last executing test programs: 1m19.922468638s ago: executing program 1 (id=429): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00", @ANYRES32=r0, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0xdb, &(0x7f0000000600)=""/219, 0x100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x3, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r0, r0], 0x0, 0x10, 0x5}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) msgctl$IPC_RMID(0x0, 0x0) 1m19.895806388s ago: executing program 1 (id=430): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x100000000}, 0x18) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x100, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048000}, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x2c060000) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x2c020400) (fail_nth: 30) 1m19.021089995s ago: executing program 1 (id=436): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x30, 0x0, &(0x7f0000000780)=[@acquire, @acquire={0x40046305, 0x3}, @acquire={0x40046305, 0x4}, @free_buffer, @exit_looper, @increfs={0x40046304, 0x1}], 0xd9, 0x0, &(0x7f0000000c00)="638124bc41d77093c85e8c59f3dd0acc302d5de5a01a352e76e31fd5f659f038e154b09ce489d25897fa992fe0749ba62c5b71db3f3cc9edf3584dc32df08b1ed112c1768796db8c171883488e68d8948e01dffa5b2d8d81fc63dc544340167a2891eb59a1f4f95008645722dde6fbe33b0266790837d82b2d4918a9fb53a3ae6e7f87361db0d9d5e7fc0a5e5b531442de4fce62dc071756f305357289ce90520d21b7b88fc9056578855b5e89ae92aa9272211981899acfda6b7cab1be33d4c7d76661d935dfe020f416ad6f10de688c9af7b71ed3c91fea9"}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r1, @ANYRESOCT=r1], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeba, 0x0, 0x0, 0x0, 0x400}, 0x94) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x9, 0xe, &(0x7f00000022c0)=ANY=[@ANYRES16=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fe}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r10, 0x407, 0x10005) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000980)=ANY=[@ANYRESOCT=r3, @ANYRES64=r1, @ANYRES32, @ANYRES32=r8, @ANYRES64=r6, @ANYRES32=r7, @ANYRES64=r2, @ANYRES64=r3, @ANYRES8=r2, @ANYRESHEX=r9, @ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x29, 0x2, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r13 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r13, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r11, 0xffffffffffffffff, 0x0) 1m18.172394411s ago: executing program 1 (id=455): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x18, &(0x7f0000000100)=0x401, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r2, 0x0, 0x0, 0x400000000000000) 1m17.860070798s ago: executing program 1 (id=457): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) (fail_nth: 4) 1m17.74746696s ago: executing program 1 (id=462): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='timer_start\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000880)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14806, &(0x7f00000000c0)=ANY=[], 0x1, 0x70c, &(0x7f0000001500)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000e80)=0x0, &(0x7f0000000ec0)=0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000002140)={'ip6gretap0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r13, &(0x7f0000002980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002940)={&(0x7f00000026c0)={0x274, r10, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000000000001c0000002000018014000200766c616e31000000000000000000000008000100", @ANYRES32=r12], 0x34}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002440)={r7, 0xe0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000002180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f00000021c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x19, &(0x7f0000002240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000002280), &(0x7f00000022c0), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000002300)}}, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a00), r6) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f00000031c0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003180)={&(0x7f0000002a40)={0x728, r16, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xea}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x800}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe5}]}]}, @NL80211_ATTR_TID_CONFIG={0x88, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x90}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xad}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x69}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x54, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4d7d}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x2bc, 0x11d, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xb0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x48, 0x6c, 0x36, 0x12, 0x18, 0x16, 0x6, 0x1b, 0x16, 0x3, 0x7e, 0x5, 0x2, 0x4, 0x16, 0x9, 0x9, 0x2, 0x5, 0x36, 0x9, 0x3, 0x4, 0x1, 0x36, 0x18, 0x4, 0xc, 0x6, 0xc]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x12, 0x18]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x3, 0x3}, {0x3, 0x2}, {0x6, 0x9}, {}, {0x6, 0x6}, {0x6}, {0x1}, {0x4, 0xa}, {0x4, 0x1}, {0x6, 0xa}, {0x5, 0x9}, {0x0, 0x2}, {0x5}, {0x4, 0x4}, {0x0, 0x7}, {0x6}, {0x5, 0x2}, {0x5, 0x5}, {0x2, 0x3}, {0x1, 0x3}, {0x4, 0x1}, {0x3, 0xa}, {0x4, 0xa}]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbe5, 0x3, 0x6, 0xf90c, 0x7, 0x3, 0x3, 0x3]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x4, 0x7}, {0x7, 0x3}, {0x3, 0xa}, {0x5, 0x9}, {0x3, 0x2}, {0x5, 0x4}, {0x0, 0xa}, {0x0, 0x7}, {0x2, 0x6}, {0x7}, {0x3, 0x2}, {0x7, 0x1}, {0x1, 0x2}, {0x0, 0x5}, {0x7}, {0x5, 0x9}, {0x7}, {0x3, 0xa}, {0x3, 0x2}, {0x1, 0x9}, {0x4, 0x3}, {0x2, 0x2}, {0x1, 0x5}, {0x0, 0x1}, {0x7, 0x9}, {0x6, 0x9}, {0x2, 0xa}, {0x3, 0x3}, {0x0, 0x1}, {0x6, 0x7}, {0x1}, {0x1, 0x5}, {0x3, 0xa}, {0x3, 0x1}, {0x0, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x85}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x42}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1b8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x400000000000000}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x178, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x8, 0x8001, 0x9, 0x2, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x7ff, 0x8, 0x9, 0xbf4, 0x1, 0xe, 0x9]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x4, 0x696d, 0x2, 0x3, 0x8, 0x9]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x18, 0x18, 0x1, 0x3, 0x9, 0x24, 0x1, 0x30, 0x36, 0x18, 0xb, 0x1b]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x5, 0x5, 0x5, 0x7, 0xc, 0xff, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xa, 0x7, 0x4, 0x8, 0x6, 0x81, 0xfff0]}}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x7}, {0x3}, {0x2, 0x5}, {0x0, 0x7}, {0x2}, {0x3, 0x5}, {0x1}, {0x2, 0x8}, {0x6, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0xff, 0x7fff, 0x8, 0x8, 0x2, 0x7fff, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x5, 0x8}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x7}, {0x7, 0x7}, {0x3, 0x1}, {0x1, 0x2}, {0x4, 0xa}, {0x7}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x9}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x5, 0x6}, {0x4, 0x9}, {0x0, 0xa}, {0x1, 0x2}, {}, {0x0, 0x3}, {}, {0x0, 0xa}, {0x1, 0x8}, {0x7, 0x8}, {0x7, 0x4}, {0x7}, {0x1, 0x3}, {0x7, 0x1}, {0x1, 0x7}, {0x1, 0x6}, {}, {0x7, 0x5}, {0x1, 0x2}, {0x1}, {0x1, 0x7}, {0x3, 0x8}, {0x7}, {0x4, 0x9}, {0x1, 0x3}, {0x4, 0x5}, {0x7, 0x6}, {0x0, 0x5}, {0x2, 0x2}, {0x2, 0xa}, {0x7, 0xa}, {0x2, 0x3}, {0x7, 0xa}, {}, {0x0, 0x2}, {0x1, 0x8}, {0x6, 0x5}, {0x0, 0xa}, {0x7, 0x7}, {0x4, 0x4}, {0x1}, {0x5, 0x2}, {0x4}, {0x1}, {0x5, 0x8}, {0x0, 0xa}, {0x5, 0x9}, {0x6, 0x1}, {0x3, 0x7}, {0x5, 0x2}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x2, 0x8, 0x40, 0x2, 0x6, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xf8, 0x3, 0x8515, 0x7, 0x4, 0x4, 0xcdce]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x1d4, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1a}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1d}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x72}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc0}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x12c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x124, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x5, 0xb, 0x4, 0x48, 0x36, 0x36, 0x30, 0x36, 0x60, 0x12, 0x5, 0x1b, 0x1, 0x9, 0x1b, 0x60, 0x6, 0x5, 0x3, 0x1b, 0x4, 0x16, 0x5, 0x30, 0xc, 0x2, 0xc, 0x9, 0x5, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0xa, 0x5, 0x9, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x8, 0x7, 0x4dba, 0xcb78, 0x9, 0x3, 0x8]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x24, 0x5, 0x18, 0x5, 0x12, 0x42, 0x16, 0x3b, 0x36, 0x5, 0x6, 0x18]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x4}, {0x2, 0x6}, {0x7, 0x7}, {0x1, 0x3}, {0x1}, {0x2, 0x8}, {0x5, 0x7}, {0x7}, {0x5, 0x1}, {0x1}, {0x3, 0xa}]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x7, 0x6, 0x5, 0x2, 0x5, 0x16, 0xc, 0x36, 0xb, 0xb, 0x24, 0x24, 0x9, 0x9, 0x36, 0x24, 0x16, 0x1b, 0x36, 0x60, 0x6, 0x16, 0x1b, 0x24, 0x4]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x4}, {0x0, 0x3}, {0x3, 0x2}, {0x3}, {0x2, 0x4}, {0x7, 0x2}, {0x1, 0xa}, {0x6, 0x4}, {0x6, 0x8}, {0x0, 0xa}, {0x3, 0xa}, {}, {0x2, 0x3}, {0x2, 0x9}, {0x4, 0x7}, {0x0, 0x4}, {0x3, 0x2}, {0x7, 0x4}, {0x3, 0x5}, {0x6, 0x4}, {0x4, 0xa}, {0x1, 0x6}, {0x5, 0x6}, {0x7, 0x5}, {0x0, 0x2}, {0x0, 0x2}, {0x2}, {0x6, 0x5}, {0x7}, {0x6}, {0x5, 0xa}, {0x0, 0x9}, {0x2, 0x1}, {0x7, 0x5}, {0x3, 0x2}, {0x2, 0x3}]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x160, 0x11d, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x60, 0xb, 0x4, 0x16, 0xc, 0x1b, 0x2, 0x5, 0x3, 0x24, 0x701fc1c9b204a427, 0x4, 0x6, 0x4, 0x6c, 0x18, 0xb, 0x6c, 0xb, 0x1b, 0x5, 0x2, 0xc, 0x36, 0x1, 0x16, 0x16, 0xb971ae16dd724cae, 0x1, 0x2, 0x2, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0x5}, {0x7, 0x1}, {0x6, 0x8}, {0x5, 0x6}, {0x7, 0x5}, {0x2, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x0, 0x1}, {0x4, 0x5}, {0x2, 0xa}, {0x4}, {0x0, 0x2}, {0x7, 0x4}, {0x4, 0x8}, {0x5, 0x9}, {0x1, 0x2}, {0x4, 0x5}, {0x0, 0x8}, {0x1, 0x5}, {0x7, 0xa}, {0x7, 0x9}, {0x7, 0x2}, {0x1}, {0x6, 0x2}, {0x1, 0xa}, {0x6, 0x9}, {0x2}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x6}, {0x2}, {0x4, 0x2}, {0x5, 0x5}, {0x1, 0x9}, {0x1, 0xa}, {0x1, 0x7}, {0x7, 0x7}, {0x1, 0x8}, {0x5, 0x6}, {0x1, 0x6}, {0x4, 0x3}, {0x1, 0x5}, {0x6, 0xa}, {0x4, 0x4}, {0x7, 0x2}, {0x0, 0x5}, {0x5, 0x6}, {0x0, 0x3}, {0x0, 0x3}, {0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x400, 0x1, 0xb9, 0x5, 0x0, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x4}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8001}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb4}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x58}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x83}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd0}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xff}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x728}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmmsg$inet(r6, &(0x7f0000002500)=[{{&(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000bc0)=[{&(0x7f00000002c0)="4841db1a97b0c93c2c33f10548823487e221d4b0ba4ee5e613c59c01f9b06b018dd32d3c935f6f3fbd00181da2affded85520ea32269486afb614732972cf4b38356c7", 0x43}, {&(0x7f00000003c0)="e5e243faf4f266e229453559ffed2bcf556e17ed4ac82af49757b46f55dc5b368b8475e3a7a24cb4fd65ca1852761a9556d9d6f27e5d4c3eeb4412daa815566cb5c096d9881a8082bc93fe92b93d2755687d9792e2", 0x55}, {&(0x7f0000000580)="4021fedb2d7e07efd656eb18bd233f135d926b1efa33cd4b66ced01ee326984da96fa6a247fd5000fa7614f3ecf345c89efc7895fd36ae8af7a001eb367113e94071d35ccef042b34871d7f1292db09030b64519df7a7551a49aa444be5eda4931da720af38f8deb815914bc8614dac30567b6da0e7a0237e252cee2eadbe5be7fb3c006773bd0bd22fd7b38d772678db1d45d03a21bf4de756d09018a2a772a5f3af70d9e6edf67ab75703d6720500e4d2eb79a9479f94b66c4999681c9349342b8f1bbc690a9b83342a23e99ef3f05dfce663684535ec170d0dba05573751b7f257b69be19e4a5a45d3669", 0xec}, {&(0x7f0000000200)}, {&(0x7f0000000680)="5683f154c6a9400f54fd808536abb0aa77b2e8931c4d80a100d43d9461aff7f491d85cc89dec9025d0fd6cb5ccf35209bbfc143e7163aaa9db82918f75650fcf5d588cc7e55627dcbe2d4bded521924e09cc55bb094df8fcdacb7e111a2a4adbbb4555bd395c4de26888eacf0e28835811e64bd015c760baf33854177bdcd896b90a7e8c7e5ad366a8d5c0cfb510f9f35ea377dbd1a576a5c547df472cb30d4d7577f5a6a11495da81c3fd0b21b46627b8675a484d725d9ad6e303b6d6c079bd5b0f39e83f05d76f3a158476ff1852956f92b42b29c28793f78b9cc94c691b25d9", 0xe1}, {&(0x7f0000000780)="df8e9f47073f40939fab076da2937318b3cd012dd1f3bef723730805788a0ce1832c10a0be7e9cc2b758dead371d5b20a9ab8b840949f0e66860f1e504779f136372bc988e4a9c6889f906ab63e7b4b7ff29710509779fb86ac9591d220e732fd3c83c819c5adfdecd61a921a9056ee3339a17beb54748cc6192b590e0c2097d10", 0x81}, {&(0x7f0000000980)="8ebde563fd5b4b49b7e9c35cad10b339fa25ab2ae36cbbee770b1a191b7c9530d8d75eed65244b7f380107cf8d78d1e85a95c80597530d71885cd92666c9467890fbb8f3306d24e0a944673759ea866ccbaaf0ad9c526aac4197e2d099f10c02de9542ddff089aebc84e9fc6d4c05fec2cc12a5f390480086f7e0db6620b155675e1668188cc1cdb2c50013c3e018b1a", 0x90}, {&(0x7f0000000a40)="a720517f647144af68f6283a0b2e5b1e352283ad001316f8ec482ea280dd259eecd004879547cb97546c106f251b8a13247aab18e2a1cb0748cb96b45ed72839dc6d69c76de2e83a12796ffa4da65eeb15d3eaefd486e12857d5782573ebc6e54308f742ffa49b59348c74aa6cbb35cd7f78123d2c42c95626ca9112ca64cc524712f44fdc2113b261493d35833666da771d357576ea8b4a8c7cc62671b26966d35274f4a8d7c5c8ed26b5549016a5739e", 0xb1}, {&(0x7f0000000b00)="173ede17e2735fc521440f0cd31d7a49e026ff01a094a7cceef4b679ffd61faa7c928d68f898f9ab003a33adbdbad79f54f546db1d21a82708c1ec91df6f32f8deace75adf5cd9b0da9d552893359519925221f6a251d4dc0ddd7de9d35b867937cbcc8cfcda54c311ee3211f5f69b40090f4cff37f21f9ddd95629c9e042399f627fcf7c017f4a367b1b7545f8e95d0f1a80d4ce7d76adebb9d17bcd98875d76a01", 0xa2}], 0x9}}, {{&(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000c80)="5e93c2ab84e518e4f187899c9be6a47a1dffbb03df18f8b3b5ac1c36df69f741a3e2dcb999872aa1140034dc4019a0b3c4d6cab18bbb423ffbd51f4541775398845dbb1d54b947c2cb92473435fb959eae45a8fb873d730ad85e72d530dcb983da485b28543eef", 0x67}], 0x1, &(0x7f0000000d00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2c}}], 0x48}}, {{&(0x7f0000000840)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000d80)="12e20656d756fd156896f390829d8af228337da4813a860dc0a8a25240d55648", 0x20}, {&(0x7f0000000dc0)="76c3d6ba58508dd741a8b7cd2a8525c632bbcfae9c26eee657a1a7311011fd91860857af13d3f8520cca9ec0c1d6a3842c097535b35acb2c4a19491739dd2baa71fd42a94a8be963845e994fbedc2b07d949aeb1bef7171b86cb", 0x5a}], 0x2, &(0x7f0000000f00)=[@ip_retopts={{0x74, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0xb6, 0x3, 0xc, [{@private=0xa010100, 0x80000001}, {@remote, 0x81}, {@loopback, 0x5}, {@local, 0xc7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast2, 0x7c3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@private=0xa010100, 0x5}]}, @timestamp_prespec={0x44, 0x1c, 0xd8, 0x3, 0x5, [{@private=0xa010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x7}, {@loopback, 0x9}]}, @end, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @rand_addr=0x64010102, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0xc8}}, {{&(0x7f0000001000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001040)="4837a634209ae792d454efcae89ce57c4f33cc357b205aceb62f9f30099b62d8f1cf140f337b07e86e72aa6e72443dc41e384c9b60c57062db82221963a43fa5153bad994cda2c74fd38549013d23eec4f7d8f732b7803fb57a72e777d3a19a3e83e756b1cb7b6efcb93285f2cb2e8f4a6599302132e088318852865171d7188d99cedc9bebd51494ef3f573d01e98aa6d3d583975ae5e1eb9124d7136d0f2193af50b584d67e560db5cdcbc54dfafadde28ea08ade4081d54550eb09fa0310abbde2cd661", 0xc5}, {&(0x7f0000001140)="ed4c345875e57a8c5768ef8ddc915d6b6f3572a26e1d755d744619737991f55b049ae659f60c586e2bbb7bbdc00ec2a2bfc2ed57ce974a03861e870b34d81fdad63e8d3992b3f1ca72eebb1a624a1ebe2bf467d1d03f743b7a649b63280ca2f758a858d3adad1d9d5eff8fbdb286bcdd3fb7cbabc9e808137e7789d973a16d2730060848e0965f0e53b2629c80a37bd4a60e49522199db969b635187c53742a2bc187dd1fca9448fd89b98409867d000060470530a9eaf2a9ef1e57c65988ca1d3d662536df1", 0xc6}, {&(0x7f0000001240)="989305e4458878a8e86b87a8ad211601ee48335fdba369af2c6cee94b2bc39ce8f1d1fa78b7b2329acf3bdb3a178bb5909d13a5593e5d16c32", 0x39}, {&(0x7f0000001280)="2623cd09a5234d5b6918c3add73f6388c0bff4390cf8850709c3e71c45859e1a6a57ae65ed7b88a424c03501e184cec7ff08a59f9ae23524c862e3d43048edd5147d5d7fd1c473f2ffef4dc9ed3c201a99ac9e9cab1105b502270cfc9767eea87f6e125a65a0b94eabb2ca0882c2aaa842907defc780af2b761c0cc0681d9ff40385caebd964803239d7cb58fd07ad18225ca846f9e682366735502895d832ee07162bca6898cda81f05f8d25b49866d5f81355fedabccbc", 0xb8}, {&(0x7f0000001340)="72b173e2984762ce63ea8c4541d6fa6824f5f0c6f8ac967c5ce731dfdf11b986b1fc797e5ae7997194906273ab63d7fb10dea3e929ae56a47743fa39d65e7b", 0x3f}, {&(0x7f0000001380)="0c20709c961f15ec0be4685d16fe57959710722aaefc69f76ee20aacb366b6a34b1082216a2d3192456e3366277cfa6ab6bc6e0d8392a37146c9f08a849b91dd9ed8ad77ade7cd89a2901a2ce6b739e3e0", 0x51}], 0x6, &(0x7f0000001c40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x46, 0x0, 0xf, [0x9c, 0x2, 0x80000001, 0xfffff2b5, 0x8, 0xff, 0x80000000]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa4}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7f}}], 0x118}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001480)="a26a7e9cf211a1fc547e0475329f024ac64f7abfbd3a73b1991f054afaf1edef97f498cf4d04b04f0b94f1de56dfcb92364f3589abe397c4a4ed3c5df4ae7f072ce6f680a96fe128adb3fb20e576", 0x4e}, {&(0x7f0000001dc0)="ad2dfca0a277c31321fe5da1a3acd29777a16af744029fa2aa86cf8858a8e9884c6de58f8ce70e82a34972f8197793994fa57bf6a7175ecceeaa0c8d51973539f46d4ae66d311cb6b4cbba0d8f89043e35bb07f064bc1c70760db92cb6d4b0b0a818411f9aa7ac1751cddb84705824eeaad1cf5adee78af7c73a722355fa152c9cf5fe0e895a0750732259c7f57258ab9a38210a3807bf5465ca9e0616758c332b5984f8fc07a3ca233fb26e7b64a8c88fa2f29141a0083c17e3bcd89018cea0ea5dd73beaed4c69c5fa265954d67c2e1c33fcbda59611ebcfd409812e7a9b651dd61bb2787ec8cc40", 0xe9}], 0x2}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001f00)="b2bac0f2bfa4fde6f825a7b0db013ee218ec19e2adad898f78fce264352f7e33deb014f35b87469d6bfe6b062a9d0d5433f235bf4b41dee8c99a06a36cc9a15f971efce82ae80d54d21997adb90812e26fd68e47e40e467917f180063a70a2c73c4673fef925fc5a55eb4941775b1cedff50cad02892cc3a35b96a0b9e6c52dd0c47d21f78cf9f01c5bf6d6b6de5a787848c36f8", 0x94}], 0x1, &(0x7f0000002040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xc0}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@noop, @cipso={0x86, 0x6a, 0x2, [{0x6, 0x7, "3c10dda5c9"}, {0x2, 0xf, "3d4290fbc050556ec244fe3e4d"}, {0x3, 0xf, "7ab7f22cf1866b2ee34c1ae68b"}, {0x1, 0x9, "db45a9ee54cd57"}, {0x6, 0x12, "838f5f25c6b8746a7b5d37c3e85b7eb9"}, {0x2, 0x2}, {0x2, 0x11, "5010bb742aa4a960b5de2a84aa0208"}, {0x6, 0xb, "ceae9d6e4f660c2066"}, {0x6, 0x6, "01ed0340"}]}]}}}], 0xb0}}, {{&(0x7f0000002100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002140), 0x0, &(0x7f0000002480)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1e}}}}, @ip_tos_u8={{0x11}}], 0x68}}], 0x7, 0x1) 1m17.640007512s ago: executing program 32 (id=462): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='timer_start\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000880)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14806, &(0x7f00000000c0)=ANY=[], 0x1, 0x70c, &(0x7f0000001500)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000e80)=0x0, &(0x7f0000000ec0)=0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000002140)={'ip6gretap0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r13, &(0x7f0000002980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002940)={&(0x7f00000026c0)={0x274, r10, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000000000001c0000002000018014000200766c616e31000000000000000000000008000100", @ANYRES32=r12], 0x34}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002440)={r7, 0xe0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000002180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f00000021c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x19, &(0x7f0000002240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000002280), &(0x7f00000022c0), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000002300)}}, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a00), r6) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f00000031c0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003180)={&(0x7f0000002a40)={0x728, r16, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xea}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x800}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe5}]}]}, @NL80211_ATTR_TID_CONFIG={0x88, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x90}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xad}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x69}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x54, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4d7d}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x2bc, 0x11d, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xb0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x48, 0x6c, 0x36, 0x12, 0x18, 0x16, 0x6, 0x1b, 0x16, 0x3, 0x7e, 0x5, 0x2, 0x4, 0x16, 0x9, 0x9, 0x2, 0x5, 0x36, 0x9, 0x3, 0x4, 0x1, 0x36, 0x18, 0x4, 0xc, 0x6, 0xc]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x12, 0x18]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x3, 0x3}, {0x3, 0x2}, {0x6, 0x9}, {}, {0x6, 0x6}, {0x6}, {0x1}, {0x4, 0xa}, {0x4, 0x1}, {0x6, 0xa}, {0x5, 0x9}, {0x0, 0x2}, {0x5}, {0x4, 0x4}, {0x0, 0x7}, {0x6}, {0x5, 0x2}, {0x5, 0x5}, {0x2, 0x3}, {0x1, 0x3}, {0x4, 0x1}, {0x3, 0xa}, {0x4, 0xa}]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbe5, 0x3, 0x6, 0xf90c, 0x7, 0x3, 0x3, 0x3]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x4, 0x7}, {0x7, 0x3}, {0x3, 0xa}, {0x5, 0x9}, {0x3, 0x2}, {0x5, 0x4}, {0x0, 0xa}, {0x0, 0x7}, {0x2, 0x6}, {0x7}, {0x3, 0x2}, {0x7, 0x1}, {0x1, 0x2}, {0x0, 0x5}, {0x7}, {0x5, 0x9}, {0x7}, {0x3, 0xa}, {0x3, 0x2}, {0x1, 0x9}, {0x4, 0x3}, {0x2, 0x2}, {0x1, 0x5}, {0x0, 0x1}, {0x7, 0x9}, {0x6, 0x9}, {0x2, 0xa}, {0x3, 0x3}, {0x0, 0x1}, {0x6, 0x7}, {0x1}, {0x1, 0x5}, {0x3, 0xa}, {0x3, 0x1}, {0x0, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x85}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x42}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1b8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x400000000000000}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffff}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x83}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x178, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x8, 0x8001, 0x9, 0x2, 0x1, 0x80]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x7ff, 0x8, 0x9, 0xbf4, 0x1, 0xe, 0x9]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x4, 0x696d, 0x2, 0x3, 0x8, 0x9]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x18, 0x18, 0x1, 0x3, 0x9, 0x24, 0x1, 0x30, 0x36, 0x18, 0xb, 0x1b]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x5, 0x5, 0x5, 0x7, 0xc, 0xff, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xa, 0x7, 0x4, 0x8, 0x6, 0x81, 0xfff0]}}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x7}, {0x3}, {0x2, 0x5}, {0x0, 0x7}, {0x2}, {0x3, 0x5}, {0x1}, {0x2, 0x8}, {0x6, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0xff, 0x7fff, 0x8, 0x8, 0x2, 0x7fff, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x5, 0x8}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x7}, {0x7, 0x7}, {0x3, 0x1}, {0x1, 0x2}, {0x4, 0xa}, {0x7}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x9}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x4, 0x6}, {0x5, 0x6}, {0x4, 0x9}, {0x0, 0xa}, {0x1, 0x2}, {}, {0x0, 0x3}, {}, {0x0, 0xa}, {0x1, 0x8}, {0x7, 0x8}, {0x7, 0x4}, {0x7}, {0x1, 0x3}, {0x7, 0x1}, {0x1, 0x7}, {0x1, 0x6}, {}, {0x7, 0x5}, {0x1, 0x2}, {0x1}, {0x1, 0x7}, {0x3, 0x8}, {0x7}, {0x4, 0x9}, {0x1, 0x3}, {0x4, 0x5}, {0x7, 0x6}, {0x0, 0x5}, {0x2, 0x2}, {0x2, 0xa}, {0x7, 0xa}, {0x2, 0x3}, {0x7, 0xa}, {}, {0x0, 0x2}, {0x1, 0x8}, {0x6, 0x5}, {0x0, 0xa}, {0x7, 0x7}, {0x4, 0x4}, {0x1}, {0x5, 0x2}, {0x4}, {0x1}, {0x5, 0x8}, {0x0, 0xa}, {0x5, 0x9}, {0x6, 0x1}, {0x3, 0x7}, {0x5, 0x2}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x2, 0x8, 0x40, 0x2, 0x6, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xf8, 0x3, 0x8515, 0x7, 0x4, 0x4, 0xcdce]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x1d4, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1a}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1d}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x72}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc0}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x12c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x124, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x5, 0xb, 0x4, 0x48, 0x36, 0x36, 0x30, 0x36, 0x60, 0x12, 0x5, 0x1b, 0x1, 0x9, 0x1b, 0x60, 0x6, 0x5, 0x3, 0x1b, 0x4, 0x16, 0x5, 0x30, 0xc, 0x2, 0xc, 0x9, 0x5, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0xa, 0x5, 0x9, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x8, 0x7, 0x4dba, 0xcb78, 0x9, 0x3, 0x8]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x24, 0x5, 0x18, 0x5, 0x12, 0x42, 0x16, 0x3b, 0x36, 0x5, 0x6, 0x18]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x4}, {0x2, 0x6}, {0x7, 0x7}, {0x1, 0x3}, {0x1}, {0x2, 0x8}, {0x5, 0x7}, {0x7}, {0x5, 0x1}, {0x1}, {0x3, 0xa}]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x7, 0x6, 0x5, 0x2, 0x5, 0x16, 0xc, 0x36, 0xb, 0xb, 0x24, 0x24, 0x9, 0x9, 0x36, 0x24, 0x16, 0x1b, 0x36, 0x60, 0x6, 0x16, 0x1b, 0x24, 0x4]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x4}, {0x0, 0x3}, {0x3, 0x2}, {0x3}, {0x2, 0x4}, {0x7, 0x2}, {0x1, 0xa}, {0x6, 0x4}, {0x6, 0x8}, {0x0, 0xa}, {0x3, 0xa}, {}, {0x2, 0x3}, {0x2, 0x9}, {0x4, 0x7}, {0x0, 0x4}, {0x3, 0x2}, {0x7, 0x4}, {0x3, 0x5}, {0x6, 0x4}, {0x4, 0xa}, {0x1, 0x6}, {0x5, 0x6}, {0x7, 0x5}, {0x0, 0x2}, {0x0, 0x2}, {0x2}, {0x6, 0x5}, {0x7}, {0x6}, {0x5, 0xa}, {0x0, 0x9}, {0x2, 0x1}, {0x7, 0x5}, {0x3, 0x2}, {0x2, 0x3}]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x160, 0x11d, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x60, 0xb, 0x4, 0x16, 0xc, 0x1b, 0x2, 0x5, 0x3, 0x24, 0x701fc1c9b204a427, 0x4, 0x6, 0x4, 0x6c, 0x18, 0xb, 0x6c, 0xb, 0x1b, 0x5, 0x2, 0xc, 0x36, 0x1, 0x16, 0x16, 0xb971ae16dd724cae, 0x1, 0x2, 0x2, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0x5}, {0x7, 0x1}, {0x6, 0x8}, {0x5, 0x6}, {0x7, 0x5}, {0x2, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x0, 0x1}, {0x4, 0x5}, {0x2, 0xa}, {0x4}, {0x0, 0x2}, {0x7, 0x4}, {0x4, 0x8}, {0x5, 0x9}, {0x1, 0x2}, {0x4, 0x5}, {0x0, 0x8}, {0x1, 0x5}, {0x7, 0xa}, {0x7, 0x9}, {0x7, 0x2}, {0x1}, {0x6, 0x2}, {0x1, 0xa}, {0x6, 0x9}, {0x2}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x6}, {0x2}, {0x4, 0x2}, {0x5, 0x5}, {0x1, 0x9}, {0x1, 0xa}, {0x1, 0x7}, {0x7, 0x7}, {0x1, 0x8}, {0x5, 0x6}, {0x1, 0x6}, {0x4, 0x3}, {0x1, 0x5}, {0x6, 0xa}, {0x4, 0x4}, {0x7, 0x2}, {0x0, 0x5}, {0x5, 0x6}, {0x0, 0x3}, {0x0, 0x3}, {0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x400, 0x1, 0xb9, 0x5, 0x0, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x4}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8001}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb4}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x58}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x83}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd0}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xff}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x728}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmmsg$inet(r6, &(0x7f0000002500)=[{{&(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000bc0)=[{&(0x7f00000002c0)="4841db1a97b0c93c2c33f10548823487e221d4b0ba4ee5e613c59c01f9b06b018dd32d3c935f6f3fbd00181da2affded85520ea32269486afb614732972cf4b38356c7", 0x43}, {&(0x7f00000003c0)="e5e243faf4f266e229453559ffed2bcf556e17ed4ac82af49757b46f55dc5b368b8475e3a7a24cb4fd65ca1852761a9556d9d6f27e5d4c3eeb4412daa815566cb5c096d9881a8082bc93fe92b93d2755687d9792e2", 0x55}, {&(0x7f0000000580)="4021fedb2d7e07efd656eb18bd233f135d926b1efa33cd4b66ced01ee326984da96fa6a247fd5000fa7614f3ecf345c89efc7895fd36ae8af7a001eb367113e94071d35ccef042b34871d7f1292db09030b64519df7a7551a49aa444be5eda4931da720af38f8deb815914bc8614dac30567b6da0e7a0237e252cee2eadbe5be7fb3c006773bd0bd22fd7b38d772678db1d45d03a21bf4de756d09018a2a772a5f3af70d9e6edf67ab75703d6720500e4d2eb79a9479f94b66c4999681c9349342b8f1bbc690a9b83342a23e99ef3f05dfce663684535ec170d0dba05573751b7f257b69be19e4a5a45d3669", 0xec}, {&(0x7f0000000200)}, {&(0x7f0000000680)="5683f154c6a9400f54fd808536abb0aa77b2e8931c4d80a100d43d9461aff7f491d85cc89dec9025d0fd6cb5ccf35209bbfc143e7163aaa9db82918f75650fcf5d588cc7e55627dcbe2d4bded521924e09cc55bb094df8fcdacb7e111a2a4adbbb4555bd395c4de26888eacf0e28835811e64bd015c760baf33854177bdcd896b90a7e8c7e5ad366a8d5c0cfb510f9f35ea377dbd1a576a5c547df472cb30d4d7577f5a6a11495da81c3fd0b21b46627b8675a484d725d9ad6e303b6d6c079bd5b0f39e83f05d76f3a158476ff1852956f92b42b29c28793f78b9cc94c691b25d9", 0xe1}, {&(0x7f0000000780)="df8e9f47073f40939fab076da2937318b3cd012dd1f3bef723730805788a0ce1832c10a0be7e9cc2b758dead371d5b20a9ab8b840949f0e66860f1e504779f136372bc988e4a9c6889f906ab63e7b4b7ff29710509779fb86ac9591d220e732fd3c83c819c5adfdecd61a921a9056ee3339a17beb54748cc6192b590e0c2097d10", 0x81}, {&(0x7f0000000980)="8ebde563fd5b4b49b7e9c35cad10b339fa25ab2ae36cbbee770b1a191b7c9530d8d75eed65244b7f380107cf8d78d1e85a95c80597530d71885cd92666c9467890fbb8f3306d24e0a944673759ea866ccbaaf0ad9c526aac4197e2d099f10c02de9542ddff089aebc84e9fc6d4c05fec2cc12a5f390480086f7e0db6620b155675e1668188cc1cdb2c50013c3e018b1a", 0x90}, {&(0x7f0000000a40)="a720517f647144af68f6283a0b2e5b1e352283ad001316f8ec482ea280dd259eecd004879547cb97546c106f251b8a13247aab18e2a1cb0748cb96b45ed72839dc6d69c76de2e83a12796ffa4da65eeb15d3eaefd486e12857d5782573ebc6e54308f742ffa49b59348c74aa6cbb35cd7f78123d2c42c95626ca9112ca64cc524712f44fdc2113b261493d35833666da771d357576ea8b4a8c7cc62671b26966d35274f4a8d7c5c8ed26b5549016a5739e", 0xb1}, {&(0x7f0000000b00)="173ede17e2735fc521440f0cd31d7a49e026ff01a094a7cceef4b679ffd61faa7c928d68f898f9ab003a33adbdbad79f54f546db1d21a82708c1ec91df6f32f8deace75adf5cd9b0da9d552893359519925221f6a251d4dc0ddd7de9d35b867937cbcc8cfcda54c311ee3211f5f69b40090f4cff37f21f9ddd95629c9e042399f627fcf7c017f4a367b1b7545f8e95d0f1a80d4ce7d76adebb9d17bcd98875d76a01", 0xa2}], 0x9}}, {{&(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000c80)="5e93c2ab84e518e4f187899c9be6a47a1dffbb03df18f8b3b5ac1c36df69f741a3e2dcb999872aa1140034dc4019a0b3c4d6cab18bbb423ffbd51f4541775398845dbb1d54b947c2cb92473435fb959eae45a8fb873d730ad85e72d530dcb983da485b28543eef", 0x67}], 0x1, &(0x7f0000000d00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2c}}], 0x48}}, {{&(0x7f0000000840)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000d80)="12e20656d756fd156896f390829d8af228337da4813a860dc0a8a25240d55648", 0x20}, {&(0x7f0000000dc0)="76c3d6ba58508dd741a8b7cd2a8525c632bbcfae9c26eee657a1a7311011fd91860857af13d3f8520cca9ec0c1d6a3842c097535b35acb2c4a19491739dd2baa71fd42a94a8be963845e994fbedc2b07d949aeb1bef7171b86cb", 0x5a}], 0x2, &(0x7f0000000f00)=[@ip_retopts={{0x74, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0xb6, 0x3, 0xc, [{@private=0xa010100, 0x80000001}, {@remote, 0x81}, {@loopback, 0x5}, {@local, 0xc7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast2, 0x7c3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@private=0xa010100, 0x5}]}, @timestamp_prespec={0x44, 0x1c, 0xd8, 0x3, 0x5, [{@private=0xa010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x7}, {@loopback, 0x9}]}, @end, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @rand_addr=0x64010102, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0xc8}}, {{&(0x7f0000001000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001040)="4837a634209ae792d454efcae89ce57c4f33cc357b205aceb62f9f30099b62d8f1cf140f337b07e86e72aa6e72443dc41e384c9b60c57062db82221963a43fa5153bad994cda2c74fd38549013d23eec4f7d8f732b7803fb57a72e777d3a19a3e83e756b1cb7b6efcb93285f2cb2e8f4a6599302132e088318852865171d7188d99cedc9bebd51494ef3f573d01e98aa6d3d583975ae5e1eb9124d7136d0f2193af50b584d67e560db5cdcbc54dfafadde28ea08ade4081d54550eb09fa0310abbde2cd661", 0xc5}, {&(0x7f0000001140)="ed4c345875e57a8c5768ef8ddc915d6b6f3572a26e1d755d744619737991f55b049ae659f60c586e2bbb7bbdc00ec2a2bfc2ed57ce974a03861e870b34d81fdad63e8d3992b3f1ca72eebb1a624a1ebe2bf467d1d03f743b7a649b63280ca2f758a858d3adad1d9d5eff8fbdb286bcdd3fb7cbabc9e808137e7789d973a16d2730060848e0965f0e53b2629c80a37bd4a60e49522199db969b635187c53742a2bc187dd1fca9448fd89b98409867d000060470530a9eaf2a9ef1e57c65988ca1d3d662536df1", 0xc6}, {&(0x7f0000001240)="989305e4458878a8e86b87a8ad211601ee48335fdba369af2c6cee94b2bc39ce8f1d1fa78b7b2329acf3bdb3a178bb5909d13a5593e5d16c32", 0x39}, {&(0x7f0000001280)="2623cd09a5234d5b6918c3add73f6388c0bff4390cf8850709c3e71c45859e1a6a57ae65ed7b88a424c03501e184cec7ff08a59f9ae23524c862e3d43048edd5147d5d7fd1c473f2ffef4dc9ed3c201a99ac9e9cab1105b502270cfc9767eea87f6e125a65a0b94eabb2ca0882c2aaa842907defc780af2b761c0cc0681d9ff40385caebd964803239d7cb58fd07ad18225ca846f9e682366735502895d832ee07162bca6898cda81f05f8d25b49866d5f81355fedabccbc", 0xb8}, {&(0x7f0000001340)="72b173e2984762ce63ea8c4541d6fa6824f5f0c6f8ac967c5ce731dfdf11b986b1fc797e5ae7997194906273ab63d7fb10dea3e929ae56a47743fa39d65e7b", 0x3f}, {&(0x7f0000001380)="0c20709c961f15ec0be4685d16fe57959710722aaefc69f76ee20aacb366b6a34b1082216a2d3192456e3366277cfa6ab6bc6e0d8392a37146c9f08a849b91dd9ed8ad77ade7cd89a2901a2ce6b739e3e0", 0x51}], 0x6, &(0x7f0000001c40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x46, 0x0, 0xf, [0x9c, 0x2, 0x80000001, 0xfffff2b5, 0x8, 0xff, 0x80000000]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa4}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7f}}], 0x118}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001480)="a26a7e9cf211a1fc547e0475329f024ac64f7abfbd3a73b1991f054afaf1edef97f498cf4d04b04f0b94f1de56dfcb92364f3589abe397c4a4ed3c5df4ae7f072ce6f680a96fe128adb3fb20e576", 0x4e}, {&(0x7f0000001dc0)="ad2dfca0a277c31321fe5da1a3acd29777a16af744029fa2aa86cf8858a8e9884c6de58f8ce70e82a34972f8197793994fa57bf6a7175ecceeaa0c8d51973539f46d4ae66d311cb6b4cbba0d8f89043e35bb07f064bc1c70760db92cb6d4b0b0a818411f9aa7ac1751cddb84705824eeaad1cf5adee78af7c73a722355fa152c9cf5fe0e895a0750732259c7f57258ab9a38210a3807bf5465ca9e0616758c332b5984f8fc07a3ca233fb26e7b64a8c88fa2f29141a0083c17e3bcd89018cea0ea5dd73beaed4c69c5fa265954d67c2e1c33fcbda59611ebcfd409812e7a9b651dd61bb2787ec8cc40", 0xe9}], 0x2}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001f00)="b2bac0f2bfa4fde6f825a7b0db013ee218ec19e2adad898f78fce264352f7e33deb014f35b87469d6bfe6b062a9d0d5433f235bf4b41dee8c99a06a36cc9a15f971efce82ae80d54d21997adb90812e26fd68e47e40e467917f180063a70a2c73c4673fef925fc5a55eb4941775b1cedff50cad02892cc3a35b96a0b9e6c52dd0c47d21f78cf9f01c5bf6d6b6de5a787848c36f8", 0x94}], 0x1, &(0x7f0000002040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xc0}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@noop, @cipso={0x86, 0x6a, 0x2, [{0x6, 0x7, "3c10dda5c9"}, {0x2, 0xf, "3d4290fbc050556ec244fe3e4d"}, {0x3, 0xf, "7ab7f22cf1866b2ee34c1ae68b"}, {0x1, 0x9, "db45a9ee54cd57"}, {0x6, 0x12, "838f5f25c6b8746a7b5d37c3e85b7eb9"}, {0x2, 0x2}, {0x2, 0x11, "5010bb742aa4a960b5de2a84aa0208"}, {0x6, 0xb, "ceae9d6e4f660c2066"}, {0x6, 0x6, "01ed0340"}]}]}}}], 0xb0}}, {{&(0x7f0000002100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002140), 0x0, &(0x7f0000002480)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1e}}}}, @ip_tos_u8={{0x11}}], 0x68}}], 0x7, 0x1) 56.239483408s ago: executing program 2 (id=884): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000004000000000100000116"], 0x50) fsopen(&(0x7f0000000440)='nfs4\x00', 0x0) (async) r1 = fsopen(&(0x7f0000000440)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000300)='acl\x00\x9a\v\x9e\xd4\x10\x18\xe6\xca\xf1\x0f\xc8H\xc8#A@\x9a\xe4r\x89h8\x1b\xab\x84<\x85\xe5\x88j_<(nW4\xe4\xbb\xe9PF\x1b|\xc4\xa1\xa0\x9e\x81\xa0lZS\'\x8f\x91\xf7\x03\xa2\x8cd\x1f\xd3y\xce\x1asj\x98\xb5\x95\xdf\x915\a\x97=\xa9\xe7A\x12\xc2\xf5_\x11\b\x00\x00\x00\x00\x00\x00\x00\x1c\x1e:^\xdeNT\xe8O\xe8\x1ez\x9e\xc8\x8eo@Ti\xf6\xe5F\x0fv\xf1H\xdf\xf1\xe1\x9en\xc1\xd1\xca\xca\x89\"\xe4\x9c\xe6\xc2\xd8\xaa\xf6\f>\x19\x15t=\x1eXp\xba~\xb8xd>\x92LO\x06\xa3\xfdS\x01\xd1GE\x0f\x98L\x99#\xef5\xed[H\x104\xcd\xe23l\xd1\x9fc5\x87\xb4\xd7\xf6\xecr)\x0f\xc7\xe4\x1d[\x82\xc3\x18\xa4{\xecF\x81\xdb', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xffffffffffffff9c) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000300)='acl\x00\x9a\v\x9e\xd4\x10\x18\xe6\xca\xf1\x0f\xc8H\xc8#A@\x9a\xe4r\x89h8\x1b\xab\x84<\x85\xe5\x88j_<(nW4\xe4\xbb\xe9PF\x1b|\xc4\xa1\xa0\x9e\x81\xa0lZS\'\x8f\x91\xf7\x03\xa2\x8cd\x1f\xd3y\xce\x1asj\x98\xb5\x95\xdf\x915\a\x97=\xa9\xe7A\x12\xc2\xf5_\x11\b\x00\x00\x00\x00\x00\x00\x00\x1c\x1e:^\xdeNT\xe8O\xe8\x1ez\x9e\xc8\x8eo@Ti\xf6\xe5F\x0fv\xf1H\xdf\xf1\xe1\x9en\xc1\xd1\xca\xca\x89\"\xe4\x9c\xe6\xc2\xd8\xaa\xf6\f>\x19\x15t=\x1eXp\xba~\xb8xd>\x92LO\x06\xa3\xfdS\x01\xd1GE\x0f\x98L\x99#\xef5\xed[H\x104\xcd\xe23l\xd1\x9fc5\x87\xb4\xd7\xf6\xecr)\x0f\xc7\xe4\x1d[\x82\xc3\x18\xa4{\xecF\x81\xdb', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xffffffffffffff9c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x2000) (async) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x2000) syz_mount_image$ext4(&(0x7f0000000b00)='ext4\x00', &(0x7f0000000b40)='./file2\x00', 0x414c84, &(0x7f0000000500)={[{@inlinecrypt}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r6 = open(&(0x7f0000000100)='./file2\x00', 0x147842, 0x9c) preadv2(r6, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0xd) (async) fcntl$notify(r8, 0x402, 0xd) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000bb00551a00000000000000001812000032c0e557329edc131a681e3b4fdcd72d4241dea499246cb12417c695b07f6ba957b34c228bf467c8678d3525bfd33909a26c750345f88b3cf8d9ac5b873b154c05ec9d96299fb75a1949fedf86833806b53a7e522986cc957b34eb09643771cba5513f588a85a01500000000006e00000000", @ANYRESHEX=r0, @ANYBLOB="00000000000000d7840000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r10}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r10}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000200)={[{@prjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000200)={[{@prjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") 55.139736169s ago: executing program 2 (id=894): open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 54.979109422s ago: executing program 2 (id=899): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) unshare(0x8010300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) 54.654975878s ago: executing program 2 (id=902): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x1f3) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = dup(r0) read$char_usb(r1, &(0x7f0000000180)=""/147, 0xfdef) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) semop(0x0, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x10) truncate(0x0, 0x8fff5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0xfffffffffffffe4c, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfff}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000002000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xa}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 53.646794778s ago: executing program 2 (id=912): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) unshare(0x8010300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) 52.211976786s ago: executing program 2 (id=924): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendto$packet(r0, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r1, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x14) 51.352457903s ago: executing program 33 (id=924): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendto$packet(r0, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r1, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x14) 33.755803024s ago: executing program 0 (id=1168): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a2100) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000004000000080000000800000000000000dee2db8be10c9d19b9d0cbaa1d94926b5c56542dee30547b08de434d137754c54f3d4de350f67b45d6f307bf795021997b36bdd0002c48a03e42d6b53ea27bb37614186eadd1e9199d2f49e607c625ec9a86129b6b9ed200ee18c60c9b21d86bd2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='consume_skb\x00', r6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xd, &(0x7f0000000240)=ANY=[@ANYRES64=r2, @ANYRES32=r9, @ANYRESOCT=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10, 0x0, 0x3}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000033c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x4) poll(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffff001}, 0x18) syz_clone3(&(0x7f0000000840)={0x50200000, &(0x7f0000000480), &(0x7f0000000580), &(0x7f00000005c0)=0x0, {0xd}, &(0x7f0000000600)=""/196, 0xc4, &(0x7f0000000780)=""/155, &(0x7f0000000700)=[0x0, 0xffffffffffffffff], 0x2, {r0}}, 0x58) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000008c0)={0x0, 0x2, 0x1, 0x8, r11}) close(r0) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r12}, 0x18) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r16, r14}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000001300)={@multicast, @empty, @void, {@generic={0x8864, "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"}}}, 0x0) 33.46775269s ago: executing program 0 (id=1172): open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 33.368920472s ago: executing program 0 (id=1175): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f00000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="0010000000000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x9, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) 33.347151103s ago: executing program 0 (id=1176): getpid() bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'wg2\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180008000000000000000000000000001802030001000000000000001af8ff00000000bfa1000000000007010000dbff80ffb702000000000000b7030000400000008500000004000000950000000000"], &(0x7f0000000040)='GPL\x00', 0xd, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="0200000001000000000000000400050000000000100000000000000020"], 0x24, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r4}, 0x9) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48, 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="d9b782734bf2054349cc36c82c550c7bbb4d5f0000000004000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000494000/0x1000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x10, 0x7, 0xe, 0x4, {{0xa, 0x4, 0x1, 0x4, 0x28, 0x65, 0x0, 0x69, 0x2f, 0x0, @private=0xa010100, @private=0xa010100, {[@lsrr={0x83, 0x13, 0xf8, [@empty, @multicast2, @local, @remote]}]}}}}}) sendmsg$nl_route(r9, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000600000100"/20, @ANYRES32=r10, @ANYBLOB="03000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24044005}, 0x8000000) mremap(&(0x7f00009b2000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) 32.94037593s ago: executing program 0 (id=1184): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RRENAMEAT(r3, &(0x7f0000000080)={0x7, 0x4b, 0x1}, 0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000002efa547f6df670ec2d900a33c25dc2095e142ed0fb887aef7fd44ac64ddc0703f651d185bf0642807ff84727e0361a96a2a6c2f48eeabdf7755fe6b31539e1b881b1f181abcbed2185aa1a3d80e62eb2c7a6bc22a26675eec55d1b07910cfb9229ee03aeaa2c9f2ec5a7ceaef3d970a33c932cfd63aca3b5147302a7b5fcd1d94973f16df79d6fdb485ba6873a2b00e6234d91b4e141e37f67fd9a48d731f92e249711da8892b77a1ba615786fa311af0d33db1b0971d57432642b73cbfeb2286a121d639d96c9bf955049765590c60e221e59ac8ba84c243d28b78c3bdc37954e6009f19a451eff95c8c9278440f703", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ptrace(0x10, r5) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x8091, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xece7, 0x0, @perf_bp={0x0, 0x4}, 0x208, 0x2, 0x1007, 0x9, 0x334, 0xfffffffa, 0x0, 0x0, 0xfffffffe, 0x0, 0xf9}, r5, 0x0, 0xffffffffffffffff, 0x8) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000100)=[r0, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, r0, r3, r1, r3, r3]}, 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000080ce690083000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) dup2(r9, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x800, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x2a64, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x7]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x100, 0x0, 0x4, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x9, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x801, 0x958, 0x1fe, 0x4, 0x6, 0x3, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x8002, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x5, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x1, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x1, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) poll(&(0x7f0000000280), 0x2000000000000094, 0x10000) 32.605179487s ago: executing program 0 (id=1192): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000640)=""/4139, &(0x7f0000000140)=0x102b) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000300)=0x80000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r6, 0x1, 0x0, 0x2000000, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) close(0xffffffffffffffff) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r9, r10}, 0xc) 32.576773677s ago: executing program 34 (id=1192): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000640)=""/4139, &(0x7f0000000140)=0x102b) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000300)=0x80000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r6, 0x1, 0x0, 0x2000000, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) close(0xffffffffffffffff) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r9, r10}, 0xc) 5.533152063s ago: executing program 5 (id=1551): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000005a00010000000000040000000a00000008000100ac1414bb"], 0x1c}}, 0x8000) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffff341) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000040)) 5.404060055s ago: executing program 5 (id=1553): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5a918e20139b45afb6103dc440fcc2e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r4, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) prlimit64(r1, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b46, &(0x7f0000000000)={0x0, 0xc5f8, 0x80, 0x1, 0xc3, 0x0, r2}, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xa272}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4825) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) unshare(0x68040200) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x802e80, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$netlink(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 3.979422683s ago: executing program 3 (id=1572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, 0x0, &(0x7f0000000740)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) 3.978818823s ago: executing program 3 (id=1574): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x30, 0x0, &(0x7f0000000780)=[@acquire, @acquire={0x40046305, 0x3}, @acquire={0x40046305, 0x4}, @free_buffer, @exit_looper, @increfs={0x40046304, 0x1}], 0xd9, 0x0, &(0x7f0000000c00)="638124bc41d77093c85e8c59f3dd0acc302d5de5a01a352e76e31fd5f659f038e154b09ce489d25897fa992fe0749ba62c5b71db3f3cc9edf3584dc32df08b1ed112c1768796db8c171883488e68d8948e01dffa5b2d8d81fc63dc544340167a2891eb59a1f4f95008645722dde6fbe33b0266790837d82b2d4918a9fb53a3ae6e7f87361db0d9d5e7fc0a5e5b531442de4fce62dc071756f305357289ce90520d21b7b88fc9056578855b5e89ae92aa9272211981899acfda6b7cab1be33d4c7d76661d935dfe020f416ad6f10de688c9af7b71ed3c91fea9"}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r1, @ANYRESOCT=r1], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeba, 0x0, 0x0, 0x0, 0x400}, 0x94) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x9, 0xe, &(0x7f00000022c0)=ANY=[@ANYRES16=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fe}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r10, 0x407, 0x10005) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000980)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRES32=r8, @ANYRES64=r6, @ANYRES32=r7, @ANYRES64=r2, @ANYRES64=r3, @ANYRES8=r2, @ANYRESHEX=r9, @ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x29, 0x2, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r13 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r13, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r11, 0xffffffffffffffff, 0x0) 3.476094783s ago: executing program 4 (id=1579): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) unshare(0x8010300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) 3.333471476s ago: executing program 4 (id=1581): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a65274d7c727e7e53c1bb714e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028642b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ed7eff0d26ff199ee1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bcb7d08e36655c"}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000300)={0x1f, 0x27, 0x0, 0x42, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000180)) syz_read_part_table(0x1062, &(0x7f0000000000)="$eJzsz7FRw0AQBdA93QlJJFACZdADMfUglUJKSkhI5k6cO3B2npPkFmwH7yX/5mb272xwV1OKiFzeU+Tt43XYsv/4bjHG3KL7/zuUNEc8dV/ptw7nGtPesBz7iPqSo8TztXUsrWEdjKXu1em0xltqK2t75s+fW94KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/qEgAA//8g+hAq") io_uring_setup(0x2e51, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) listen(r2, 0x4) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ff0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x101, 0x0, 0x101}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x58, r7, 0x1, 0xffffffff, 0xffffffff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x58}, 0x1, 0x620b, 0x0, 0x44080}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}], 0x1, 0x0, 0x0, 0x20000001}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000680)={0x0, 0x4000, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xfffffffffffffeb9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404}, 0x44080) sendmsg$inet6(r9, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e24, 0xf, @rand_addr=' \x01\x00', 0x7ff}, 0x1c, &(0x7f0000001080), 0x0, &(0x7f00000008c0)=ANY=[@ANYRES32=r11, @ANYRES32, @ANYBLOB="00000000980000000000000029000000390000001d100204009032eeaa880000f6ff0000000000000000010100000000000000000000000000000001fc000000000000000000000000000001fc010000000000000000000000000000fc0100000000000000000000000000010010000000010000000000000000000000000001ff0100000000000000000003000000015aad540800000000000000bda7a37d912cdfc7d33425aa7e18990f00"/183], 0x338}, 0xc040) 3.09946635s ago: executing program 3 (id=1583): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41, 0x2}, [@IFLA_PHYS_PORT_ID={0x1e, 0x22, "e13f740bddf5b4332e04ee2659a1ae32375d8528e044964dfe2a"}]}, 0x40}, 0x1, 0x0, 0x0, 0x48814}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0xa) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0xffff, 0x8009) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000380)=0x3c, 0xfcb5) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000000c0)={0x0, r5, 0x18, 0x0, 0x0, 0xffffffffffff8001}) 2.949760913s ago: executing program 3 (id=1584): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x3, 0x9) r1 = msgget(0x0, 0x101) msgrcv(r1, &(0x7f00000002c0)={0x0, ""/158}, 0xa6, 0x3, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) waitid(0x0, r3, &(0x7f00000000c0), 0x2, 0x0) ptrace$getregs(0xe, 0x0, 0x5, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000800)={'ip6tnl0\x00', {0x2, 0x4e24, @broadcast}}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYRES64=r6], 0x1, 0x2b2, &(0x7f0000000880)="$eJzs3NFLU28cx/Hvz6mbE91+EEFB9aVu6uag6w+oEQrRoDAn1UVwzLMaO21yzlgsIncT3fZ3SJfdBdU/4E100313EgTdeBGd8Jwd3XTa1M2t+X6BnO/xeT4+jzrlewSf9XtvnhZyrpEzyzIUUxkSqcmGSHKzqvuvfh3y61FpVJMr4z+/nrt7/8GtdCYzM6c6m56/mlLVyQsfnr14e/FTeXzh3eT7qKwlH67/SH1bO712Zv33/JO8q3lXi6WymrpYKpXNRdvSpbxbMFTv2JbpWpovupbTNJ6zS8vLVTWLSxPxZcdyXTWLVS1YVS2XtOxU1Xxs5otqGIZOxOVkG25jTnZ1bs5M7znsRTq6I3RetPl2rNUcx0nXWg9mV7u1LwAA0L/27/+DXn/v/j+zEFw73P+L0P93Sa3p7i/9PwaC46TNeP3ntxn9PwAAAAAAAAAAAAAAAAAAAAAA/4INz0t4npcIr+FbVERiIhLe93qf6I5Dfv+v9Wi76LCGf9yLidivK9lKNrgG4+mc5MUWS6YkIb/810NdUM/ezMxMqW+k/iE38yuVbMQ/m8DPh5Kt8uf/nw7yKh83c5V6fkTijeunJCGnWq+f2s6HxyGsVLKjcvlSQ96QhHx+JCWxZcl/XW/nX06r3rid2bH+mD8PAAAAAIBBYOiWZPPzb3D2o+FPiMnu8SB/gL8P7Hi+Hpaz7RxRCQAAAAAAjsytPi+Ytm05hyiiInKE+KAWEemLbeworotIH2zjuIqYiATv0cPEv2/F20p5bcwZFpGef1kOUPT6NxMAAACATttu+g8Q+vKqizsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODkafc8sHD+rqFwYJ94w3KRY/8EAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD7yJwAA//+j7Rqj") 2.887206194s ago: executing program 4 (id=1587): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000050000000200000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}]}, 0x3, 0x4eb, &(0x7f0000001fc0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r7}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110023005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000580)={0x0, 0x0}) sendmsg$netlink(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000024c0)={0x2810, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x2800, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}, @typed={0x8, 0x10f, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}}, @nested={0x27e0, 0x1e, 0x0, 0x1, [@nested={0x158f, 0x60, 0x0, 0x1, [@nested={0x4, 0xe8}, @generic="6bc4c174d64011cd6b50ff3c1347a8ca709ab141cb14b9697d227d89a60799bc232e8b3af8b542d494764b32", @nested={0x14a4, 0xd5, 0x0, 0x1, [@nested={0x102c, 0x139, 0x0, 0x1, [@typed={0x7, 0x3, 0x0, 0x0, @binary="36d79c"}, @typed={0x14, 0x112, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0xc, 0x71, 0x0, 0x0, @u64=0x2}, @generic="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"]}, @typed={0x8, 0xb8, 0x0, 0x0, @fd}, @nested={0x317, 0x21, 0x0, 0x1, [@generic="0bbc1709e740c97cfa7f34eeb3b2a660cb55ded69100834ce9f0d2e693dd02797dd6e9178d186cc467c6a9d9b309fc7ad884fd30287a9a54095e61acdfe85aad20a775b0920ee333de5605c0bf711ada5739deae1ac6d9e76ad97d4f00114234b8a4b5", @nested={0x4, 0x29}, @generic="64d5541770251a0741b9d3f0e7816ea76c8385fd34bab8353e7eb2a7103085d314d01a1519f0524ddb028cbe01bc13183486998f4d94891d10fe8489fc8b2e", @generic="c55e3e347d4e865d63c24f1a10c00ba98d6edd42b4c7c8c9200f8d097107fc17efc607e5521e9f97c8e68e340f0134629eb85c6caa10", @typed={0x19, 0xa9, 0x0, 0x0, @str='\\.{^x)^({,@]:\xfb}-i.)-\x00'}, @typed={0x72, 0xd5, 0x0, 0x0, @binary="b6a45de63544645e0c9caacb0d1541e954b2fe9a4824b0f39ffa9fe28d7ec51a5c934c9b0fa6138d76e855b8df3ac1857c650c3712b2c7cd0461ab63c1e0fcc8b3bf6e65d9a1337304f0a34a9bb3214a190effffff7f00000000b7053f2eb4be3910d1de93d0faf6e3bbbfd42f99"}, @generic="ab3f1360d3b9f8f56f26e77a228d134ba6142c864cd0cad0cfb355c0b5812a5b33261a32ddedc3a99705bb25501b44c147140821f8bbaf909f41d45910df3af4498a00facc321add820328e42a6cf02a10283741637e6e692eb4a39fe4617f75bd67f70bf739d7d551f65684dc2a5f10672221513127593349fcd3014575f1ccb5805f4d1166e914170f710cb6c9c82355d0b8dad29588c699230aac6231aeacacdb1c1916a860792d5e05e895a279ca45e2f61b0b2ea45bc5fa75b8b276e5830a0d2aefc593e042399ed34c50f12c083ef9ef1b7dde", @typed={0x8, 0x128, 0x0, 0x0, @pid=r10}, @generic="9fed3dabf3c944a219d7920d950bd11790225f608f8cc5b8ad587ae2fe830acddcc7a1946075ff8271309a0934964782aea71d16ed1970cbc52214dca53dde33b186aedbb2faacc5ac0b78c5d189385ad54852e962a7ac1a758aa2aa9d94bc7bd45eee7e3c0222f0884486ed824dfe28585d2740745bf84b19090a9b0b41b4c936812f8d25ec907f46a7d83c37d7998d62f1d087a106e456d09686b7de8f3cc6fdde0d06f758843d99f71ef61e7c7c47c89cff29f71ba266613541773a6e2e31c65fcfff071a90b7a1"]}, @generic="d424b7875bb14d2955305c4a5fdff6de600a4af2c1b8e49dedb61b5977c960a46da7c9fa7406da4cac756b83ab1dfe034f55c6afd7ecb49d685b0be886559b8de5e4d4832066cdece4ec2791080a0e23f08fe6f000d67ef09e3099c5013af4fedc13546a67642a182e7edf56760efdc808061790a7db09", @generic="05122cf414f2617e8fa3475a3a9c3cf0c62154d9f40b0f06145cb2bd1ba0a1899b721dcc2ba70722e98a75cb0dcdf2bf3b9a46a204785a5b7e775a1d611ea2e21ec52fec268675104a895186e19c201f877b314c17118ed6edf2cb54d421c2d8d3bf6be14a8066d726154f6976c7ed6b4e9bbddb80fbf2042f930a2031f378b7588bc55364ce3e98e98120302e74c3009ebaf60a6ce0438aa417d46c17363e6d40ce5615a8bf01b5db03cc934d", @nested={0x1d, 0x79, 0x0, 0x1, [@generic="82e5138aae3ac5dad4716b40bf77ce9537bdcbe31a59f92d56"]}, @typed={0x8, 0x18, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x56, 0x0, 0x0, @uid}]}, @generic="2e5989b82a57050f649fabf954f96c70cbe0a8925b21922406b1be8ad2c4e18c97b1ccffb8525b485536290ec11562748f26d9e9ecbcbef3566a3844800a2c7faa640f69fd66270ededc403a1ef5918bc3df05a96ebd0a50549d503c78c3bd269d6d08b29e133cbd1caa1ff318d8ca9370416d1ee3783c75125e1fa85559b7bf813703b6305d1d18422ef490e4ac0d8cfd9ece54b80c4b316561fd95780995964ab7e44af71016c7a0eeb087284d51", @typed={0x8, 0xb2, 0x0, 0x0, @uid}]}, @nested={0x1c, 0xd1, 0x0, 0x1, [@typed={0xc, 0xb0, 0x0, 0x0, @u64=0x87cd}, @nested={0x4, 0x15}, @typed={0x8, 0x113, 0x0, 0x0, @fd=r8}]}, @nested={0xc4, 0x1d, 0x0, 0x1, [@nested={0x4, 0xec}, @generic="e132267ad6d61c5951830e095658b9d7d9930ffe442164d77a06993dd67539f2b50aacd9e7dac3d6aec7d516cc77dffd9119f3effae7dd8f34ed6252407aa386cd9c3fb1d7e328a38839e9a0543c7242c47ac50751516e2d49a8890a7145516ba1e2e5caed15ad134971c7a524230634871428d5a5e1dbc4dc266aa28760f5cb72b3c4e197c88e7ace47bc3a483dcb36276e82de87507765e4e358cdfca433a0268eebe16b1cd356166bc23105e1d285ad338164881fdb20", @nested={0x4, 0x5b}]}, @nested={0x115e, 0x10f, 0x0, 0x1, [@generic="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", @nested={0x4, 0xd}, @typed={0x6c, 0x34, 0x0, 0x0, @binary="fc97868e88733d7f7dc175138fba0350155c900480e948fb786b4616b37a295195462d7b43a7515b630e1b3ac1785c7c7c0eb0f609ef71a0cb52b9ee15262c4467cbad008a85a53822528faac877c04a2befec02f2db3097710e0af8e861844682ed547137e77838"}, @generic="05ae26ca5095b47b49c7c510afeb5b2f82e69ca0d5498c4c043d769a41869df532705830b8dec8dc211d9b038f2552ae31a4bf5774574c1587cb39597a1863b89731f9a8f6cb0a105d997a687ba37c416c4d33c8037073a885c3876cac6687e9a73e97588eb71432465460cad07b65a03119dbdfc5f0600a911ba67582ff6da412f37c892e40f0b786a3731a114dae5ba74d06b8a95dd44993f49970c3f5d977d8d58dc814165bafbf0047d37bf3ba0657412bcfc2df8bb155bf56fbf6bd1f95e6f376260accbfa68996003a5a3597bce5d336c7f708c9b147cfd1d8936d162c8d858970fb15be0cb108"]}, @typed={0xc, 0x1c, 0x0, 0x0, @u64=0x10}]}]}]}, 0x2810}], 0x1}, 0x0) socket(0x10, 0x3, 0x0) 2.58754632s ago: executing program 4 (id=1590): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}}, 0x40000) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000400)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0xf, 0x0, 0x0, 0x0, "cca6f1e10194fd9304e8689818861d84be21875faed70061c5322a4ca48de2c8afc31232034c834cdc4586231d4cd7fcc6c6ad00"}, 0x48}, 0x2, 0x0, 0x0, 0x8801}, 0x30048009) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) (rerun: 64) 2.57666743s ago: executing program 6 (id=1591): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) unshare(0x8010300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) 2.284004016s ago: executing program 5 (id=1593): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = socket$packet(0x11, 0x2, 0x300) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x7, 0x1000, 0x3a, 0x0, 0xfffffffb, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0x8, &(0x7f0000001000)=ANY=[@ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="00000000ff000000b703812f00ec801eea1aa96b2ced76b4ded50000006024390000ed"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x2400c800) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAF(r7, 0x5408, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=r9, @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) syz_read_part_table(0x5bd, &(0x7f0000000000)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) mknod$loop(0x0, 0xc000, 0x1) r12 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r12, 0x65, 0x1, &(0x7f00000005c0)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) 1.877735894s ago: executing program 6 (id=1596): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) (fail_nth: 6) 1.799346135s ago: executing program 5 (id=1597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, 0x0, &(0x7f0000000740)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) 1.479451352s ago: executing program 6 (id=1598): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r0, 0x500, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x40001) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) sendmsg$AUDIT_SET_FEATURE(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x3fa, 0x800, 0x70bd2a, 0x25dfdbfd, {0x1, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x20}}, 0x40) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r6, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xea}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x20000010) shutdown(r4, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000740)={r4}) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000780)='yeah\x00', 0x5) r8 = getpid() ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000009c0)=0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000b00)=0xe8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000001f00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmmsg$unix(r7, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000007c0)="a0a299e99e03f4529b4d51d769068814a9c44467e537f89fa7a1a801b1c5e4c71ac5690ceeb72e6ee2acf7f46d470c122a352bd0208966923977f312892cf8138dd63511af5cd8ace522c878620c50372f4d982d65274148169188c45798eb4d44c1ee91a677202011fa7598490b7735ef1be9d07ab74a1fa9712ff2a5dd4b080a175bf55e7d1a9bd7b0d5a0330a014840ddf35907257dbb3ea2372bbd95e4d4ed6dce9fea58c4a3f3a1d74e12b7cfc72f79cac31d3f8ca7f3b46d0c5b89a3deacdc16ce2088b3b3", 0xc8}, {&(0x7f00000008c0)="a5703990e6923562ffe814f416fb116f0608648222466c0783a4ad2fd16cb88ae9be4e10c6c70620dd8843d2b581ebfc55fde4557f8c5c387f6db50d63be2544e3ba373fefae7b2b9465123e996915936395fb0d5bfd671ea554a91e80562e8b38a78716b06240454d3228d431d88596cf713817b08d7cabec59dd9c109793ce5e8363dc7ce080e721b50a93f166279310453d5e59b45ff850dcc6c2791cbf5bd09dc4df0730452b", 0xa8}], 0x2, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r10, 0xee00}}}], 0x40, 0x4001}}, {{&(0x7f0000000b80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000c00)="52563347a514483038118093a3c2c6885109a7604c4b89a087da001e0f79ee20d5ee1929e90e1cf9", 0x28}, {&(0x7f0000000c40)="01cbd3b3ec01e53c99ac66053f67b3aee51bf3407b2c1e2a1a694eec2ee51d22b651dd59de52a9a4f32db8", 0x2b}, {&(0x7f0000000c80)="8d5185557cc697c05c0fd433656740295ced94e2e634d837c7e9479e521229b92b7d1f79698525a95c2e3eb8fefc17cd51071df9c7dd87d5666a1bc5c00c96828cfacc9a521af0d5c1280705bfce4c1f39fa3bd3f01993a5432ae9cb08", 0x5d}], 0x3, &(0x7f0000000d40)}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000d80)="78ef3e1842f5e784023368669369c5e349b68455db0f92770288a0eda6db9ae0a5d863b670e20c4e06e4d3ab66f1088db67f3c5f5f7b67b6b048d898ea23be1a0d4021f25860ed7394437ad70f48a60d95d67fd1d2de140cfeee6243ad1f4df4fd49389a5d416f4e0a7ae9d3972ead7de2cd96f669a59dec", 0x78}, {&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="67b5eeca60a5a5e21322c6a83f132db2c67bb1291977dea1679c68bfd290c1f145d27a7005d44b2d8153418ba1ccd94d199391d793d9457155796002f834fa2dfc0f16fce14b8413bba674038d9c2d923722ffb14a43bba3739e4e61c7b4771be693a91d2ab9c0e9e4f6e4adab0cb8bbef7e45a4c1920fb5d0b7a5c1997a6b", 0x7f}, {&(0x7f0000001e80)}], 0x4, &(0x7f0000001f40)=[@rights={{0x28, 0x1, 0x1, [r7, r4, r5, r5, r11, r5]}}], 0x28, 0x8001}}], 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000002080), r11) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x30, r12, 0x4, 0x70bd2b, 0x6, {{}, {}, {0x14, 0x18, {0x6, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000021c0), r1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x14, r13, 0x800, 0x70bd27, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040080) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002300), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r14, &(0x7f00000027c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002780)={&(0x7f0000002340)={0x418, r15, 0xc0b, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x70, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57d2ac6a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f2fb167}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ed3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53094036}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc84}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x584a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5eb3583f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x89b9}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x663fc11f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf94ad1e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x84, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3bccc173}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x778736fa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe4d1361}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ceeebc1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xeda706a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e250f77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fb871f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x156667c3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x892582a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4db7c3cf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64d09bd9}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x180, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe7ba8da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1580}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2359360f}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec75}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17e1e93}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4840b10}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c8e60f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3eaf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b9a3acc}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11d9effb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7700}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa8a7662}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23c11d49}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x64f5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cc36f96}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x10c7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc963}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeb1a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x36ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8117}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe2e9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52531a06}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37b5274a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2993c72e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x23fd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1869}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2722cd8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a43}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e9d550e}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36f2486b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c406b72}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa6dbf43}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7555}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x343a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x41b5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb4b8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2703831e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45cdfa23}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb9e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9898}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd122}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe39c}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfdfbff0}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x120, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x75e3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x906d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23099994}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f73b335}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3db2dbc2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c7e264f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcdce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58d5d7ce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63510109}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b07027c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c441d33}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67073c3b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x17cc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf25}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6670d0e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f24}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cd3919b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f9873d8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x561fe2c6}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x260e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf238}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53110ae4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x205df8c3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ea86e05}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f370921}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60d8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ca5b4a4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1bd8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55bcce98}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x90f4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39f38951}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x64d4}]}]}]}, 0x418}, 0x1, 0x0, 0x0, 0x4000081}, 0x811) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002840), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000002940)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)={0x78, r16, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x32c}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1a, 0x1b}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xed}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x50) 1.438660972s ago: executing program 6 (id=1599): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0xfffffffffffffffd}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aa081c00577a00140600fe8000000000000000000000000000ffffffff000000000000000000000000aa00000e22da4e971c8952cb07cbebf18a2700"/71, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780004"], 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7fffffff, 0x7, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7fff}, 0x18) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x380, 0x3) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.356458364s ago: executing program 4 (id=1600): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (fail_nth: 13) 975.743121ms ago: executing program 6 (id=1604): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = memfd_create(&(0x7f0000000200)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9{L\xa2\xd28\xd6\x06\a\x0e\xfd\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9Or\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8\xf0_o\x16Oy\x00\x16h\xcc\x81.F/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8\xde\xf9s\xcb\x89\xf2\xf6a\xcb[\xcc+\x1a`.\x00\xcf\x1c\x14\x1d$\x98\xf3\xed\x1cA\xc1+0\x87\xd1\xf2\xc6\x8fs>\x16\x8b\xdeV\b$e\xe5\x8d/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xe1\xa3\xe0\x18\xe5\xee\xb0\x93\xfe\xac\x98m\xaf\xb9K\xac\xa0\x1a\xe2\xb4\xfd\x1cO5\xce9\xf9\x02h\x0e%\xa1\x11COf\xed[z\xc6\xc1:L\xdb\xac\x84Ru=E\xf7\x94\xae\x18v\v\xcc\xcd\b\xa5\x19\xb5idBc\xf1S\x93\x0f\x82me\x9a\xb8\a\xff\x91\xed\x9d|\xa7D\xf1\xb2\x14\xff\xc5\xaf[\x86\xca!E\x9a<\x00', 0x5) fsetxattr$security_selinux(r1, &(0x7f0000000480), &(0x7f00000004c0)='system_u:object_r:hwdata_t:s0\x00', 0x1a, 0x0) 951.665812ms ago: executing program 3 (id=1605): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2b40, 0x410, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x480, 0x7f, 0x0, 0x1, 0x8, 0x20005, 0xffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x7, 0x1100) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000508000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xc0}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={r5, 0x3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r7}, 0x10) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, 0x0, r8, 0x0, 0x46) close(r8) 878.808783ms ago: executing program 5 (id=1607): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x30, 0x0, &(0x7f0000000780)=[@acquire, @acquire={0x40046305, 0x3}, @acquire={0x40046305, 0x4}, @free_buffer, @exit_looper, @increfs={0x40046304, 0x1}], 0xd9, 0x0, &(0x7f0000000c00)="638124bc41d77093c85e8c59f3dd0acc302d5de5a01a352e76e31fd5f659f038e154b09ce489d25897fa992fe0749ba62c5b71db3f3cc9edf3584dc32df08b1ed112c1768796db8c171883488e68d8948e01dffa5b2d8d81fc63dc544340167a2891eb59a1f4f95008645722dde6fbe33b0266790837d82b2d4918a9fb53a3ae6e7f87361db0d9d5e7fc0a5e5b531442de4fce62dc071756f305357289ce90520d21b7b88fc9056578855b5e89ae92aa9272211981899acfda6b7cab1be33d4c7d76661d935dfe020f416ad6f10de688c9af7b71ed3c91fea9"}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r1, @ANYRESOCT=r1], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeba, 0x0, 0x0, 0x0, 0x400}, 0x94) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x9, 0xe, &(0x7f00000022c0)=ANY=[@ANYRES16=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fe}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r10, 0x407, 0x10005) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000980)=ANY=[@ANYRESOCT=r3, @ANYRES64=r1, @ANYRES32, @ANYRES32=r8, @ANYRES64=r6, @ANYRES32=r7, @ANYRES64=r2, @ANYRES64=r3, @ANYRES8=r2, @ANYRESHEX=r9, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x29, 0x2, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r13 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r13, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r11, 0xffffffffffffffff, 0x0) 823.498694ms ago: executing program 3 (id=1608): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x30, 0x0, &(0x7f0000000780)=[@acquire, @acquire={0x40046305, 0x3}, @acquire={0x40046305, 0x4}, @free_buffer, @exit_looper, @increfs={0x40046304, 0x1}], 0xd9, 0x0, &(0x7f0000000c00)="638124bc41d77093c85e8c59f3dd0acc302d5de5a01a352e76e31fd5f659f038e154b09ce489d25897fa992fe0749ba62c5b71db3f3cc9edf3584dc32df08b1ed112c1768796db8c171883488e68d8948e01dffa5b2d8d81fc63dc544340167a2891eb59a1f4f95008645722dde6fbe33b0266790837d82b2d4918a9fb53a3ae6e7f87361db0d9d5e7fc0a5e5b531442de4fce62dc071756f305357289ce90520d21b7b88fc9056578855b5e89ae92aa9272211981899acfda6b7cab1be33d4c7d76661d935dfe020f416ad6f10de688c9af7b71ed3c91fea9"}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r1, @ANYRESOCT=r1], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeba, 0x0, 0x0, 0x0, 0x400}, 0x94) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x9, 0xe, &(0x7f00000022c0)=ANY=[@ANYRES16=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fe}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r10, 0x407, 0x10005) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000980)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRES32=r8, @ANYRES64=r6, @ANYRES32=r7, @ANYRES64=r2, @ANYRES64=r3, @ANYRES8=r2, @ANYRESHEX=r9, @ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x29, 0x2, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r13 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r13, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r11, 0xffffffffffffffff, 0x0) 764.020485ms ago: executing program 4 (id=1609): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xc1) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000003c0)="ff", 0x1, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r6, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r6) bpf$MAP_CREATE(0x0, 0x0, 0x48) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x2900, 0x4) connect$inet(r7, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r7, &(0x7f0000000580)="50d865cf0779be29ec3134c785710533092cae4a91257f8b23400c3d9e1a268e5829b473eaa1154edf322995e951ce2420c1508f99cf43a7f26e1d03def424aabc8041afa63f73ff411be5d9971147e6809d724270d18e9d3ddd1a4d2df899f08e607d6ae1bfbc7ae6d728", 0x6b, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x18) 734.876826ms ago: executing program 6 (id=1611): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780080008400000009c08000640fffffff905000100060000000900020073797a3200000000050004000000000011000300686173683a69702c6d61726b00000000050005000a"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = io_uring_setup(0x6d48, &(0x7f0000000180)={0x0, 0x1e2b, 0x800, 0x0, 0x20000af}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$packet(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="5e54e574da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6", 0x25}], 0x1}}], 0x1, 0x44080) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1400000000000) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r9, 0x0, 0x1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 676.039017ms ago: executing program 7 (id=1612): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000f8ffffffb26e52388ed2aea10000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0x8000000000}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) gettid() sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000687b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x2, 0x0, 0x7}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r8}, 0x10) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r9, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$eJzs3M1vFOUfAPDvTLctLz9+rYgvIEgVjcSXlpYXOXjRaMJBExM9YDzVtpDKQg2tiRCi1QMeDYl3439hPOnFqBdNvOrdkBDDBdTLmtmZKUvZLVu67QL7+STTPs/M0z7Pd2ae2Wfm2d0AetZI9iOJ+F9E/B4RQ3n25gIj+a/rVy9M/X31wlQStdpbfyX1cteuXpgqi5Z/tzXP1GpFfrBJvRffjZisVmfOFvmxhdMfjM2fO//C7OnJkzMnZ85MHD166OCegSMThzsSZxbXtV0fz+3eeeydS29MHb/03k9JJfK4Y1kcnTKS792mnu50ZV22rSFd37FL9v5yI93sTKCb+iIiO1z99f4/FH2xeWnbULz2WVcbB6yrWq1WW+GqvFgD7mNJdLsFQHcUtwD1+99y2cDhR9ddeTm/Acrivl4s+ZZKpHlib/+y+9tOGomI44v/fJUtsU7PIQAAGn2XjX+ebzb+S+PhPDGQ/fh/MYcyHBEPRMT2iHgwInZExEMR9bKPRMSjq6x/+QzJreOf9PIdB9eGbPz3UjG3dfP4Ly2LDPcVuW31+PuTE7PVmQPFPtkf/YMnZpOZ8RXq+P7V375ota1x/JctWf3lWLBox+XK4Kab/mZ6cmFyTUE3uPJpxK5Ks/iTKKdxkojYGRG77rCO2WcrLbfdPv4VtP63bat9HfFMfvwXY1n8paTl/OT4i0cmDo9tiurMgbHyrLjVz79efLNV/WuKvwOy47+l6fm/FP9wsili/tz5U/X52vnV13Hxj89b3tO0d/4vZY5tK87/geTt+oqBYsNHkwsLZ8cjBpLXb10/ceO/lfmyfBb//n3N+//2uLEnHouI3RGxJyIez24Ki7Y/ERFPRsS+FeL/8ZWn3l99/BszV5rFP3274x+Nx3/1ib5TP3x7+/iza1yr43+ontpfrGnn+tduA9ey7wAAAOBekdbfA5+ko0mlSKfp6Gj+Hv4dsSWtzs0vPHdi7sMz0/l75YejPy2fdA01PA8dL54Nl/mJZfmDxXPjL/s21/OjU3PV6W4HDz1ua9n/l64Fef/P/NnX7dYB664D82jAPUr/h96l/0NvSvR/6Gn6P/SuZv3/k5alR79Z18YAG8rrP/SuNvr/Yv6r9agAuDd5/Yfepf9DT2r52fh0TR/53/DEv8X3Gd4t7bn/E5HeFc24/xOVtr/MYhWJ2lDe/7M1g03LdPvKBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BQAA///T8uXN") r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r10, &(0x7f0000000240)=ANY=[@ANYBLOB="4b000900020000000b00000000000000"], 0x36f0516f) 675.725317ms ago: executing program 35 (id=1611): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780080008400000009c08000640fffffff905000100060000000900020073797a3200000000050004000000000011000300686173683a69702c6d61726b00000000050005000a"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = io_uring_setup(0x6d48, &(0x7f0000000180)={0x0, 0x1e2b, 0x800, 0x0, 0x20000af}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$packet(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="5e54e574da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6", 0x25}], 0x1}}], 0x1, 0x44080) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1400000000000) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r9, 0x0, 0x1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 554.020899ms ago: executing program 7 (id=1614): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1e, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r5, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"/1481], 0x5c4) close(r5) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xfdef}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='cachefiles_ondemand_open\x00', r7}, 0x18) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x3, &(0x7f0000000000)=[r10, r10, r11]) setregid(0xffffffffffffffff, r10) socket$inet(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) 228.158006ms ago: executing program 7 (id=1615): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0xa) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0xffff, 0x8009) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000380)=0x3c, 0xfcb5) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r4, 0x18, 0x0, 0x0, 0xffffffffffff8001}) 76.696499ms ago: executing program 7 (id=1616): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000040000000800000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000993f28df000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000"], 0xf8}}, 0x0) 21.6175ms ago: executing program 7 (id=1617): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f00000004000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x9, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) 4.91184ms ago: executing program 5 (id=1618): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000100), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) 0s ago: executing program 7 (id=1619): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000400000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095", @ANYRES16], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): et permissive=1 [ 102.796729][ T6841] blk_print_req_error: 11 callbacks suppressed [ 102.796750][ T6841] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 102.844685][ T6841] EXT4-fs (loop4): unable to read superblock [ 102.860223][ T6846] loop3: detected capacity change from 0 to 512 [ 102.895989][ T6846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.940431][ T29] audit: type=1400 audit(1757520634.094:15085): avc: denied { create } for pid=6845 comm="syz.3.1017" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 103.012793][ T6853] loop4: detected capacity change from 0 to 512 [ 103.029908][ T29] audit: type=1326 audit(1757520634.164:15086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.0.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0641afeba9 code=0x7ffc0000 [ 103.081545][ T6855] usb usb5: usbfs: process 6855 (syz.0.1019) did not claim interface 0 before use [ 103.173907][ T6853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.186679][ T6853] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.336924][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.478031][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.569047][ T6870] loop6: detected capacity change from 0 to 2048 [ 103.631622][ T6870] loop6: p1 < > p4 [ 103.692577][ T6870] loop6: p4 size 8388608 extends beyond EOD, truncated [ 103.813361][ T6878] 9pnet: Could not find request transport: D [ 104.008814][ T6885] loop5: detected capacity change from 0 to 8192 [ 104.016337][ T6885] vfat: Unknown parameter '77777777777777777718446744073709551615' [ 104.017530][ T6889] 9pnet_fd: Insufficient options for proto=fd [ 104.035580][ T6887] loop6: detected capacity change from 0 to 512 [ 104.045647][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1029'. [ 104.054615][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1029'. [ 104.080680][ T6891] usb usb5: usbfs: process 6891 (syz.3.1031) did not claim interface 0 before use [ 104.138626][ T6898] FAULT_INJECTION: forcing a failure. [ 104.138626][ T6898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.152178][ T6898] CPU: 0 UID: 0 PID: 6898 Comm: syz.3.1034 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 104.152212][ T6898] Tainted: [W]=WARN [ 104.152258][ T6898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.152272][ T6898] Call Trace: [ 104.152279][ T6898] [ 104.152287][ T6898] __dump_stack+0x1d/0x30 [ 104.152312][ T6898] dump_stack_lvl+0xe8/0x140 [ 104.152336][ T6898] dump_stack+0x15/0x1b [ 104.152356][ T6898] should_fail_ex+0x265/0x280 [ 104.152383][ T6898] should_fail+0xb/0x20 [ 104.152455][ T6898] should_fail_usercopy+0x1a/0x20 [ 104.152487][ T6898] _copy_to_iter+0x251/0xe70 [ 104.152521][ T6898] ? should_fail_ex+0xdb/0x280 [ 104.152545][ T6898] copy_page_to_iter+0x18f/0x2d0 [ 104.152633][ T6898] process_vm_rw+0x672/0x960 [ 104.152771][ T6898] __x64_sys_process_vm_readv+0x78/0x90 [ 104.152801][ T6898] x64_sys_call+0x1874/0x2ff0 [ 104.152821][ T6898] do_syscall_64+0xd2/0x200 [ 104.152926][ T6898] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 104.152965][ T6898] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 104.153044][ T6898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.153076][ T6898] RIP: 0033:0x7fc4a04beba9 [ 104.153095][ T6898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.153167][ T6898] RSP: 002b:00007fc49ef1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 104.153186][ T6898] RAX: ffffffffffffffda RBX: 00007fc4a0705fa0 RCX: 00007fc4a04beba9 [ 104.153198][ T6898] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000235 [ 104.153210][ T6898] RBP: 00007fc49ef1f090 R08: 0000000000000286 R09: 0000000000000000 [ 104.153324][ T6898] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000002 [ 104.153335][ T6898] R13: 00007fc4a0706038 R14: 00007fc4a0705fa0 R15: 00007ffc47d1e108 [ 104.153355][ T6898] [ 104.432304][ T6911] 9pnet: Could not find request transport: D [ 104.454406][ T6915] 9pnet_fd: Insufficient options for proto=fd [ 104.516688][ T6925] usb usb5: usbfs: process 6925 (syz.0.1044) did not claim interface 0 before use [ 104.748404][ T6937] loop0: detected capacity change from 0 to 128 [ 104.851548][ T4684] bio_check_eod: 48 callbacks suppressed [ 104.851565][ T4684] kworker/u8:30: attempt to access beyond end of device [ 104.851565][ T4684] loop0: rw=1, sector=153, nr_sectors = 8 limit=128 [ 104.874759][ T6943] loop5: detected capacity change from 0 to 1024 [ 104.882894][ T4684] kworker/u8:30: attempt to access beyond end of device [ 104.882894][ T4684] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 104.897595][ T4684] kworker/u8:30: attempt to access beyond end of device [ 104.897595][ T4684] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 104.912085][ T4684] kworker/u8:30: attempt to access beyond end of device [ 104.912085][ T4684] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 104.926122][ T4684] kworker/u8:30: attempt to access beyond end of device [ 104.926122][ T4684] loop0: rw=1, sector=217, nr_sectors = 8 limit=128 [ 104.940532][ T6943] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.956296][ T4684] kworker/u8:30: attempt to access beyond end of device [ 104.956296][ T4684] loop0: rw=1, sector=233, nr_sectors = 8 limit=128 [ 104.970075][ T4684] kworker/u8:30: attempt to access beyond end of device [ 104.970075][ T4684] loop0: rw=1, sector=249, nr_sectors = 8 limit=128 [ 104.985334][ T4684] kworker/u8:30: attempt to access beyond end of device [ 104.985334][ T4684] loop0: rw=1, sector=265, nr_sectors = 8 limit=128 [ 104.999623][ T4684] kworker/u8:30: attempt to access beyond end of device [ 104.999623][ T4684] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 105.015337][ T4684] kworker/u8:30: attempt to access beyond end of device [ 105.015337][ T4684] loop0: rw=1, sector=297, nr_sectors = 8 limit=128 [ 105.056725][ T4959] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.171335][ T6950] 9pnet: Could not find request transport: D [ 105.377052][ T6956] 9pnet_fd: Insufficient options for proto=fd [ 105.689733][ T6971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1062'. [ 105.707175][ T6972] IPVS: stopping master sync thread 6977 ... [ 105.713311][ T6977] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 105.802538][ T6987] netlink: 196 bytes leftover after parsing attributes in process `syz.6.1068'. [ 105.821777][ T6988] loop4: detected capacity change from 0 to 764 [ 105.836634][ T6988] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 105.901815][ T6998] loop5: detected capacity change from 0 to 2048 [ 105.941440][ T6998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.995254][ T7006] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1074'. [ 106.006135][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 106.008386][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1074'. [ 106.039792][ T7006] loop3: detected capacity change from 0 to 164 [ 106.055090][ T7006] iso9660: Unknown parameter 'ʞ@C&wX`+#OcVtK#(Bu|M+/' [ 106.079987][ T4959] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.093605][ T7012] loop0: detected capacity change from 0 to 2048 [ 106.124846][ T7012] Alternate GPT is invalid, using primary GPT. [ 106.131339][ T7012] loop0: p2 p3 p7 [ 106.302549][ T7027] 9pnet: Could not find request transport: D [ 106.382105][ T7030] loop5: detected capacity change from 0 to 128 [ 106.388875][ T7030] vfat: Unknown parameter ' ' [ 106.690003][ T7033] loop3: detected capacity change from 0 to 256 [ 107.339391][ T7045] loop4: detected capacity change from 0 to 512 [ 107.379082][ T7051] loop3: detected capacity change from 0 to 512 [ 107.406196][ T7045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.431096][ T7051] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 107.461123][ T7045] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.478360][ T7051] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 107.506584][ T7050] loop0: detected capacity change from 0 to 8192 [ 107.520717][ T7051] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1090: corrupted in-inode xattr: e_value size too large [ 107.554107][ T7050] msdos: Bad value for 'umask' [ 107.567660][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.581486][ T7051] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1090: couldn't read orphan inode 15 (err -117) [ 107.614540][ T29] kauditd_printk_skb: 572 callbacks suppressed [ 107.614557][ T29] audit: type=1326 audit(1757520638.724:15659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.6.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d1f2eba9 code=0x7ffc0000 [ 107.644962][ T29] audit: type=1326 audit(1757520638.724:15660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.6.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f13d1f2eba9 code=0x7ffc0000 [ 107.668645][ T29] audit: type=1326 audit(1757520638.724:15661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.6.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d1f2eba9 code=0x7ffc0000 [ 107.692402][ T29] audit: type=1326 audit(1757520638.724:15662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.6.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d1f2eba9 code=0x7ffc0000 [ 107.716272][ T29] audit: type=1326 audit(1757520638.734:15663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.6.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13d1f2eba9 code=0x7ffc0000 [ 107.740138][ T29] audit: type=1326 audit(1757520638.734:15664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.6.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d1f2eba9 code=0x7ffc0000 [ 107.763751][ T29] audit: type=1326 audit(1757520638.734:15665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.6.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d1f2eba9 code=0x7ffc0000 [ 107.787277][ T29] audit: type=1326 audit(1757520638.734:15666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.6.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13d1f2eba9 code=0x7ffc0000 [ 107.811123][ T29] audit: type=1326 audit(1757520638.734:15667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.6.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d1f2eba9 code=0x7ffc0000 [ 107.813833][ T7051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.834913][ T29] audit: type=1326 audit(1757520638.734:15668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.6.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d1f2eba9 code=0x7ffc0000 [ 107.884599][ T7064] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1095'. [ 107.932613][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.964081][ T7080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1097'. [ 108.004996][ T7078] loop0: detected capacity change from 0 to 1024 [ 108.012375][ T7078] EXT4-fs: Ignoring removed nobh option [ 108.017991][ T7078] EXT4-fs: Ignoring removed bh option [ 108.023626][ T7078] EXT4-fs: Ignoring removed i_version option [ 108.039073][ T7088] netlink: 'syz.6.1102': attribute type 10 has an invalid length. [ 108.048396][ T7088] syz_tun: entered promiscuous mode [ 108.059474][ T7088] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 108.069819][ T7078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.078587][ T7096] loop5: detected capacity change from 0 to 512 [ 108.094286][ T7088] netlink: 'syz.6.1102': attribute type 10 has an invalid length. [ 108.104878][ T7096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.119019][ T7096] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.119210][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.130681][ T7088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.152271][ T7088] team0: Port device bond0 added [ 108.160200][ T7097] 9pnet: Could not find request transport: D [ 108.204361][ T7106] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 108.214871][ T7105] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1106'. [ 108.254689][ T7108] sch_fq: defrate 0 ignored. [ 108.266083][ T4959] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.275416][ T7110] loop0: detected capacity change from 0 to 512 [ 108.284415][ T7108] loop3: detected capacity change from 0 to 512 [ 108.291779][ T7110] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.293537][ T7108] EXT4-fs: Ignoring removed nobh option [ 108.315576][ T7108] EXT4-fs (loop3): orphan cleanup on readonly fs [ 108.326114][ T7108] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1108: corrupted inode contents [ 108.339199][ T7108] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.1108: mark_inode_dirty error [ 108.342834][ T7110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.364339][ T7110] ext4 filesystem being mounted at /245/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.368130][ T7108] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1108: corrupted inode contents [ 108.388535][ T7108] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1108: mark_inode_dirty error [ 108.400471][ T7108] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1108: Failed to acquire dquot type 0 [ 108.414576][ T7108] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1108: corrupted inode contents [ 108.426884][ T7108] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.1108: mark_inode_dirty error [ 108.439885][ T7108] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1108: corrupted inode contents [ 108.454701][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.464100][ T7108] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1108: mark_inode_dirty error [ 108.465138][ T7120] loop6: detected capacity change from 0 to 164 [ 108.486281][ T7120] rock: directory entry would overflow storage [ 108.486411][ T7108] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1108: corrupted inode contents [ 108.492644][ T7120] rock: sig=0x66, size=4, remaining=3 [ 108.494374][ T7120] rock: directory entry would overflow storage [ 108.505638][ T7108] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 108.510256][ T7120] rock: sig=0x66, size=4, remaining=3 [ 108.518372][ T7108] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1108: corrupted inode contents [ 108.544685][ T7108] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.1108: mark_inode_dirty error [ 108.576183][ T7108] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 108.588488][ T7108] EXT4-fs (loop3): 1 truncate cleaned up [ 108.596528][ T7108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.649146][ T7134] netlink: 'syz.0.1118': attribute type 10 has an invalid length. [ 108.666287][ T7134] syz_tun: entered promiscuous mode [ 108.672149][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.673394][ T7134] $H: (slave syz_tun): Enslaving as an active interface with an up link [ 108.695666][ T7134] netlink: 'syz.0.1118': attribute type 10 has an invalid length. [ 108.698681][ T7136] 9pnet: Could not find request transport: D [ 108.703898][ T7134] $H: left promiscuous mode [ 108.714642][ T7134] bond_slave_0: left promiscuous mode [ 108.720254][ T7134] bond_slave_1: left promiscuous mode [ 108.752991][ T7134] 8021q: adding VLAN 0 to HW filter on device $H [ 108.761730][ T7134] team0: Port device $H added [ 108.767102][ T7140] FAULT_INJECTION: forcing a failure. [ 108.767102][ T7140] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 108.780677][ T7140] CPU: 0 UID: 0 PID: 7140 Comm: syz.3.1120 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 108.780723][ T7140] Tainted: [W]=WARN [ 108.780732][ T7140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.780749][ T7140] Call Trace: [ 108.780817][ T7140] [ 108.780827][ T7140] __dump_stack+0x1d/0x30 [ 108.780942][ T7140] dump_stack_lvl+0xe8/0x140 [ 108.780971][ T7140] dump_stack+0x15/0x1b [ 108.780989][ T7140] should_fail_ex+0x265/0x280 [ 108.781078][ T7140] should_fail_alloc_page+0xf2/0x100 [ 108.781107][ T7140] __alloc_frozen_pages_noprof+0xff/0x360 [ 108.781145][ T7140] alloc_pages_mpol+0xb3/0x250 [ 108.781182][ T7140] alloc_pages_noprof+0x90/0x130 [ 108.781215][ T7140] kimage_alloc_control_pages+0x2ec/0x7d0 [ 108.781295][ T7140] do_kexec_load+0x2c0/0x500 [ 108.781315][ T7140] __se_sys_kexec_load+0x134/0x160 [ 108.781335][ T7140] __x64_sys_kexec_load+0x55/0x70 [ 108.781434][ T7140] x64_sys_call+0x2898/0x2ff0 [ 108.781456][ T7140] do_syscall_64+0xd2/0x200 [ 108.781633][ T7140] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 108.781691][ T7140] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 108.781840][ T7140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.781862][ T7140] RIP: 0033:0x7fc4a04beba9 [ 108.781877][ T7140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.781896][ T7140] RSP: 002b:00007fc49ef1f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 108.781915][ T7140] RAX: ffffffffffffffda RBX: 00007fc4a0705fa0 RCX: 00007fc4a04beba9 [ 108.781931][ T7140] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 0000000000000000 [ 108.781945][ T7140] RBP: 00007fc49ef1f090 R08: 0000000000000000 R09: 0000000000000000 [ 108.782015][ T7140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.782026][ T7140] R13: 00007fc4a0706038 R14: 00007fc4a0705fa0 R15: 00007ffc47d1e108 [ 108.782046][ T7140] [ 108.975499][ T7140] kexec: Could not allocate control_code_buffer [ 109.028003][ T7155] IPv6: Can't replace route, no match found [ 109.068829][ T7155] loop4: detected capacity change from 0 to 512 [ 109.158124][ T7155] loop4: detected capacity change from 0 to 1024 [ 109.165708][ T7155] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.172508][ T7155] EXT4-fs: Ignoring removed bh option [ 109.178401][ T7155] ext3: Unknown parameter 'subj_type' [ 109.760072][ T7182] FAULT_INJECTION: forcing a failure. [ 109.760072][ T7182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.773323][ T7182] CPU: 0 UID: 0 PID: 7182 Comm: syz.4.1134 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 109.773363][ T7182] Tainted: [W]=WARN [ 109.773371][ T7182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.773386][ T7182] Call Trace: [ 109.773394][ T7182] [ 109.773405][ T7182] __dump_stack+0x1d/0x30 [ 109.773430][ T7182] dump_stack_lvl+0xe8/0x140 [ 109.773476][ T7182] dump_stack+0x15/0x1b [ 109.773507][ T7182] should_fail_ex+0x265/0x280 [ 109.773533][ T7182] should_fail+0xb/0x20 [ 109.773551][ T7182] should_fail_usercopy+0x1a/0x20 [ 109.773576][ T7182] _copy_from_iter+0xd2/0xe80 [ 109.773629][ T7182] ? __build_skb_around+0x1a0/0x200 [ 109.773662][ T7182] ? __alloc_skb+0x24c/0x320 [ 109.773681][ T7182] ? skb_put+0xa9/0xf0 [ 109.773702][ T7182] tipc_msg_build+0x4f4/0x840 [ 109.773735][ T7182] tipc_send_group_bcast+0x5a4/0x6c0 [ 109.773778][ T7182] ? __pfx_woken_wake_function+0x10/0x10 [ 109.773804][ T7182] __tipc_sendmsg+0x186/0x1b00 [ 109.773891][ T7182] ? avc_has_perm+0xf7/0x180 [ 109.773916][ T7182] ? selinux_socket_sendmsg+0x175/0x1b0 [ 109.773962][ T7182] ? _raw_spin_unlock_bh+0x36/0x40 [ 109.773989][ T7182] ? lock_sock_nested+0x112/0x140 [ 109.774081][ T7182] tipc_sendmsg+0x3e/0x60 [ 109.774103][ T7182] ? __pfx_tipc_sendmsg+0x10/0x10 [ 109.774129][ T7182] __sock_sendmsg+0x142/0x180 [ 109.774161][ T7182] ____sys_sendmsg+0x345/0x4e0 [ 109.774240][ T7182] ___sys_sendmsg+0x17b/0x1d0 [ 109.774290][ T7182] __sys_sendmmsg+0x178/0x300 [ 109.774335][ T7182] __x64_sys_sendmmsg+0x57/0x70 [ 109.774367][ T7182] x64_sys_call+0x1c4a/0x2ff0 [ 109.774393][ T7182] do_syscall_64+0xd2/0x200 [ 109.774443][ T7182] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 109.774475][ T7182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.774509][ T7182] RIP: 0033:0x7ffb7722eba9 [ 109.774528][ T7182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.774551][ T7182] RSP: 002b:00007ffb75c8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 109.774635][ T7182] RAX: ffffffffffffffda RBX: 00007ffb77475fa0 RCX: 00007ffb7722eba9 [ 109.774717][ T7182] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000004 [ 109.774789][ T7182] RBP: 00007ffb75c8f090 R08: 0000000000000000 R09: 0000000000000000 [ 109.774800][ T7182] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.774812][ T7182] R13: 00007ffb77476038 R14: 00007ffb77475fa0 R15: 00007fff182d0ce8 [ 109.774831][ T7182] [ 110.065027][ T7184] __nla_validate_parse: 4 callbacks suppressed [ 110.065049][ T7184] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1135'. [ 110.199168][ T7192] loop5: detected capacity change from 0 to 512 [ 110.323215][ T7192] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.350630][ T7192] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.517954][ T4959] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.552910][ T7201] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7201 comm=syz.3.1142 [ 110.602880][ T7203] 9pnet: Could not find request transport: D [ 110.617164][ T7201] loop3: detected capacity change from 0 to 512 [ 110.647025][ T7201] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.675252][ T7201] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.697276][ T7210] loop4: detected capacity change from 0 to 1024 [ 110.718177][ T7201] EXT4-fs (loop3): 1 truncate cleaned up [ 110.731211][ T7210] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 110.742276][ T7210] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 110.761528][ T7201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.775314][ T7210] JBD2: no valid journal superblock found [ 110.781107][ T7210] EXT4-fs (loop4): Could not load journal inode [ 110.798376][ T7201] : renamed from bond0 (while UP) [ 110.808199][ T7210] FAULT_INJECTION: forcing a failure. [ 110.808199][ T7210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.821512][ T7210] CPU: 0 UID: 0 PID: 7210 Comm: syz.4.1144 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 110.821603][ T7210] Tainted: [W]=WARN [ 110.821612][ T7210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.821628][ T7210] Call Trace: [ 110.821635][ T7210] [ 110.821644][ T7210] __dump_stack+0x1d/0x30 [ 110.821670][ T7210] dump_stack_lvl+0xe8/0x140 [ 110.821694][ T7210] dump_stack+0x15/0x1b [ 110.821714][ T7210] should_fail_ex+0x265/0x280 [ 110.821756][ T7210] should_fail+0xb/0x20 [ 110.821780][ T7210] should_fail_usercopy+0x1a/0x20 [ 110.821812][ T7210] _copy_from_user+0x1c/0xb0 [ 110.821887][ T7210] memdup_user+0x5e/0xd0 [ 110.821918][ T7210] strndup_user+0x68/0xb0 [ 110.821949][ T7210] __se_sys_mount+0x4d/0x2e0 [ 110.821977][ T7210] ? restore_fpregs_from_fpstate+0x61/0x120 [ 110.822101][ T7210] __x64_sys_mount+0x67/0x80 [ 110.822196][ T7210] x64_sys_call+0x2b4d/0x2ff0 [ 110.822222][ T7210] do_syscall_64+0xd2/0x200 [ 110.822258][ T7210] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 110.822345][ T7210] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 110.822442][ T7210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.822467][ T7210] RIP: 0033:0x7ffb7722eba9 [ 110.822485][ T7210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.822513][ T7210] RSP: 002b:00007ffb75c8f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 110.822535][ T7210] RAX: ffffffffffffffda RBX: 00007ffb77475fa0 RCX: 00007ffb7722eba9 [ 110.822557][ T7210] RDX: 00002000000000c0 RSI: 0000200000000240 RDI: 0000000000000000 [ 110.822572][ T7210] RBP: 00007ffb75c8f090 R08: 0000200000000000 R09: 0000000000000000 [ 110.822661][ T7210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.822675][ T7210] R13: 00007ffb77476038 R14: 00007ffb77475fa0 R15: 00007fff182d0ce8 [ 110.822699][ T7210] [ 110.824219][ T7215] loop5: detected capacity change from 0 to 512 [ 111.034798][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1147'. [ 111.128767][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.145066][ T7219] ipvlan2: entered promiscuous mode [ 111.151263][ T7219] bridge0: port 1(ipvlan2) entered blocking state [ 111.158062][ T7219] bridge0: port 1(ipvlan2) entered disabled state [ 111.164832][ T7219] ipvlan2: entered allmulticast mode [ 111.170151][ T7219] bridge0: entered allmulticast mode [ 111.181324][ T7215] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.1141: Parent and EA inode have the same ino 15 [ 111.198266][ T7219] ipvlan2: left allmulticast mode [ 111.203533][ T7219] bridge0: left allmulticast mode [ 111.213590][ T7215] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.1141: Parent and EA inode have the same ino 15 [ 111.252953][ T7215] EXT4-fs (loop5): 1 orphan inode deleted [ 111.259153][ T7215] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.278702][ T7232] loop0: detected capacity change from 0 to 512 [ 111.286823][ T7215] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.306405][ T7232] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.1151: error while reading EA inode 32 err=-116 [ 111.325885][ T7232] EXT4-fs (loop0): Remounting filesystem read-only [ 111.332500][ T7232] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 111.344515][ T7232] EXT4-fs (loop0): 1 orphan inode deleted [ 111.350655][ T7232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.365079][ T7232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.391708][ T7239] loop0: detected capacity change from 0 to 512 [ 111.410315][ T7243] loop4: detected capacity change from 0 to 512 [ 111.411262][ T7239] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.1151: error while reading EA inode 32 err=-116 [ 111.430361][ T7242] loop6: detected capacity change from 0 to 512 [ 111.439382][ T7243] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 111.450786][ T7239] EXT4-fs (loop0): Remounting filesystem read-only [ 111.457510][ T7239] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 111.470383][ T7239] EXT4-fs (loop0): 1 orphan inode deleted [ 111.478912][ T7239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.494630][ T7239] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.667978][ T7243] EXT4-fs (loop4): 1 truncate cleaned up [ 111.676505][ T7242] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.691427][ T7243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.705181][ T7242] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.873736][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.913867][ T7256] siw: device registration error -23 [ 111.929608][ T6537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.930871][ T7256] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 112.059542][ T7269] loop0: detected capacity change from 0 to 512 [ 112.067938][ T7269] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1162: casefold flag without casefold feature [ 112.096154][ T7269] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1162: couldn't read orphan inode 15 (err -117) [ 112.115066][ T7269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.145908][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.194211][ T7282] FAULT_INJECTION: forcing a failure. [ 112.194211][ T7282] name failslab, interval 1, probability 0, space 0, times 0 [ 112.207143][ T7282] CPU: 1 UID: 0 PID: 7282 Comm: syz.5.1167 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 112.207184][ T7282] Tainted: [W]=WARN [ 112.207195][ T7282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.207243][ T7282] Call Trace: [ 112.207250][ T7282] [ 112.207259][ T7282] __dump_stack+0x1d/0x30 [ 112.207287][ T7282] dump_stack_lvl+0xe8/0x140 [ 112.207311][ T7282] dump_stack+0x15/0x1b [ 112.207332][ T7282] should_fail_ex+0x265/0x280 [ 112.207383][ T7282] should_failslab+0x8c/0xb0 [ 112.207413][ T7282] kmem_cache_alloc_node_noprof+0x57/0x320 [ 112.207449][ T7282] ? __alloc_skb+0x101/0x320 [ 112.207476][ T7282] __alloc_skb+0x101/0x320 [ 112.207547][ T7282] alloc_skb_with_frags+0x7d/0x470 [ 112.207577][ T7282] ? selinux_file_open+0x2df/0x330 [ 112.207607][ T7282] sock_alloc_send_pskb+0x43a/0x4f0 [ 112.207642][ T7282] ? mntput+0x4b/0x80 [ 112.207689][ T7282] tun_get_user+0x9b3/0x2680 [ 112.207721][ T7282] ? ref_tracker_alloc+0x1f2/0x2f0 [ 112.207830][ T7282] ? selinux_file_permission+0x1e4/0x320 [ 112.207858][ T7282] tun_chr_write_iter+0x15e/0x210 [ 112.207892][ T7282] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 112.208031][ T7282] vfs_write+0x527/0x960 [ 112.208065][ T7282] ksys_write+0xda/0x1a0 [ 112.208094][ T7282] __x64_sys_write+0x40/0x50 [ 112.208120][ T7282] x64_sys_call+0x27fe/0x2ff0 [ 112.208160][ T7282] do_syscall_64+0xd2/0x200 [ 112.208198][ T7282] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 112.208228][ T7282] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 112.208265][ T7282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.208384][ T7282] RIP: 0033:0x7f78a1ded65f [ 112.208402][ T7282] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 112.208425][ T7282] RSP: 002b:00007f78a084f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 112.208449][ T7282] RAX: ffffffffffffffda RBX: 00007f78a2035fa0 RCX: 00007f78a1ded65f [ 112.208465][ T7282] RDX: 0000000000000d81 RSI: 0000200000001300 RDI: 00000000000000c8 [ 112.208541][ T7282] RBP: 00007f78a084f090 R08: 0000000000000000 R09: 0000000000000000 [ 112.208554][ T7282] R10: 0000000000000d81 R11: 0000000000000293 R12: 0000000000000001 [ 112.208565][ T7282] R13: 00007f78a2036038 R14: 00007f78a2035fa0 R15: 00007ffcb4e47d78 [ 112.208613][ T7282] [ 112.620662][ T7302] loop0: detected capacity change from 0 to 512 [ 112.673805][ T7302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.695451][ T7302] ext4 filesystem being mounted at /263/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.709931][ T7306] loop5: detected capacity change from 0 to 1024 [ 112.719861][ T7306] EXT4-fs: Ignoring removed nobh option [ 112.725804][ T7306] EXT4-fs: Ignoring removed bh option [ 112.731844][ T29] kauditd_printk_skb: 382 callbacks suppressed [ 112.731858][ T29] audit: type=1400 audit(1757520643.884:16049): avc: denied { setattr } for pid=7301 comm="syz.0.1176" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.733413][ T7302] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1176: corrupted inode contents [ 112.764072][ T7306] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.774332][ T7302] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1176: mark_inode_dirty error [ 112.797999][ T29] audit: type=1326 audit(1757520643.954:16050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7259 comm="syz.6.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d1f2eba9 code=0x7fc00000 [ 112.802301][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1176'. [ 112.833125][ T7302] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1176: corrupted inode contents [ 112.856713][ T7316] loop6: detected capacity change from 0 to 1024 [ 112.870318][ T4959] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.884476][ T7316] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.916581][ T29] audit: type=1326 audit(1757520644.074:16051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.5.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a1deeba9 code=0x7ffc0000 [ 112.940311][ T29] audit: type=1326 audit(1757520644.074:16052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.5.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a1deeba9 code=0x7ffc0000 [ 112.970934][ T7323] netlink: 'syz.5.1180': attribute type 10 has an invalid length. [ 112.982838][ T7323] team0: Port device dummy0 added [ 112.988465][ T6537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.004659][ T29] audit: type=1326 audit(1757520644.134:16053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.5.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f78a1deeba9 code=0x7ffc0000 [ 113.028652][ T29] audit: type=1326 audit(1757520644.134:16054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.5.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a1deeba9 code=0x7ffc0000 [ 113.030368][ T7328] netlink: 'syz.5.1180': attribute type 10 has an invalid length. [ 113.052255][ T29] audit: type=1326 audit(1757520644.134:16055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.5.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a1deeba9 code=0x7ffc0000 [ 113.052293][ T29] audit: type=1326 audit(1757520644.134:16056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.5.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f78a1deeba9 code=0x7ffc0000 [ 113.107447][ T29] audit: type=1326 audit(1757520644.134:16057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.5.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a1deeba9 code=0x7ffc0000 [ 113.131826][ T29] audit: type=1326 audit(1757520644.134:16058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.5.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a1deeba9 code=0x7ffc0000 [ 113.182712][ T7328] team0: Port device dummy0 removed [ 113.189591][ T4940] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.460: corrupted inode contents [ 113.190604][ T7328] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 113.214342][ T4940] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.460: mark_inode_dirty error [ 113.241948][ T4940] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.272413][ T4940] $H: (slave syz_tun): Releasing backup interface [ 113.283718][ T7340] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1188'. [ 113.286635][ T7342] loop4: detected capacity change from 0 to 512 [ 113.302574][ T7342] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 113.315012][ T7342] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1190: invalid indirect mapped block 4294967295 (level 0) [ 113.346040][ T7342] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1190: invalid indirect mapped block 4294967295 (level 1) [ 113.371116][ T7342] EXT4-fs (loop4): 1 orphan inode deleted [ 113.376957][ T7342] EXT4-fs (loop4): 1 truncate cleaned up [ 113.384205][ T7351] FAULT_INJECTION: forcing a failure. [ 113.384205][ T7351] name failslab, interval 1, probability 0, space 0, times 0 [ 113.397030][ T7351] CPU: 0 UID: 0 PID: 7351 Comm: syz.6.1193 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 113.397105][ T7351] Tainted: [W]=WARN [ 113.397112][ T7351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.397125][ T7351] Call Trace: [ 113.397132][ T7351] [ 113.397140][ T7351] __dump_stack+0x1d/0x30 [ 113.397164][ T7351] dump_stack_lvl+0xe8/0x140 [ 113.397263][ T7351] dump_stack+0x15/0x1b [ 113.397280][ T7351] should_fail_ex+0x265/0x280 [ 113.397307][ T7351] should_failslab+0x8c/0xb0 [ 113.397333][ T7351] __kmalloc_noprof+0xa5/0x3e0 [ 113.397440][ T7351] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 113.397480][ T7351] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 113.397515][ T7351] ? __kfree_skb+0x109/0x150 [ 113.397542][ T7351] genl_start+0xe0/0x390 [ 113.397601][ T7351] __netlink_dump_start+0x334/0x520 [ 113.397708][ T7351] genl_family_rcv_msg_dumpit+0x115/0x180 [ 113.397743][ T7351] ? __pfx_genl_start+0x10/0x10 [ 113.397797][ T7351] ? __pfx_genl_dumpit+0x10/0x10 [ 113.397834][ T7351] ? __pfx_genl_done+0x10/0x10 [ 113.397873][ T7351] genl_rcv_msg+0x3f0/0x460 [ 113.397951][ T7351] ? __pfx_ethnl_default_start+0x10/0x10 [ 113.397994][ T7351] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 113.398027][ T7351] ? __pfx_ethnl_default_done+0x10/0x10 [ 113.398063][ T7351] netlink_rcv_skb+0x123/0x220 [ 113.398084][ T7351] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.398182][ T7351] genl_rcv+0x28/0x40 [ 113.398219][ T7351] netlink_unicast+0x5bd/0x690 [ 113.398245][ T7351] netlink_sendmsg+0x58b/0x6b0 [ 113.398274][ T7351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.398334][ T7351] __sock_sendmsg+0x142/0x180 [ 113.398377][ T7351] ____sys_sendmsg+0x31e/0x4e0 [ 113.398408][ T7351] ___sys_sendmsg+0x17b/0x1d0 [ 113.398525][ T7351] __x64_sys_sendmsg+0xd4/0x160 [ 113.398636][ T7351] x64_sys_call+0x191e/0x2ff0 [ 113.398659][ T7351] do_syscall_64+0xd2/0x200 [ 113.398693][ T7351] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 113.398721][ T7351] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 113.398821][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.398845][ T7351] RIP: 0033:0x7f13d1f2eba9 [ 113.398861][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.398880][ T7351] RSP: 002b:00007f13d0997038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.398900][ T7351] RAX: ffffffffffffffda RBX: 00007f13d2175fa0 RCX: 00007f13d1f2eba9 [ 113.398972][ T7351] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000003 [ 113.398985][ T7351] RBP: 00007f13d0997090 R08: 0000000000000000 R09: 0000000000000000 [ 113.398997][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.399010][ T7351] R13: 00007f13d2176038 R14: 00007f13d2175fa0 R15: 00007ffc8f84be38 [ 113.399030][ T7351] [ 113.399594][ T7342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.554828][ T7361] loop6: detected capacity change from 0 to 512 [ 113.703893][ T7361] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.718369][ T7361] atomic_op ffff88810256d128 conn xmit_atomic 0000000000000000 [ 113.747808][ T6537] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 113.790473][ T7375] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1200'. [ 113.844659][ T7357] lo speed is unknown, defaulting to 1000 [ 113.903698][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1205'. [ 113.918470][ T7357] chnl_net:caif_netlink_parms(): no params data found [ 113.989286][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1207'. [ 114.007565][ T7357] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.011607][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1207'. [ 114.014889][ T7357] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.045847][ T7399] loop5: detected capacity change from 0 to 512 [ 114.054439][ T7357] bridge_slave_0: entered allmulticast mode [ 114.066325][ T7357] bridge_slave_0: entered promiscuous mode [ 114.074426][ T7399] EXT4-fs error (device loop5): ext4_quota_enable:7128: inode #4: comm syz.5.1207: iget: bogus i_mode (4200) [ 114.089447][ T7357] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.096603][ T7357] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.105658][ T7399] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz.5.1207: Bad quota inode: 4, type: 1 [ 114.117046][ T7357] bridge_slave_1: entered allmulticast mode [ 114.123522][ T7399] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 114.138832][ T7357] bridge_slave_1: entered promiscuous mode [ 114.151294][ T7399] EXT4-fs (loop5): mount failed [ 114.170750][ T7357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.183338][ T7357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.230066][ T7357] team0: Port device team_slave_0 added [ 114.237215][ T7357] team0: Port device team_slave_1 added [ 114.260363][ T7357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.267559][ T7357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.293834][ T7357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.306703][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.306815][ T7357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.322986][ T7357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.349189][ T7357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.377518][ T7422] loop4: detected capacity change from 0 to 276 [ 114.397523][ T7357] hsr_slave_0: entered promiscuous mode [ 114.403780][ T7357] hsr_slave_1: entered promiscuous mode [ 114.413750][ T7357] debugfs: 'hsr0' already exists in 'hsr' [ 114.419527][ T7357] Cannot create hsr debugfs directory [ 114.474711][ T7427] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1216'. [ 114.494048][ T7437] loop3: detected capacity change from 0 to 164 [ 114.533764][ T7441] FAULT_INJECTION: forcing a failure. [ 114.533764][ T7441] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 114.547259][ T7441] CPU: 0 UID: 0 PID: 7441 Comm: syz.4.1221 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 114.547292][ T7441] Tainted: [W]=WARN [ 114.547346][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.547360][ T7441] Call Trace: [ 114.547367][ T7441] [ 114.547376][ T7441] __dump_stack+0x1d/0x30 [ 114.547403][ T7441] dump_stack_lvl+0xe8/0x140 [ 114.547424][ T7441] dump_stack+0x15/0x1b [ 114.547445][ T7441] should_fail_ex+0x265/0x280 [ 114.547475][ T7441] should_fail_alloc_page+0xf2/0x100 [ 114.547533][ T7441] __alloc_frozen_pages_noprof+0xff/0x360 [ 114.547572][ T7441] alloc_pages_mpol+0xb3/0x250 [ 114.547630][ T7441] vma_alloc_folio_noprof+0x1aa/0x300 [ 114.547745][ T7441] handle_mm_fault+0xec2/0x2c20 [ 114.547776][ T7441] ? __rcu_read_lock+0x37/0x50 [ 114.547803][ T7441] ? __pte_offset_map_lock+0x1d4/0x230 [ 114.547855][ T7441] __get_user_pages+0x102e/0x1fa0 [ 114.547889][ T7441] __gup_longterm_locked+0x8f4/0xe60 [ 114.547942][ T7441] ? __rcu_read_unlock+0x34/0x70 [ 114.547969][ T7441] ? try_get_folio+0x379/0x3c0 [ 114.548006][ T7441] ? mod_node_page_state+0x1c/0xa0 [ 114.548027][ T7441] gup_fast_fallback+0x1f5/0x1420 [ 114.548072][ T7441] pin_user_pages_fast+0x5f/0x90 [ 114.548134][ T7441] rds_info_getsockopt+0x160/0x360 [ 114.548170][ T7441] rds_getsockopt+0x2ce/0x3e0 [ 114.548275][ T7441] ? __pfx_rds_getsockopt+0x10/0x10 [ 114.548302][ T7441] do_sock_getsockopt+0x200/0x240 [ 114.548345][ T7441] __x64_sys_getsockopt+0x11e/0x1a0 [ 114.548382][ T7441] x64_sys_call+0x2bc6/0x2ff0 [ 114.548409][ T7441] do_syscall_64+0xd2/0x200 [ 114.548523][ T7441] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 114.548554][ T7441] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 114.548586][ T7441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.548606][ T7441] RIP: 0033:0x7ffb7722eba9 [ 114.548621][ T7441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.548699][ T7441] RSP: 002b:00007ffb75c8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 114.548742][ T7441] RAX: ffffffffffffffda RBX: 00007ffb77475fa0 RCX: 00007ffb7722eba9 [ 114.548755][ T7441] RDX: 000000000000271b RSI: 0000200000000114 RDI: 0000000000000003 [ 114.548810][ T7441] RBP: 00007ffb75c8f090 R08: 0000200000000100 R09: 0000000000000000 [ 114.548844][ T7441] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000002 [ 114.548856][ T7441] R13: 00007ffb77476038 R14: 00007ffb77475fa0 R15: 00007fff182d0ce8 [ 114.548875][ T7441] [ 114.823987][ T7437] $H: renamed from  (while UP) [ 114.831808][ T7437] $H: entered promiscuous mode [ 114.837036][ T7437] bond_slave_0: entered promiscuous mode [ 114.842844][ T7437] bond_slave_1: entered promiscuous mode [ 114.855964][ T7446] bridge0: port 1(gretap0) entered blocking state [ 114.862507][ T7446] bridge0: port 1(gretap0) entered disabled state [ 114.869326][ T7446] gretap0: entered allmulticast mode [ 114.876111][ T7446] gretap0: entered promiscuous mode [ 114.882713][ T7446] bridge0: port 1(gretap0) entered blocking state [ 114.889284][ T7446] bridge0: port 1(gretap0) entered forwarding state [ 114.943170][ T7448] netlink: 'syz.3.1223': attribute type 1 has an invalid length. [ 114.947215][ T7357] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 114.960652][ T7448] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1223'. [ 114.977796][ T7357] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 114.989310][ T7357] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 115.002419][ T7357] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 115.009472][ T7454] IPv6: Can't replace route, no match found [ 115.031413][ T7456] loop6: detected capacity change from 0 to 128 [ 115.044821][ T7456] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.067387][ T7456] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 115.201204][ T7357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.213382][ T7357] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.223146][ T4685] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.230318][ T4685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.358182][ T7474] lo speed is unknown, defaulting to 1000 [ 115.437881][ T4685] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.445139][ T4685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.555303][ T6537] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.611237][ T7357] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.633788][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1232'. [ 115.680806][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1232'. [ 115.698128][ T7465] loop3: detected capacity change from 0 to 512 [ 115.699868][ T7357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.707803][ T7465] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1229: Parent and EA inode have the same ino 15 [ 115.725366][ T7465] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1229: Parent and EA inode have the same ino 15 [ 115.741254][ T7465] EXT4-fs (loop3): 1 orphan inode deleted [ 115.757933][ T7465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.771506][ T7490] loop4: detected capacity change from 0 to 1024 [ 115.774682][ T7465] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.784569][ T7490] EXT4-fs: Ignoring removed orlov option [ 115.807130][ T7490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.844106][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1233'. [ 115.897348][ T7498] netlink: 'syz.4.1233': attribute type 39 has an invalid length. [ 116.160978][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1234'. [ 116.190613][ T7357] veth0_vlan: entered promiscuous mode [ 116.201090][ T7357] veth1_vlan: entered promiscuous mode [ 116.218656][ T7357] veth0_macvtap: entered promiscuous mode [ 116.227028][ T7357] veth1_macvtap: entered promiscuous mode [ 116.240352][ T7357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.252900][ T7357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.319659][ T4662] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.390192][ T4662] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.453627][ T4662] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.487636][ T4662] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.552771][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.643895][ T7529] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1236'. [ 116.694536][ T7536] loop7: detected capacity change from 0 to 512 [ 116.726062][ T7542] loop5: detected capacity change from 0 to 512 [ 116.738765][ T7536] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.761927][ T7536] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.780341][ T7542] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.821838][ T7542] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.069510][ T4959] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.081894][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1249'. [ 117.898146][ T7573] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 117.933335][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 117.933353][ T29] audit: type=1400 audit(1757520649.094:16280): avc: denied { create } for pid=7574 comm="syz.3.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 117.980290][ T7575] loop3: detected capacity change from 0 to 512 [ 117.988442][ T29] audit: type=1326 audit(1757520649.134:16281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.3.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a04beba9 code=0x7ffc0000 [ 118.012196][ T29] audit: type=1326 audit(1757520649.134:16282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.3.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a04beba9 code=0x7ffc0000 [ 118.035805][ T29] audit: type=1326 audit(1757520649.134:16283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.3.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc4a04beba9 code=0x7ffc0000 [ 118.059376][ T29] audit: type=1326 audit(1757520649.134:16284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.3.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a04beba9 code=0x7ffc0000 [ 118.083070][ T29] audit: type=1326 audit(1757520649.134:16285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.3.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a04beba9 code=0x7ffc0000 [ 118.106583][ T29] audit: type=1326 audit(1757520649.134:16286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.3.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4a04beba9 code=0x7ffc0000 [ 118.130101][ T29] audit: type=1326 audit(1757520649.134:16287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.3.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a04beba9 code=0x7ffc0000 [ 118.153673][ T29] audit: type=1326 audit(1757520649.134:16288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.3.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a04beba9 code=0x7ffc0000 [ 118.177222][ T29] audit: type=1326 audit(1757520649.134:16289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7574 comm="syz.3.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4a04beba9 code=0x7ffc0000 [ 118.211831][ T7575] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.239300][ T7357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.258623][ T7575] EXT4-fs (loop3): 1 truncate cleaned up [ 118.272711][ T7575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.334727][ T7581] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.586061][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.606971][ T7585] random: crng reseeded on system resumption [ 118.624565][ T7585] SELinux: policydb version 0 does not match my version range 15-35 [ 118.624938][ T7581] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.633173][ T7585] SELinux: failed to load policy [ 118.660532][ T7585] Restarting kernel threads ... [ 118.665760][ T7585] Done restarting kernel threads. [ 118.674071][ T7588] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1252'. [ 118.683109][ T7588] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1252'. [ 118.735939][ T7581] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.780085][ T7599] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1261'. [ 118.797830][ T7581] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.860734][ T4685] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.876070][ T4685] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.902010][ T4685] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.910350][ T4685] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.082843][ T7613] bridge0: port 1(gretap0) entered disabled state [ 119.199844][ T7613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.225595][ T7613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.527265][ T7613] wireguard0: left promiscuous mode [ 119.596049][ T7613] bridge0: left promiscuous mode [ 119.960066][ T7648] SELinux: failed to load policy [ 119.977712][ T7650] netlink: 332 bytes leftover after parsing attributes in process `syz.6.1279'. [ 120.249153][ T9] lo speed is unknown, defaulting to 1000 [ 120.254990][ T9] syz0: Port: 1 Link DOWN [ 120.265066][ T4678] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.289156][ T4678] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.333819][ T4678] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.389952][ T4678] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.145913][ T7684] loop5: detected capacity change from 0 to 512 [ 121.166359][ T7684] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.195823][ T7662] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7662 comm=syz.3.1283 [ 121.270314][ T7689] loop5: detected capacity change from 0 to 1024 [ 121.287346][ T7689] EXT4-fs: Ignoring removed orlov option [ 121.293149][ T7689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.309554][ T7693] loop6: detected capacity change from 0 to 512 [ 121.317919][ T7693] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 121.330374][ T7693] EXT4-fs (loop6): 1 truncate cleaned up [ 121.415465][ T7693] syzkaller0: entered promiscuous mode [ 121.424020][ T7693] syzkaller0: entered allmulticast mode [ 121.562704][ T7713] loop3: detected capacity change from 0 to 512 [ 121.592541][ T7713] ext4 filesystem being mounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.689988][ T7737] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 121.762921][ T7746] loop3: detected capacity change from 0 to 512 [ 121.774683][ T7746] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.773643][ T7824] FAULT_INJECTION: forcing a failure. [ 122.773643][ T7824] name failslab, interval 1, probability 0, space 0, times 0 [ 122.786503][ T7824] CPU: 1 UID: 0 PID: 7824 Comm: syz.3.1304 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 122.786591][ T7824] Tainted: [W]=WARN [ 122.786599][ T7824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.786619][ T7824] Call Trace: [ 122.786626][ T7824] [ 122.786634][ T7824] __dump_stack+0x1d/0x30 [ 122.786660][ T7824] dump_stack_lvl+0xe8/0x140 [ 122.786685][ T7824] dump_stack+0x15/0x1b [ 122.786709][ T7824] should_fail_ex+0x265/0x280 [ 122.786781][ T7824] should_failslab+0x8c/0xb0 [ 122.786861][ T7824] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 122.786968][ T7824] ? __account_obj_stock+0x211/0x350 [ 122.786990][ T7824] ? parse_opts+0xb0/0x2d0 [ 122.787008][ T7824] kstrdup+0x3e/0xd0 [ 122.787063][ T7824] parse_opts+0xb0/0x2d0 [ 122.787093][ T7824] p9_fd_create+0x37/0x280 [ 122.787111][ T7824] ? strsep+0x1d/0x100 [ 122.787130][ T7824] p9_client_create+0x608/0xbc0 [ 122.787231][ T7824] v9fs_session_init+0xf7/0xde0 [ 122.787264][ T7824] ? avc_has_perm_noaudit+0x1b1/0x200 [ 122.787292][ T7824] ? v9fs_mount+0x51/0x5c0 [ 122.787316][ T7824] ? __kmalloc_cache_noprof+0x299/0x320 [ 122.787353][ T7824] v9fs_mount+0x67/0x5c0 [ 122.787420][ T7824] ? selinux_capable+0x31/0x40 [ 122.787447][ T7824] ? __pfx_v9fs_mount+0x10/0x10 [ 122.787482][ T7824] legacy_get_tree+0x78/0xd0 [ 122.787511][ T7824] vfs_get_tree+0x57/0x1d0 [ 122.787661][ T7824] do_new_mount+0x207/0x5e0 [ 122.787688][ T7824] ? security_capable+0x83/0x90 [ 122.787714][ T7824] path_mount+0x4a4/0xb20 [ 122.787735][ T7824] ? user_path_at+0x109/0x130 [ 122.787790][ T7824] __se_sys_mount+0x28f/0x2e0 [ 122.787819][ T7824] ? fput+0x8f/0xc0 [ 122.787858][ T7824] __x64_sys_mount+0x67/0x80 [ 122.787880][ T7824] x64_sys_call+0x2b4d/0x2ff0 [ 122.787925][ T7824] do_syscall_64+0xd2/0x200 [ 122.787962][ T7824] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 122.787993][ T7824] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 122.788030][ T7824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.788115][ T7824] RIP: 0033:0x7fc4a04beba9 [ 122.788134][ T7824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.788156][ T7824] RSP: 002b:00007fc49ef1f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 122.788181][ T7824] RAX: ffffffffffffffda RBX: 00007fc4a0705fa0 RCX: 00007fc4a04beba9 [ 122.788197][ T7824] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 122.788212][ T7824] RBP: 00007fc49ef1f090 R08: 00002000000005c0 R09: 0000000000000000 [ 122.788227][ T7824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.788292][ T7824] R13: 00007fc4a0706038 R14: 00007fc4a0705fa0 R15: 00007ffc47d1e108 [ 122.788310][ T7824] [ 123.107000][ T7832] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1305'. [ 123.163859][ T7838] loop7: detected capacity change from 0 to 512 [ 123.185688][ T7838] __quota_error: 632 callbacks suppressed [ 123.185711][ T7838] Quota error (device loop7): v2_read_file_info: Free block number 1 out of range (1, 6). [ 123.208679][ T7838] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 123.250138][ T7838] EXT4-fs (loop7): mount failed [ 123.632343][ T29] audit: type=1326 audit(1757520654.794:16922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7869 comm="syz.5.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a1deeba9 code=0x7ffc0000 [ 123.673667][ T29] audit: type=1326 audit(1757520654.794:16923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7869 comm="syz.5.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a1deeba9 code=0x7ffc0000 [ 123.697429][ T29] audit: type=1326 audit(1757520654.794:16924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7869 comm="syz.5.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f78a1deeba9 code=0x7ffc0000 [ 123.721116][ T29] audit: type=1326 audit(1757520654.794:16925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7869 comm="syz.5.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a1deeba9 code=0x7ffc0000 [ 123.744832][ T29] audit: type=1326 audit(1757520654.794:16926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7869 comm="syz.5.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78a1deeba9 code=0x7ffc0000 [ 123.768527][ T29] audit: type=1326 audit(1757520654.794:16927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7869 comm="syz.5.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a1deeba9 code=0x7ffc0000 [ 123.792565][ T29] audit: type=1326 audit(1757520654.794:16928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7869 comm="syz.5.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a1deeba9 code=0x7ffc0000 [ 123.816517][ T29] audit: type=1326 audit(1757520654.794:16929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7869 comm="syz.5.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78a1deeba9 code=0x7ffc0000 [ 123.840279][ T29] audit: type=1326 audit(1757520654.794:16930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7869 comm="syz.5.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a1deeba9 code=0x7ffc0000 [ 123.989715][ T7907] loop7: detected capacity change from 0 to 512 [ 124.018491][ T7907] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.036927][ T7915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1323'. [ 124.134137][ T7932] loop7: detected capacity change from 0 to 164 [ 124.141524][ T7932] ISOFS: unable to read i-node block [ 124.146914][ T7932] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 124.157634][ T7932] netlink: 'syz.7.1327': attribute type 1 has an invalid length. [ 124.236823][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1329'. [ 124.245899][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1329'. [ 124.324323][ T7945] loop6: detected capacity change from 0 to 512 [ 124.341832][ T7945] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 124.371368][ T7945] EXT4-fs (loop6): 1 truncate cleaned up [ 124.605068][ T7963] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7963 comm=syz.7.1334 [ 124.699065][ T7970] loop3: detected capacity change from 0 to 1024 [ 124.706056][ T7970] EXT4-fs: Ignoring removed nobh option [ 124.711771][ T7970] EXT4-fs: Ignoring removed bh option [ 124.753350][ T7970] 9pnet: Could not find request transport: 0xffffffffffffffff [ 124.827316][ T7980] loop5: detected capacity change from 0 to 512 [ 124.843704][ T7982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=7982 comm=syz.3.1342 [ 124.864861][ T7982] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1342'. [ 124.880115][ T7980] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.988588][ T7989] loop7: detected capacity change from 0 to 512 [ 125.014115][ T7989] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.089254][ T8002] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1348'. [ 125.152723][ T8008] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1351'. [ 125.380511][ T8014] netlink: 'syz.6.1353': attribute type 13 has an invalid length. [ 125.392868][ T8014] FAULT_INJECTION: forcing a failure. [ 125.392868][ T8014] name failslab, interval 1, probability 0, space 0, times 0 [ 125.405527][ T8014] CPU: 1 UID: 0 PID: 8014 Comm: syz.6.1353 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 125.405642][ T8014] Tainted: [W]=WARN [ 125.405648][ T8014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.405660][ T8014] Call Trace: [ 125.405666][ T8014] [ 125.405674][ T8014] __dump_stack+0x1d/0x30 [ 125.405701][ T8014] dump_stack_lvl+0xe8/0x140 [ 125.405725][ T8014] dump_stack+0x15/0x1b [ 125.405793][ T8014] should_fail_ex+0x265/0x280 [ 125.405817][ T8014] should_failslab+0x8c/0xb0 [ 125.405847][ T8014] kmem_cache_alloc_node_noprof+0x57/0x320 [ 125.405886][ T8014] ? __alloc_skb+0x101/0x320 [ 125.405965][ T8014] __alloc_skb+0x101/0x320 [ 125.405991][ T8014] __neigh_notify+0x5b/0x110 [ 125.406072][ T8014] neigh_cleanup_and_release+0x27/0x150 [ 125.406153][ T8014] neigh_flush_one+0x424/0x460 [ 125.406170][ T8014] ? netif_get_flags+0xea/0x110 [ 125.406224][ T8014] neigh_changeaddr+0xb1/0xe0 [ 125.406258][ T8014] ndisc_netdev_event+0x380/0x460 [ 125.406291][ T8014] ? __pfx_ndisc_netdev_event+0x10/0x10 [ 125.406322][ T8014] raw_notifier_call_chain+0x6f/0x1b0 [ 125.406381][ T8014] ? call_netdevice_notifiers_info+0x9c/0x100 [ 125.406415][ T8014] call_netdevice_notifiers_info+0xae/0x100 [ 125.406447][ T8014] __dev_notify_flags+0x171/0x1a0 [ 125.406572][ T8014] netif_change_flags+0xac/0xd0 [ 125.406596][ T8014] do_setlink+0x9d2/0x2810 [ 125.406634][ T8014] ? save_fpregs_to_fpstate+0x100/0x160 [ 125.406678][ T8014] ? _raw_spin_unlock+0x26/0x50 [ 125.406706][ T8014] ? finish_task_switch+0xad/0x2b0 [ 125.406729][ T8014] ? __schedule+0x6b9/0xb30 [ 125.406753][ T8014] rtnl_newlink+0xd8b/0x12d0 [ 125.406835][ T8014] ? bpf_get_current_comm+0x7c/0xb0 [ 125.406858][ T8014] ? __rcu_read_unlock+0x34/0x70 [ 125.406879][ T8014] ? bpf_trace_run3+0x12c/0x1d0 [ 125.406963][ T8014] ? __memcg_slab_free_hook+0x135/0x230 [ 125.407047][ T8014] ? __rcu_read_unlock+0x4f/0x70 [ 125.407174][ T8014] ? avc_has_perm_noaudit+0x1b1/0x200 [ 125.407209][ T8014] ? cred_has_capability+0x210/0x280 [ 125.407241][ T8014] ? selinux_capable+0x31/0x40 [ 125.407271][ T8014] ? security_capable+0x83/0x90 [ 125.407294][ T8014] ? ns_capable+0x7d/0xb0 [ 125.407346][ T8014] ? __pfx_rtnl_newlink+0x10/0x10 [ 125.407385][ T8014] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 125.407427][ T8014] netlink_rcv_skb+0x123/0x220 [ 125.407456][ T8014] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 125.407498][ T8014] rtnetlink_rcv+0x1c/0x30 [ 125.407555][ T8014] netlink_unicast+0x5bd/0x690 [ 125.407580][ T8014] netlink_sendmsg+0x58b/0x6b0 [ 125.407675][ T8014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.407738][ T8014] __sock_sendmsg+0x142/0x180 [ 125.407768][ T8014] ____sys_sendmsg+0x31e/0x4e0 [ 125.407827][ T8014] ___sys_sendmsg+0x17b/0x1d0 [ 125.407882][ T8014] __x64_sys_sendmsg+0xd4/0x160 [ 125.407920][ T8014] x64_sys_call+0x191e/0x2ff0 [ 125.407976][ T8014] do_syscall_64+0xd2/0x200 [ 125.408010][ T8014] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 125.408041][ T8014] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 125.408096][ T8014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.408123][ T8014] RIP: 0033:0x7f13d1f2eba9 [ 125.408142][ T8014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.408162][ T8014] RSP: 002b:00007f13d0997038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.408255][ T8014] RAX: ffffffffffffffda RBX: 00007f13d2175fa0 RCX: 00007f13d1f2eba9 [ 125.408270][ T8014] RDX: 0000000000000004 RSI: 0000200000000180 RDI: 0000000000000003 [ 125.408285][ T8014] RBP: 00007f13d0997090 R08: 0000000000000000 R09: 0000000000000000 [ 125.408301][ T8014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.408315][ T8014] R13: 00007f13d2176038 R14: 00007f13d2175fa0 R15: 00007ffc8f84be38 [ 125.408339][ T8014] [ 125.786775][ T8014] gretap0: refused to change device tx_queue_len [ 125.795910][ T8014] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 125.870689][ T8018] loop6: detected capacity change from 0 to 512 [ 125.878001][ T8018] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 125.897588][ T8018] EXT4-fs (loop6): 1 truncate cleaned up [ 125.925619][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1355'. [ 126.019217][ T8027] loop7: detected capacity change from 0 to 512 [ 126.033263][ T8027] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.169814][ T8035] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1361'. [ 126.282954][ T8040] loop7: detected capacity change from 0 to 2048 [ 126.348347][ T8042] capability: warning: `syz.5.1364' uses 32-bit capabilities (legacy support in use) [ 126.364398][ T8044] loop7: detected capacity change from 0 to 512 [ 126.389108][ T8046] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1366'. [ 126.740847][ T8053] tipc: Started in network mode [ 126.745857][ T8053] tipc: Node identity ac14140f, cluster identity 4711 [ 126.752849][ T8053] FAULT_INJECTION: forcing a failure. [ 126.752849][ T8053] name failslab, interval 1, probability 0, space 0, times 0 [ 126.765571][ T8053] CPU: 1 UID: 0 PID: 8053 Comm: syz.6.1368 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 126.765613][ T8053] Tainted: [W]=WARN [ 126.765638][ T8053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.765650][ T8053] Call Trace: [ 126.765655][ T8053] [ 126.765703][ T8053] __dump_stack+0x1d/0x30 [ 126.765728][ T8053] dump_stack_lvl+0xe8/0x140 [ 126.765766][ T8053] dump_stack+0x15/0x1b [ 126.765787][ T8053] should_fail_ex+0x265/0x280 [ 126.765820][ T8053] should_failslab+0x8c/0xb0 [ 126.765850][ T8053] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 126.765878][ T8053] ? sock_alloc_inode+0x34/0xa0 [ 126.765911][ T8053] ? __pfx_sock_alloc_inode+0x10/0x10 [ 126.766000][ T8053] sock_alloc_inode+0x34/0xa0 [ 126.766118][ T8053] alloc_inode+0x3d/0x170 [ 126.766211][ T8053] __sock_create+0x122/0x5b0 [ 126.766272][ T8053] ? tipc_set_node_id+0x121/0x160 [ 126.766359][ T8053] sock_create_kern+0x38/0x50 [ 126.766382][ T8053] udp_sock_create4+0x66/0x2a0 [ 126.766426][ T8053] udp_sock_create+0x64/0x80 [ 126.766517][ T8053] tipc_udp_enable+0x943/0xb10 [ 126.766600][ T8053] __tipc_nl_bearer_enable+0x945/0xda0 [ 126.766705][ T8053] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 126.766813][ T8053] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 126.766849][ T8053] tipc_nl_bearer_enable+0x22/0x40 [ 126.766932][ T8053] genl_family_rcv_msg_doit+0x140/0x1b0 [ 126.767000][ T8053] genl_rcv_msg+0x422/0x460 [ 126.767031][ T8053] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 126.767061][ T8053] netlink_rcv_skb+0x123/0x220 [ 126.767083][ T8053] ? __pfx_genl_rcv_msg+0x10/0x10 [ 126.767187][ T8053] genl_rcv+0x28/0x40 [ 126.767215][ T8053] netlink_unicast+0x5bd/0x690 [ 126.767239][ T8053] netlink_sendmsg+0x58b/0x6b0 [ 126.767290][ T8053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.767317][ T8053] __sock_sendmsg+0x142/0x180 [ 126.767349][ T8053] ____sys_sendmsg+0x31e/0x4e0 [ 126.767408][ T8053] ___sys_sendmsg+0x17b/0x1d0 [ 126.767450][ T8053] __x64_sys_sendmsg+0xd4/0x160 [ 126.767480][ T8053] x64_sys_call+0x191e/0x2ff0 [ 126.767502][ T8053] do_syscall_64+0xd2/0x200 [ 126.767552][ T8053] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 126.767577][ T8053] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 126.767606][ T8053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.767628][ T8053] RIP: 0033:0x7f13d1f2eba9 [ 126.767717][ T8053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.767734][ T8053] RSP: 002b:00007f13d0997038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.767753][ T8053] RAX: ffffffffffffffda RBX: 00007f13d2175fa0 RCX: 00007f13d1f2eba9 [ 126.767766][ T8053] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 126.767778][ T8053] RBP: 00007f13d0997090 R08: 0000000000000000 R09: 0000000000000000 [ 126.767790][ T8053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.767849][ T8053] R13: 00007f13d2176038 R14: 00007f13d2175fa0 R15: 00007ffc8f84be38 [ 126.767869][ T8053] [ 126.767892][ T8053] socket: no more sockets [ 126.880595][ T8058] FAULT_INJECTION: forcing a failure. [ 126.880595][ T8058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.882043][ T8053] tipc: Enabling of bearer rejected, failed to enable media [ 127.093333][ T8058] CPU: 0 UID: 0 PID: 8058 Comm: syz.7.1370 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 127.093361][ T8058] Tainted: [W]=WARN [ 127.093368][ T8058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.093413][ T8058] Call Trace: [ 127.093419][ T8058] [ 127.093427][ T8058] __dump_stack+0x1d/0x30 [ 127.093445][ T8058] dump_stack_lvl+0xe8/0x140 [ 127.093514][ T8058] dump_stack+0x15/0x1b [ 127.093528][ T8058] should_fail_ex+0x265/0x280 [ 127.093549][ T8058] should_fail+0xb/0x20 [ 127.093566][ T8058] should_fail_usercopy+0x1a/0x20 [ 127.093587][ T8058] _copy_to_user+0x20/0xa0 [ 127.093653][ T8058] simple_read_from_buffer+0xb5/0x130 [ 127.093673][ T8058] proc_fail_nth_read+0x10e/0x150 [ 127.093697][ T8058] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.093719][ T8058] vfs_read+0x1a5/0x770 [ 127.093747][ T8058] ? __rcu_read_unlock+0x4f/0x70 [ 127.093765][ T8058] ? __fget_files+0x184/0x1c0 [ 127.093788][ T8058] ksys_read+0xda/0x1a0 [ 127.093808][ T8058] __x64_sys_read+0x40/0x50 [ 127.093827][ T8058] x64_sys_call+0x27bc/0x2ff0 [ 127.093845][ T8058] do_syscall_64+0xd2/0x200 [ 127.093876][ T8058] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 127.093937][ T8058] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 127.093963][ T8058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.093982][ T8058] RIP: 0033:0x7ff10ccfd5bc [ 127.093995][ T8058] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 127.094011][ T8058] RSP: 002b:00007ff10b73e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.094104][ T8058] RAX: ffffffffffffffda RBX: 00007ff10cf46090 RCX: 00007ff10ccfd5bc [ 127.094115][ T8058] RDX: 000000000000000f RSI: 00007ff10b73e0a0 RDI: 0000000000000007 [ 127.094128][ T8058] RBP: 00007ff10b73e090 R08: 0000000000000000 R09: 0000000000000000 [ 127.094138][ T8058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.094149][ T8058] R13: 00007ff10cf46128 R14: 00007ff10cf46090 R15: 00007ffd87037478 [ 127.094167][ T8058] [ 127.339882][ T8066] loop5: detected capacity change from 0 to 8192 [ 127.365295][ T8075] tipc: Started in network mode [ 127.370231][ T8075] tipc: Node identity ac14140f, cluster identity 4711 [ 127.377471][ T8075] tipc: New replicast peer: 255.255.255.255 [ 127.383593][ T8075] tipc: Enabled bearer , priority 10 [ 127.657013][ T8095] pim6reg: entered allmulticast mode [ 127.670166][ T8097] lo speed is unknown, defaulting to 1000 [ 127.674143][ T8095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.695105][ T8095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.700714][ T8101] loop4: detected capacity change from 0 to 1024 [ 127.714485][ T8101] EXT4-fs: dax option not supported [ 127.891021][ T8102] pim6reg: left allmulticast mode [ 128.023487][ T8111] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 128.166634][ T8124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=8124 comm=syz.3.1394 [ 128.202551][ T8126] loop6: detected capacity change from 0 to 1024 [ 128.209679][ T8126] EXT4-fs (loop6): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 128.220591][ T8126] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 128.228733][ T8126] EXT4-fs (loop6): orphan cleanup on readonly fs [ 128.235449][ T8126] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 128.250178][ T8126] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 128.257127][ T8126] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096 [ 128.270132][ T8126] EXT4-fs (loop6): Remounting filesystem read-only [ 128.276890][ T8126] EXT4-fs (loop6): 1 orphan inode deleted [ 128.287979][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 128.287994][ T29] audit: type=1400 audit(1757520659.454:17355): avc: denied { read } for pid=8125 comm="+}[@" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 128.318402][ T29] audit: type=1400 audit(1757520659.454:17356): avc: denied { open } for pid=8125 comm="+}[@" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 128.343344][ T29] audit: type=1400 audit(1757520659.484:17357): avc: denied { ioctl } for pid=8125 comm="+}[@" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 128.381022][ T3379] tipc: Node number set to 2886997007 [ 128.407555][ T8134] __nla_validate_parse: 37 callbacks suppressed [ 128.407625][ T8134] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1398'. [ 128.425667][ T8132] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.433000][ T8132] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.444804][ T8132] $H: left promiscuous mode [ 128.449642][ T8132] bond_slave_0: left promiscuous mode [ 128.455306][ T8132] bond_slave_1: left promiscuous mode [ 128.489473][ T8132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.506222][ T8132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.518138][ T29] audit: type=1400 audit(1757520659.674:17358): avc: denied { ioctl } for pid=8135 comm="syz.7.1399" path="socket:[20637]" dev="sockfs" ino=20637 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 128.562690][ T4685] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.581929][ T4685] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.606521][ T4685] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.637717][ T4685] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.700107][ T29] audit: type=1400 audit(1757520659.854:17359): avc: denied { module_load } for pid=8152 comm="syz.7.1404" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=19831 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 128.802038][ T8157] loop4: detected capacity change from 0 to 512 [ 128.825736][ T8157] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.843140][ T8153] vlan2: entered allmulticast mode [ 128.937042][ T8166] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1408'. [ 128.947737][ T8166] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1408'. [ 129.014442][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1409'. [ 129.064443][ T8172] loop6: detected capacity change from 0 to 8192 [ 129.193511][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1411'. [ 129.266616][ T8186] loop5: detected capacity change from 0 to 128 [ 129.288896][ T29] audit: type=1326 audit(1757520660.444:17360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8184 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7722eba9 code=0x7ffc0000 [ 129.296942][ T8186] openvswitch: netlink: Message has 8 unknown bytes. [ 129.312568][ T29] audit: type=1326 audit(1757520660.444:17361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8184 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb7722eba9 code=0x7ffc0000 [ 129.331640][ T8186] bio_check_eod: 75 callbacks suppressed [ 129.331665][ T8186] syz.5.1416: attempt to access beyond end of device [ 129.331665][ T8186] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 129.347908][ T29] audit: type=1326 audit(1757520660.444:17362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8184 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7722eba9 code=0x7ffc0000 [ 129.386055][ T29] audit: type=1326 audit(1757520660.444:17363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8184 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7722eba9 code=0x7ffc0000 [ 129.409860][ T29] audit: type=1326 audit(1757520660.444:17364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8184 comm="syz.4.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb7722eba9 code=0x7ffc0000 [ 129.548540][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1419'. [ 129.575106][ T8196] loop5: detected capacity change from 0 to 512 [ 129.590287][ T8198] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1421'. [ 129.604107][ T8196] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.759782][ T8212] netlink: 'syz.5.1426': attribute type 13 has an invalid length. [ 129.769808][ T8210] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1425'. [ 129.779302][ T8210] bond0: invalid ARP target 0.0.0.0 specified for addition [ 129.786613][ T8210] bond0: option arp_ip_target: invalid value (0) [ 129.815680][ T8212] gretap0: refused to change device tx_queue_len [ 129.824368][ T8212] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 129.840207][ T8216] loop3: detected capacity change from 0 to 512 [ 129.841704][ T8216] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 129.968830][ T8223] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 129.979704][ T8223] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 130.057455][ T8226] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.064996][ T8226] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.073157][ T8226] bridge0: entered allmulticast mode [ 130.090709][ T8226] bridge_slave_1: left allmulticast mode [ 130.096481][ T8226] bridge_slave_1: left promiscuous mode [ 130.102191][ T8226] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.111524][ T8226] bridge_slave_0: left allmulticast mode [ 130.117341][ T8226] bridge_slave_0: left promiscuous mode [ 130.123144][ T8226] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.182003][ T8224] lo speed is unknown, defaulting to 1000 [ 130.264297][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1434'. [ 130.273867][ T8232] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1434'. [ 130.274486][ T8231] loop6: detected capacity change from 0 to 512 [ 130.293711][ T8231] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.384870][ T8239] loop6: detected capacity change from 0 to 512 [ 130.392796][ T8239] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 130.535023][ T8251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8251 comm=syz.5.1440 [ 130.561705][ T8251] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 130.569217][ T8251] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 130.655683][ T8263] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=8263 comm=syz.6.1445 [ 130.669470][ T8263] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=22 sclass=netlink_audit_socket pid=8263 comm=syz.6.1445 [ 130.686651][ T8263] loop6: detected capacity change from 0 to 512 [ 130.704457][ T8263] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 130.721155][ T8263] EXT4-fs (loop6): mount failed [ 130.736928][ T8266] loop5: detected capacity change from 0 to 128 [ 130.766683][ T8266] ext4 filesystem being mounted at /200/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.901938][ T8288] xt_l2tp: missing protocol rule (udp|l2tpip) [ 130.963389][ T8294] veth0_to_bond: entered allmulticast mode [ 131.102554][ T8297] netlink: 'syz.5.1450': attribute type 10 has an invalid length. [ 131.113490][ T8297] bond0: (slave dummy0): Releasing backup interface [ 131.124028][ T8297] team0: Port device dummy0 added [ 131.132968][ T8297] random: crng reseeded on system resumption [ 131.770608][ T8309] loop5: detected capacity change from 0 to 1024 [ 131.795366][ T8309] EXT4-fs mount: 34 callbacks suppressed [ 131.795383][ T8309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.864864][ T8313] loop6: detected capacity change from 0 to 512 [ 131.908485][ T8309] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1462: Allocating blocks 449-513 which overlap fs metadata [ 131.938617][ T8313] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.953437][ T8313] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.964612][ T8320] EXT4-fs (loop5): pa ffff888106f7de70: logic 48, phys. 177, len 21 [ 131.965898][ T8313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4368 sclass=netlink_route_socket pid=8313 comm=syz.6.1463 [ 131.972661][ T8320] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 131.991898][ T8313] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8313 comm=syz.6.1463 [ 132.031115][ T6537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.033305][ T8321] 9pnet: p9_errstr2errno: server reported unknown error [ 132.076310][ T4959] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.314639][ T8348] loop6: detected capacity change from 0 to 512 [ 132.325695][ T8348] /dev/loop6: Can't open blockdev [ 132.341815][ T8349] openvswitch: netlink: Message has 6 unknown bytes. [ 132.350385][ T8350] openvswitch: netlink: Message has 6 unknown bytes. [ 132.435681][ T8359] loop6: detected capacity change from 0 to 512 [ 132.445021][ T8359] vfat: Unknown parameter 'nonumt.il' [ 132.475305][ T8361] loop6: detected capacity change from 0 to 512 [ 132.493089][ T8361] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.506032][ T8361] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.565575][ T6537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.769576][ T8373] loop4: detected capacity change from 0 to 128 [ 134.776656][ T8373] vfat: Unknown parameter ' ' [ 134.782838][ T8372] loop6: detected capacity change from 0 to 128 [ 134.789537][ T8372] vfat: Unknown parameter ' ' [ 135.255147][ T8379] __nla_validate_parse: 5 callbacks suppressed [ 135.255223][ T8379] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1486'. [ 135.270702][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1486'. [ 135.319252][ T8385] loop7: detected capacity change from 0 to 136 [ 135.345651][ T8385] Attempt to read inode for relocated directory [ 135.540680][ T8406] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1494'. [ 135.658836][ T8409] loop3: detected capacity change from 0 to 2048 [ 135.667461][ T8413] FAULT_INJECTION: forcing a failure. [ 135.667461][ T8413] name failslab, interval 1, probability 0, space 0, times 0 [ 135.680208][ T8413] CPU: 1 UID: 0 PID: 8413 Comm: syz.5.1495 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 135.680249][ T8413] Tainted: [W]=WARN [ 135.680257][ T8413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.680273][ T8413] Call Trace: [ 135.680281][ T8413] [ 135.680290][ T8413] __dump_stack+0x1d/0x30 [ 135.680368][ T8413] dump_stack_lvl+0xe8/0x140 [ 135.680391][ T8413] dump_stack+0x15/0x1b [ 135.680413][ T8413] should_fail_ex+0x265/0x280 [ 135.680470][ T8413] should_failslab+0x8c/0xb0 [ 135.680498][ T8413] __kmalloc_noprof+0xa5/0x3e0 [ 135.680533][ T8413] ? aio_setup_ring+0x1e8/0x760 [ 135.680592][ T8413] aio_setup_ring+0x1e8/0x760 [ 135.680670][ T8413] ioctx_alloc+0x2c4/0x4e0 [ 135.680694][ T8413] ? fput+0x8f/0xc0 [ 135.680724][ T8413] __se_sys_io_setup+0x6b/0x1b0 [ 135.680824][ T8413] __x64_sys_io_setup+0x31/0x40 [ 135.680902][ T8413] x64_sys_call+0x2eff/0x2ff0 [ 135.680994][ T8413] do_syscall_64+0xd2/0x200 [ 135.681025][ T8413] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 135.681051][ T8413] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 135.681089][ T8413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.681194][ T8413] RIP: 0033:0x7f78a1deeba9 [ 135.681212][ T8413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.681235][ T8413] RSP: 002b:00007f78a084f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 135.681258][ T8413] RAX: ffffffffffffffda RBX: 00007f78a2035fa0 RCX: 00007f78a1deeba9 [ 135.681285][ T8413] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004 [ 135.681297][ T8413] RBP: 00007f78a084f090 R08: 0000000000000000 R09: 0000000000000000 [ 135.681308][ T8413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.681384][ T8413] R13: 00007f78a2036038 R14: 00007f78a2035fa0 R15: 00007ffcb4e47d78 [ 135.681409][ T8413] [ 136.114910][ T8409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.223798][ T8435] loop5: detected capacity change from 0 to 512 [ 136.230697][ T8435] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 136.250508][ T8407] syzkaller1: entered promiscuous mode [ 136.256175][ T8407] syzkaller1: entered allmulticast mode [ 136.264250][ T8435] EXT4-fs (loop5): 1 truncate cleaned up [ 136.272228][ T8435] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.320135][ T4959] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.393250][ T8445] loop6: detected capacity change from 0 to 128 [ 136.400060][ T8445] vfat: Unknown parameter ' ' [ 136.558069][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1500'. [ 136.606411][ T8448] lo speed is unknown, defaulting to 1000 [ 137.075105][ T8453] loop5: detected capacity change from 0 to 128 [ 137.082189][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 137.082207][ T29] audit: type=1326 audit(1757520668.224:17579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.4.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7722eba9 code=0x7ffc0000 [ 137.112110][ T29] audit: type=1326 audit(1757520668.224:17580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.4.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7722eba9 code=0x7ffc0000 [ 137.135930][ T29] audit: type=1326 audit(1757520668.234:17581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.4.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7ffb7722eba9 code=0x7ffc0000 [ 137.159680][ T29] audit: type=1326 audit(1757520668.234:17582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.4.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7722eba9 code=0x7ffc0000 [ 137.183449][ T29] audit: type=1326 audit(1757520668.234:17583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.4.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7722eba9 code=0x7ffc0000 [ 137.206960][ T29] audit: type=1400 audit(1757520668.234:17584): avc: denied { nlmsg_read } for pid=8450 comm="syz.5.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 137.227611][ T29] audit: type=1326 audit(1757520668.234:17585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.4.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ffb7722eba9 code=0x7ffc0000 [ 137.251079][ T29] audit: type=1326 audit(1757520668.234:17586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.4.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7722eba9 code=0x7ffc0000 [ 137.274572][ T29] audit: type=1326 audit(1757520668.234:17587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.4.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7722eba9 code=0x7ffc0000 [ 137.446230][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.507197][ T8465] loop7: detected capacity change from 0 to 1024 [ 137.520585][ T8467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8467 comm=syz.4.1505 [ 137.541167][ T29] audit: type=1326 audit(1757520668.484:17588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.4.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb7722eba9 code=0x7ffc0000 [ 137.731227][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1506'. [ 137.740675][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1506'. [ 137.799638][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1506'. [ 137.808738][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1506'. [ 137.856588][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1506'. [ 137.865561][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1506'. [ 137.889654][ T8453] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.920759][ T8453] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.934204][ T8465] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.963641][ T8453] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.013714][ T7357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.024369][ T8495] loop4: detected capacity change from 0 to 256 [ 138.034523][ T8495] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 138.048110][ T8495] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.062678][ T8495] FAULT_INJECTION: forcing a failure. [ 138.062678][ T8495] name failslab, interval 1, probability 0, space 0, times 0 [ 138.075872][ T8495] CPU: 1 UID: 0 PID: 8495 Comm: syz.4.1508 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 138.075925][ T8495] Tainted: [W]=WARN [ 138.075934][ T8495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.075950][ T8495] Call Trace: [ 138.075957][ T8495] [ 138.075966][ T8495] __dump_stack+0x1d/0x30 [ 138.075993][ T8495] dump_stack_lvl+0xe8/0x140 [ 138.076047][ T8495] dump_stack+0x15/0x1b [ 138.076068][ T8495] should_fail_ex+0x265/0x280 [ 138.076117][ T8495] should_failslab+0x8c/0xb0 [ 138.076149][ T8495] kmem_cache_alloc_noprof+0x50/0x310 [ 138.076185][ T8495] ? __blockdev_direct_IO+0x131/0x1d80 [ 138.076300][ T8495] __blockdev_direct_IO+0x131/0x1d80 [ 138.076339][ T8495] ? find_get_entry+0x374/0x380 [ 138.076363][ T8495] ? __rcu_read_unlock+0x4f/0x70 [ 138.076390][ T8495] ? filemap_get_folios_tag+0x1da/0x210 [ 138.076500][ T8495] ? __pfx_fat_get_block+0x10/0x10 [ 138.076548][ T8495] fat_direct_IO+0x102/0x1d0 [ 138.076580][ T8495] generic_file_read_iter+0x218/0x330 [ 138.076609][ T8495] copy_splice_read+0x43f/0x660 [ 138.076668][ T8495] ? __pfx_filemap_splice_read+0x10/0x10 [ 138.076759][ T8495] splice_direct_to_actor+0x290/0x680 [ 138.076786][ T8495] ? __pfx_direct_splice_actor+0x10/0x10 [ 138.076817][ T8495] do_splice_direct+0xda/0x150 [ 138.076915][ T8495] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 138.076947][ T8495] do_sendfile+0x380/0x650 [ 138.076988][ T8495] __x64_sys_sendfile64+0x105/0x150 [ 138.077038][ T8495] x64_sys_call+0x2bb0/0x2ff0 [ 138.077133][ T8495] do_syscall_64+0xd2/0x200 [ 138.077171][ T8495] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 138.077244][ T8495] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 138.077297][ T8495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.077362][ T8495] RIP: 0033:0x7ffb7722eba9 [ 138.077382][ T8495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.077405][ T8495] RSP: 002b:00007ffb75c8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 138.077429][ T8495] RAX: ffffffffffffffda RBX: 00007ffb77475fa0 RCX: 00007ffb7722eba9 [ 138.077443][ T8495] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 138.077455][ T8495] RBP: 00007ffb75c8f090 R08: 0000000000000000 R09: 0000000000000000 [ 138.077468][ T8495] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000002 [ 138.077539][ T8495] R13: 00007ffb77476038 R14: 00007ffb77475fa0 R15: 00007fff182d0ce8 [ 138.077559][ T8495] [ 138.331463][ T8453] SELinux: security policydb version 17 (MLS) not backwards compatible [ 138.342459][ T8453] SELinux: failed to load policy [ 138.355170][ T8499] loop9: detected capacity change from 0 to 7 [ 138.364441][ T8499] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.372434][ T8499] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.380322][ T8499] loop9: unable to read partition table [ 138.386085][ T8499] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 138.386085][ T8499] ) failed (rc=-5) [ 138.404223][ T8507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=8507 comm=syz.5.1511 [ 138.453060][ T8514] loop5: detected capacity change from 0 to 512 [ 138.509728][ T8521] loop4: detected capacity change from 0 to 1764 [ 138.548958][ T8526] loop7: detected capacity change from 0 to 256 [ 138.557528][ T8526] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.992745][ T8546] pimreg: entered allmulticast mode [ 139.019796][ T8546] pimreg: left allmulticast mode [ 139.164909][ T8563] futex_wake_op: syz.6.1531 tries to shift op by -1; fix this program [ 139.174484][ T8563] loop9: detected capacity change from 0 to 7 [ 139.180715][ T8563] Buffer I/O error on dev loop9, logical block 0, async page read [ 139.188618][ T8563] Buffer I/O error on dev loop9, logical block 0, async page read [ 139.196537][ T8563] loop9: unable to read partition table [ 139.202341][ T8563] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 139.202341][ T8563] ) failed (rc=-5) [ 139.266163][ T8566] loop6: detected capacity change from 0 to 8192 [ 139.301694][ T8568] loop5: detected capacity change from 0 to 128 [ 139.310031][ T8568] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 139.327300][ T8568] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.339091][ T8566] loop6: p1 < > p4 < > [ 139.483333][ T8576] lo speed is unknown, defaulting to 1000 [ 139.578998][ T8587] FAULT_INJECTION: forcing a failure. [ 139.578998][ T8587] name failslab, interval 1, probability 0, space 0, times 0 [ 139.591835][ T8587] CPU: 0 UID: 0 PID: 8587 Comm: syz.4.1537 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 139.591871][ T8587] Tainted: [W]=WARN [ 139.591879][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.591959][ T8587] Call Trace: [ 139.591966][ T8587] [ 139.592038][ T8587] __dump_stack+0x1d/0x30 [ 139.592065][ T8587] dump_stack_lvl+0xe8/0x140 [ 139.592090][ T8587] dump_stack+0x15/0x1b [ 139.592113][ T8587] should_fail_ex+0x265/0x280 [ 139.592202][ T8587] should_failslab+0x8c/0xb0 [ 139.592235][ T8587] kmem_cache_alloc_node_noprof+0x57/0x320 [ 139.592269][ T8587] ? __alloc_skb+0x101/0x320 [ 139.592298][ T8587] __alloc_skb+0x101/0x320 [ 139.592394][ T8587] ? audit_log_start+0x365/0x6c0 [ 139.592484][ T8587] audit_log_start+0x380/0x6c0 [ 139.592573][ T8587] ? __account_obj_stock+0x211/0x350 [ 139.592612][ T8587] audit_seccomp+0x48/0x100 [ 139.592665][ T8587] ? __seccomp_filter+0x68c/0x10d0 [ 139.592692][ T8587] __seccomp_filter+0x69d/0x10d0 [ 139.592718][ T8587] ? __fput+0x555/0x650 [ 139.592752][ T8587] ? kmem_cache_free+0x202/0x300 [ 139.592875][ T8587] ? percpu_counter_add_batch+0xb6/0x130 [ 139.592920][ T8587] __secure_computing+0x82/0x150 [ 139.593024][ T8587] syscall_trace_enter+0xcf/0x1e0 [ 139.593069][ T8587] do_syscall_64+0xac/0x200 [ 139.593177][ T8587] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 139.593214][ T8587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.593236][ T8587] RIP: 0033:0x7ffb7722d5bc [ 139.593251][ T8587] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 139.593273][ T8587] RSP: 002b:00007ffb75c8f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 139.593296][ T8587] RAX: ffffffffffffffda RBX: 00007ffb77475fa0 RCX: 00007ffb7722d5bc [ 139.593349][ T8587] RDX: 000000000000000f RSI: 00007ffb75c8f0a0 RDI: 0000000000000007 [ 139.593417][ T8587] RBP: 00007ffb75c8f090 R08: 0000000000000000 R09: 0000000000000000 [ 139.593468][ T8587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.593513][ T8587] R13: 00007ffb77476038 R14: 00007ffb77475fa0 R15: 00007fff182d0ce8 [ 139.593538][ T8587] [ 139.611127][ T8579] lo speed is unknown, defaulting to 1000 [ 139.884124][ T8597] loop4: detected capacity change from 0 to 512 [ 139.895331][ T8597] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.179789][ T4959] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.680518][ T8641] lo speed is unknown, defaulting to 1000 [ 140.724522][ T8646] pimreg: entered allmulticast mode [ 140.732871][ T8645] pimreg: left allmulticast mode [ 140.835362][ T8655] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 141.052157][ T8655] openvswitch: netlink: Message has 6 unknown bytes. [ 141.429291][ T8659] loop4: detected capacity change from 0 to 512 [ 141.439655][ T8659] ext3: Unknown parameter 'pcr' [ 141.517030][ T8663] __nla_validate_parse: 8 callbacks suppressed [ 141.517044][ T8663] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1566'. [ 141.554264][ T8661] lo speed is unknown, defaulting to 1000 [ 141.594774][ T8667] loop6: detected capacity change from 0 to 512 [ 141.603240][ T8670] loop7: detected capacity change from 0 to 256 [ 141.610259][ T8670] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 141.631558][ T8670] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.643928][ T8667] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.650732][ T8670] ipvlan2: entered promiscuous mode [ 141.663513][ T8670] bridge0: port 3(ipvlan2) entered blocking state [ 141.669993][ T8670] bridge0: port 3(ipvlan2) entered disabled state [ 141.677626][ T8670] ipvlan2: entered allmulticast mode [ 141.678070][ T8667] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.683055][ T8670] bridge0: entered allmulticast mode [ 141.699523][ T8670] ipvlan2: left allmulticast mode [ 141.704742][ T8670] bridge0: left allmulticast mode [ 141.788308][ T6537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.814281][ T8677] siw: device registration error -23 [ 141.821977][ T8677] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 141.886895][ T8682] netlink: 'syz.3.1571': attribute type 13 has an invalid length. [ 141.973101][ T8690] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1575'. [ 142.560072][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 142.560090][ T29] audit: type=1326 audit(1757520673.714:17809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.7.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10ccfeba9 code=0x7ffc0000 [ 142.592563][ T8707] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1580'. [ 142.601727][ T8707] netlink: 37 bytes leftover after parsing attributes in process `syz.7.1580'. [ 142.611529][ T29] audit: type=1326 audit(1757520673.744:17810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.7.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff10ccfeba9 code=0x7ffc0000 [ 142.635306][ T29] audit: type=1326 audit(1757520673.744:17811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.7.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10ccfeba9 code=0x7ffc0000 [ 142.658977][ T29] audit: type=1326 audit(1757520673.744:17812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.7.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10ccfeba9 code=0x7ffc0000 [ 142.682642][ T29] audit: type=1326 audit(1757520673.754:17813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.7.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff10ccfeba9 code=0x7ffc0000 [ 142.706379][ T29] audit: type=1326 audit(1757520673.774:17814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.7.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10ccfeba9 code=0x7ffc0000 [ 142.730173][ T29] audit: type=1326 audit(1757520673.774:17815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.7.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10ccfeba9 code=0x7ffc0000 [ 142.755178][ T29] audit: type=1326 audit(1757520673.774:17816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.7.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff10ccfeba9 code=0x7ffc0000 [ 142.778899][ T29] audit: type=1326 audit(1757520673.774:17817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.7.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10ccfeba9 code=0x7ffc0000 [ 142.802618][ T29] audit: type=1326 audit(1757520673.774:17818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.7.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10ccfeba9 code=0x7ffc0000 [ 142.849682][ T8710] loop4: detected capacity change from 0 to 8192 [ 142.860040][ T8716] loop3: detected capacity change from 0 to 512 [ 142.884134][ T8716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.897295][ T8716] ext4 filesystem being mounted at /319/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.911463][ T8710] loop4: p1 p2 p3 p4 [ 142.915677][ T8710] loop4: p1 start 51379968 is beyond EOD, truncated [ 142.925877][ T8710] loop4: p3 size 15991040 extends beyond EOD, truncated [ 142.939677][ T8709] netlink: 'syz.4.1581': attribute type 1 has an invalid length. [ 142.947624][ T8709] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1581'. [ 142.957992][ T8710] loop4: p4 start 16711680 is beyond EOD, truncated [ 143.008342][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.018431][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1581'. [ 143.072776][ T8726] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1586'. [ 143.111778][ T8728] loop4: detected capacity change from 0 to 512 [ 143.119059][ T8728] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 143.132016][ T8728] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 143.140211][ T8728] System zones: 0-2, 18-18, 34-34 [ 143.147980][ T8728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.158719][ T8734] can0: slcan on ttyS3. [ 143.162784][ T8728] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.171470][ T8734] loop6: detected capacity change from 0 to 764 [ 143.179468][ T8728] netlink: 'syz.4.1587': attribute type 10 has an invalid length. [ 143.190277][ T8734] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 143.205598][ T8730] netlink: 54 bytes leftover after parsing attributes in process `syz.6.1588'. [ 143.206216][ T8728] team0: Port device dummy0 added [ 143.236212][ T8728] netlink: 'syz.4.1587': attribute type 10 has an invalid length. [ 143.274345][ T8735] loop3: detected capacity change from 0 to 128 [ 143.281186][ T8735] vfat: Unknown parameter ' ' [ 143.295467][ T8729] can0 (unregistered): slcan off ttyS3. [ 143.325851][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.819831][ T8746] loop5: detected capacity change from 0 to 2048 [ 144.070906][ T8753] netlink: 'syz.6.1596': attribute type 4 has an invalid length. [ 144.078881][ T8753] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1596'. [ 144.159734][ T8753] FAULT_INJECTION: forcing a failure. [ 144.159734][ T8753] name failslab, interval 1, probability 0, space 0, times 0 [ 144.172552][ T8753] CPU: 0 UID: 0 PID: 8753 Comm: syz.6.1596 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 144.172584][ T8753] Tainted: [W]=WARN [ 144.172590][ T8753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.172606][ T8753] Call Trace: [ 144.172619][ T8753] [ 144.172629][ T8753] __dump_stack+0x1d/0x30 [ 144.172656][ T8753] dump_stack_lvl+0xe8/0x140 [ 144.172690][ T8753] dump_stack+0x15/0x1b [ 144.172708][ T8753] should_fail_ex+0x265/0x280 [ 144.172731][ T8753] should_failslab+0x8c/0xb0 [ 144.172759][ T8753] __kmalloc_noprof+0xa5/0x3e0 [ 144.172843][ T8753] ? fib_create_info+0xbb1/0x1980 [ 144.172931][ T8753] fib_create_info+0xbb1/0x1980 [ 144.172972][ T8753] fib_table_insert+0x60/0xeb0 [ 144.173007][ T8753] ? fib_trie_table+0xd0/0xf0 [ 144.173148][ T8753] ? fib_new_table+0x1ac/0x1c0 [ 144.173172][ T8753] inet_rtm_newroute+0xab/0x140 [ 144.173282][ T8753] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 144.173309][ T8753] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 144.173344][ T8753] netlink_rcv_skb+0x123/0x220 [ 144.173435][ T8753] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 144.173524][ T8753] rtnetlink_rcv+0x1c/0x30 [ 144.173553][ T8753] netlink_unicast+0x5bd/0x690 [ 144.173633][ T8753] netlink_sendmsg+0x58b/0x6b0 [ 144.173669][ T8753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.173695][ T8753] __sock_sendmsg+0x142/0x180 [ 144.173726][ T8753] __sys_sendto+0x268/0x330 [ 144.173841][ T8753] __x64_sys_sendto+0x76/0x90 [ 144.173870][ T8753] x64_sys_call+0x2d05/0x2ff0 [ 144.173898][ T8753] do_syscall_64+0xd2/0x200 [ 144.173981][ T8753] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 144.174012][ T8753] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 144.174049][ T8753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.174076][ T8753] RIP: 0033:0x7f13d1f2eba9 [ 144.174095][ T8753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.174151][ T8753] RSP: 002b:00007f13d0997038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 144.174175][ T8753] RAX: ffffffffffffffda RBX: 00007f13d2175fa0 RCX: 00007f13d1f2eba9 [ 144.174190][ T8753] RDX: 0000000000000ec1 RSI: 0000200000000100 RDI: 0000000000000006 [ 144.174205][ T8753] RBP: 00007f13d0997090 R08: 0000000000000000 R09: 9e5e111c47e3504f [ 144.174220][ T8753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.174232][ T8753] R13: 00007f13d2176038 R14: 00007f13d2175fa0 R15: 00007ffc8f84be38 [ 144.174251][ T8753] [ 144.529042][ T8763] loop6: detected capacity change from 0 to 1024 [ 144.557067][ T8765] FAULT_INJECTION: forcing a failure. [ 144.557067][ T8765] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 144.570619][ T8765] CPU: 0 UID: 0 PID: 8765 Comm: syz.4.1600 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 144.570666][ T8765] Tainted: [W]=WARN [ 144.570674][ T8765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.570704][ T8765] Call Trace: [ 144.570712][ T8765] [ 144.570721][ T8765] __dump_stack+0x1d/0x30 [ 144.570746][ T8765] dump_stack_lvl+0xe8/0x140 [ 144.570784][ T8765] dump_stack+0x15/0x1b [ 144.570863][ T8765] should_fail_ex+0x265/0x280 [ 144.570893][ T8765] should_fail_alloc_page+0xf2/0x100 [ 144.570928][ T8765] __alloc_frozen_pages_noprof+0xff/0x360 [ 144.571003][ T8765] alloc_pages_mpol+0xb3/0x250 [ 144.571168][ T8765] vma_alloc_folio_noprof+0x1aa/0x300 [ 144.571213][ T8765] handle_mm_fault+0xec2/0x2c20 [ 144.571245][ T8765] ? __rcu_read_lock+0x37/0x50 [ 144.571272][ T8765] ? __pte_offset_map_lock+0x1d4/0x230 [ 144.571380][ T8765] __get_user_pages+0x102e/0x1fa0 [ 144.571437][ T8765] __gup_longterm_locked+0x8f4/0xe60 [ 144.571467][ T8765] ? exc_page_fault+0x62/0xa0 [ 144.571537][ T8765] ? should_fail_ex+0xdb/0x280 [ 144.571569][ T8765] pin_user_pages_remote+0x7e/0xb0 [ 144.571615][ T8765] process_vm_rw+0x484/0x960 [ 144.571665][ T8765] __x64_sys_process_vm_writev+0x78/0x90 [ 144.571701][ T8765] x64_sys_call+0x2a7c/0x2ff0 [ 144.571785][ T8765] do_syscall_64+0xd2/0x200 [ 144.571899][ T8765] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 144.571985][ T8765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.572013][ T8765] RIP: 0033:0x7ffb7722eba9 [ 144.572030][ T8765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.572051][ T8765] RSP: 002b:00007ffb75c8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 144.572111][ T8765] RAX: ffffffffffffffda RBX: 00007ffb77475fa0 RCX: 00007ffb7722eba9 [ 144.572126][ T8765] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 00000000000002ac [ 144.572177][ T8765] RBP: 00007ffb75c8f090 R08: 000000000000023a R09: 0000000000000000 [ 144.572190][ T8765] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000002 [ 144.572204][ T8765] R13: 00007ffb77476038 R14: 00007ffb77475fa0 R15: 00007fff182d0ce8 [ 144.572229][ T8765] [ 144.849550][ T8768] SELinux: policydb version 1207 does not match my version range 15-35 [ 144.860132][ T8763] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.874096][ T8768] SELinux: failed to load policy [ 144.905251][ T8763] hub 9-0:1.0: USB hub found [ 144.911743][ T8763] hub 9-0:1.0: 8 ports detected [ 145.063772][ T6761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.113991][ T6761] bond0: (slave syz_tun): Releasing backup interface [ 145.186657][ T4688] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.236142][ T4688] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.251352][ T8792] loop7: detected capacity change from 0 to 512 [ 145.260067][ T8792] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 145.279105][ T8792] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 145.290706][ T4688] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.300229][ T8792] System zones: 1-12 [ 145.311178][ T8792] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.1612: corrupted in-inode xattr: e_value size too large [ 145.325857][ T8792] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1612: couldn't read orphan inode 15 (err -117) [ 145.340140][ T8792] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.360895][ T4688] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.382684][ T7357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.438005][ T4688] bridge_slave_1: left allmulticast mode [ 145.443783][ T4688] bridge_slave_1: left promiscuous mode [ 145.449625][ T4688] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.462816][ T4688] bridge_slave_0: left allmulticast mode [ 145.468513][ T4688] bridge_slave_0: left promiscuous mode [ 145.474323][ T4688] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.583973][ T4688] team0: Port device bond0 removed [ 145.590983][ T4688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.601430][ T4688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.611173][ T4688] bond0 (unregistering): Released all slaves [ 145.656225][ T4688] tipc: Left network mode [ 145.661912][ T8796] lo speed is unknown, defaulting to 1000 [ 145.718726][ T4688] hsr_slave_0: left promiscuous mode [ 145.725144][ T4688] hsr_slave_1: left promiscuous mode [ 145.732604][ T4688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.736705][ T8811] loop7: detected capacity change from 0 to 512 [ 145.740079][ T4688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.754318][ T4688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.762034][ T4688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.773078][ T4688] veth1_macvtap: left promiscuous mode [ 145.774433][ T8811] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.778742][ T4688] veth0_macvtap: left promiscuous mode [ 145.791426][ T8811] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.797224][ T4688] veth1_vlan: left promiscuous mode [ 145.812611][ T4688] veth0_vlan: left promiscuous mode [ 145.862666][ T7357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.886127][ T8816] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1616'. [ 145.905390][ T4688] team0 (unregistering): Port device team_slave_1 removed [ 145.921542][ T4688] team0 (unregistering): Port device team_slave_0 removed [ 145.936359][ T8819] ================================================================== [ 145.944757][ T8819] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 145.951804][ T8819] [ 145.954145][ T8819] write to 0xffff88811e5384c8 of 8 bytes by task 7357 on cpu 1: [ 145.961794][ T8819] release_task+0x6f9/0xb60 [ 145.966334][ T8819] wait_consider_task+0x114a/0x1660 [ 145.971547][ T8819] __do_wait+0xfa/0x510 [ 145.975720][ T8819] do_wait+0xb7/0x260 [ 145.979720][ T8819] kernel_wait4+0x16b/0x1e0 [ 145.984248][ T8819] __x64_sys_wait4+0x91/0x120 [ 145.988944][ T8819] x64_sys_call+0x2a66/0x2ff0 [ 145.993635][ T8819] do_syscall_64+0xd2/0x200 [ 145.998247][ T8819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.004148][ T8819] [ 146.006487][ T8819] read to 0xffff88811e538000 of 3264 bytes by task 8819 on cpu 0: [ 146.014293][ T8819] memcpy_and_pad+0x48/0x80 [ 146.018809][ T8819] arch_dup_task_struct+0x2c/0x40 [ 146.023951][ T8819] dup_task_struct+0x83/0x6a0 [ 146.028650][ T8819] copy_process+0x399/0x2000 [ 146.033251][ T8819] kernel_clone+0x16c/0x5c0 [ 146.037791][ T8819] __se_sys_clone3+0x1c2/0x200 [ 146.042588][ T8819] __x64_sys_clone3+0x31/0x40 [ 146.047347][ T8819] x64_sys_call+0x1fc9/0x2ff0 [ 146.052033][ T8819] do_syscall_64+0xd2/0x200 [ 146.056565][ T8819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.062555][ T8819] [ 146.064878][ T8819] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 146.071069][ T8819] CPU: 0 UID: 0 PID: 8819 Comm: syz.5.1618 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 146.082541][ T8819] Tainted: [W]=WARN [ 146.086357][ T8819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 146.096520][ T8819] ================================================================== [ 146.746698][ T4688] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.813584][ T4688] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.883709][ T4688] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.933177][ T4688] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.987813][ T4688] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.043986][ T4688] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.113812][ T4688] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.173766][ T4688] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.585552][ T4688] bridge_slave_1: left allmulticast mode [ 147.591285][ T4688] bridge_slave_1: left promiscuous mode [ 147.596944][ T4688] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.605058][ T4688] bridge_slave_0: left promiscuous mode [ 147.610730][ T4688] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.619629][ T4688] bridge_slave_1: left allmulticast mode [ 147.625500][ T4688] bridge_slave_1: left promiscuous mode [ 147.631304][ T4688] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.639028][ T4688] bridge_slave_0: left allmulticast mode [ 147.644728][ T4688] bridge_slave_0: left promiscuous mode [ 147.650389][ T4688] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.659059][ T4688] gretap0: left allmulticast mode [ 147.664286][ T4688] gretap0: left promiscuous mode [ 147.669399][ T4688] bridge0: port 1(gretap0) entered disabled state [ 147.741993][ T4688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.752813][ T4688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.762757][ T4688] bond0 (unregistering): Released all slaves [ 147.770904][ T4688] bond1 (unregistering): Released all slaves [ 147.833572][ T4688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.843660][ T4688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.853460][ T4688] bond0 (unregistering): Released all slaves [ 148.003077][ T4688] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.012608][ T4688] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.021524][ T4688] $H (unregistering): Released all slaves [ 148.029720][ T4688] bond1 (unregistering): Released all slaves [ 148.132911][ T4688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.142326][ T4688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.151495][ T4688] bond0 (unregistering): Released all slaves [ 148.206678][ T4688] tipc: Disabling bearer [ 148.211705][ T4688] tipc: Left network mode [ 148.222199][ T4688] tipc: Left network mode [ 148.312440][ T4688] hsr_slave_0: left promiscuous mode [ 148.318264][ T4688] hsr_slave_1: left promiscuous mode [ 148.324175][ T4688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.331836][ T4688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.339603][ T4688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.347062][ T4688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.356675][ T4688] hsr_slave_0: left promiscuous mode [ 148.362506][ T4688] hsr_slave_1: left promiscuous mode [ 148.368193][ T4688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.375699][ T4688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.383456][ T4688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.391121][ T4688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.400308][ T4688] hsr_slave_0: left promiscuous mode [ 148.406208][ T4688] hsr_slave_1: left promiscuous mode [ 148.412360][ T4688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.419887][ T4688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.429063][ T4688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.436597][ T4688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.449824][ T4688] veth1_macvtap: left promiscuous mode [ 148.455535][ T4688] veth0_macvtap: left promiscuous mode [ 148.461087][ T4688] veth1_vlan: left promiscuous mode [ 148.466393][ T4688] veth0_vlan: left promiscuous mode [ 148.472438][ T4688] veth1_macvtap: left promiscuous mode [ 148.478124][ T4688] veth0_macvtap: left promiscuous mode [ 148.483797][ T4688] veth1_vlan: left promiscuous mode [ 148.489279][ T4688] veth0_vlan: left promiscuous mode [ 148.586307][ T4688] team0 (unregistering): Port device team_slave_1 removed [ 148.596244][ T4688] team0 (unregistering): Port device team_slave_0 removed [ 148.621733][ T4688] team0 (unregistering): Port device dummy0 removed [ 148.659395][ T4688] team0 (unregistering): Port device team_slave_1 removed [ 148.669009][ T4688] team0 (unregistering): Port device team_slave_0 removed [ 148.723657][ T4688] team0 (unregistering): Port device team_slave_1 removed [ 148.734607][ T4688] team0 (unregistering): Port device team_slave_0 removed [ 148.742929][ T4684] smc: removing ib device syz! [ 148.760885][ T4688] team0 (unregistering): Port device 0! removed [ 148.793169][ T4688] team0 (unregistering): Port device team_slave_1 removed [ 148.803656][ T4688] team0 (unregistering): Port device team_slave_0 removed [ 148.827867][ T4688] team0 (unregistering): Port device dummy0 removed [ 149.666983][ T4688] IPVS: stop unused estimator thread 0...