r4, &(0x7f0000000000), 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000008c0), 0x75, r1}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r1}, 0xc) unshare(0x20000600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 2.379111362s ago: executing program 7 (id=2310): syz_io_uring_setup(0x2d07, &(0x7f00000007c0)={0x0, 0x76d, 0x10000, 0x1, 0x59c}, 0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RVERSION(r3, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.L'}, 0x41) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='cpu<=0||!') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r11}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) 2.330114827s ago: executing program 6 (id=2312): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, r1, &(0x7f0000000140)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b80)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e0852", 0x63}, {&(0x7f0000000580)="bf49498ca8a07dba227599c311a0bf08264860a910e5b37ab4ad33df43fa70ffc79eeeca2f38ba06e1ee93acd310f99a76337ed6de248944844da26865dceabeffe8a47ad8193b82f36fcbb3f27e052690d0c8ccbd8cbf72db", 0x59}, {&(0x7f0000000a00)="7e29d1a3098934975681c85ab33606d77b4970ba01a81851b3eb4ab5", 0x1c}], 0x3, 0x0, 0x0, 0x7400}, 0x4804) 1.997677389s ago: executing program 6 (id=2317): syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0xffea, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) 1.973956351s ago: executing program 7 (id=2318): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000500000000000e1ff95000000000000002ba76bb33123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee11bf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d04683712a0b09edc9e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca311f5b87e1ca6433a8acd715f5888b2007f0000000000000000010000000000fb00010000000000414027efc84222000000005335001db43a5c000000000000000024000000000000000000e75a812ded5297d531afbf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cbc30891f7e5ff7fd6fce424c2200af6c3784a1975fa657de38a3a32a4fd67ce446ac5431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a3830007462b5543f2c1669557b3819d8c396d2c2361629d1022f722ec23812770d72cd0010000007889b8c7044f563a1f68d4eff895fdbc463f747c08f401058690350000000000000000000000000025902e4a196fb169780000000000000000000000080000003ddf4aa4b1c8baa0ae6feb6737c275dc2740f742b5425f1d581961471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f1538ee25a365ccf4a9b604e88e12ff25184d4e3c6f7f623559435b26b50fb7113000000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7af05c648978d9980ba49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec2c3f4523110c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad39e42a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32881dfd15dc84e79d326337e21e041654f06bd7f000000000000000000000000000000282ffe0000000009350cfa3ab109ab4a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dd6b1bfe4104d2262f33f596d606ccce75a3c3d5f9ad94a7316b0c6ad14f1398a6b39b07121f636da418b34d48677cf8d2d99ee8ac50142bcdcc73dd73cc6ec46896ffb35ac82ac7a9309ea07396d2814dc630ad1a9913934849be25f7b81b59aaa9fa2e9d6ecafcfa1de81b2d3581ab1138537f98d2240b6c2bf40569da4e2bb77532ab9220347d78319617d17e14f7331486e80b95c88ae11b1c6b6ea6c2b2311d6ce6315cc451dd50ac746acd59d075b41f9a747894956b10453ccf6527d8f579256e9849bbaf6c7c84362209d3d2320101d575a83f33e75011ed8b48a2f52a03ec09c277b596d5eb491b6b380533be019894e7fc1a414ae38f1f448a7f6423bb12169d6f41665c5edfa3b47acd4d23b826d15361528d7c5a27e1120ca9537c8c8cccbb3ae86a91894372120488b82ecad3538899e53a36844aa515ebdbb1cd69a33b584f8e1c796827703f3894c93dd5a77607cb6c1191b89b303c1381f3e6016bf6c0e710750b43eb9a8fd0d7d71492ac43baec4994396f0fdfe7cecf248b88ba9406c7b8e5ec4882d52a0cd4b9b1c8327e811e6ba2572ff5a59dc8c5c90464aa3942b4a256e8a513155fae5b3ebcc47d2e1a8768c2da219f47595f83239688ef9f55937c9e3447fb532cabc44bd5b805356cf12b89514"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2518"], 0x60}}, 0x4024000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x34, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000010140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100100000000000000011"], 0x58}}, 0x0) 1.919044796s ago: executing program 6 (id=2320): add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000300)=[{0x200000000006, 0xbf, 0x0, 0x7ffc0003}]}) unshare(0x22020600) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r3}, 0x38) r4 = socket(0xa, 0x1, 0x0) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r5 = syz_pidfd_open(0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0xff04, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) process_mrelease(r5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0xc8, @empty, 0x4000}, 0x1c) setsockopt$sock_linger(r10, 0x1, 0x3d, &(0x7f00000001c0)={0xb}, 0x8) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x944, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x930, 0x1, [@m_police={0x92c, 0x1, 0x0, 0x0, {{0xb}, {0x900, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2e, 0xfffd}}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}, @TCA_POLICE_RATE64={0xc, 0x8, 0xbe6}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffffffffff, 0x0, 0x8420, 0x80000000, {0xa, 0x0, 0x3ff, 0xff, 0x3, 0x401}, {0x5, 0x1, 0x10, 0xff, 0x9, 0x9}, 0x15800, 0x1, 0x7}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf8}, @TCA_POLICE_RATE={0x404, 0x2, [0x26ac, 0x3, 0x9, 0xfffff000, 0x4a4, 0x3fed396c, 0x7cc, 0x9bc, 0xc77, 0xbe37, 0xfffffffb, 0x1000, 0x5, 0x2, 0x6, 0x5, 0x8, 0x7, 0x39a, 0x4103, 0x57, 0x8, 0xfffffff7, 0x1, 0x5, 0x81, 0x4, 0x5, 0xfffffffa, 0x101, 0xfffffffa, 0x7, 0xf, 0x800000, 0x5, 0x7, 0xa, 0x7, 0x0, 0x7, 0x7, 0x8, 0x3, 0x1000, 0x1, 0xd1db, 0xdf, 0x80000000, 0x556fa8b8, 0x0, 0x4, 0x3, 0x4, 0x1, 0x88, 0x200, 0x45b2, 0x4, 0x62, 0x2, 0x1, 0xe2, 0x401, 0x1ff, 0xfffffff9, 0x7, 0x1, 0x37, 0x7fff, 0x1, 0x9, 0x9, 0x5, 0x10001, 0x7, 0x1, 0x9, 0x1, 0x40, 0x1, 0xf94, 0x100, 0x6, 0x6, 0x44, 0x136, 0xe63, 0x1, 0x1, 0x9, 0xe7f0, 0xef3, 0x8, 0x400, 0x9, 0x3, 0x19, 0x8, 0x9, 0x3, 0x1, 0x3, 0x7, 0x9, 0x3ff, 0xfffffc01, 0x200, 0x9, 0x7fffffff, 0xf, 0x1, 0x6, 0x0, 0x85c, 0x3, 0xa, 0x86, 0x1000, 0x7, 0x800, 0x8000, 0x2ffaf120, 0x38b7, 0xe6, 0x100, 0x3, 0x8f, 0xfffffff8, 0x2, 0x5, 0x5, 0x1ff, 0x8001, 0x4f7, 0x96, 0xffff75d1, 0x2, 0x6, 0xb, 0x8, 0x9, 0x8f, 0x9, 0xdf9, 0x1, 0xfffffffd, 0x835d, 0x40, 0x1, 0x8, 0x0, 0xffffffff, 0xc, 0x28, 0x7, 0x142, 0x6, 0x5, 0x7f, 0xa34, 0x5, 0x9, 0xffff, 0x6, 0x9, 0x487e, 0x9, 0x10, 0xd, 0x2bd3, 0xf9f2, 0xfff, 0xfffffff7, 0x2, 0xae, 0x9, 0x4, 0x2, 0x8000, 0xfffffff9, 0x5, 0x6, 0xff, 0x5, 0x8, 0xfffffff8, 0x150, 0x3c3, 0x1, 0x3, 0xdcff, 0x4, 0x8, 0xff, 0x1ff, 0x7, 0x8, 0xac6, 0x1, 0x10000, 0x3ff, 0x8000, 0x7, 0x906, 0x5, 0x6, 0x4f9, 0x0, 0x1, 0x4, 0x8001, 0x8001, 0x7, 0xb4000000, 0xfffffffe, 0x0, 0x80, 0x1990, 0x4, 0x2, 0x1, 0x0, 0x6d0, 0xd2, 0xa56a, 0x0, 0xc, 0x5, 0x4, 0x93, 0x6e2, 0xffffffff, 0x10, 0xfff, 0x0, 0x4, 0x8, 0x0, 0x10, 0xffffffff, 0x10, 0xf, 0x8, 0x7, 0x5, 0x6, 0x8, 0xab9, 0x6316, 0x7fff, 0x0, 0xdc4, 0x10001, 0xcfd, 0x5, 0x7]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x100, 0x1, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x7fffffff, 0x80, 0xace, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x7, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x8, 0x2, 0x6, 0x18, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x9, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3, 0x9, 0x100, 0x15d2, 0x6, 0x1, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0x2, 0xffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x4, 0x2, 0xfffffffd, 0x5, 0x40000000, 0x7a, 0x8f0a, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0x7, 0x4, 0x6, 0xf, 0x51, 0xff, 0x2, 0xfffffffd, 0x2, 0x8, 0x3, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x0, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xb31, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x5, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0xff, 0x8, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x80000010, 0xa, 0xc, 0x2, 0x101, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x4, 0x6, 0xbdc0, 0x7, 0x9, 0x9, 0x100, 0x4, 0xfffffffe, 0x81, 0x1000, 0x1, 0x9, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe62f, 0xffffffffffffffff, 0xf, 0x3, 0x7, {0x3, 0x0, 0x8, 0x9, 0x6, 0x6}, {0x8, 0x0, 0x9, 0x9, 0x6, 0x9}, 0x5, 0xa4de, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x944}}, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 1.918609847s ago: executing program 7 (id=2321): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', 0x0}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r10, 0x0, 0x8000000000}, 0x18) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002600013674096925dfbf6ed172611500feffffff01"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4804) perf_event_open(0x0, 0x0, 0x1, r3, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x8d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 1.859367752s ago: executing program 8 (id=2322): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b80)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e0852", 0x63}, {&(0x7f0000000580)="bf49498ca8a07dba227599c311a0bf08264860a910e5b37ab4ad33df43fa70ffc79eeeca2f38ba06e1ee93acd310f99a76337ed6de248944844da26865dceabeffe8a47ad8193b82f36fcbb3f27e052690d0c8ccbd8cbf72db", 0x59}, {&(0x7f0000000a00)="7e29d1a3098934975681c85ab33606d77b4970ba01a81851b3eb4ab5", 0x1c}], 0x3, 0x0, 0x0, 0x7400}, 0x4804) 1.856228742s ago: executing program 1 (id=2323): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000feffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000000)=0x8) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newtaction={0x14, 0x30, 0x300}, 0x14}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b00000005001000030000050000", @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES8, @ANYBLOB="0000000002"], 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 1.791844218s ago: executing program 8 (id=2324): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x218, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1.758100562s ago: executing program 8 (id=2325): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x1c3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_io_uring_setup(0x6c3a, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x3010}, &(0x7f0000000040), &(0x7f0000000080)) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r3, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) poll(&(0x7f00000001c0)=[{r2, 0x400}], 0x1, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000340)='kmem_cache_free\x00', r5}, 0x18) unshare(0x2a020400) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x40020000023893) 1.681430459s ago: executing program 4 (id=2326): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) syz_io_uring_setup(0x5f4b, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x285}, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket(0x2, 0x80805, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r2) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000ac0)={0xc8, r4, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x6}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8040}, 0x80004) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee00, 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) sendmsg$NFC_CMD_DISABLE_SE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x401, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x8014) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@i_version}, {@nogrpid}, {@journal_ioprio}]}, 0x1, 0x525, &(0x7f0000000d40)="$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") open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) creat(&(0x7f00000000c0)='./bus\x00', 0x182) 1.662404271s ago: executing program 1 (id=2327): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x104, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1006, 0x0, 0xfffffffc, 0x0, 0xed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000000ba, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd71}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x4881) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = getgid() r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x200000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21891d, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid={'resgid', 0x3d, r7}, 0x32}]}, 0x1, 0x4e8, &(0x7f0000000f40)="$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") 1.480097438s ago: executing program 4 (id=2328): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xf96d, 0x3010, 0x4, 0xe6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[], 0xe8}, 0x0, 0x24040092, 0x1}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xbb, 0x10001}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18010000fcff0000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r7, 0x0, 0x404}, 0x18) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d00)={&(0x7f0000000cc0)='mm_page_alloc\x00', r9}, 0x10) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r6, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x5}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r15, 0x0, 0x200000000000006}, 0x18) sendmsg$tipc(r12, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f00000001c0)=0x2) dup2(r13, r12) 1.095334835s ago: executing program 8 (id=2329): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000140)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x56c2}}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x488, &(0x7f0000001340)="$eJzs3M1vFOUfAPDvTLuF/oBfq+ILL2oVjQ1qSwGVgwc1mnjAxEQPGk9NWwhSqKE1EUIUjMGTMSbejUf/BU96MUYvJl71bkiI6QXw4prZnWl3l90tLbtdYD+fZOB55qXP99uZZ/eZeXYbQN8ay/5JIrZHxB8RMVKt1u8wVv3v2vL5mevL52eSKJff+jup7Hd1+fxMsWtx3La8Mp5GpJ8lsadJu4tnz52cnp+fO5PXJ5dOfTC5ePbcsydOTR+fOz53+uCRI4cPTb3w/MHnmgc+tL48s5iu7v54Ye+u19/96o2jX9Tl35BHh4y12/hkudzh5nprR005GexhIKzLQERkp6tU6f8jMRCrJ28kXvu0p8EBXVUul8vbWm++UG6QNq4A7mBJ1Ndv6PLAXap4o8/uf4ulcRDwUveGHz135eXqDVCW97V8qW4ZjDTfp9Rwf9tJYxHxzoV/vsmW6M5zCACAOj9k459nmo3/0nigZr//53NDoxFxT0TcGxH3RcTOiLg/orLvgxHxUOXIWBk7raVxkuTG8U96+ZYSXEM2/nsxn9sazsZ/pZV2i8LoQF7bUcm/lBw7MT93IP+djEdpS1afatPGj6/+/mWrbbXjv2zJ4ijGgnkclwe31B8zO700vfGM6125GLF7sMi1dvybrMwEJBGxKyJ2b7CNE/u/29tq29r5t9GBeabytxFPVc//hViuz7+QtJ+fnNwa83MHJour4ka//HbpzVbtV/Lfv8H8OyA7///Lr/9rzfMfTWrnaxfX38alPz9veU+z0et/KHm7Ui6mgT+aXlo6MxUxlBytBl27/uDqsUW92D/Lf3xfs/zTymtc8ZvYExHZRfxwRDwSEY/msT8WEY9HxL42+f/8yhPvN92Q3uL13wFZ/rPrOv+rhaFoXNO8MHDyp+/rGh1dLeb5X29//g9XSuP5mpt5/buZuDZ2NQMAAMCdJ42I7ZGkEyvlNJ2YqH5efmdEOr+wuPT0sYUPT89WvyMwGqW0eNI1UvM8dCq/ra/WL0ZE9aMFxfZD+XPjrweGK/WJmYX52V4nD31uW4v+n/lroNfRAV3n+1rQv/R/6F/N+v/WHsQBbD7v/9C/mvT/4V7EAWy+Zu//n7Q/5N9uxQJsrob+b9oP+sj67/9/fa8rgQCbrmX/v5v/8g9Q4fk/9KXF4Vj7S/JtC8VP2uDht0shiYiO/sAo3RZ53XqhnDQ9uZFmhdLtEKFCFwq9fV0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADolP8CAAD//3fv18M=") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 1.055940569s ago: executing program 1 (id=2330): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8bcb650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c1da009444a131f4da58ae36556dd38ea6c029607462029add0924000000000267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6711f234db5aaa13f382ad796bd667c9e00000009873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1.027246962s ago: executing program 6 (id=2331): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b7030000000000008500000073000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xec25, 0x400, 0x1, 0xd4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 865.996647ms ago: executing program 8 (id=2332): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket(0x1a, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="1748000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f00000000c0), 0x3, 0x562, &(0x7f00000005c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r5, 0x80079a0) splice(r5, 0x0, r4, 0x0, 0x800000020200, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="b26d084169cb5ebb"}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_clone(0x25144011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x4007) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 813.379292ms ago: executing program 6 (id=2333): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000abd92de000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x0, 0x7ffc0001}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r4 = getpid() r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd2(0x3, 0x801) kcmp(r4, r5, 0x0, r3, r2) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = io_uring_setup(0x2ad7, &(0x7f0000000580)={0x0, 0x87c9, 0x8000, 0x3, 0x8a}) syz_io_uring_setup(0x7d08, &(0x7f0000000500)={0x0, 0x31a6, 0x4000, 0x1, 0x40000337, 0x0, r6}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sendto(r0, &(0x7f00000008c0)="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", 0x1000, 0x2002c850, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x1, 0x3, 0x2}}, 0x80) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$session_to_parent(0x12) syz_io_uring_submit(0x0, 0x0, 0x0) keyctl$session_to_parent(0x12) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r7}, 0x18) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095", @ANYRESDEC, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES64], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 551.407067ms ago: executing program 4 (id=2334): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8bcb650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c1da009444a131f4da58ae36556dd38ea6c029607462029add0924000000000267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6711f234db5aaa13f382ad796bd667c9e00000009873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 467.418015ms ago: executing program 4 (id=2335): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x218, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 435.597749ms ago: executing program 4 (id=2336): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000900)='kfree\x00', r1}, 0x18) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0xf0, 0xd215) set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x5) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001a00)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r6 = syz_open_dev$evdev(0x0, 0x1, 0x2002) readv(r6, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) write$evdev(r6, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r8 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x8, @remote, 0x7}}}, 0x30) write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0x190da) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) socket$rxrpc(0x21, 0x2, 0xa) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}, 0x0, 0xd8c9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r9 = syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r9, 0x0, 0x4004) 323.600259ms ago: executing program 7 (id=2337): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000feffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000000)=0x8) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newtaction={0x14, 0x30, 0x300}, 0x14}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b00000005001000030000050000", @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES8, @ANYBLOB="0000000002"], 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 167.479094ms ago: executing program 1 (id=2338): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) syz_io_uring_setup(0x5f4b, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x285}, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket(0x2, 0x80805, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r2) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000ac0)={0xc8, r4, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x6}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8040}, 0x80004) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee00, 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) sendmsg$NFC_CMD_DISABLE_SE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x401, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x8014) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@i_version}, {@nogrpid}, {@journal_ioprio}]}, 0x1, 0x525, &(0x7f0000000d40)="$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") open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) creat(&(0x7f00000000c0)='./bus\x00', 0x182) 89.633441ms ago: executing program 1 (id=2339): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095", @ANYRES8=r0, @ANYRES64=r0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x2}, 0x94) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r2, 0x0, 0x0) connect$llc(r2, &(0x7f0000000680)={0x1a, 0x8, 0x9, 0x8, 0x6, 0x82, @broadcast}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x200000000000000, 0x1}}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1, 0x0, 0x3}, 0x18) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01022dbd7000ffdb652520e7000109001f0070687931000000000a0001007770616e33000000050020"], 0x34}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x48, r6, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000002a40)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x1c, r6, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000004c0)={r8, @in={{0x2, 0x4e21, @empty}}, 0x100, 0xed8}, &(0x7f0000000100)=0x90) 25.134038ms ago: executing program 1 (id=2340): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x1}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x12, 0x3, &(0x7f0000000540)=ANY=[@ANYRES32=r1], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000002c0)={[{@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x2327}}]}, 0xee, 0x480, &(0x7f00000012c0)="$eJzs3EtsG0UfAPD/Oq+mjy/5Snm0tBAoiIpH0qQPeuACAokDSEhwKOIUkrQqTRvUBIlWFRQO5YgqcUcckbgjcYILAg4IiSvcUaWq6qWFk9HYu6nj2ImTuHGLfz9pnZndjWb+nh3veMZ2AF1rJD1kEdsj4o+IGKpml54wUv1z68bFqb9vXJzKolx+83pWOe/mjYtTxanF/22rZsrliIGUHGhQ7uV3IiZnZ2fO5fmxhTPvj82fv/DcqTOTJ2dOzpydOHbs8KF9/UcnjmwovlL+N8V1c89Hc3t3v/r2ldenjl959+dvUn2358dr41iXFG2dkeqzW+/R9PDkhgq7q/yaHnbU7Mh6m588ugkVonU9EZGaq6/S/4eiJwYXjw3FK592tHLAHVUul8uN7s+5S2XgPyyLTtcA6IziRp/e/xbbJg097grXXqy+AUpx38q36pHexbmDvrr3t+00EhHHL/3zZdqiHfMQAACr+D6Nf55tNP4rxQM15/0vX0MZjoj/R8TOiLgvInZFxP0RlXMfjIiH1lh+/QrJ8vFP6eq6AmtRGv+9kK9tLR3/FaO/GO7Jczsq8fdlJ07NzhzMn5MD0TeQ8uMrlPHDy79/Hvk4ckvdsdrxX9pS+cVYMK/H1d66CbrpyYXJdsSeXPskYk9vo/izKJZxsojYHRF71lnGqae/3tvs2Orxr2CFdaZWlb+KeKra/pdiSfy3mypruj45/vzRiSNjW2J25uBYcVUs98tvl99oVv6G4m+D1P5bG17/i6vAw9mWiPnzF05X1mvn117G5T8/q+nTS1aXU/ylbyPWfP33Z29V0v35vg8nFxbOjUf0Z68t3z9x+3+LfHF+iv/A/sb9f2dNjR+OiHQR74uIR/JF3NR2j0XE4xGxf4X4f3rpifeaHVvW/oNF/CvMyrdRin96tfaP2vZfe6Ln9I/ftRx/w/Y/XEkdyPe08vrXagU38twBAADAvaJU+Qx8VhpdTJdKo6PVz/Dviq2l2bn5hWdOzH1wdrr6Wfnh6CsVM11DNfOh4/nccJGfqMsfyueNv+gZrORHp+ZmpzsdPHS5bU36f/JXT6drB9xxbVhHA+5R6+v/g22vB7D53P+he+n/0L30f+hejfr/xx2oB7D53P+he+n/0L30f+he+j90pabfjS9t6Cv/HU4Uv52Q9mSrRdo4cb3zUWw4MXgni4hS5wPsikRvyz9msc7EQMNDHXxRAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaKN/AwAA//9cZN73") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000640)='LX[X\x00.]%Jk\xe8\xd4M\xd7\xf9m\xa7%\xe5)J81`.\x7f7\xa6\'\x1f4\x06_0\xf3\x05\xc8\xcc\xf8\r:\r*w\x8d\xbd\x02\xd3F\x83\x82u3\xc7\x1bp\xa1=\xdb\x9e8H\a\xdc(\xb9\x84\f%\xb8\xd8\xd9\xa2`2\xc6V\xda\x14@\x12-\x94e\xca\xb8\xf8\x0e\xf4\xb2\x87J3\x9eucSYT\x81\xb2t\x13*\x8c\x8d\xdf\x17\xcc\xa7nO\xbb\x05\x95;\xcd\x10\x80\xfdx$\xc6CLk.\xe4Nin\xdaXH(\x97\xd1\x03\xe6\xec\x1d)\x98\xca\x83hy\x11\a\xda\xac\xfb{\xa6\xdd\x7f\xe2\xf5\xc4p=\x14v\x91\x92Hhd42\xbb\x00\x00\x00') r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f00000002c0)}, 0x10) mmap(&(0x7f000018a000/0x1000)=nil, 0x1000, 0x300000e, 0x4000010, 0xffffffffffffffff, 0xec773000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006d6f646568c1000000000000000000000000000000000000000000000000000005eb020005000000100004006c6f616462616c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040084) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r7, 0x20, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000002780)=""/55, 0x37}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000080)=""/213, 0xd5, 0x0, &(0x7f0000000180)={0x1a, 0x207, 0x3, 0x35, 0x5, 0x8, @random="3b7265573fde"}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="805900008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r11, @ANYBLOB="0000000000000000b70300000000400085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r12}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008002, &(0x7f00000008c0)={[{@mblk_io_submit}, {@nodioread_nolock}, {@prjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@noinit_itable}], [{@fsname={'fsname', 0x3d, 'ext4\x00'}}, {@flag='ro'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'kmem_cache_free\x00'}}, {@uid_lt}, {@uid_lt}, {@pcr={'pcr', 0x3d, 0xe}}]}, 0x1, 0x549, &(0x7f0000001800)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204bc2f, 0x0, 0x1, 0x0, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16.901578ms ago: executing program 7 (id=2341): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x101803) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000380)='rxrpc_s\x00', 0x0, 0x0, 0x0, r4) request_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)='sched_switch\x00', r4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket(0x1e, 0x805, 0x0) connect$tipc(r5, &(0x7f0000000000)=@id, 0x10) close(r5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f00000008c0), &(0x7f0000000880)=r3}, 0x20) socket$key(0xf, 0x3, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x18) modify_ldt$write(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r3], 0x50) r7 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x81}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000004c0)=0x2, 0x4) r9 = accept$unix(r5, &(0x7f00000003c0), &(0x7f0000000200)=0x6e) ioctl$sock_ifreq(r9, 0x891e, &(0x7f0000000280)={'bond_slave_1\x00', @ifru_map={0xfffffffffffffff8, 0x8001, 0x66c, 0x0, 0xb, 0x1}}) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x10000, 0x1000, 0x101, 0x1}, 0x20) 0s ago: executing program 4 (id=2342): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117900000000008510000002000000850000003400000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000100008000000000000000001812007168cc09e5b153c6a04ec24b294a585873000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = getpgrp(0xffffffffffffffff) tkill(r5, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8808}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r10}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x20004401}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44051}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x7fff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/key-users\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 128.344266][ T8069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.344291][ T8069] RIP: 0033:0x7f15c465f749 [ 128.344306][ T8069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.344329][ T8069] RSP: 002b:00007f15c309e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.344354][ T8069] RAX: ffffffffffffffda RBX: 00007f15c48b6090 RCX: 00007f15c465f749 [ 128.344371][ T8069] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 128.344386][ T8069] RBP: 00007f15c46e3f91 R08: 0000000000000000 R09: 0000000000000000 [ 128.344402][ T8069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.344414][ T8069] R13: 00007f15c48b6128 R14: 00007f15c48b6090 R15: 00007ffcc7d9e5a8 [ 128.344491][ T8069] [ 128.672366][ T8069] memory: usage 307200kB, limit 307200kB, failcnt 242 [ 128.679606][ T8069] memory+swap: usage 307600kB, limit 9007199254740988kB, failcnt 0 [ 128.687640][ T8069] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 128.695012][ T8069] Memory cgroup stats for /syz6: [ 128.695212][ T29] kauditd_printk_skb: 679 callbacks suppressed [ 128.695229][ T29] audit: type=1326 audit(128.481:6262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz.2.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f352a202005 code=0x7ffc0000 [ 128.729170][ T29] audit: type=1326 audit(128.641:6263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz.2.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f352a202005 code=0x7ffc0000 [ 128.752097][ T29] audit: type=1326 audit(128.641:6264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz.2.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f352a202005 code=0x7ffc0000 [ 128.774913][ T29] audit: type=1326 audit(128.651:6265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz.2.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f352a202005 code=0x7ffc0000 [ 128.797823][ T29] audit: type=1326 audit(128.661:6266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz.2.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f352a202005 code=0x7ffc0000 [ 128.820724][ T29] audit: type=1326 audit(128.661:6267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz.2.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f352a202005 code=0x7ffc0000 [ 128.843622][ T29] audit: type=1326 audit(128.671:6268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz.2.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f352a202005 code=0x7ffc0000 [ 128.844815][ T8069] cache 0 [ 128.866508][ T29] audit: type=1326 audit(128.671:6269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz.2.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f352a1cf749 code=0x7ffc0000 [ 128.869493][ T8069] rss 0 [ 128.869544][ T8069] shmem 0 [ 128.898067][ T8069] mapped_file 0 [ 128.901574][ T8069] dirty 0 [ 128.904548][ T8069] writeback 0 [ 128.907866][ T8069] workingset_refault_anon 1333 [ 128.912741][ T8069] workingset_refault_file 0 [ 128.917279][ T8069] swap 409600 [ 128.920575][ T8069] swapcached 0 [ 128.923993][ T8069] pgpgin 11277 [ 128.927419][ T8069] pgpgout 11276 [ 128.930889][ T8069] pgfault 13923 [ 128.934393][ T8069] pgmajfault 195 [ 128.937963][ T8069] inactive_anon 0 [ 128.941605][ T8069] active_anon 0 [ 128.945107][ T8069] inactive_file 0 [ 128.948759][ T8069] active_file 4096 [ 128.952626][ T8069] unevictable 0 [ 128.956177][ T8069] hierarchical_memory_limit 314572800 [ 128.961562][ T8069] hierarchical_memsw_limit 9223372036854771712 [ 128.967763][ T8069] total_cache 0 [ 128.971241][ T8069] total_rss 0 [ 128.974687][ T8069] total_shmem 0 [ 128.978163][ T8069] total_mapped_file 0 [ 128.982137][ T8069] total_dirty 0 [ 128.985617][ T8069] total_writeback 0 [ 128.989443][ T8069] total_workingset_refault_anon 1333 [ 128.994811][ T8069] total_workingset_refault_file 0 [ 128.999919][ T8069] total_swap 409600 [ 129.003749][ T8069] total_swapcached 0 [ 129.007700][ T8069] total_pgpgin 11277 [ 129.011614][ T8069] total_pgpgout 11276 [ 129.015653][ T8069] total_pgfault 13923 [ 129.019707][ T8069] total_pgmajfault 195 [ 129.023842][ T8069] total_inactive_anon 0 [ 129.028057][ T8069] total_active_anon 0 [ 129.032097][ T8069] total_inactive_file 0 [ 129.036380][ T8069] total_active_file 4096 [ 129.040710][ T8069] total_unevictable 0 [ 129.044797][ T8069] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1539,pid=8049,uid=0 [ 129.059723][ T8069] Memory cgroup out of memory: Killed process 8049 (syz.6.1539) total-vm:94100kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 129.164563][ T29] audit: type=1326 audit(129.141:6270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz.2.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f352a1cf749 code=0x7ffc0000 [ 129.314054][ T29] audit: type=1326 audit(129.271:6271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8097 comm="syz.4.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe288bcf749 code=0x7ffc0000 [ 129.374082][ T8098] lo speed is unknown, defaulting to 1000 [ 129.389800][ T8098] lo speed is unknown, defaulting to 1000 [ 129.420962][ T8112] loop2: detected capacity change from 0 to 256 [ 129.518726][ T8109] lo speed is unknown, defaulting to 1000 [ 129.563762][ T8109] lo speed is unknown, defaulting to 1000 [ 129.656230][ T8116] lo speed is unknown, defaulting to 1000 [ 129.699448][ T8131] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1561'. [ 129.778344][ T8116] lo speed is unknown, defaulting to 1000 [ 130.137987][ T8154] loop6: detected capacity change from 0 to 256 [ 130.156374][ T8151] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1572'. [ 130.182957][ T8149] lo speed is unknown, defaulting to 1000 [ 130.214759][ T8149] lo speed is unknown, defaulting to 1000 [ 130.848665][ T8181] SELinux: failed to load policy [ 130.965838][ T8182] lo speed is unknown, defaulting to 1000 [ 130.982653][ T8151] syz.2.1572 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 130.997492][ T8151] CPU: 0 UID: 0 PID: 8151 Comm: syz.2.1572 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 130.997533][ T8151] Tainted: [W]=WARN [ 130.997541][ T8151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 130.997553][ T8151] Call Trace: [ 130.997559][ T8151] [ 130.997566][ T8151] __dump_stack+0x1d/0x30 [ 130.997716][ T8151] dump_stack_lvl+0x95/0xd0 [ 130.997740][ T8151] dump_stack+0x15/0x1b [ 130.997762][ T8151] dump_header+0x81/0x240 [ 130.997788][ T8151] oom_kill_process+0x295/0x350 [ 130.997883][ T8151] out_of_memory+0x97b/0xb80 [ 130.997954][ T8151] try_charge_memcg+0x610/0xa10 [ 130.998033][ T8151] obj_cgroup_charge_pages+0xa6/0x150 [ 130.998095][ T8151] __memcg_kmem_charge_page+0x9f/0x170 [ 130.998156][ T8151] __alloc_frozen_pages_noprof+0x18f/0x360 [ 130.998196][ T8151] alloc_pages_mpol+0xb3/0x260 [ 130.998289][ T8151] alloc_pages_noprof+0x90/0x130 [ 130.998348][ T8151] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 130.998391][ T8151] __kvmalloc_node_noprof+0x492/0x6b0 [ 130.998422][ T8151] ? ip_set_alloc+0x24/0x30 [ 130.998453][ T8151] ? ip_set_alloc+0x24/0x30 [ 130.998518][ T8151] ip_set_alloc+0x24/0x30 [ 130.998558][ T8151] hash_netiface_create+0x282/0x740 [ 130.998602][ T8151] ? __pfx_hash_netiface_create+0x10/0x10 [ 130.998823][ T8151] ip_set_create+0x3cc/0x970 [ 130.998852][ T8151] ? __nla_parse+0x40/0x60 [ 130.998952][ T8151] nfnetlink_rcv_msg+0x4c6/0x590 [ 130.999017][ T8151] netlink_rcv_skb+0x123/0x220 [ 130.999057][ T8151] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 130.999151][ T8151] nfnetlink_rcv+0x167/0x16c0 [ 130.999193][ T8151] ? kmem_cache_free+0xe3/0x3a0 [ 130.999227][ T8151] ? __kfree_skb+0x109/0x150 [ 130.999259][ T8151] ? nlmon_xmit+0x4f/0x60 [ 130.999352][ T8151] ? consume_skb+0x49/0x150 [ 130.999384][ T8151] ? nlmon_xmit+0x4f/0x60 [ 130.999402][ T8151] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 130.999455][ T8151] ? __dev_queue_xmit+0x138d/0x1ec0 [ 130.999498][ T8151] ? __dev_queue_xmit+0x148/0x1ec0 [ 130.999613][ T8151] ? ref_tracker_free+0x37d/0x3e0 [ 130.999652][ T8151] ? __netlink_deliver_tap+0x4dc/0x500 [ 130.999694][ T8151] netlink_unicast+0x5c0/0x690 [ 130.999786][ T8151] netlink_sendmsg+0x58b/0x6b0 [ 130.999830][ T8151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.999881][ T8151] __sock_sendmsg+0x145/0x180 [ 131.000003][ T8151] ____sys_sendmsg+0x31e/0x4a0 [ 131.000046][ T8151] ___sys_sendmsg+0x17b/0x1d0 [ 131.000089][ T8151] __x64_sys_sendmsg+0xd4/0x160 [ 131.000192][ T8151] x64_sys_call+0x17ba/0x3000 [ 131.000217][ T8151] do_syscall_64+0xca/0x2b0 [ 131.000306][ T8151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.000358][ T8151] RIP: 0033:0x7f352a1cf749 [ 131.000376][ T8151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.000394][ T8151] RSP: 002b:00007f3528c37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.000413][ T8151] RAX: ffffffffffffffda RBX: 00007f352a425fa0 RCX: 00007f352a1cf749 [ 131.000426][ T8151] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 131.000438][ T8151] RBP: 00007f352a253f91 R08: 0000000000000000 R09: 0000000000000000 [ 131.000494][ T8151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.000510][ T8151] R13: 00007f352a426038 R14: 00007f352a425fa0 R15: 00007ffd2241d398 [ 131.000535][ T8151] [ 131.000543][ T8151] memory: usage 307200kB, limit 307200kB, failcnt 1507 [ 131.049541][ T8182] lo speed is unknown, defaulting to 1000 [ 131.054384][ T8151] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 131.054401][ T8151] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 131.054416][ T8151] Memory cgroup stats for /syz2: [ 131.366912][ T8151] cache 0 [ 131.374844][ T8151] rss 0 [ 131.377620][ T8151] shmem 0 [ 131.380574][ T8151] mapped_file 0 [ 131.384092][ T8151] dirty 0 [ 131.387091][ T8151] writeback 0 [ 131.390407][ T8151] workingset_refault_anon 3731 [ 131.395239][ T8151] workingset_refault_file 3215 [ 131.400074][ T8151] swap 208896 [ 131.403378][ T8151] swapcached 4096 [ 131.407042][ T8151] pgpgin 50493 [ 131.410434][ T8151] pgpgout 50491 [ 131.413925][ T8151] pgfault 63172 [ 131.417450][ T8151] pgmajfault 623 [ 131.421011][ T8151] inactive_anon 0 [ 131.424674][ T8151] active_anon 4096 [ 131.428480][ T8151] inactive_file 0 [ 131.432126][ T8151] active_file 4096 [ 131.435934][ T8151] unevictable 0 [ 131.439409][ T8151] hierarchical_memory_limit 314572800 [ 131.444909][ T8151] hierarchical_memsw_limit 9223372036854771712 [ 131.451083][ T8151] total_cache 0 [ 131.454588][ T8151] total_rss 0 [ 131.457903][ T8151] total_shmem 0 [ 131.461449][ T8151] total_mapped_file 0 [ 131.465476][ T8151] total_dirty 0 [ 131.468966][ T8151] total_writeback 0 [ 131.472866][ T8151] total_workingset_refault_anon 3731 [ 131.478222][ T8151] total_workingset_refault_file 3215 [ 131.483531][ T8151] total_swap 208896 [ 131.487372][ T8151] total_swapcached 4096 [ 131.491570][ T8151] total_pgpgin 50493 [ 131.495547][ T8151] total_pgpgout 50491 [ 131.499542][ T8151] total_pgfault 63172 [ 131.503537][ T8151] total_pgmajfault 623 [ 131.507639][ T8151] total_inactive_anon 0 [ 131.511808][ T8151] total_active_anon 4096 [ 131.516092][ T8151] total_inactive_file 0 [ 131.520262][ T8151] total_active_file 4096 [ 131.524539][ T8151] total_unevictable 0 [ 131.528536][ T8151] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1572,pid=8150,uid=0 [ 131.543215][ T8151] Memory cgroup out of memory: Killed process 8150 (syz.2.1572) total-vm:93968kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 131.803746][ T8214] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1593'. [ 131.881538][ T3477] hid-generic 0000:0100:0001.0001: unknown main item tag 0x0 [ 131.905476][ T3477] hid-generic 0000:0100:0001.0001: hidraw0: HID v0.28 Device [syz1] on syz0 [ 132.023770][ T8221] fido_id[8221]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 132.155557][ T8231] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 132.188215][ T8241] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1600'. [ 132.201465][ T8240] loop5: detected capacity change from 0 to 512 [ 132.228033][ T8240] EXT4-fs: Ignoring removed bh option [ 132.242729][ T8240] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.304462][ T8240] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.326957][ T8240] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #18: comm syz.5.1604: corrupted inode contents [ 132.354103][ T8240] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #18: comm syz.5.1604: mark_inode_dirty error [ 132.401344][ T8240] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #18: comm syz.5.1604: corrupted inode contents [ 132.439918][ T8240] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #18: comm syz.5.1604: mark_inode_dirty error [ 132.484472][ T8240] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #18: comm syz.5.1604: mark inode dirty (error -117) [ 132.508789][ T8240] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 132.555798][ T4968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.667407][ T8264] netlink: 'syz.6.1612': attribute type 39 has an invalid length. [ 132.788071][ T8260] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26 sclass=netlink_tcpdiag_socket pid=8260 comm=syz.5.1609 [ 132.803245][ T8268] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 133.016017][ T8232] syz.2.1600 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 133.030330][ T8232] CPU: 0 UID: 0 PID: 8232 Comm: syz.2.1600 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 133.030439][ T8232] Tainted: [W]=WARN [ 133.030448][ T8232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 133.030466][ T8232] Call Trace: [ 133.030474][ T8232] [ 133.030482][ T8232] __dump_stack+0x1d/0x30 [ 133.030519][ T8232] dump_stack_lvl+0x95/0xd0 [ 133.030543][ T8232] dump_stack+0x15/0x1b [ 133.030573][ T8232] dump_header+0x81/0x240 [ 133.030602][ T8232] oom_kill_process+0x295/0x350 [ 133.030634][ T8232] out_of_memory+0x97b/0xb80 [ 133.030763][ T8232] try_charge_memcg+0x610/0xa10 [ 133.030799][ T8232] obj_cgroup_charge_pages+0xa6/0x150 [ 133.030830][ T8232] __memcg_kmem_charge_page+0x9f/0x170 [ 133.030943][ T8232] __alloc_frozen_pages_noprof+0x18f/0x360 [ 133.030976][ T8232] alloc_pages_mpol+0xb3/0x260 [ 133.031017][ T8232] alloc_pages_noprof+0x90/0x130 [ 133.031054][ T8232] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 133.031090][ T8232] __kvmalloc_node_noprof+0x492/0x6b0 [ 133.031192][ T8232] ? ip_set_alloc+0x24/0x30 [ 133.031225][ T8232] ? ip_set_alloc+0x24/0x30 [ 133.031253][ T8232] ? __slab_alloc+0x25/0x50 [ 133.031309][ T8232] ip_set_alloc+0x24/0x30 [ 133.031360][ T8232] hash_netiface_create+0x282/0x740 [ 133.031401][ T8232] ? __pfx_hash_netiface_create+0x10/0x10 [ 133.031439][ T8232] ip_set_create+0x3cc/0x970 [ 133.031499][ T8232] ? __nla_parse+0x40/0x60 [ 133.031532][ T8232] nfnetlink_rcv_msg+0x4c6/0x590 [ 133.031662][ T8232] netlink_rcv_skb+0x123/0x220 [ 133.031701][ T8232] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 133.031817][ T8232] nfnetlink_rcv+0x167/0x16c0 [ 133.031850][ T8232] ? kmem_cache_free+0xe3/0x3a0 [ 133.031901][ T8232] ? __kfree_skb+0x109/0x150 [ 133.031926][ T8232] ? nlmon_xmit+0x4f/0x60 [ 133.031955][ T8232] ? consume_skb+0x49/0x150 [ 133.031988][ T8232] ? nlmon_xmit+0x4f/0x60 [ 133.032014][ T8232] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 133.032097][ T8232] ? __dev_queue_xmit+0x138d/0x1ec0 [ 133.032130][ T8232] ? __dev_queue_xmit+0x148/0x1ec0 [ 133.032164][ T8232] ? ref_tracker_free+0x37d/0x3e0 [ 133.032196][ T8232] ? __netlink_deliver_tap+0x4dc/0x500 [ 133.032298][ T8232] netlink_unicast+0x5c0/0x690 [ 133.032350][ T8232] netlink_sendmsg+0x58b/0x6b0 [ 133.032388][ T8232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.032506][ T8232] __sock_sendmsg+0x145/0x180 [ 133.032601][ T8232] ____sys_sendmsg+0x31e/0x4a0 [ 133.032638][ T8232] ___sys_sendmsg+0x17b/0x1d0 [ 133.032688][ T8232] __x64_sys_sendmsg+0xd4/0x160 [ 133.032785][ T8232] x64_sys_call+0x17ba/0x3000 [ 133.032814][ T8232] do_syscall_64+0xca/0x2b0 [ 133.032869][ T8232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.032947][ T8232] RIP: 0033:0x7f352a1cf749 [ 133.032964][ T8232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.032985][ T8232] RSP: 002b:00007f3528c37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.033007][ T8232] RAX: ffffffffffffffda RBX: 00007f352a425fa0 RCX: 00007f352a1cf749 [ 133.033022][ T8232] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 133.033037][ T8232] RBP: 00007f352a253f91 R08: 0000000000000000 R09: 0000000000000000 [ 133.033051][ T8232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.033110][ T8232] R13: 00007f352a426038 R14: 00007f352a425fa0 R15: 00007ffd2241d398 [ 133.033149][ T8232] [ 133.033156][ T8232] memory: usage 307200kB, limit 307200kB, failcnt 1884 [ 133.162854][ T8283] lo speed is unknown, defaulting to 1000 [ 133.164099][ T8232] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 133.164114][ T8232] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 133.228939][ T8281] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 133.231627][ T8232] Memory cgroup stats for /syz2 [ 133.242955][ T8283] lo speed is unknown, defaulting to 1000 [ 133.246937][ T8232] : [ 133.254414][ T8232] cache 0 [ 133.352941][ T8291] rdma_op ffff88811b4c2580 conn xmit_rdma 0000000000000000 [ 133.356152][ T8232] rss 0 [ 133.431321][ T8232] shmem 0 [ 133.434465][ T8232] mapped_file 0 [ 133.437965][ T8232] dirty 0 [ 133.440934][ T8232] writeback 0 [ 133.444257][ T8232] workingset_refault_anon 3786 [ 133.444353][ T8291] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 133.449045][ T8232] workingset_refault_file 3731 [ 133.449059][ T8232] swap 212992 [ 133.464757][ T8281] SELinux: failed to load policy [ 133.467642][ T8232] swapcached 0 [ 133.475915][ T8232] pgpgin 51370 [ 133.479313][ T8232] pgpgout 51369 [ 133.482816][ T8232] pgfault 63861 [ 133.486325][ T8232] pgmajfault 666 [ 133.489920][ T8232] inactive_anon 0 [ 133.493624][ T8232] active_anon 0 [ 133.497151][ T8232] inactive_file 0 [ 133.500809][ T8232] active_file 4096 [ 133.504577][ T8232] unevictable 0 [ 133.508149][ T8232] hierarchical_memory_limit 314572800 [ 133.513547][ T8232] hierarchical_memsw_limit 9223372036854771712 [ 133.519752][ T8232] total_cache 0 [ 133.523236][ T8232] total_rss 0 [ 133.526627][ T8232] total_shmem 0 [ 133.530117][ T8232] total_mapped_file 0 [ 133.534127][ T8232] total_dirty 0 [ 133.537678][ T8232] total_writeback 0 [ 133.541515][ T8232] total_workingset_refault_anon 3786 [ 133.547008][ T8232] total_workingset_refault_file 3731 [ 133.552337][ T8232] total_swap 212992 [ 133.556203][ T8232] total_swapcached 0 [ 133.560166][ T8232] total_pgpgin 51370 [ 133.564092][ T8232] total_pgpgout 51369 [ 133.568136][ T8232] total_pgfault 63861 [ 133.572196][ T8232] total_pgmajfault 666 [ 133.576321][ T8232] total_inactive_anon 0 [ 133.580506][ T8232] total_active_anon 0 [ 133.584588][ T8232] total_inactive_file 0 [ 133.588779][ T8232] total_active_file 4096 [ 133.593060][ T8232] total_unevictable 0 [ 133.597176][ T8232] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1600,pid=8229,uid=0 [ 133.611900][ T8232] Memory cgroup out of memory: Killed process 8229 (syz.2.1600) total-vm:93968kB, anon-rss:1260kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 133.651028][ T8294] lo speed is unknown, defaulting to 1000 [ 133.658908][ T8294] lo speed is unknown, defaulting to 1000 [ 133.851032][ T8304] lo speed is unknown, defaulting to 1000 [ 133.867894][ T8304] lo speed is unknown, defaulting to 1000 [ 133.909521][ T8314] tipc: Enabling of bearer rejected, failed to enable media [ 134.098438][ T8327] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1633'. [ 134.127982][ T8328] loop5: detected capacity change from 0 to 256 [ 134.139856][ T29] kauditd_printk_skb: 530 callbacks suppressed [ 134.139870][ T29] audit: type=1326 audit(134.111:6802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352a1cf749 code=0x7ffc0000 [ 134.233867][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1636'. [ 134.242987][ T29] audit: type=1326 audit(134.151:6803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f352a1cf749 code=0x7ffc0000 [ 134.266079][ T29] audit: type=1326 audit(134.151:6804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352a1cf749 code=0x7ffc0000 [ 134.274119][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1635'. [ 134.289378][ T29] audit: type=1326 audit(134.151:6805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f352a1cf749 code=0x7ffc0000 [ 134.320970][ T29] audit: type=1326 audit(134.151:6806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352a1cf749 code=0x7ffc0000 [ 134.332541][ T8323] lo speed is unknown, defaulting to 1000 [ 134.344359][ T29] audit: type=1326 audit(134.151:6807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="syz.2.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f352a1cf749 code=0x7ffc0000 [ 134.372930][ T29] audit: type=1326 audit(134.151:6809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.5.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe180d9f749 code=0x7ffc0000 [ 134.383654][ T8323] lo speed is unknown, defaulting to 1000 [ 134.395864][ T29] audit: type=1326 audit(134.151:6810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.5.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe180d9de97 code=0x7ffc0000 [ 134.395949][ T29] audit: type=1326 audit(134.151:6811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8330 comm="syz.6.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c465f749 code=0x7ffc0000 [ 134.447399][ T29] audit: type=1326 audit(134.151:6813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8330 comm="syz.6.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c465f749 code=0x7ffc0000 [ 134.505995][ T8336] loop6: detected capacity change from 0 to 1024 [ 134.531373][ T8336] EXT4-fs: Ignoring removed oldalloc option [ 134.605975][ T8331] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.1635: lblock 0 mapped to illegal pblock 0 (length 1) [ 134.644326][ T8331] EXT4-fs (loop6): Remounting filesystem read-only [ 134.705840][ T8350] loop2: detected capacity change from 0 to 512 [ 134.763044][ T8350] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1640: bg 0: block 248: padding at end of block bitmap is not set [ 134.805589][ T8350] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1640: Failed to acquire dquot type 1 [ 134.819013][ T8350] EXT4-fs (loop2): 1 truncate cleaned up [ 134.892643][ T8350] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.1640: deleted inode referenced: 12 [ 134.916016][ T8357] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1643'. [ 135.057877][ T8368] loop2: detected capacity change from 0 to 512 [ 135.089470][ T8368] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 135.131178][ T8368] EXT4-fs (loop2): 1 truncate cleaned up [ 135.143133][ T8356] lo speed is unknown, defaulting to 1000 [ 135.196049][ T8356] lo speed is unknown, defaulting to 1000 [ 135.220956][ T8372] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.1646: corrupted in-inode xattr: overlapping e_value [ 135.293227][ T8372] EXT4-fs (loop2): Remounting filesystem read-only [ 135.369572][ T8362] lo speed is unknown, defaulting to 1000 [ 135.398705][ T8362] lo speed is unknown, defaulting to 1000 [ 135.795464][ T8387] netlink: 'syz.4.1653': attribute type 46 has an invalid length. [ 135.803488][ T8387] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1653'. [ 136.627197][ T8422] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1665'. [ 136.654651][ T8413] lo speed is unknown, defaulting to 1000 [ 136.744655][ T8413] lo speed is unknown, defaulting to 1000 [ 137.678218][ T8452] loop6: detected capacity change from 0 to 1024 [ 137.703761][ T8452] EXT4-fs: Ignoring removed oldalloc option [ 137.734801][ T8452] EXT4-fs mount: 6 callbacks suppressed [ 137.734820][ T8452] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.800299][ T8446] lo speed is unknown, defaulting to 1000 [ 137.859607][ T8452] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.1676: lblock 0 mapped to illegal pblock 0 (length 1) [ 137.901140][ T8446] lo speed is unknown, defaulting to 1000 [ 137.904820][ T8441] lo speed is unknown, defaulting to 1000 [ 137.926978][ T8452] EXT4-fs (loop6): Remounting filesystem read-only [ 137.964732][ T7046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 138.078685][ T8441] lo speed is unknown, defaulting to 1000 [ 138.129333][ T8465] loop2: detected capacity change from 0 to 256 [ 138.202796][ T8461] SELinux: failed to load policy [ 138.337788][ T8463] lo speed is unknown, defaulting to 1000 [ 138.352505][ T8459] xt_TCPMSS: Only works on TCP SYN packets [ 138.359324][ T8463] lo speed is unknown, defaulting to 1000 [ 138.485262][ T8477] loop5: detected capacity change from 0 to 128 [ 138.606786][ T8464] lo speed is unknown, defaulting to 1000 [ 138.644365][ T8464] lo speed is unknown, defaulting to 1000 [ 138.654184][ T8485] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1686'. [ 138.967534][ T8495] loop5: detected capacity change from 0 to 512 [ 138.968001][ T8487] lo speed is unknown, defaulting to 1000 [ 138.995994][ T8495] EXT4-fs: Ignoring removed i_version option [ 139.024695][ T8487] lo speed is unknown, defaulting to 1000 [ 139.041075][ T8495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.106135][ T8495] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1690: Failed to acquire dquot type 0 [ 139.169674][ T8502] __quota_error: 285 callbacks suppressed [ 139.169692][ T8502] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present [ 139.185637][ T8502] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 139.195420][ T8502] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1690: Failed to acquire dquot type 0 [ 139.249091][ T29] audit: type=1326 audit(139.201:7093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8486 comm="syz.2.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352a1cf749 code=0x7ffc0000 [ 139.272025][ T29] audit: type=1326 audit(139.211:7094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8503 comm="syz.2.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f352a202005 code=0x7ffc0000 [ 139.285012][ T8497] lo speed is unknown, defaulting to 1000 [ 139.339877][ T8497] lo speed is unknown, defaulting to 1000 [ 139.377852][ T8505] loop2: detected capacity change from 0 to 736 [ 139.412422][ T8505] rock: directory entry would overflow storage [ 139.418767][ T8505] rock: sig=0x4f50, size=4, remaining=3 [ 139.424449][ T8505] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 139.454256][ T29] audit: type=1326 audit(139.361:7095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8503 comm="syz.2.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f352a1cf749 code=0x7ffc0000 [ 139.623415][ T4968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.806243][ T8517] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1697'. [ 139.818141][ T8517] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1697'. [ 139.827628][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1697'. [ 139.842531][ T8517] sch_tbf: burst 618 is lower than device veth1_to_hsr mtu (1514) ! [ 139.905423][ T29] audit: type=1326 audit(139.881:7096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8514 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe288bcf749 code=0x7ffc0000 [ 139.940420][ T29] audit: type=1326 audit(139.911:7097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8514 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe288bcde97 code=0x7ffc0000 [ 139.963737][ T29] audit: type=1326 audit(139.911:7098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8514 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe288bcf749 code=0x7ffc0000 [ 139.986918][ T29] audit: type=1326 audit(139.911:7099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8514 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe288bcf749 code=0x7ffc0000 [ 140.009818][ T29] audit: type=1326 audit(139.911:7100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8514 comm="syz.4.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe288bcf749 code=0x7ffc0000 [ 140.110152][ T8529] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 140.131508][ T8529] SELinux: failed to load policy [ 140.136618][ T8516] lo speed is unknown, defaulting to 1000 [ 140.142813][ T8516] lo speed is unknown, defaulting to 1000 [ 140.258297][ T8521] SELinux: failed to load policy [ 140.283883][ T8538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1704'. [ 140.293340][ T8529] lo speed is unknown, defaulting to 1000 [ 140.329639][ T8535] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1705'. [ 140.348842][ T8529] lo speed is unknown, defaulting to 1000 [ 140.579110][ T8526] lo speed is unknown, defaulting to 1000 [ 140.613303][ T8526] lo speed is unknown, defaulting to 1000 [ 140.706935][ T8552] dvmrp8: entered allmulticast mode [ 140.780891][ T8556] loop6: detected capacity change from 0 to 764 [ 140.804987][ T8556] iso9660: Unknown parameter '00000000000000000000ÿÿÿÿ' [ 140.924427][ T8561] usb usb1: usbfs: process 8561 (syz.6.1712) did not claim interface 0 before use [ 141.016613][ T8567] netlink: 'syz.4.1715': attribute type 4 has an invalid length. [ 141.027638][ T8567] netlink: 'syz.4.1715': attribute type 4 has an invalid length. [ 141.077828][ T3413] lo speed is unknown, defaulting to 1000 [ 141.083633][ T3413] syz1: Port: 1 Link ACTIVE [ 141.095955][ T8567] netlink: 'syz.4.1715': attribute type 4 has an invalid length. [ 141.103887][ T8572] netlink: 'syz.4.1715': attribute type 4 has an invalid length. [ 141.137948][ T23] lo speed is unknown, defaulting to 1000 [ 141.146086][ T36] lo speed is unknown, defaulting to 1000 [ 141.151873][ T36] syz1: Port: 1 Link DOWN [ 141.157767][ T3376] lo speed is unknown, defaulting to 1000 [ 141.163560][ T3376] syz1: Port: 1 Link ACTIVE [ 141.166839][ T3413] lo speed is unknown, defaulting to 1000 [ 141.275322][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1718'. [ 141.451404][ T8595] loop5: detected capacity change from 0 to 512 [ 141.491159][ T8595] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 141.499614][ T8595] EXT4-fs (loop5): orphan cleanup on readonly fs [ 141.523987][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1725'. [ 141.540441][ T8595] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.1721: corrupted inode contents [ 141.583093][ T8600] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1712'. [ 141.622622][ T8595] EXT4-fs (loop5): Remounting filesystem read-only [ 141.639552][ T8595] EXT4-fs (loop5): 1 truncate cleaned up [ 141.645519][ T12] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 141.656226][ T12] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 141.684345][ T12] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 141.715144][ T8595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.758379][ T4968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.795592][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 141.973121][ T8621] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1733'. [ 142.133994][ T8629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.163980][ T8629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.220291][ T8634] loop6: detected capacity change from 0 to 128 [ 142.265340][ T8640] lo speed is unknown, defaulting to 1000 [ 142.271193][ T8640] lo speed is unknown, defaulting to 1000 [ 142.277446][ T8640] lo speed is unknown, defaulting to 1000 [ 142.284197][ T8640] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 142.305770][ T8640] lo speed is unknown, defaulting to 1000 [ 142.328836][ T8640] lo speed is unknown, defaulting to 1000 [ 142.345793][ T8645] loop6: detected capacity change from 0 to 128 [ 142.353141][ T8640] lo speed is unknown, defaulting to 1000 [ 142.365011][ T8640] lo speed is unknown, defaulting to 1000 [ 142.392687][ T8640] lo speed is unknown, defaulting to 1000 [ 142.426665][ T8650] syz.6.1741: attempt to access beyond end of device [ 142.426665][ T8650] loop6: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 142.451563][ T8650] syz.6.1741: attempt to access beyond end of device [ 142.451563][ T8650] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 142.465330][ T8650] syz.6.1741: attempt to access beyond end of device [ 142.465330][ T8650] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 142.482573][ T8650] syz.6.1741: attempt to access beyond end of device [ 142.482573][ T8650] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 142.496730][ T8650] syz.6.1741: attempt to access beyond end of device [ 142.496730][ T8650] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 142.510975][ T8650] syz.6.1741: attempt to access beyond end of device [ 142.510975][ T8650] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 142.524703][ T8650] syz.6.1741: attempt to access beyond end of device [ 142.524703][ T8650] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 142.538767][ T8650] syz.6.1741: attempt to access beyond end of device [ 142.538767][ T8650] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 142.579439][ T8650] syz.6.1741: attempt to access beyond end of device [ 142.579439][ T8650] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 142.597422][ T8650] syz.6.1741: attempt to access beyond end of device [ 142.597422][ T8650] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 142.805041][ T8662] lo speed is unknown, defaulting to 1000 [ 142.824114][ T8662] lo speed is unknown, defaulting to 1000 [ 142.824501][ T8660] SELinux: failed to load policy [ 142.919343][ T8673] loop5: detected capacity change from 0 to 128 [ 142.955624][ T8673] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.965706][ T8662] lo speed is unknown, defaulting to 1000 [ 142.976046][ T8663] lo speed is unknown, defaulting to 1000 [ 142.982434][ T8663] lo speed is unknown, defaulting to 1000 [ 143.032059][ T8663] lo speed is unknown, defaulting to 1000 [ 143.092608][ T8685] loop2: detected capacity change from 0 to 512 [ 143.119358][ T8685] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 143.152556][ T8685] EXT4-fs (loop2): 1 truncate cleaned up [ 143.192474][ T8685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.192617][ T8692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1755'. [ 143.220738][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1755'. [ 143.238675][ T8685] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.1754: corrupted in-inode xattr: overlapping e_value [ 143.252863][ T8685] EXT4-fs (loop2): Remounting filesystem read-only [ 143.287607][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.349433][ T8705] loop2: detected capacity change from 0 to 512 [ 143.363193][ T8705] EXT4-fs: Ignoring removed i_version option [ 143.365531][ T8699] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.376559][ T8699] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.396794][ T8709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1759'. [ 143.406546][ T8705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.438828][ T8705] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1761: Failed to acquire dquot type 0 [ 143.480090][ T8705] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1761: Failed to acquire dquot type 0 [ 143.515055][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.526011][ T8699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.536013][ T8699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.554862][ T8719] rdma_rxe: rxe_newlink: failed to add lo [ 143.574064][ T1597] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.596460][ T8719] loop2: detected capacity change from 0 to 512 [ 143.603407][ T8719] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.624369][ T1597] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.642323][ T1597] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.650999][ T1597] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.764160][ T8724] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 143.776604][ T4968] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.783397][ T8724] SELinux: failed to load policy [ 143.820030][ T8727] SELinux: failed to load policy [ 143.850680][ T8724] lo speed is unknown, defaulting to 1000 [ 143.865403][ T8724] lo speed is unknown, defaulting to 1000 [ 143.947327][ T8746] loop5: detected capacity change from 0 to 1024 [ 143.960884][ T8727] lo speed is unknown, defaulting to 1000 [ 143.966760][ T8746] EXT4-fs: Ignoring removed oldalloc option [ 143.975705][ T8724] lo speed is unknown, defaulting to 1000 [ 143.982038][ T8727] lo speed is unknown, defaulting to 1000 [ 143.987028][ T8746] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.004213][ T8746] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.1775: lblock 0 mapped to illegal pblock 0 (length 1) [ 144.018266][ T8746] EXT4-fs (loop5): Remounting filesystem read-only [ 144.037307][ T4968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 144.105507][ T8727] lo speed is unknown, defaulting to 1000 [ 144.197006][ T8769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.210995][ T8769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.225134][ T29] kauditd_printk_skb: 464 callbacks suppressed [ 144.225151][ T29] audit: type=1326 audit(144.201:7555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8771 comm="syz.1.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 144.242337][ T8772] netlink: 'syz.1.1783': attribute type 12 has an invalid length. [ 144.262151][ T8772] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1783'. [ 144.279538][ T29] audit: type=1326 audit(144.201:7556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8771 comm="syz.1.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 144.302516][ T29] audit: type=1326 audit(144.201:7557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8771 comm="syz.1.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 144.325371][ T29] audit: type=1326 audit(144.201:7558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8771 comm="syz.1.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 144.348200][ T29] audit: type=1326 audit(144.201:7559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8771 comm="syz.1.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 144.371214][ T29] audit: type=1326 audit(144.201:7560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8771 comm="syz.1.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd493b0df90 code=0x7ffc0000 [ 144.394086][ T29] audit: type=1326 audit(144.201:7561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8771 comm="syz.1.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 144.417029][ T29] audit: type=1326 audit(144.201:7562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8771 comm="syz.1.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 144.439930][ T29] audit: type=1326 audit(144.201:7563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8771 comm="syz.1.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 144.462821][ T29] audit: type=1326 audit(144.201:7564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8771 comm="syz.1.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 144.527241][ T8784] hub 2-0:1.0: USB hub found [ 144.531975][ T8784] hub 2-0:1.0: 8 ports detected [ 144.739587][ T8806] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 144.767367][ T8784] loop6: detected capacity change from 0 to 512 [ 144.788085][ T8784] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.806181][ T8784] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.1786: corrupted inode contents [ 144.818687][ T8784] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #2: comm syz.6.1786: mark_inode_dirty error [ 144.830932][ T8784] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.1786: corrupted inode contents [ 144.843144][ T8784] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.1786: mark_inode_dirty error [ 144.887610][ T8805] lo speed is unknown, defaulting to 1000 [ 144.914196][ T8805] lo speed is unknown, defaulting to 1000 [ 144.917742][ T7046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.963971][ T8805] lo speed is unknown, defaulting to 1000 [ 144.991192][ T8820] FAULT_INJECTION: forcing a failure. [ 144.991192][ T8820] name failslab, interval 1, probability 0, space 0, times 0 [ 145.003931][ T8820] CPU: 0 UID: 0 PID: 8820 Comm: syz.6.1801 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 145.004041][ T8820] Tainted: [W]=WARN [ 145.004050][ T8820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.004067][ T8820] Call Trace: [ 145.004075][ T8820] [ 145.004084][ T8820] __dump_stack+0x1d/0x30 [ 145.004115][ T8820] dump_stack_lvl+0x95/0xd0 [ 145.004143][ T8820] dump_stack+0x15/0x1b [ 145.004190][ T8820] should_fail_ex+0x265/0x280 [ 145.004242][ T8820] ? __pfx_ppp_ioctl+0x10/0x10 [ 145.004277][ T8820] should_failslab+0x8c/0xb0 [ 145.004304][ T8820] __kmalloc_noprof+0xb9/0x5a0 [ 145.004328][ T8820] ? slhc_init+0x81/0x390 [ 145.004422][ T8820] ? slhc_init+0x57/0x390 [ 145.004454][ T8820] ? __pfx_ppp_ioctl+0x10/0x10 [ 145.004479][ T8820] slhc_init+0x81/0x390 [ 145.004505][ T8820] ? __pfx_ppp_ioctl+0x10/0x10 [ 145.004739][ T8820] ppp_ioctl+0xe9c/0x11c0 [ 145.004820][ T8820] ? __fget_files+0x184/0x1c0 [ 145.004874][ T8820] ? __pfx_ppp_ioctl+0x10/0x10 [ 145.004908][ T8820] __se_sys_ioctl+0xce/0x140 [ 145.004944][ T8820] __x64_sys_ioctl+0x43/0x50 [ 145.004996][ T8820] x64_sys_call+0x14b0/0x3000 [ 145.005059][ T8820] do_syscall_64+0xca/0x2b0 [ 145.005093][ T8820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.005121][ T8820] RIP: 0033:0x7f15c465f749 [ 145.005213][ T8820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.005236][ T8820] RSP: 002b:00007f15c30bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.005260][ T8820] RAX: ffffffffffffffda RBX: 00007f15c48b5fa0 RCX: 00007f15c465f749 [ 145.005286][ T8820] RDX: 0000200000000000 RSI: 0000000040047451 RDI: 0000000000000003 [ 145.005298][ T8820] RBP: 00007f15c30bf090 R08: 0000000000000000 R09: 0000000000000000 [ 145.005309][ T8820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.005321][ T8820] R13: 00007f15c48b6038 R14: 00007f15c48b5fa0 R15: 00007ffcc7d9e5a8 [ 145.005350][ T8820] [ 145.212203][ T8823] loop2: detected capacity change from 0 to 1024 [ 145.224669][ T8821] loop5: detected capacity change from 0 to 512 [ 145.231304][ T8821] EXT4-fs: Ignoring removed i_version option [ 145.268211][ T8821] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.286348][ T8823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.316718][ T8821] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1799: Failed to acquire dquot type 0 [ 145.401323][ T8832] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1799: Failed to acquire dquot type 0 [ 145.440219][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.591553][ T8844] loop2: detected capacity change from 0 to 128 [ 145.626279][ T8846] loop6: detected capacity change from 0 to 512 [ 145.654138][ T8846] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 145.677419][ T8841] lo speed is unknown, defaulting to 1000 [ 145.692673][ T8841] lo speed is unknown, defaulting to 1000 [ 145.705521][ T8846] EXT4-fs (loop6): 1 truncate cleaned up [ 145.716793][ T4968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.727334][ T8846] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.742480][ T8846] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.1809: corrupted in-inode xattr: overlapping e_value [ 145.758170][ T8846] EXT4-fs (loop6): Remounting filesystem read-only [ 145.785191][ T7046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.813467][ T8851] loop5: detected capacity change from 0 to 512 [ 145.828622][ T8851] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.837230][ T8851] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 145.850812][ T8841] lo speed is unknown, defaulting to 1000 [ 145.959902][ T8860] loop6: detected capacity change from 0 to 1024 [ 145.968204][ T8860] EXT4-fs: Ignoring removed oldalloc option [ 145.986999][ T8860] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.005162][ T8860] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.1814: lblock 0 mapped to illegal pblock 0 (length 1) [ 146.034718][ T8860] EXT4-fs (loop6): Remounting filesystem read-only [ 146.077191][ T7046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 146.111244][ T8869] loop2: detected capacity change from 0 to 512 [ 146.134668][ T8869] EXT4-fs: Ignoring removed i_version option [ 146.162238][ T8875] loop5: detected capacity change from 0 to 128 [ 146.171149][ T8869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.188603][ T8869] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1816: Failed to acquire dquot type 0 [ 146.204454][ T8869] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1816: Failed to acquire dquot type 0 [ 146.297264][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.321386][ T8873] lo speed is unknown, defaulting to 1000 [ 146.327840][ T8873] lo speed is unknown, defaulting to 1000 [ 146.413467][ T8873] lo speed is unknown, defaulting to 1000 [ 146.448143][ T8886] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 146.894072][ T8937] loop5: detected capacity change from 0 to 128 [ 147.157242][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1853'. [ 147.166239][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1853'. [ 147.247284][ T8968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.285035][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.416865][ T8985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1862'. [ 147.449161][ T8988] EXT4-fs: Ignoring removed i_version option [ 147.467284][ T8988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.545574][ T8988] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1860: Failed to acquire dquot type 0 [ 147.601642][ T4968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.642076][ T9002] 9p: Bad value for 'rfdno' [ 147.844828][ T9019] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 147.859296][ T9023] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1875'. [ 147.871938][ T9022] 9p: Bad value for 'rfdno' [ 147.935013][ T9016] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1874'. [ 148.535392][ T9014] Set syz1 is full, maxelem 65536 reached [ 148.619386][ T9057] netlink: 20 bytes leftover after parsing attributes in process `'. [ 148.820426][ T9074] IPVS: Error connecting to the multicast addr [ 148.872945][ T9074] EXT4-fs: Ignoring removed nobh option [ 148.911389][ T9074] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 148.949928][ T9074] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 148.991014][ T9074] EXT4-fs error (device loop5): ext4_get_journal_inode:5849: comm syz.5.1894: inode #4294967295: comm syz.5.1894: iget: illegal inode # [ 149.009190][ T9054] Set syz1 is full, maxelem 65536 reached [ 149.023034][ T9074] EXT4-fs (loop5): no journal found [ 149.028346][ T9074] EXT4-fs (loop5): can't get journal size [ 149.055038][ T9074] EXT4-fs (loop5): failed to initialize system zone (-22) [ 149.063600][ T9074] EXT4-fs (loop5): mount failed [ 149.096100][ T9074] netlink: 'syz.5.1894': attribute type 13 has an invalid length. [ 149.116068][ T9074] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1894'. [ 149.160070][ T9074] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1894'. [ 149.206476][ T9098] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1902'. [ 149.237223][ T29] kauditd_printk_skb: 622 callbacks suppressed [ 149.237242][ T29] audit: type=1326 audit(149.211:8177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9097 comm="syz.5.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe180d9f749 code=0x7ffc0000 [ 149.266549][ T29] audit: type=1326 audit(149.211:8178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9097 comm="syz.5.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe180d9f749 code=0x7ffc0000 [ 149.289513][ T29] audit: type=1326 audit(149.211:8179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9097 comm="syz.5.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe180d9f749 code=0x7ffc0000 [ 149.312601][ T29] audit: type=1326 audit(149.211:8181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9097 comm="syz.5.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe180d9f749 code=0x7ffc0000 [ 149.335482][ T29] audit: type=1326 audit(149.211:8180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9097 comm="syz.5.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe180d9f749 code=0x7ffc0000 [ 149.396471][ T9104] Invalid argument reading file caps for ./file0 [ 149.450282][ T9111] audit: audit_backlog=65 > audit_backlog_limit=64 [ 149.456985][ T9111] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 149.464687][ T9111] audit: backlog limit exceeded [ 149.488141][ T9111] audit: audit_backlog=65 > audit_backlog_limit=64 [ 149.494750][ T9111] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 149.598735][ T9111] lo speed is unknown, defaulting to 1000 [ 149.615383][ T9111] lo speed is unknown, defaulting to 1000 [ 149.703838][ T9111] lo speed is unknown, defaulting to 1000 [ 149.759683][ T9124] EXT4-fs: Ignoring removed orlov option [ 149.799838][ T9119] lo speed is unknown, defaulting to 1000 [ 149.806622][ T9124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.814803][ T9119] lo speed is unknown, defaulting to 1000 [ 149.928108][ T9119] lo speed is unknown, defaulting to 1000 [ 150.069009][ T9134] netlink: 'syz.6.1917': attribute type 12 has an invalid length. [ 150.218551][ T4968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.463150][ T9160] netlink: 'syz.6.1928': attribute type 12 has an invalid length. [ 150.534842][ T9162] set_capacity_and_notify: 4 callbacks suppressed [ 150.534862][ T9162] loop6: detected capacity change from 0 to 512 [ 150.555625][ T9164] delete_channel: no stack [ 150.560124][ T9164] delete_channel: no stack [ 150.575021][ T9162] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 150.616303][ T9162] EXT4-fs (loop6): 1 truncate cleaned up [ 150.622570][ T9162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.657122][ T9162] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.1929: corrupted in-inode xattr: overlapping e_value [ 150.674717][ T9162] EXT4-fs (loop6): Remounting filesystem read-only [ 150.724649][ T7046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.861649][ T9176] syzkaller0: entered promiscuous mode [ 150.867212][ T9176] syzkaller0: entered allmulticast mode [ 151.085917][ T9183] loop6: detected capacity change from 0 to 1024 [ 151.096227][ T9183] EXT4-fs: Ignoring removed oldalloc option [ 151.135788][ T9183] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.159693][ T9189] netlink: 'syz.1.1938': attribute type 13 has an invalid length. [ 151.187195][ T9183] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.1936: lblock 0 mapped to illegal pblock 0 (length 1) [ 151.200953][ T9179] lo speed is unknown, defaulting to 1000 [ 151.220601][ T9189] gretap0: refused to change device tx_queue_len [ 151.235873][ T9189] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 151.252034][ T9179] lo speed is unknown, defaulting to 1000 [ 151.267306][ T9183] EXT4-fs (loop6): Remounting filesystem read-only [ 151.298754][ T7046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 151.375059][ T9179] lo speed is unknown, defaulting to 1000 [ 151.827750][ T9206] loop5: detected capacity change from 0 to 512 [ 151.835672][ T9206] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 151.848509][ T9206] EXT4-fs (loop5): 1 truncate cleaned up [ 151.854889][ T9206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.868106][ T9206] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.1944: corrupted in-inode xattr: overlapping e_value [ 151.882533][ T9206] EXT4-fs (loop5): Remounting filesystem read-only [ 151.899771][ T4968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.965614][ T9214] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 151.972197][ T9214] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 151.979871][ T9214] vhci_hcd vhci_hcd.0: Device attached [ 151.988570][ T9215] vhci_hcd: connection closed [ 151.988811][ T385] vhci_hcd vhci_hcd.5: stop threads [ 151.998854][ T385] vhci_hcd vhci_hcd.5: release socket [ 152.004408][ T385] vhci_hcd vhci_hcd.5: disconnect device [ 152.271748][ T9232] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 152.316813][ T9238] loop6: detected capacity change from 0 to 512 [ 152.323818][ T9238] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 152.336468][ T9238] EXT4-fs (loop6): 1 truncate cleaned up [ 152.342653][ T9238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.356504][ T9238] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.1956: corrupted in-inode xattr: overlapping e_value [ 152.370754][ T9238] EXT4-fs (loop6): Remounting filesystem read-only [ 152.391370][ T7046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.574966][ T9255] netlink: 'syz.1.1962': attribute type 3 has an invalid length. [ 152.582864][ T9255] netlink: 'syz.1.1962': attribute type 1 has an invalid length. [ 152.590811][ T9255] __nla_validate_parse: 5 callbacks suppressed [ 152.590830][ T9255] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1962'. [ 152.666364][ T9268] loop6: detected capacity change from 0 to 1024 [ 152.675443][ T9268] EXT4-fs: Ignoring removed orlov option [ 152.687036][ T9268] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.771850][ T7046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.785136][ T9273] loop5: detected capacity change from 0 to 512 [ 152.808296][ T9273] EXT4-fs: Ignoring removed i_version option [ 152.837863][ T9275] loop6: detected capacity change from 0 to 512 [ 152.852751][ T9275] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 152.857377][ T9273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.867654][ T9275] EXT4-fs (loop6): 1 truncate cleaned up [ 152.883852][ T9275] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.916138][ T9275] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.1969: corrupted in-inode xattr: overlapping e_value [ 152.938228][ T9275] EXT4-fs (loop6): Remounting filesystem read-only [ 152.945584][ T4968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.975806][ T7046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.041062][ T9284] loop5: detected capacity change from 0 to 1024 [ 153.064918][ T9284] EXT4-fs: Ignoring removed oldalloc option [ 153.076449][ T9289] loop6: detected capacity change from 0 to 1024 [ 153.086280][ T9284] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.100987][ T9284] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.1972: lblock 0 mapped to illegal pblock 0 (length 1) [ 153.114881][ T9284] EXT4-fs (loop5): Remounting filesystem read-only [ 153.118538][ T9289] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.145218][ T4968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 153.179660][ T9296] loop5: detected capacity change from 0 to 1024 [ 153.207112][ T9296] EXT4-fs: Ignoring removed oldalloc option [ 153.220186][ T9296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.233558][ T7046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.254439][ T9296] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.1976: lblock 0 mapped to illegal pblock 0 (length 1) [ 153.270517][ T9296] EXT4-fs (loop5): Remounting filesystem read-only [ 153.301172][ T4968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 153.461681][ T9314] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 153.474772][ T9314] EXT4-fs (loop5): 1 truncate cleaned up [ 153.480926][ T9314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.513252][ T9314] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.1982: corrupted in-inode xattr: overlapping e_value [ 153.540278][ T9314] EXT4-fs (loop5): Remounting filesystem read-only [ 153.599405][ T4968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.815913][ T9326] netlink: 'syz.4.1986': attribute type 12 has an invalid length. [ 153.823795][ T9326] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1986'. [ 153.863415][ T9328] EXT4-fs: Ignoring removed oldalloc option [ 153.872498][ T9330] netlink: 'syz.6.1988': attribute type 1 has an invalid length. [ 153.880400][ T9330] netlink: 'syz.6.1988': attribute type 4 has an invalid length. [ 153.888205][ T9330] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1988'. [ 153.901976][ T9328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.244506][ T29] kauditd_printk_skb: 1898 callbacks suppressed [ 154.244542][ T29] audit: type=1326 audit(154.221:10079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe180d965e7 code=0x7ffc0000 [ 154.339158][ T29] audit: type=1326 audit(154.241:10080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe180d3b829 code=0x7ffc0000 [ 154.362055][ T29] audit: type=1326 audit(154.241:10081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe180d965e7 code=0x7ffc0000 [ 154.384960][ T29] audit: type=1326 audit(154.241:10082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe180d3b829 code=0x7ffc0000 [ 154.407843][ T29] audit: type=1326 audit(154.251:10083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe180d965e7 code=0x7ffc0000 [ 154.430676][ T29] audit: type=1326 audit(154.251:10084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe180d3b829 code=0x7ffc0000 [ 154.453629][ T29] audit: type=1326 audit(154.251:10085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe180d965e7 code=0x7ffc0000 [ 154.476465][ T29] audit: type=1326 audit(154.251:10086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe180d3b829 code=0x7ffc0000 [ 154.499442][ T29] audit: type=1326 audit(154.251:10087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe180d965e7 code=0x7ffc0000 [ 154.522251][ T29] audit: type=1326 audit(154.251:10088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe180d3b829 code=0x7ffc0000 [ 154.945205][ T9352] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 154.954010][ T9357] netlink: 'syz.1.1998': attribute type 27 has an invalid length. [ 154.961944][ T9357] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1998'. [ 155.006508][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1999'. [ 155.883856][ T9328] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.1987: lblock 0 mapped to illegal pblock 0 (length 1) [ 155.917023][ T9380] delete_channel: no stack [ 155.921776][ T9328] EXT4-fs (loop5): Remounting filesystem read-only [ 155.929661][ T9380] delete_channel: no stack [ 155.943646][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2008'. [ 155.958161][ T4968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 155.967965][ T9380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.975533][ T9380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.991767][ T9380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.999352][ T9380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.009996][ T9384] set_capacity_and_notify: 2 callbacks suppressed [ 156.010014][ T9384] loop6: detected capacity change from 0 to 512 [ 156.026990][ T9383] loop5: detected capacity change from 0 to 1024 [ 156.063486][ T9383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.074741][ T9384] EXT4-fs (loop6): too many log groups per flexible block group [ 156.083393][ T9384] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 156.092246][ T9384] EXT4-fs (loop6): mount failed [ 156.112315][ T4968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.175192][ T9390] loop6: detected capacity change from 0 to 1024 [ 156.190117][ T9390] EXT4-fs: Ignoring removed orlov option [ 156.225554][ T9390] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.240177][ T9399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.269059][ T9399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.455902][ T7046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.496405][ T9416] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2019'. [ 156.753573][ T9430] lo speed is unknown, defaulting to 1000 [ 156.759806][ T9430] lo speed is unknown, defaulting to 1000 [ 156.868353][ T9430] lo speed is unknown, defaulting to 1000 [ 156.899603][ T9440] loop6: detected capacity change from 0 to 1024 [ 156.912885][ T9440] EXT4-fs: Ignoring removed orlov option [ 156.920423][ T9442] loop5: detected capacity change from 0 to 1024 [ 156.947372][ T9440] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.967064][ T9442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.648377][ T8926] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.675398][ T7046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.745299][ T9477] netlink: 'syz.6.2040': attribute type 12 has an invalid length. [ 157.753163][ T9477] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2040'. [ 158.193758][ T37] bridge_slave_1: left allmulticast mode [ 158.199724][ T37] bridge_slave_1: left promiscuous mode [ 158.205459][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.219959][ T37] bridge_slave_0: left allmulticast mode [ 158.225741][ T37] bridge_slave_0: left promiscuous mode [ 158.231468][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.338001][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.353208][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.354854][ T9508] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9508 comm=syz.6.2051 [ 158.375052][ T37] bond0 (unregistering): Released all slaves [ 158.376826][ T9508] netlink: 'syz.6.2051': attribute type 1 has an invalid length. [ 158.392020][ T9490] lo speed is unknown, defaulting to 1000 [ 158.403844][ T9508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.412156][ T9490] lo speed is unknown, defaulting to 1000 [ 158.427484][ T9508] bond0: (slave dummy0): making interface the new active one [ 158.439940][ T9508] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 158.477177][ T9511] loop6: detected capacity change from 0 to 1024 [ 158.484095][ T9511] EXT4-fs: Ignoring removed oldalloc option [ 158.502117][ T9511] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.2052: lblock 0 mapped to illegal pblock 0 (length 1) [ 158.517124][ T9511] EXT4-fs (loop6): Remounting filesystem read-only [ 158.539620][ T9490] lo speed is unknown, defaulting to 1000 [ 158.685481][ T37] hsr_slave_0: left promiscuous mode [ 158.707525][ T37] hsr_slave_1: left promiscuous mode [ 158.713754][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.734761][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.778328][ T9526] loop6: detected capacity change from 0 to 128 [ 158.828174][ T37] team0 (unregistering): Port device team_slave_1 removed [ 158.879081][ T37] team0 (unregistering): Port device team_slave_0 removed [ 158.996526][ T9490] chnl_net:caif_netlink_parms(): no params data found [ 159.104014][ T9490] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.111153][ T9490] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.134012][ T9490] bridge_slave_0: entered allmulticast mode [ 159.141043][ T9490] bridge_slave_0: entered promiscuous mode [ 159.148366][ T9490] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.155496][ T9490] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.162878][ T9490] bridge_slave_1: entered allmulticast mode [ 159.169759][ T9490] bridge_slave_1: entered promiscuous mode [ 159.234874][ T9490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.258024][ T37] IPVS: stop unused estimator thread 0... [ 159.275100][ T9490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.292081][ T9559] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2069'. [ 159.362628][ T9490] team0: Port device team_slave_0 added [ 159.369858][ T9490] team0: Port device team_slave_1 added [ 159.396813][ T9490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.403868][ T9490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.429865][ T9490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.475076][ T9490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.482229][ T9490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.508341][ T9490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.550133][ T9490] hsr_slave_0: entered promiscuous mode [ 159.561372][ T9490] hsr_slave_1: entered promiscuous mode [ 159.574290][ T9490] debugfs: 'hsr0' already exists in 'hsr' [ 159.580149][ T9490] Cannot create hsr debugfs directory [ 159.672082][ T29] kauditd_printk_skb: 5754 callbacks suppressed [ 159.672100][ T29] audit: type=1326 audit(159.641:15843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9566 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 159.752054][ T29] audit: type=1326 audit(159.641:15844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9566 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 159.775081][ T29] audit: type=1326 audit(159.641:15845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9566 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 159.798226][ T29] audit: type=1326 audit(159.651:15846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9566 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 159.814455][ T9490] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 159.821315][ T29] audit: type=1326 audit(159.651:15847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9566 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 159.850794][ T29] audit: type=1326 audit(159.651:15848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9566 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 159.874017][ T29] audit: type=1326 audit(159.651:15849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9566 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 159.897106][ T29] audit: type=1326 audit(159.651:15850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9566 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 159.920137][ T29] audit: type=1326 audit(159.651:15851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9566 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 159.943117][ T29] audit: type=1326 audit(159.651:15852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9566 comm="syz.1.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 159.971062][ T9490] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 160.109462][ T9490] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 160.145503][ T9490] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 160.197011][ T9569] SELinux: failed to load policy [ 160.303970][ T9490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.311945][ T9582] netlink: 399 bytes leftover after parsing attributes in process `syz.4.2076'. [ 160.321085][ T9582] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 160.345493][ T9490] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.375155][ T9569] lo speed is unknown, defaulting to 1000 [ 160.390542][ T2735] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.397649][ T2735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.413780][ T9569] lo speed is unknown, defaulting to 1000 [ 160.422760][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.429971][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.603007][ T9605] geneve2: entered promiscuous mode [ 160.608378][ T9605] geneve2: entered allmulticast mode [ 160.653520][ T9490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.695410][ T9603] lo speed is unknown, defaulting to 1000 [ 160.753236][ T9603] lo speed is unknown, defaulting to 1000 [ 160.778194][ T9615] loop6: detected capacity change from 0 to 1024 [ 160.792683][ T9615] EXT4-fs: Ignoring removed oldalloc option [ 160.834857][ T9615] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.2084: lblock 0 mapped to illegal pblock 0 (length 1) [ 160.871537][ T9615] EXT4-fs (loop6): Remounting filesystem read-only [ 160.982845][ T9625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.013402][ T9625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.087247][ T9633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2086'. [ 161.103333][ T9490] veth0_vlan: entered promiscuous mode [ 161.135032][ T9490] veth1_vlan: entered promiscuous mode [ 161.157504][ T9490] veth0_macvtap: entered promiscuous mode [ 161.164905][ T9490] veth1_macvtap: entered promiscuous mode [ 161.210379][ T9490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.245311][ T9490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.267653][ T2735] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.597023][ T9650] loop7: detected capacity change from 0 to 512 [ 161.653344][ T9650] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 161.681059][ T9650] EXT4-fs (loop7): orphan cleanup on readonly fs [ 161.718565][ T9652] loop6: detected capacity change from 0 to 1024 [ 161.725962][ T9650] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.2044: Allocating blocks 41-42 which overlap fs metadata [ 161.786066][ T9650] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.2044: Allocating blocks 41-42 which overlap fs metadata [ 161.854308][ T2735] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.866897][ T2735] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.871908][ T9650] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.2044: Failed to acquire dquot type 1 [ 161.883299][ T2735] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.911028][ T9650] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 161.945230][ T9650] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.2044: corrupted inode contents [ 161.978921][ T9650] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #12: comm syz.7.2044: mark_inode_dirty error [ 162.009039][ T9650] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.2044: corrupted inode contents [ 162.009323][ T9650] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.2044: mark_inode_dirty error [ 162.027316][ T9650] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.2044: corrupted inode contents [ 162.027942][ T9650] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 162.028608][ T9650] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.2044: corrupted inode contents [ 162.029059][ T9650] EXT4-fs error (device loop7): ext4_truncate:4635: inode #12: comm syz.7.2044: mark_inode_dirty error [ 162.030062][ T9650] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 162.033796][ T9650] EXT4-fs (loop7): 1 truncate cleaned up [ 162.126792][ T9658] SELinux: failed to load policy [ 162.262297][ T9662] lo speed is unknown, defaulting to 1000 [ 162.275505][ T9662] lo speed is unknown, defaulting to 1000 [ 162.366895][ T9672] loop7: detected capacity change from 0 to 128 [ 162.373273][ T9671] dvmrp1: entered allmulticast mode [ 162.380275][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2098'. [ 162.716580][ T9682] lo speed is unknown, defaulting to 1000 [ 162.740646][ T9682] lo speed is unknown, defaulting to 1000 [ 162.929026][ T9695] loop6: detected capacity change from 0 to 512 [ 162.962851][ T9695] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 162.989613][ T9695] EXT4-fs (loop6): mount failed [ 163.170142][ T9717] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2111'. [ 163.515544][ T9729] netlink: 'syz.4.2116': attribute type 12 has an invalid length. [ 163.523423][ T9729] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2116'. [ 163.629375][ T9733] loop6: detected capacity change from 0 to 256 [ 163.689902][ T9731] lo speed is unknown, defaulting to 1000 [ 163.715043][ T9731] lo speed is unknown, defaulting to 1000 [ 164.114908][ T9757] netlink: 'syz.4.2129': attribute type 12 has an invalid length. [ 164.122866][ T9757] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2129'. [ 164.181224][ T9759] FAULT_INJECTION: forcing a failure. [ 164.181224][ T9759] name failslab, interval 1, probability 0, space 0, times 0 [ 164.193976][ T9759] CPU: 1 UID: 0 PID: 9759 Comm: syz.6.2130 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 164.194055][ T9759] Tainted: [W]=WARN [ 164.194063][ T9759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.194076][ T9759] Call Trace: [ 164.194082][ T9759] [ 164.194091][ T9759] __dump_stack+0x1d/0x30 [ 164.194119][ T9759] dump_stack_lvl+0x95/0xd0 [ 164.194142][ T9759] dump_stack+0x15/0x1b [ 164.194163][ T9759] should_fail_ex+0x265/0x280 [ 164.194186][ T9759] should_failslab+0x8c/0xb0 [ 164.194215][ T9759] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 164.194252][ T9759] ? __alloc_skb+0x2ff/0x4b0 [ 164.194287][ T9759] __alloc_skb+0x2ff/0x4b0 [ 164.194312][ T9759] ? __alloc_skb+0x228/0x4b0 [ 164.194339][ T9759] netlink_alloc_large_skb+0xbf/0xf0 [ 164.194382][ T9759] netlink_sendmsg+0x3cf/0x6b0 [ 164.194414][ T9759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.194499][ T9759] __sock_sendmsg+0x145/0x180 [ 164.194523][ T9759] ____sys_sendmsg+0x31e/0x4a0 [ 164.194583][ T9759] ___sys_sendmsg+0x17b/0x1d0 [ 164.194629][ T9759] __x64_sys_sendmsg+0xd4/0x160 [ 164.194675][ T9759] x64_sys_call+0x17ba/0x3000 [ 164.194764][ T9759] do_syscall_64+0xca/0x2b0 [ 164.194888][ T9759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.194911][ T9759] RIP: 0033:0x7f15c465f749 [ 164.194926][ T9759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.194944][ T9759] RSP: 002b:00007f15c30bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.194962][ T9759] RAX: ffffffffffffffda RBX: 00007f15c48b5fa0 RCX: 00007f15c465f749 [ 164.194974][ T9759] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 164.195024][ T9759] RBP: 00007f15c30bf090 R08: 0000000000000000 R09: 0000000000000000 [ 164.195039][ T9759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.195063][ T9759] R13: 00007f15c48b6038 R14: 00007f15c48b5fa0 R15: 00007ffcc7d9e5a8 [ 164.195086][ T9759] [ 164.587159][ T9780] loop7: detected capacity change from 0 to 512 [ 164.593720][ T9780] EXT4-fs: Ignoring removed i_version option [ 164.607268][ T9782] loop6: detected capacity change from 0 to 128 [ 164.632589][ T9779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2137'. [ 164.643863][ T9780] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.2133: Failed to acquire dquot type 0 [ 164.679480][ T9780] __quota_error: 517 callbacks suppressed [ 164.679501][ T9780] Quota error (device loop7): find_block_dqentry: Quota for id 0 referenced but not present [ 164.695664][ T9780] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 164.705086][ T9780] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.2133: Failed to acquire dquot type 0 [ 164.734939][ T9792] batadv_slave_0: entered promiscuous mode [ 164.740919][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2140'. [ 164.770924][ T9792] ref_ctr increment failed for inode: 0x9cf offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881266e6c00 [ 164.801773][ T9796] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2142'. [ 164.899883][ T9803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.919566][ T9803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.977452][ T9808] loop7: detected capacity change from 0 to 1024 [ 165.205934][ T9824] loop6: detected capacity change from 0 to 128 [ 165.232185][ T9819] SELinux: failed to load policy [ 165.278170][ T9830] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2152'. [ 165.327093][ T9819] lo speed is unknown, defaulting to 1000 [ 165.333509][ T9819] lo speed is unknown, defaulting to 1000 [ 165.540499][ T9836] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2155'. [ 165.577555][ T9836] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2155'. [ 165.613712][ T9836] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2155'. [ 165.674661][ T29] audit: type=1326 audit(165.651:16364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9841 comm="syz.1.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 165.750373][ T9844] 9p: Bad value for 'rfdno' [ 165.764396][ T29] audit: type=1326 audit(165.681:16365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9841 comm="syz.1.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 165.764506][ T29] audit: type=1326 audit(165.681:16366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9841 comm="syz.1.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 165.764540][ T29] audit: type=1326 audit(165.681:16367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9841 comm="syz.1.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 165.764565][ T29] audit: type=1326 audit(165.681:16368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9841 comm="syz.1.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 165.764630][ T29] audit: type=1326 audit(165.681:16369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9841 comm="syz.1.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 165.764774][ T29] audit: type=1326 audit(165.681:16370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9841 comm="syz.1.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 165.764803][ T29] audit: type=1326 audit(165.681:16371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9841 comm="syz.1.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd493b0f749 code=0x7ffc0000 [ 165.878796][ T176] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.939060][ T176] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.988692][ T176] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.028296][ T176] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.090047][ T9849] lo speed is unknown, defaulting to 1000 [ 166.193444][ T9849] lo speed is unknown, defaulting to 1000 [ 166.252916][ T176] bridge_slave_1: left allmulticast mode [ 166.259038][ T176] bridge_slave_1: left promiscuous mode [ 166.264901][ T176] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.301419][ T176] bridge_slave_0: left allmulticast mode [ 166.307169][ T176] bridge_slave_0: left promiscuous mode [ 166.312873][ T176] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.401986][ T9874] SELinux: failed to load policy [ 166.409900][ T176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.420823][ T176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.431461][ T176] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 166.441078][ T176] bond0 (unregistering): Released all slaves [ 166.450377][ T176] bond1 (unregistering): Released all slaves [ 166.460399][ T9876] netlink: 'syz.4.2166': attribute type 12 has an invalid length. [ 166.578178][ T9874] lo speed is unknown, defaulting to 1000 [ 166.608293][ T9874] lo speed is unknown, defaulting to 1000 [ 166.617105][ T9849] chnl_net:caif_netlink_parms(): no params data found [ 166.771262][ T176] hsr_slave_0: left promiscuous mode [ 166.784745][ T176] hsr_slave_1: left promiscuous mode [ 166.796206][ T176] veth1_macvtap: left promiscuous mode [ 166.801834][ T176] veth0_macvtap: left promiscuous mode [ 166.807603][ T176] veth1_vlan: left promiscuous mode [ 166.813026][ T176] veth0_vlan: left promiscuous mode [ 166.902589][ T176] team_slave_1 (unregistering): left promiscuous mode [ 166.913393][ T176] team0 (unregistering): Port device team_slave_1 removed [ 166.924818][ T176] team_slave_0 (unregistering): left promiscuous mode [ 166.933412][ T176] team0 (unregistering): Port device team_slave_0 removed [ 166.988933][ T9891] lo speed is unknown, defaulting to 1000 [ 166.994800][ T23] lo speed is unknown, defaulting to 1000 [ 166.995621][ T9849] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.000625][ T23] syz0: Port: 1 Link DOWN [ 167.012165][ T9849] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.072305][ T9849] bridge_slave_0: entered allmulticast mode [ 167.079314][ T9849] bridge_slave_0: entered promiscuous mode [ 167.086082][ T9891] lo speed is unknown, defaulting to 1000 [ 167.087264][ T9849] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.098988][ T9849] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.108997][ T9849] bridge_slave_1: entered allmulticast mode [ 167.117107][ T9849] bridge_slave_1: entered promiscuous mode [ 167.149508][ T9849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.163843][ T9849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.216321][ T9849] team0: Port device team_slave_0 added [ 167.228058][ T9849] team0: Port device team_slave_1 added [ 167.281605][ T9849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.288643][ T9849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.314637][ T9849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.382901][ T9849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.390071][ T9849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.416039][ T9849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.506398][ T9907] netlink: 'syz.6.2175': attribute type 12 has an invalid length. [ 167.531134][ T9849] hsr_slave_0: entered promiscuous mode [ 167.544719][ T9849] hsr_slave_1: entered promiscuous mode [ 167.551911][ T9909] loop6: detected capacity change from 0 to 2048 [ 167.693238][ T7046] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 167.721542][ T9900] syz.1.2173 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 167.735483][ T9900] CPU: 0 UID: 0 PID: 9900 Comm: syz.1.2173 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 167.735569][ T9900] Tainted: [W]=WARN [ 167.735578][ T9900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.735596][ T9900] Call Trace: [ 167.735604][ T9900] [ 167.735614][ T9900] __dump_stack+0x1d/0x30 [ 167.735699][ T9900] dump_stack_lvl+0x95/0xd0 [ 167.735725][ T9900] dump_stack+0x15/0x1b [ 167.735752][ T9900] dump_header+0x81/0x240 [ 167.735827][ T9900] oom_kill_process+0x295/0x350 [ 167.735858][ T9900] out_of_memory+0x97b/0xb80 [ 167.735937][ T9900] try_charge_memcg+0x610/0xa10 [ 167.735984][ T9900] obj_cgroup_charge_pages+0xa6/0x150 [ 167.736028][ T9900] __memcg_kmem_charge_page+0x9f/0x170 [ 167.736110][ T9900] __alloc_frozen_pages_noprof+0x18f/0x360 [ 167.736154][ T9900] alloc_pages_mpol+0xb3/0x260 [ 167.736193][ T9900] alloc_pages_noprof+0x90/0x130 [ 167.736282][ T9900] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 167.736331][ T9900] __kvmalloc_node_noprof+0x492/0x6b0 [ 167.736399][ T9900] ? ip_set_alloc+0x24/0x30 [ 167.736436][ T9900] ? ip_set_alloc+0x24/0x30 [ 167.736470][ T9900] ? __slab_alloc+0x25/0x50 [ 167.736513][ T9900] ip_set_alloc+0x24/0x30 [ 167.736548][ T9900] hash_netiface_create+0x282/0x740 [ 167.736592][ T9900] ? __pfx_hash_netiface_create+0x10/0x10 [ 167.736633][ T9900] ip_set_create+0x3cc/0x970 [ 167.736737][ T9900] ? __nla_parse+0x40/0x60 [ 167.736771][ T9900] nfnetlink_rcv_msg+0x4c6/0x590 [ 167.736831][ T9900] netlink_rcv_skb+0x123/0x220 [ 167.736869][ T9900] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 167.736964][ T9900] nfnetlink_rcv+0x167/0x16c0 [ 167.736998][ T9900] ? sched_clock+0x3f/0x60 [ 167.737097][ T9900] ? trace_clock_local+0x3f/0x60 [ 167.737129][ T9900] ? __rb_reserve_next+0x43e/0x6f0 [ 167.737160][ T9900] ? rb_commit+0x3e9/0x420 [ 167.737229][ T9900] ? __rcu_read_unlock+0x4f/0x70 [ 167.737251][ T9900] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 167.737287][ T9900] ? perf_cgroup_switch+0x10c/0x480 [ 167.737313][ T9900] ? xfd_validate_state+0x45/0xf0 [ 167.737345][ T9900] ? save_fpregs_to_fpstate+0x100/0x160 [ 167.737403][ T9900] ? _raw_spin_unlock+0x26/0x50 [ 167.737426][ T9900] ? finish_task_switch+0x7a/0x2a0 [ 167.737458][ T9900] ? __schedule+0x85f/0xcd0 [ 167.737485][ T9900] ? should_fail_ex+0x30/0x280 [ 167.737528][ T9900] ? selinux_nlmsg_lookup+0x99/0x890 [ 167.737581][ T9900] ? __rcu_read_unlock+0x34/0x70 [ 167.737606][ T9900] ? __netlink_lookup+0x266/0x2a0 [ 167.737652][ T9900] netlink_unicast+0x5c0/0x690 [ 167.737702][ T9900] netlink_sendmsg+0x58b/0x6b0 [ 167.737840][ T9900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.737966][ T9900] __sock_sendmsg+0x145/0x180 [ 167.738060][ T9900] ____sys_sendmsg+0x31e/0x4a0 [ 167.738099][ T9900] ___sys_sendmsg+0x17b/0x1d0 [ 167.738192][ T9900] __x64_sys_sendmsg+0xd4/0x160 [ 167.738312][ T9900] x64_sys_call+0x17ba/0x3000 [ 167.738343][ T9900] do_syscall_64+0xca/0x2b0 [ 167.738383][ T9900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.738477][ T9900] RIP: 0033:0x7fd493b0f749 [ 167.738493][ T9900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.738512][ T9900] RSP: 002b:00007fd49256f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.738533][ T9900] RAX: ffffffffffffffda RBX: 00007fd493d65fa0 RCX: 00007fd493b0f749 [ 167.738546][ T9900] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 167.738620][ T9900] RBP: 00007fd493b93f91 R08: 0000000000000000 R09: 0000000000000000 [ 167.738632][ T9900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.738644][ T9900] R13: 00007fd493d66038 R14: 00007fd493d65fa0 R15: 00007ffc6f7b08f8 [ 167.738668][ T9900] [ 167.738677][ T9900] memory: usage 307200kB, limit 307200kB, failcnt 3087 [ 167.756546][ T7046] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 167.764362][ T9900] memory+swap: usage 307852kB, limit 9007199254740988kB, failcnt 0 [ 168.016312][ T9915] loop7: detected capacity change from 0 to 1024 [ 168.017901][ T9900] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 168.023386][ T9915] EXT4-fs: Ignoring removed orlov option [ 168.028262][ T9900] Memory cgroup stats for /syz1: [ 168.028900][ T9900] cache 0 [ 168.098931][ T9915] EXT4-fs mount: 13 callbacks suppressed [ 168.098979][ T9915] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.100820][ T9900] rss 0 [ 168.175325][ T9900] shmem 0 [ 168.178281][ T9900] mapped_file 0 [ 168.181765][ T9900] dirty 0 [ 168.184799][ T9900] writeback 0 [ 168.188265][ T9900] workingset_refault_anon 3799 [ 168.193049][ T9900] workingset_refault_file 5255 [ 168.197848][ T9900] swap 667648 [ 168.201294][ T9900] swapcached 4096 [ 168.204965][ T9900] pgpgin 200033 [ 168.208524][ T9900] pgpgout 200031 [ 168.212218][ T9900] pgfault 146804 [ 168.215815][ T9900] pgmajfault 861 [ 168.219436][ T9900] inactive_anon 0 [ 168.223166][ T9900] active_anon 4096 [ 168.226990][ T9900] inactive_file 0 [ 168.230674][ T9900] active_file 4096 [ 168.234431][ T9900] unevictable 0 [ 168.237905][ T9900] hierarchical_memory_limit 314572800 [ 168.243303][ T9900] hierarchical_memsw_limit 9223372036854771712 [ 168.249501][ T9900] total_cache 0 [ 168.252974][ T9900] total_rss 0 [ 168.256373][ T9900] total_shmem 0 [ 168.259843][ T9900] total_mapped_file 0 [ 168.263914][ T9900] total_dirty 0 [ 168.267454][ T9900] total_writeback 0 [ 168.271272][ T9900] total_workingset_refault_anon 3799 [ 168.276630][ T9900] total_workingset_refault_file 5255 [ 168.281947][ T9900] total_swap 667648 [ 168.285807][ T9900] total_swapcached 4096 [ 168.290030][ T9900] total_pgpgin 200033 [ 168.294100][ T9900] total_pgpgout 200031 [ 168.298226][ T9900] total_pgfault 146804 [ 168.302317][ T9900] total_pgmajfault 861 [ 168.306487][ T9900] total_inactive_anon 0 [ 168.310682][ T9900] total_active_anon 4096 [ 168.315135][ T9900] total_inactive_file 0 [ 168.319488][ T9900] total_active_file 4096 [ 168.323749][ T9900] total_unevictable 0 [ 168.327802][ T9900] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2173,pid=9899,uid=0 [ 168.342508][ T9900] Memory cgroup out of memory: Killed process 9899 (syz.1.2173) total-vm:93968kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 168.366734][ T9490] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.384959][ T7046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.475660][ T9921] netlink: 'syz.6.2177': attribute type 12 has an invalid length. [ 168.483525][ T9921] __nla_validate_parse: 6 callbacks suppressed [ 168.483541][ T9921] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2177'. [ 168.526868][ T9849] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 168.553151][ T9849] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 168.582877][ T9849] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 168.611836][ T9849] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 168.651734][ T9931] netlink: 'syz.1.2183': attribute type 62 has an invalid length. [ 168.676358][ T9937] loop7: detected capacity change from 0 to 1024 [ 168.695892][ T9937] EXT4-fs: Ignoring removed oldalloc option [ 168.747429][ T9937] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.760984][ T9849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.782930][ T9849] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.792428][ T9937] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: comm syz.7.2185: lblock 0 mapped to illegal pblock 0 (length 1) [ 168.810953][ T9937] EXT4-fs (loop7): Remounting filesystem read-only [ 168.813989][ T385] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.824588][ T385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.839686][ T385] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.846829][ T385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.855302][ T9490] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 168.864526][ T9943] lo speed is unknown, defaulting to 1000 [ 168.901078][ T9951] loop6: detected capacity change from 0 to 512 [ 168.909957][ T9951] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 168.920848][ T9951] EXT4-fs (loop6): orphan cleanup on readonly fs [ 168.927941][ T9951] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.2189: Allocating blocks 41-42 which overlap fs metadata [ 168.942262][ T9951] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.2189: Allocating blocks 41-42 which overlap fs metadata [ 168.956476][ T9951] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.2189: Failed to acquire dquot type 1 [ 168.968805][ T9951] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 168.987684][ T9951] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.2189: corrupted inode contents [ 169.001012][ T9951] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.2189: mark_inode_dirty error [ 169.012800][ T9951] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.2189: corrupted inode contents [ 169.025715][ T9951] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.2189: mark_inode_dirty error [ 169.039344][ T9951] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.2189: corrupted inode contents [ 169.051770][ T9951] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 169.061397][ T9951] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.2189: corrupted inode contents [ 169.073600][ T9951] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.2189: mark_inode_dirty error [ 169.085788][ T9951] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 169.108803][ T9951] EXT4-fs (loop6): 1 truncate cleaned up [ 169.125444][ T9951] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 169.148307][ T9951] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.176361][ T9849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.414583][ T9971] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2192'. [ 169.720107][ T9849] veth0_vlan: entered promiscuous mode [ 169.728339][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 169.728405][ T29] audit: type=1326 audit(169.711:16498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe288bcf749 code=0x7ffc0000 [ 169.774632][ T9985] netlink: 'syz.4.2195': attribute type 12 has an invalid length. [ 169.782528][ T9985] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2195'. [ 169.819559][ T29] audit: type=1326 audit(169.711:16499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe288bcf749 code=0x7ffc0000 [ 169.822294][ T9849] veth1_vlan: entered promiscuous mode [ 169.842594][ T29] audit: type=1326 audit(169.741:16500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe288bcf749 code=0x7ffc0000 [ 169.870994][ T29] audit: type=1326 audit(169.741:16501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe288bcf749 code=0x7ffc0000 [ 169.893937][ T29] audit: type=1326 audit(169.741:16502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe288bcf749 code=0x7ffc0000 [ 169.916989][ T29] audit: type=1326 audit(169.741:16503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe288bcf749 code=0x7ffc0000 [ 169.939991][ T29] audit: type=1326 audit(169.741:16504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe288bcf749 code=0x7ffc0000 [ 169.962931][ T29] audit: type=1326 audit(169.741:16505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe288bcf749 code=0x7ffc0000 [ 169.985854][ T29] audit: type=1326 audit(169.741:16506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe288bcf749 code=0x7ffc0000 [ 170.008689][ T29] audit: type=1326 audit(169.791:16507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.4.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe288bcf749 code=0x7ffc0000 [ 170.039311][ T9849] veth0_macvtap: entered promiscuous mode [ 170.138414][ T9849] veth1_macvtap: entered promiscuous mode [ 170.198694][ T9989] lo speed is unknown, defaulting to 1000 [ 170.202428][ T9994] loop7: detected capacity change from 0 to 1024 [ 170.211230][ T9994] EXT4-fs: Ignoring removed oldalloc option [ 170.218470][ T9849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.258253][ T9849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.287565][ T9994] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.302074][ T385] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.344241][ T385] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.371969][ T9994] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: comm syz.7.2197: lblock 0 mapped to illegal pblock 0 (length 1) [ 170.392162][ T385] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.429611][ T385] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.442021][ T9994] EXT4-fs (loop7): Remounting filesystem read-only [ 170.478085][ T9490] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 170.518826][T10007] loop6: detected capacity change from 0 to 512 [ 170.528152][T10010] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=10010 comm=syz.7.2200 [ 170.534832][T10007] EXT4-fs: Ignoring removed nobh option [ 170.564135][T10010] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2200'. [ 170.590339][T10007] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #3: comm ÿ: corrupted inode contents [ 170.628793][T10007] EXT4-fs (loop6): Remounting filesystem read-only [ 170.646061][T10007] EXT4-fs (loop6): 1 truncate cleaned up [ 170.652942][T10007] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.678451][T10018] loop8: detected capacity change from 0 to 128 [ 170.685447][ T7046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.846995][T10026] netlink: 'syz.1.2207': attribute type 12 has an invalid length. [ 170.855060][T10026] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2207'. [ 170.865839][T10028] loop8: detected capacity change from 0 to 1024 [ 170.872714][T10028] EXT4-fs: Ignoring removed orlov option [ 170.886516][T10028] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.990813][T10041] tipc: Enabling of bearer rejected, failed to enable media [ 171.046218][T10047] loop6: detected capacity change from 0 to 128 [ 171.094765][ T9849] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.133817][T10039] lo speed is unknown, defaulting to 1000 [ 171.229330][T10057] netlink: 'syz.6.2220': attribute type 12 has an invalid length. [ 171.237403][T10057] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2220'. [ 171.262805][T10060] loop8: detected capacity change from 0 to 512 [ 171.270923][T10060] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 171.280831][T10060] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.334383][T10065] EXT4-fs: Ignoring removed oldalloc option [ 171.357891][T10065] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.387094][T10066] bio_check_eod: 29 callbacks suppressed [ 171.387113][T10066] syz.8.2221: attempt to access beyond end of device [ 171.387113][T10066] loop8: rw=8390659, sector=268440016, nr_sectors = 16128 limit=512 [ 171.415631][T10065] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.2223: lblock 0 mapped to illegal pblock 0 (length 1) [ 171.429988][T10065] EXT4-fs (loop6): Remounting filesystem read-only [ 171.453271][ T7046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 171.513250][T10080] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2229'. [ 171.536412][T10080] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2229'. [ 171.623558][T10095] netlink: 'syz.6.2234': attribute type 12 has an invalid length. [ 171.631550][T10095] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2234'. [ 171.655973][T10096] EXT4-fs: Ignoring removed nobh option [ 171.663041][T10096] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 171.678445][T10100] EXT4-fs: Ignoring removed orlov option [ 171.700767][T10100] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.784083][T10106] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2238'. [ 171.793763][ T9490] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.970713][ T9849] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.074043][T10129] tipc: Started in network mode [ 172.079094][T10129] tipc: Node identity 00000000ff0000000000000000000001, cluster identity 4711 [ 172.088151][T10129] tipc: Enabling of bearer rejected, failed to enable media [ 172.186231][T10139] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.243801][ T7046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.277662][T10143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.302626][T10143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.321805][T10143] bond0 (unregistering): Released all slaves [ 172.396462][T10152] netlink: 'syz.1.2259': attribute type 12 has an invalid length. [ 172.645677][T10185] set_capacity_and_notify: 6 callbacks suppressed [ 172.645697][T10185] loop7: detected capacity change from 0 to 256 [ 172.677189][T10177] lo speed is unknown, defaulting to 1000 [ 172.817749][T10201] loop7: detected capacity change from 0 to 1024 [ 172.825145][T10201] EXT4-fs: Ignoring removed oldalloc option [ 172.842634][T10201] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.857907][T10201] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: comm syz.7.2279: lblock 0 mapped to illegal pblock 0 (length 1) [ 172.873398][T10201] EXT4-fs (loop7): Remounting filesystem read-only [ 172.893211][ T9490] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 173.381214][T10233] loop6: detected capacity change from 0 to 512 [ 173.388290][T10233] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 173.398260][T10233] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 173.427167][T10235] loop8: detected capacity change from 0 to 1024 [ 173.433889][T10235] EXT4-fs: Ignoring removed oldalloc option [ 173.459415][T10235] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.473490][T10235] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: comm syz.8.2292: lblock 0 mapped to illegal pblock 0 (length 1) [ 173.487342][T10235] EXT4-fs (loop8): Remounting filesystem read-only [ 173.505249][ T9849] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 173.605746][T10233] loop6: detected capacity change from 0 to 512 [ 173.613771][T10233] EXT4-fs (loop6): failed to initialize system zone (-117) [ 173.622050][T10233] EXT4-fs (loop6): mount failed [ 173.652496][T10242] lo speed is unknown, defaulting to 1000 [ 173.735953][T10247] __nla_validate_parse: 15 callbacks suppressed [ 173.735973][T10247] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2295'. [ 173.822770][T10253] lo speed is unknown, defaulting to 1000 [ 173.827599][T10256] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2299'. [ 173.846433][T10253] lo speed is unknown, defaulting to 1000 [ 173.862293][T10253] lo speed is unknown, defaulting to 1000 [ 173.874180][T10254] loop7: detected capacity change from 0 to 2048 [ 173.915517][T10254] Alternate GPT is invalid, using primary GPT. [ 173.919786][T10251] lo speed is unknown, defaulting to 1000 [ 173.922061][T10254] loop7: p1 p2 p3 [ 173.931242][T10254] loop7: partition table partially beyond EOD, truncated [ 173.931842][T10263] loop8: detected capacity change from 0 to 512 [ 173.958114][T10263] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.013015][T10253] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 174.062814][T10253] lo speed is unknown, defaulting to 1000 [ 174.086858][T10253] lo speed is unknown, defaulting to 1000 [ 174.097403][T10267] netlink: 'syz.7.2302': attribute type 1 has an invalid length. [ 174.109289][T10253] lo speed is unknown, defaulting to 1000 [ 174.128477][T10267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.138565][T10253] lo speed is unknown, defaulting to 1000 [ 174.148351][T10267] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2302'. [ 174.167643][T10253] lo speed is unknown, defaulting to 1000 [ 174.179457][T10267] netlink: 'syz.7.2302': attribute type 13 has an invalid length. [ 174.197699][T10253] lo speed is unknown, defaulting to 1000 [ 174.240830][T10271] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2303'. [ 174.291091][T10267] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.298359][T10267] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.309311][T10276] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 174.409537][T10267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.436484][T10267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.563241][T10271] IPVS: Error connecting to the multicast addr [ 174.570487][ T176] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.606945][ T176] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.626833][ T176] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.647215][ T176] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.769772][ T29] kauditd_printk_skb: 1179 callbacks suppressed [ 174.769788][ T29] audit: type=1400 audit(174.741:17685): avc: denied { append } for pid=10287 comm="syz.7.2310" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 174.781056][T10295] netlink: 'syz.7.2310': attribute type 4 has an invalid length. [ 174.829434][ T29] audit: type=1326 audit(174.791:17686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.6.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c465f749 code=0x7ffc0000 [ 174.852634][ T29] audit: type=1326 audit(174.791:17687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.6.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15c465f749 code=0x7ffc0000 [ 174.875682][ T29] audit: type=1326 audit(174.791:17688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.6.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c465f749 code=0x7ffc0000 [ 174.884428][T10293] netlink: 'syz.6.2312': attribute type 12 has an invalid length. [ 174.898696][ T29] audit: type=1326 audit(174.791:17689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.6.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f15c465f749 code=0x7ffc0000 [ 174.898737][ T29] audit: type=1326 audit(174.791:17690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.6.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c465f749 code=0x7ffc0000 [ 174.906577][T10293] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2312'. [ 174.961701][ T29] audit: type=1326 audit(174.791:17691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.6.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c465f749 code=0x7ffc0000 [ 174.984975][ T29] audit: type=1326 audit(174.791:17692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.6.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f15c465f749 code=0x7ffc0000 [ 175.018811][ T29] audit: type=1326 audit(174.921:17693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.6.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c465f749 code=0x7ffc0000 [ 175.041943][ T29] audit: type=1326 audit(174.921:17694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.6.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c465f749 code=0x7ffc0000 [ 175.115252][T10307] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2318'. [ 175.127402][T10299] lo speed is unknown, defaulting to 1000 [ 175.135006][T10307] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2318'. [ 175.261962][T10316] netlink: 'syz.8.2322': attribute type 12 has an invalid length. [ 175.269925][T10316] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2322'. [ 175.299799][T10299] lo speed is unknown, defaulting to 1000 [ 175.313041][T10323] netlink: 'syz.6.2320': attribute type 3 has an invalid length. [ 175.320975][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2320'. [ 175.331209][T10318] siw: device registration error -23 [ 175.350287][T10323] loop6: detected capacity change from 0 to 512 [ 175.364687][T10323] EXT4-fs: Ignoring removed nobh option [ 175.468253][T10323] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #3: comm syz.6.2320: corrupted inode contents [ 175.483475][T10323] EXT4-fs (loop6): Remounting filesystem read-only [ 175.504982][T10323] EXT4-fs (loop6): 1 truncate cleaned up [ 175.547925][T10323] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.976222][T10342] loop8: detected capacity change from 0 to 512 [ 175.983656][T10342] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 175.997356][T10342] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2329: bg 0: block 384: padding at end of block bitmap is not set [ 176.012223][T10342] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 176.021898][T10342] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #11: comm syz.8.2329: attempt to clear invalid blocks 983260 len 1 [ 176.044072][T10342] EXT4-fs error (device loop8): __ext4_get_inode_loc:4830: comm syz.8.2329: Invalid inode table block 0 in block_group 0 [ 176.061191][T10342] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 176.065108][ T7046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.086655][T10342] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 176.096654][T10342] EXT4-fs error (device loop8): __ext4_get_inode_loc:4830: comm syz.8.2329: Invalid inode table block 0 in block_group 0 [ 176.109732][T10342] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 176.120781][T10342] EXT4-fs error (device loop8): ext4_truncate:4635: inode #11: comm syz.8.2329: mark_inode_dirty error [ 176.132290][T10342] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 176.141841][T10342] EXT4-fs (loop8): 1 truncate cleaned up [ 176.148562][T10342] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.164387][T10342] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2329'. [ 176.199699][ T9849] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.225736][T10349] loop8: detected capacity change from 0 to 512 [ 176.235186][T10349] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 176.817052][T10357] lo speed is unknown, defaulting to 1000 [ 176.905097][T10357] lo speed is unknown, defaulting to 1000 [ 176.934275][T10360] siw: device registration error -23 Connection to 10.128.0.16 closed by remote host. [ 177.225300][T10371] bridge0: port 3(vlan2) entered blocking state [ 177.231875][T10371] bridge0: port 3(vlan2) entered disabled state [ 177.312759][T10371] vlan2: entered allmulticast mode [ 177.318041][T10371] bridge0: entered allmulticast mode [ 177.344805][T10371] vlan2: left allmulticast mode [ 177.349807][T10371] bridge0: left allmulticast mode [ 177.551448][ T9849] ================================================================== [ 177.559686][ T9849] BUG: KCSAN: data-race in free_pid / zap_pid_ns_processes [ 177.566943][ T9849] [ 177.569308][ T9849] read-write to 0xffff888104d2e580 of 4 bytes by task 10349 on cpu 0: [ 177.577503][ T9849] free_pid+0xb9/0x1d0 [ 177.581596][ T9849] free_pids+0x54/0xb0 [ 177.585672][ T9849] release_task+0x9a7/0xb60 [ 177.590208][ T9849] do_exit+0xd4d/0x1590 [ 177.594372][ T9849] do_group_exit+0xff/0x140 [ 177.598915][ T9849] get_signal+0xe58/0xf70 [ 177.603271][ T9849] arch_do_signal_or_restart+0x96/0x450 [ 177.608825][ T9849] exit_to_user_mode_loop+0x6a/0x740 [ 177.614109][ T9849] do_syscall_64+0x1e1/0x2b0 [ 177.618747][ T9849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.624674][ T9849] [ 177.626997][ T9849] read to 0xffff888104d2e580 of 4 bytes by task 9849 on cpu 1: [ 177.634540][ T9849] zap_pid_ns_processes+0x1fe/0x2d0 [ 177.639760][ T9849] do_exit+0x13db/0x1590 [ 177.644013][ T9849] do_group_exit+0xff/0x140 [ 177.648533][ T9849] get_signal+0xe58/0xf70 [ 177.652873][ T9849] arch_do_signal_or_restart+0x96/0x450 [ 177.658431][ T9849] exit_to_user_mode_loop+0x6a/0x740 [ 177.663746][ T9849] do_syscall_64+0x1e1/0x2b0 [ 177.668380][ T9849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.674285][ T9849] [ 177.676630][ T9849] value changed: 0x00000002 -> 0x00000001 [ 177.682364][ T9849] [ 177.684691][ T9849] Reported by Kernel Concurrency Sanitizer on: [ 177.690939][ T9849] CPU: 1 UID: 0 PID: 9849 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 177.702407][ T9849] Tainted: [W]=WARN [ 177.706216][ T9849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.716277][ T9849] ================================================================== [ 178.298489][ T37] bridge_slave_1: left allmulticast mode [ 178.304145][ T37] bridge_slave_1: left promiscuous mode [ 178.309845][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.317518][ T37] bridge_slave_0: left promiscuous mode [ 178.323220][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.331502][ T37] bridge_slave_1: left allmulticast mode [ 178.337249][ T37] bridge_slave_1: left promiscuous mode [ 178.342974][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.350868][ T37] bridge_slave_0: left allmulticast mode [ 178.356608][ T37] bridge_slave_0: left promiscuous mode [ 178.362351][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.371020][ T37] bridge_slave_1: left allmulticast mode [ 178.376707][ T37] bridge_slave_1: left promiscuous mode [ 178.382435][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.390255][ T37] bridge_slave_0: left allmulticast mode [ 178.396019][ T37] bridge_slave_0: left promiscuous mode [ 178.401702][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.447869][ T37] dvmrp1 (unregistering): left allmulticast mode [ 178.546533][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.555880][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.565012][ T37] bond0 (unregistering): Released all slaves [ 178.573417][ T37] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 178.581826][ T37] wireguard0: left promiscuous mode [ 178.588087][ T37] bond1 (unregistering): Released all slaves [ 178.596321][ T37] bond2 (unregistering): Released all slaves [ 178.658247][ T37] bond0 (unregistering): Released all slaves [ 178.709105][ T37] tipc: Disabling bearer [ 178.714082][ T37] tipc: Left network mode [ 178.825309][ T37] hsr_slave_0: left promiscuous mode [ 178.830999][ T37] hsr_slave_1: left promiscuous mode [ 178.836727][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.844119][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.853432][ T37] hsr_slave_0: left promiscuous mode [ 178.859096][ T37] hsr_slave_1: left promiscuous mode [ 178.866384][ T37] hsr_slave_0: left promiscuous mode [ 178.871964][ T37] hsr_slave_1: left promiscuous mode [ 178.877592][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.885169][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.921195][ T37] team0 (unregistering): Port device team_slave_1 removed [ 178.930879][ T37] team0 (unregistering): Port device team_slave_0 removed [ 178.990462][ T37] team0 (unregistering): Port device team_slave_1 removed [ 179.000904][ T37] team0 (unregistering): Port device team_slave_0 removed [ 179.008521][ T337] smc: removing ib device syz! [ 179.032267][ T176] smc: removing ib device syz1 [ 179.086711][ T37] team0 (unregistering): Port device team_slave_1 removed [ 179.097797][ T37] team0 (unregistering): Port device team_slave_0 removed [ 179.144180][ T3477] lo speed is unknown, defaulting to 1000 [ 179.149988][ T3477] infiniband syz2: ib_query_port failed (-19) [ 179.800433][ T37] IPVS: stop unused estimator thread 0... [ 179.806719][ T37] IPVS: stop unused estimator thread 0... [ 179.860547][ T37] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.927035][ T37] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.996825][ T37] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.047114][ T37] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.130472][ T37] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.197598][ T37] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.277223][ T37] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.357106][ T37] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.428397][ T37] bridge_slave_1: left allmulticast mode [ 180.434104][ T37] bridge_slave_1: left promiscuous mode [ 180.439948][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.447680][ T37] bridge_slave_0: left allmulticast mode [ 180.453370][ T37] bridge_slave_0: left promiscuous mode [ 180.459028][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.467482][ T37] bridge_slave_1: left allmulticast mode [ 180.473118][ T37] bridge_slave_1: left promiscuous mode [ 180.478887][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.486957][ T37] bridge_slave_0: left allmulticast mode [ 180.492613][ T37] bridge_slave_0: left promiscuous mode [ 180.498318][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.563061][ T37] dvmrp8 (unregistering): left allmulticast mode [ 180.616899][ T37] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.626605][ T37] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.635712][ T37] .` (unregistering): Released all slaves [ 180.644196][ T37] bond0 (unregistering): (slave dummy0): Releasing active interface [ 180.653256][ T37] bond0 (unregistering): Released all slaves [ 180.727061][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.737056][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.746719][ T37] bond0 (unregistering): Released all slaves [ 180.807333][ T37] tipc: Left network mode [ 180.817465][ T37] hsr_slave_0: left promiscuous mode [ 180.823106][ T37] hsr_slave_1: left promiscuous mode [ 180.830566][ T37] hsr_slave_0: left promiscuous mode [ 180.836215][ T37] hsr_slave_1: left promiscuous mode [ 180.841792][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.849321][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.857110][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.864544][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.875658][ T37] veth1_macvtap: left promiscuous mode [ 180.881167][ T37] veth0_macvtap: left promiscuous mode [ 180.886669][ T37] veth1_vlan: left promiscuous mode [ 180.891902][ T37] veth0_vlan: left promiscuous mode [ 180.897730][ T37] veth1_macvtap: left promiscuous mode [ 180.903212][ T37] veth0_macvtap: left promiscuous mode [ 180.908865][ T37] veth1_vlan: left promiscuous mode [ 180.914074][ T37] veth0_vlan: left promiscuous mode [ 181.012400][ T37] team0 (unregistering): Port device team_slave_1 removed [ 181.022028][ T37] team0 (unregistering): Port device team_slave_0 removed [ 181.077865][ T37] team0 (unregistering): Port device team_slave_1 removed [ 181.088781][ T37] team0 (unregistering): Port device team_slave_0 removed