last executing test programs: 3m53.408551605s ago: executing program 1 (id=880): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100086, 0x0, 0xfffffffc, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 3m53.277836388s ago: executing program 1 (id=881): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030000108500000086000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 3m53.17232693s ago: executing program 1 (id=883): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000d80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f0000000680)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) (async, rerun: 32) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}]}, &(0x7f0000000940)='GPL\x00', 0x9, 0xc6, &(0x7f00000009c0)=""/198, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000b40)=[{0x2, 0x2, 0x2, 0x2}, {0x0, 0x1, 0xc, 0x9}, {0x1, 0x1, 0x5, 0x8}, {0x3, 0x1, 0xa, 0x9}]}, 0x94) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x11, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x13}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xe4, &(0x7f0000000440)=""/228, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x11, r1, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xe, 0x505, 0x6}, 0x10, r2, r3, 0x5, 0x0, &(0x7f0000000c40)=[{0x4, 0x4, 0xb, 0xb}, {0x1, 0x2, 0xc, 0x3}, {0x3, 0x2, 0x1, 0x7}, {0x5, 0x4, 0xa, 0x6}, {0x2, 0x5, 0x2, 0x4}], 0x10, 0x3fb}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00'}, 0x18) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) 3m53.046573462s ago: executing program 1 (id=884): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000440)='%pI4 \x00'}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000100)='./file1\x00', r2, 0x4000, r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000003c0)={[{@acl}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@noinit_itable}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000dc0)="$eJzs3MtvG0UYAPBv10mgLxJKefQBBMqj4pE0aYEeuIBA4gASEhzKMSRpVeo2qAkSrSoICJUjqsQdcUTiL+BELwg4IXGFAzdUqUK9tHAyWnu3cYztNsbuQv37SevM7I4182V37JmdbAIYWpPZSxKxNSJ+iYjxRnZ9gcnGj6uXz87/efnsfBK12ht/JPVyVy6fnS+KFu/bkmf2pRHpJ0nsblPv8ukzx+eq1cVTeX565cS708unzzx97MTc0cWjiydnDx06eGDmuWdnn+lLnFlcV3Z9sLRn5ytvnX9t/vD5t3/4Oinib4mjTya7HXy0VutzdeXa1pRORkpsCBtSiYjsdI3W+/94VGLt5I3Hyx+X2jhgoGq5DodXa8AtLImyWwCUo/iiz+a/xXbzRh/lu/RCYwKUxX013xpHRiLNy4y2zG/7aTIiDq/+9UW2xWDuQwAArPNtNv55qt34L417msrdka+hTETEnRGxPSLuiogdEXF3RL3svRFx3wbrb10k+ef4J73YU2A3KBv/PZ+vba0f/xWjv5io5Llt9fhHkyPHqov7G8dWs5csP9Oljgsv/fxZp2PN479sy+ovxoJ5Oy6O3Lb+PQtzK3O9xtvq0kcRu0baxZ9cWwlIImJnROzqsY5jT3y1p9Ox68ffRR/WmWpfRjzeOP+r0RJ/Iem+Pjl9e1QX9083XRUtfvzp3Oud6v9X8fdBdv43t73+r8U/kTSv1y5vvI5zv37acU7T6/U/lrxZT4/l+96fW1k5NRMxlrzaaHTz/tm19xb5onwW/7697fv/9lj7TeyOiOwivj8iHoiIB/O2PxQRD0fE3i7xf//iI+/0Hv9gZfEvbOj8ryXGonVP+0Tl+HffrKt0YiPxZ+f/YD21L99T//xLusd1I+3q7WoGAACA/580IrZGkk5dS6fp1FTjb/h3xOa0urS88uSRpfdOLjSeEZiI0bS40zXedD90Jp/WF/nZlvyB/L7x55VN9fzU/FJ1oezgYcht6dD/M79Xym4dMHCe14Lhpf/D8NL/YXjp/zC82vT/TWW0A7j52n3/fxgRFx4roTHATdXS/y37wRAx/4fhpf/D8LqB/v/brfXvqoGIWN4U139IfrCJSpRZu0SPiUj/E82QGFCi7E8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg7AAD//9aZ7PU=") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x800, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = socket$rds(0x15, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x6}}], 0x30, 0x45}, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000380)=@ccm_128={{0x303}, "19f4cac3800d446f", "5f311dfe9f340765616121aeaf9fbd2b", "e07fd7aa", "3a948cf896841434"}, 0x28) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) (fail_nth: 1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m52.258878307s ago: executing program 1 (id=895): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) migrate_pages(0x0, 0x10, 0x0, 0x0) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x78) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 3m51.01562915s ago: executing program 1 (id=905): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0xf41, 0x4) sendto$packet(r1, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14) 3m50.922825742s ago: executing program 32 (id=905): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0xf41, 0x4) sendto$packet(r1, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14) 3m27.360570249s ago: executing program 4 (id=1258): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 3m27.290160111s ago: executing program 4 (id=1261): bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x7f7e, &(0x7f0000000140)={0x0, 0xfec9, 0x80, 0x3, 0x1b}, &(0x7f0000000240)=0x0, &(0x7f0000000580)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r10}, 0x10) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}}) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000040)={0x0, r3, 0x31, {0x5, 0x10001}, 0x5}, 0x1) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 3m26.365545518s ago: executing program 4 (id=1275): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x5, 0x4, @thr={&(0x7f00000001c0)="f0642bea7d35b334caf1ebe31c321be160317ccb70583f4ad662a02ddeeb3fe1bb05b4f91e852c8e95ad9dbfbbecd0ba9b68bad2a77df0710596b978cc645770e216d7620341145a53f8860197c744a2b39d708cafcb9303405a818f6e43ae054d334ac0bb9fe4ed1261901b3ccb1ce863a440f3847e4f4dd833930bd95a21ee96eddeffffa81a206318bb80ec9dbe9ef2bd01660e5a4178e9c5f59fe8651c019df08e7cb9627e8b5b7e3eb2072ec4ab5add07cff1568b4738c129853ef0a82565dda09ace29d5d3bf829db0e0b51523507aed394df5f64381caee2be8398335017171f07a3b15", &(0x7f0000000340)="89569c6ee48bf17992351ca945a4ada96311d88ae78f3f13c19b3675d812957801625ba037916d30d871275bf4a164232ca220a3d35f8cc1d981d471f15d1c3364df9c1b2047be532f2252b309d3869484581a04225e6ff8808da65537aa7d383b9dd636af072ce4458548960ab3f04c45d3da46c4a4a2bad29cbfc4e8fbc2580b6d4e08916958cbdc6fe02cfce178a02dbd92836132"}}, &(0x7f0000000080)=0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r4, 0x2) fcntl$lock(0xffffffffffffffff, 0x23, &(0x7f0000000040)={0xc6f318ef6d4e3c6b, 0x3, 0x60d6, 0x6}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="000402000100000002"]) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r10) sendmsg$TIPC_CMD_GET_NODES(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r11, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) sendto$inet(r12, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r12, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3m25.498210145s ago: executing program 4 (id=1294): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) 3m25.424969626s ago: executing program 4 (id=1296): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) symlink(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000000000000000020000003c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a3002291e2910000180090001007866726d000000000900010073797a30000000000900020073797a32"], 0x90}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) memfd_create(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="0200000001000000000000000400050000000000100000000000000020"], 0x24, 0x3) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4804}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3m24.70237009s ago: executing program 4 (id=1304): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 3m24.69226514s ago: executing program 33 (id=1304): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 2m42.812297315s ago: executing program 6 (id=1999): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = dup(r2) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 2m42.772274645s ago: executing program 6 (id=2001): accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfd, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0xa0a, 0x0, 0xffffffbe, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 2m42.687735037s ago: executing program 6 (id=2004): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xf07d, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x89fc, &(0x7f00000006c0)={'sit0\x00', @remote}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1000}, {&(0x7f0000000440)=""/107}, {&(0x7f0000000500)=""/193}, {&(0x7f00000003c0)=""/18}, {&(0x7f0000000700)=""/148}, {&(0x7f0000002840)=""/245}, {&(0x7f0000002940)=""/226}], 0x11b, 0x1d}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x2000c080) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRES16], 0xfe33) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r8], 0x44}}, 0x0) 2m42.637188777s ago: executing program 5 (id=2006): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xf07d, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x89fc, &(0x7f00000006c0)={'sit0\x00', @remote}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1000}, {&(0x7f0000000440)=""/107}, {&(0x7f0000000500)=""/193}, {&(0x7f00000003c0)=""/18}, {&(0x7f0000000700)=""/148}, {&(0x7f0000002840)=""/245}, {&(0x7f0000002940)=""/226}], 0x11b, 0x1d}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x2000c080) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRES16], 0xfe33) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r8], 0x44}}, 0x0) 2m42.51474684s ago: executing program 5 (id=2009): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000000c0)="426d6a5f90273582e38f7f3f10aa9221c5ddf26248401a180af0355f4910673e2fcd2f1a1f02e58971ed06eab16fc5a47bd7b0", 0x81, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) r5 = dup(0xffffffffffffffff) write$binfmt_aout(r5, 0x0, 0x808) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000c9500000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000ec0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m42.471327031s ago: executing program 6 (id=2011): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(0x0) pivot_root(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) 2m42.452797631s ago: executing program 6 (id=2013): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r2 = dup(r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000008c0)={0xa0, 0x0, 0xf20, 0xc, 0x0, 0xb, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='bridge0\x00', 0x10) pipe2$watch_queue(&(0x7f0000000200), 0x80) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r5, 0x0, 0x100000000}, 0x18) 2m42.166904266s ago: executing program 6 (id=2018): bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x7f7e, &(0x7f0000000140)={0x0, 0xfec9, 0x80, 0x3, 0x1b}, &(0x7f0000000240), &(0x7f0000000580)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 2m42.166664337s ago: executing program 34 (id=2018): bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x7f7e, &(0x7f0000000140)={0x0, 0xfec9, 0x80, 0x3, 0x1b}, &(0x7f0000000240), &(0x7f0000000580)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 2m42.098507178s ago: executing program 5 (id=2020): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f00000001c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x816ac1f4127f23eb) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="060000000400f54538ef9c858d68f2a36e989a9da16997bd0d62dbf968fae47536e8a3adfcb300000000000000000000001f3673cf0768c6ba50fb29a5298a78280e6e1cee8e72734f9fc42bb6218decc3fc59fdab57af54362ac1569be9f8ce13e3770499dcd194fa460d7782f2bf9f9cc0a1b430d1abd0f3d8451c042dd051f6c9882c254fc966e55c1c376e6964642884026a07e73120f23cd5a9a135342f7e9f673ba9fdcc919bc77bd62e0b4e156ce77b99f1d09d4a3ae81ae167a4da109e638e0ebdcf20dfdc6a15a714d1f94f59c8bbcc81f3b737d696e21819679c"], 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x11, 0x0, &(0x7f00000004c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000}, 0x48) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000080)) 2m41.855473922s ago: executing program 5 (id=2023): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(0x0, &(0x7f0000000000)='./file0/../file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) 2m41.824341033s ago: executing program 5 (id=2024): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xd82, &(0x7f0000001cc0)={@broadcast, @empty, @void, {@mpls_mc={0x8848, {[], @ipv6=@udp={0x4, 0x6, '\x00', 0xd4c, 0x11, 0x0, @private0, @private2, {[@fragment={0x0, 0x0, 0xda, 0x1, 0x0, 0x0, 0x64}, @srh={0x32, 0x0, 0x4, 0x0, 0x1, 0x40, 0x7}, @fragment={0xa8, 0x0, 0xa, 0x1, 0x0, 0x5, 0x66}, @dstopts={0x3a, 0x1a3, '\x00', [@generic={0x6, 0xd17, "bdc9aba75d49cd96a2254e06ed569191330134aaac0494bf6bae5d78609ae5ebb03fea4277144c3aaac2737f337a33e453c15153e987600ad3f5a8cd81204dd3d5483edc71ede242acdb72d5c7f07ffdff13fac38c91685ad83c1703a264848e99331b787f65aac479ff3b9764239c53cd23666f2693868da5faf2b979f4d79e7272847600c0d0f4419b9d4f462ba33f8cc8125e7bc7aad21814d1901003728778fc76531dea44e9cda60fab1eabf5a4fa1bfd519ab7fe50194869ad0c7da39f1d5feb82022ee835f5f26dd5288d746451f79a6ba55c842bc72d38cf76be06127671b7830eb551df30d7d0a325b038e6d279b97aee9b7863bacef79eaff1ba407ce12d914c6932c86c7b36c775144d4dd9d52b6b66c49b34ac349480aac94457538659a0d031b3afc7c49d74f8a1d86655ce754954f755c3ac43b1236da91a42856093ed8d2f5f242d2adf8b55e16e38f663252496dc0f0b73560b66429d4536c76f098938f020f3320754a9ad97bc972a2f053971ad9a1dfcaa4919618c147a0b0e490e6d42de135a17038b8d6e82fd224639316dfe0c83ba50c5d07420bfc58cab99183a86a0d46c600d3822ab9ff48089b154bd64be71170eff8b278e330e1ac75fc90e67be02ca44535877b8bf3cd720d11f313dd5ea1f713c5a78020d124c2f56866b692fb8835688f5d213f50109392ec318c4fe24115e8a2bcbca952a80cd4cb6ff10e8961bcad10f8e8f032fb5e9d5003dfa09e0e18d87726ef60ee8317e7b89dee67fd872538edb8f9d6c0a5437497b089ceeb96b94316c1127ecfbb1a7e4a09e6df52a225ed453966d9995c5fc06f242b89edb8456934bef71822c01a20a826d6473b231c25cf8bdd32e7838fc1ab58eccb08ca28f80b44393826cd715727d4dbde844df702a7c949570673b5c623296cd4db10903e484acdb4258456022aa1f4f41b95e2d258cc1f31ebfd9866f25aaa2e179118363af9da73a39289b0230b96728377053a664afc4e101318137865c95f463fdbcfecc4c4f5731ae5b96d2df02311685bdc083851c419ada5e8dd14d153b48cc54e799f8449b6efd808c4cae5cadcbca2009a9d7c06f8f467e1fe66dfe6002de8577dd8d322e218ea16bd82e2630ffd34e62b000e35a60dfcbe921e563114605ab22049a95b0e27b0cba5731597c1e913c37561d490ebe746b21d33b17d1b0f919fc844451ae1577f38d525c75800a57bb1e09603dbf5c012d0d714708991fe6c54307c2022a81fe919ceae7427c77513f0479551cfad83a4c5ec774a381948791949726afd7f5c8cf4af062f5f17adce88f39651a1339bb6b85b9872f5bb50f6a93672a072ae52ee210a716cb961380652c1146593e64692dd474de548424e2b96d07f0c33fed107b90a4c93ba94f7a00488b3bcf4d7a77e88d03d1ec85ec674a8e35a445e1ce467377c858eeeaa7a8da8d094498381cf8aed449b06ccdc5dacaac31370acf8a57a6472e4e2b012a4731ddef964d6e064160c09c1604104f7010a8dbb20ef5a68f3652558a151c949d8ea0f5188f96b91baacfd21b2f7e8d7d1b670221b3748e8cc12221e324aeec7aca298b13488163fe4df3cb4d66566197de2e8cff6f25f0da7cb6ec57c6e00b7374a0d2a42f0c7fb8470da586d5fce70b82ac15a14217ab801fecfd3569cea3f35be42b05bf449df1cec18da800d076d16f347fabe84615dbc5eef31dfae18c776c63513b587f62e248989e73c65838a3011a70a4c9c6167adbaa2231c79864950c36019d602b7b4a72ad267216edb2525f84f4677d2792da9993ad5312a5e4198dd75028c204ba54b599226a3967fc2b0b892ab07ed260b8fbdf8eb1d9a33e18802e5bf6190c000c8e2ca4c3428fffe745fe2a3eed7e1c62d733a09f481b950d31932ef7f4a8d0051d07a06ac55de9e984279939b3fe9439a7f67d2fc9fb49ae86c43ec39142ba0caba78f2044268c71f2a8b7bd41690f046a2622f17d6529b0fa8f2f7059cf05bcc49d9c50690ce6b796793a685411878c739f3efe03f48d2343d8ca5fb0008c17a1f228140619c7bdf0df297cb3d4bc907f211e02290a2732ef7994bc6a444842e93735fbb61ac752ba74265366da7ef37f3380e0ef3ea978a77b708c9fa20062d8a31fc5b35b20f529a45cb07456f34a95630f1b6491c99ae299ea0f7bb6e2fe60521adcaec7b54eadf5015753a8329d645dafed014de861581dd084efe33c8e8c6fbde235fe86f785881e1f36071c7c9c33f6e06c910aff30d13af98b67f604efdb048c243482e09b663873d9c2ef437ce5608f556d06c3778d6c3272d0f6430ef1a7eafc8ed6135bb8fc49921c9a6054daf5bb226f6dbe4fe13e042b48ab70c4073c2602cdd63958d6413d65005f3b0f1928b16cfda974588b91caff0e2d315b46ba6d7c9171a88b46fa7dd33e8c4d39c3d64cc2f39492e77bf371fe17d309834a6e85588ba206617c7804e15b1fc4f9d58ffbdcc28d3cf28c19555fe693c50124ba55dcd7492b24bd1cb2a44a22204fd6d88994574f7bda54a91bf51247c10c220b10ecdb6239cf6145d2569092a8ec537014bd3b3f21b1fe305ad6b58a7b3603d1754539f0ea7cc8c19a4b055d1839afa1857a9a93922d86257f4ab1518f29c2a50ccd1ee469842438b7201e4290979c2e1732094e10b8eb8ffb789416a4dc9e509af75199124ca23eea05d388f2229da2818e3aa65741b6af15559328298df99d384a2156b2bd79202c8247aa83a364a6854298da07cd87ce36e636057c43af84ed0f56e72d9cf2c445c99348d428d9758469c63ff76dca0a8bbf8e4b38f5c9e41a734f65873b9e3835db0e1b3e2fa63cecea813b9d9690ecd2d3e717e3629526f808c37923b52df56e67e67206643f23bd4969fb8d04ee1cccb33162c41277eadfa35c14405b03d15df0b1a2c7e32b24351b140d52b2641daf179ed37be0214f262f858df995d751973454a90aaeb6e3c1b3efb29865ec55613c4c6836bb587554e19b8fbd378a379ad53efce6f239de099e96b9c6036e34b36e031ca3e3b179dcdfe757fb05b942e2a4ab317b018c8c51e7e0b3f12f1d272dce41621561e07fd87f14322cdf60d6e51d720fc55c83d909c954208683f772ac93794b995ea8f1cbbac578766d05faa7f8d5798261a33fd95b15195ebb08243715c0d656c6d0c372123fd99bb069149ca75aefa012eb840689e10eb46879a2637d867ee0456ccd3ebac1bb9374d8ce52d3332227fd8a4792f6b137d2af47f8f47c9417cd4c1fada04eba1287d4fe6cf00b407e9b88e9c4add237eefcbb4e74cf74c3bb261251b07dc0bd1b6fce2b68fe0b3763cd516f1c2ce9bcc28086ae2db17dc71aaa2e680cc098fd1ad655829ffaab5f6cb70c93e109ab30176911e1a62cac1dff0808fd49cbe500cf882748418a4400ac08f653c637181e0809fa351419972f26687ed302d28ad8cb2fb9f1b772332c599bc40265fa7213a760b305df20976f0139870290a628aebea4abbcaf93cad609e3368cbf23d408d53061fd01723b0f7a5621b13d362af4286601f9f2290a9eb2f9f4695151adb9971b52607f6a30d0837d99b023ce28e093cc2e89a625ab27092244ecf10fd694c8881b420eb488d9b066d6817856e8dddfd3c4738dc187c46940a7c2a416668eb28051de8a2c7f577873656c0338fd38bf299af48450de9002ebcc4e3e9bfefb5bb1ffbafd3ce6231bc562776724ef63e077ad7b1c9497efce7fea5126552a948b1ec5724f532b0e247f2ff7738465c070726ce33e96de4fe5e3332d3264dff25282ed44f85829187c8c2a457af5bda5189ee14ccd486d4139d51e6294b5c13c70301c0f52f4be9c6214f33a57479502d0deeaeaa0b55e9356f373660c2e3de274c113e06f1d96e779ed95b0699e0b2c04daeaa4dfa51d6d8a7ce3ae022517dee557842827c16b6cb314da7341d066dfe6767b28459ddc4095e00073b9ed23496717c4a135399ef7c168ca36b7acd54f0b368e15ea0689025b1209165bd36c023c9bdbe9aba3825e1b2f106a34b7563f2a63ea657b32866ef78b5fe9738d190ced28a33d5801d65c704757998cf85cb98fcf89cd0cd070084a1850a90a5dd627358fbfa66f9928afbd1b9f97f175103d1b5f1d32635b93a9aaac68f4a546bc54bc2cc1e1b3b35a9976f734e4aaf322fb6121ad554303908ce5cefb467163b27f259e4d0efd4a1088ec683e2a222db3dc13c6b3bc09fe542a536ea8d5430277ac6be1c090174dd35e9b5ff1bc31f12f0d6a9b0a546ab31e43f070405be781bc1335ff10febd77d444d5094fe5808dfee20d9f493b9a5bedc4087817406eb4e30d3f997c5b48dc0cdd7a1de2911ae29be1ed12d373340010a8daf8f48a598bb5aa806c338f88261504597dc4474d85c794683d95ce12b54134580f9961bce170ed5a7cc369cfab020aeb913b83b89b6eadd91bb149620329e07fb53449a9638d2442aa12988295aa206f219ac800f33bb6fbf9034c68f75e91ef64dd43ae5703c3bd6c3da85ee3b20c1d0f196b2ca27e7b7e5720453191435c854245737fa9ee7eac61dbab922926ab524746636b61c793f7d31a69a2953adf07d6ba64804dc13ffad939030f340c78a983651b5aa9c3e81fd8c5fe26f59cb841cf8c242111e4828f58e002ad94cc9bcf1ab5bb51a427d5b2164bdd472bb90e19f46be39b42ca6f132aae9b3058f74fd9fcb26e8704b6b4"}]}], {0x4e22, 0x4e23, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x0, 0x100, @void}}}}}}}}}, 0x0) 2m37.494695035s ago: executing program 5 (id=2095): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x200800, &(0x7f00000004c0)=ANY=[@ANYBLOB='shortname=winnt,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c636865636b3d7374726963742c0045d2ccc3d9c7c429ac6ff73915e64712d0259965dbecbbb10bfc71353fa0579f8ba91211321fa4665a7a320e457ce285b029d21e6f5d5be250dc0800f654"], 0x11, 0x305, &(0x7f0000002480)="$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") r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYRESOCT=r3, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x18) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0xca, 0x0, 0x1000}}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_set_self_attr(0x64, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m37.494470485s ago: executing program 35 (id=2095): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x200800, &(0x7f00000004c0)=ANY=[@ANYBLOB='shortname=winnt,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c636865636b3d7374726963742c0045d2ccc3d9c7c429ac6ff73915e64712d0259965dbecbbb10bfc71353fa0579f8ba91211321fa4665a7a320e457ce285b029d21e6f5d5be250dc0800f654"], 0x11, 0x305, &(0x7f0000002480)="$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") r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYRESOCT=r3, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x18) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0xca, 0x0, 0x1000}}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_set_self_attr(0x64, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m44.916034923s ago: executing program 8 (id=3355): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x39) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYRESOCT=r3, @ANYRES64, @ANYRES8=r5, @ANYRES16=r3], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setgid(0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r8, &(0x7f0000000800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000940)=ANY=[@ANYBLOB="d584aa27bb7a7a76be4aac3d20c14709e41e35378a80093c8e8f0004ca430711be0413679ee5fe65cd22579ac26771869e4971f4306795865145a81f78498cb013ac3582c186c44f750e3b89a6548c79fd85", @ANYRES16=r9, @ANYBLOB="000229bd7000fcdbdf2502000000080004000100000024000280080007000300000006000b0002000000080008000500000006000f00070000000800040006000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r7}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x5, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB], 0x2dc}}, 0x0) r11 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) poll(&(0x7f0000000040)=[{r11}], 0x1, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x1000, 0x0, {0x0, 0x1}, {0x48, 0x2}, @period={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x0, 0x0}}) r12 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r12, &(0x7f0000000040)="e2", 0x2250) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="c50f28bd7000ffff7f001100000008000300", @ANYRES32=0x0, @ANYBLOB="0a00060050505050505000000a000600b805100fd08f00002a002a0006020100760606093d0001007518f560125d1eaf3eb677241b3c0cbcf8b10100feff000828008923c296e7955b7954a5965d3997d9060000"], 0x60}}, 0x0) 1m44.792093345s ago: executing program 8 (id=3360): accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfd, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0xa0a, 0x0, 0xffffffbe, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d616373656300001400028005000b000000000005000f000000000008000500", @ANYRES32=r3], 0x4c}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "0300", "95670cff05e29ee8dcfc54e13b2dd711", "fdffb26f", "a2deb79f8c96bff4"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000740)=0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, 0x0, 0x0) 1m44.624386628s ago: executing program 8 (id=3366): syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x6, 0xa5, 0x0, 0xa}]}, 0x10) socket$packet(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r6}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r7, 0x0, r7) 1m43.775187644s ago: executing program 8 (id=3396): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f0000000800), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000f00)=ANY=[], 0xfe, 0x875, &(0x7f0000001000)="$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") r0 = mq_open(0x0, 0x42, 0x1f0, 0x0) mq_open(&(0x7f0000000040)='GPL\x00', 0x800, 0x4a, &(0x7f0000000080)={0x3, 0xfffffffffffffffb, 0x3, 0x9}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000000c0)={0x2, 0x3, 0x9, 0x6, r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r5, 0x0, 0x4804}, 0x18) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth1_vlan\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e) sendfile(r4, r3, 0x0, 0x7ffff088) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r8, 0x0, 0x1d6}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) 1m43.686887526s ago: executing program 8 (id=3400): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xd62, &(0x7f0000001cc0)={@broadcast, @empty, @void, {@mpls_mc={0x8848, {[], @ipv6=@udp={0x4, 0x6, '\x00', 0xd2c, 0x11, 0x0, @private0, @private2, {[@fragment={0x0, 0x0, 0xda, 0x1, 0x0, 0x0, 0x64}, @srh={0x32, 0x0, 0x4, 0x0, 0x1, 0x40, 0x7}, @fragment={0xa8, 0x0, 0xa, 0x1, 0x0, 0x5, 0x66}, @dstopts={0x3a, 0x19f, '\x00', [@generic={0x6, 0xcfd, "bdc9aba75d49cd96a2254e06ed569191330134aaac0494bf6bae5d78609ae5ebb03fea4277144c3aaac2737f337a33e453c15153e987600ad3f5a8cd81204dd3d5483edc71ede242acdb72d5c7f07ffdff13fac38c91685ad83c1703a264848e99331b787f65aac479ff3b9764239c53cd23666f2693868da5faf2b979f4d79e7272847600c0d0f4419b9d4f462ba33f8cc8125e7bc7aad21814d1901003728778fc76531dea44e9cda60fab1eabf5a4fa1bfd519ab7fe50194869ad0c7da39f1d5feb82022ee835f5f26dd5288d746451f79a6ba55c842bc72d38cf76be06127671b7830eb551df30d7d0a325b038e6d279b97aee9b7863bacef79eaff1ba407ce12d914c6932c86c7b36c775144d4dd9d52b6b66c49b34ac349480aac94457538659a0d031b3afc7c49d74f8a1d86655ce754954f755c3ac43b1236da91a42856093ed8d2f5f242d2adf8b55e16e38f663252496dc0f0b73560b66429d4536c76f098938f020f3320754a9ad97bc972a2f053971ad9a1dfcaa4919618c147a0b0e490e6d42de135a17038b8d6e82fd224639316dfe0c83ba50c5d07420bfc58cab99183a86a0d46c600d3822ab9ff48089b154bd64be71170eff8b278e330e1ac75fc90e67be02ca44535877b8bf3cd720d11f313dd5ea1f713c5a78020d124c2f56866b692fb8835688f5d213f50109392ec318c4fe24115e8a2bcbca952a80cd4cb6ff10e8961bcad10f8e8f032fb5e9d5003dfa09e0e18d87726ef60ee8317e7b89dee67fd872538edb8f9d6c0a5437497b089ceeb96b94316c1127ecfbb1a7e4a09e6df52a225ed453966d9995c5fc06f242b89edb8456934bef71822c01a20a826d6473b231c25cf8bdd32e7838fc1ab58eccb08ca28f80b44393826cd715727d4dbde844df702a7c949570673b5c623296cd4db10903e484acdb4258456022aa1f4f41b95e2d258cc1f31ebfd9866f25aaa2e179118363af9da73a39289b0230b96728377053a664afc4e101318137865c95f463fdbcfecc4c4f5731ae5b96d2df02311685bdc083851c419ada5e8dd14d153b48cc54e799f8449b6efd808c4cae5cadcbca2009a9d7c06f8f467e1fe66dfe6002de8577dd8d322e218ea16bd82e2630ffd34e62b000e35a60dfcbe921e563114605ab22049a95b0e27b0cba5731597c1e913c37561d490ebe746b21d33b17d1b0f919fc844451ae1577f38d525c75800a57bb1e09603dbf5c012d0d714708991fe6c54307c2022a81fe919ceae7427c77513f0479551cfad83a4c5ec774a381948791949726afd7f5c8cf4af062f5f17adce88f39651a1339bb6b85b9872f5bb50f6a93672a072ae52ee210a716cb961380652c1146593e64692dd474de548424e2b96d07f0c33fed107b90a4c93ba94f7a00488b3bcf4d7a77e88d03d1ec85ec674a8e35a445e1ce467377c858eeeaa7a8da8d094498381cf8aed449b06ccdc5dacaac31370acf8a57a6472e4e2b012a4731ddef964d6e064160c09c1604104f7010a8dbb20ef5a68f3652558a151c949d8ea0f5188f96b91baacfd21b2f7e8d7d1b670221b3748e8cc12221e324aeec7aca298b13488163fe4df3cb4d66566197de2e8cff6f25f0da7cb6ec57c6e00b7374a0d2a42f0c7fb8470da586d5fce70b82ac15a14217ab801fecfd3569cea3f35be42b05bf449df1cec18da800d076d16f347fabe84615dbc5eef31dfae18c776c63513b587f62e248989e73c65838a3011a70a4c9c6167adbaa2231c79864950c36019d602b7b4a72ad267216edb2525f84f4677d2792da9993ad5312a5e4198dd75028c204ba54b599226a3967fc2b0b892ab07ed260b8fbdf8eb1d9a33e18802e5bf6190c000c8e2ca4c3428fffe745fe2a3eed7e1c62d733a09f481b950d31932ef7f4a8d0051d07a06ac55de9e984279939b3fe9439a7f67d2fc9fb49ae86c43ec39142ba0caba78f2044268c71f2a8b7bd41690f046a2622f17d6529b0fa8f2f7059cf05bcc49d9c50690ce6b796793a685411878c739f3efe03f48d2343d8ca5fb0008c17a1f228140619c7bdf0df297cb3d4bc907f211e02290a2732ef7994bc6a444842e93735fbb61ac752ba74265366da7ef37f3380e0ef3ea978a77b708c9fa20062d8a31fc5b35b20f529a45cb07456f34a95630f1b6491c99ae299ea0f7bb6e2fe60521adcaec7b54eadf5015753a8329d645dafed014de861581dd084efe33c8e8c6fbde235fe86f785881e1f36071c7c9c33f6e06c910aff30d13af98b67f604efdb048c243482e09b663873d9c2ef437ce5608f556d06c3778d6c3272d0f6430ef1a7eafc8ed6135bb8fc49921c9a6054daf5bb226f6dbe4fe13e042b48ab70c4073c2602cdd63958d6413d65005f3b0f1928b16cfda974588b91caff0e2d315b46ba6d7c9171a88b46fa7dd33e8c4d39c3d64cc2f39492e77bf371fe17d309834a6e85588ba206617c7804e15b1fc4f9d58ffbdcc28d3cf28c19555fe693c50124ba55dcd7492b24bd1cb2a44a22204fd6d88994574f7bda54a91bf51247c10c220b10ecdb6239cf6145d2569092a8ec537014bd3b3f21b1fe305ad6b58a7b3603d1754539f0ea7cc8c19a4b055d1839afa1857a9a93922d86257f4ab1518f29c2a50ccd1ee469842438b7201e4290979c2e1732094e10b8eb8ffb789416a4dc9e509af75199124ca23eea05d388f2229da2818e3aa65741b6af15559328298df99d384a2156b2bd79202c8247aa83a364a6854298da07cd87ce36e636057c43af84ed0f56e72d9cf2c445c99348d428d9758469c63ff76dca0a8bbf8e4b38f5c9e41a734f65873b9e3835db0e1b3e2fa63cecea813b9d9690ecd2d3e717e3629526f808c37923b52df56e67e67206643f23bd4969fb8d04ee1cccb33162c41277eadfa35c14405b03d15df0b1a2c7e32b24351b140d52b2641daf179ed37be0214f262f858df995d751973454a90aaeb6e3c1b3efb29865ec55613c4c6836bb587554e19b8fbd378a379ad53efce6f239de099e96b9c6036e34b36e031ca3e3b179dcdfe757fb05b942e2a4ab317b018c8c51e7e0b3f12f1d272dce41621561e07fd87f14322cdf60d6e51d720fc55c83d909c954208683f772ac93794b995ea8f1cbbac578766d05faa7f8d5798261a33fd95b15195ebb08243715c0d656c6d0c372123fd99bb069149ca75aefa012eb840689e10eb46879a2637d867ee0456ccd3ebac1bb9374d8ce52d3332227fd8a4792f6b137d2af47f8f47c9417cd4c1fada04eba1287d4fe6cf00b407e9b88e9c4add237eefcbb4e74cf74c3bb261251b07dc0bd1b6fce2b68fe0b3763cd516f1c2ce9bcc28086ae2db17dc71aaa2e680cc098fd1ad655829ffaab5f6cb70c93e109ab30176911e1a62cac1dff0808fd49cbe500cf882748418a4400ac08f653c637181e0809fa351419972f26687ed302d28ad8cb2fb9f1b772332c599bc40265fa7213a760b305df20976f0139870290a628aebea4abbcaf93cad609e3368cbf23d408d53061fd01723b0f7a5621b13d362af4286601f9f2290a9eb2f9f4695151adb9971b52607f6a30d0837d99b023ce28e093cc2e89a625ab27092244ecf10fd694c8881b420eb488d9b066d6817856e8dddfd3c4738dc187c46940a7c2a416668eb28051de8a2c7f577873656c0338fd38bf299af48450de9002ebcc4e3e9bfefb5bb1ffbafd3ce6231bc562776724ef63e077ad7b1c9497efce7fea5126552a948b1ec5724f532b0e247f2ff7738465c070726ce33e96de4fe5e3332d3264dff25282ed44f85829187c8c2a457af5bda5189ee14ccd486d4139d51e6294b5c13c70301c0f52f4be9c6214f33a57479502d0deeaeaa0b55e9356f373660c2e3de274c113e06f1d96e779ed95b0699e0b2c04daeaa4dfa51d6d8a7ce3ae022517dee557842827c16b6cb314da7341d066dfe6767b28459ddc4095e00073b9ed23496717c4a135399ef7c168ca36b7acd54f0b368e15ea0689025b1209165bd36c023c9bdbe9aba3825e1b2f106a34b7563f2a63ea657b32866ef78b5fe9738d190ced28a33d5801d65c704757998cf85cb98fcf89cd0cd070084a1850a90a5dd627358fbfa66f9928afbd1b9f97f175103d1b5f1d32635b93a9aaac68f4a546bc54bc2cc1e1b3b35a9976f734e4aaf322fb6121ad554303908ce5cefb467163b27f259e4d0efd4a1088ec683e2a222db3dc13c6b3bc09fe542a536ea8d5430277ac6be1c090174dd35e9b5ff1bc31f12f0d6a9b0a546ab31e43f070405be781bc1335ff10febd77d444d5094fe5808dfee20d9f493b9a5bedc4087817406eb4e30d3f997c5b48dc0cdd7a1de2911ae29be1ed12d373340010a8daf8f48a598bb5aa806c338f88261504597dc4474d85c794683d95ce12b54134580f9961bce170ed5a7cc369cfab020aeb913b83b89b6eadd91bb149620329e07fb53449a9638d2442aa12988295aa206f219ac800f33bb6fbf9034c68f75e91ef64dd43ae5703c3bd6c3da85ee3b20c1d0f196b2ca27e7b7e5720453191435c854245737fa9ee7eac61dbab922926ab524746636b61c793f7d31a69a2953adf07d6ba64804dc13ffad939030f340c78a983651b5aa9c3e81fd8c5fe26f59cb841cf8c242111e4828f58e002ad94cc9bcf1ab5bb51a427d5b2164bdd472b"}]}], {0x4e22, 0x4e23, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x0, 0x100, @void}}}}}}}}}, 0x0) 1m43.523188889s ago: executing program 8 (id=3406): syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x6, 0xa5, 0x0, 0xa}]}, 0x10) socket$packet(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r6}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r7, 0x0, r7) 1m43.489315179s ago: executing program 36 (id=3406): syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x6, 0xa5, 0x0, 0xa}]}, 0x10) socket$packet(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r6}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r7, 0x0, r7) 1.264756646s ago: executing program 3 (id=4687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x425, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 1.207025277s ago: executing program 3 (id=4691): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) dup(r0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xec25, 0x400, 0x1, 0xd4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xa) 1.136854718s ago: executing program 3 (id=4692): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2dfea4174acbe3350c14498396b28c7d1784d04aa38922721cb7816094cb8295d26d3abc8a75ac1f30e53a0eff506f6e6b369ba6c5306e91acaa94e89dbaf17e97cd151235f3defff171c60b91c0c5aeb29736830a09b262dbe4c7ed149885a054de1d7ff5bcecd7a50061814c", 0x8e}, {&(0x7f0000000d00)="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", 0x3c1}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 1.087729529s ago: executing program 3 (id=4693): r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffff", 0x42}], 0x1) 1.086897689s ago: executing program 0 (id=4694): syz_open_dev$evdev(0x0, 0x2, 0x862b01) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.075607309s ago: executing program 0 (id=4695): accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfd, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0xa0a, 0x0, 0xffffffbe, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d616373656300001400028005000b000000000005000f000000000008000500", @ANYRES32=r4], 0x4c}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "0300", "95670cff05e29ee8dcfc54e13b2dd711", "fdffb26f", "a2deb79f8c96bff4"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000740)=0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, 0x0, 0x0) 938.819962ms ago: executing program 0 (id=4696): syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 938.440802ms ago: executing program 2 (id=4697): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x31, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 935.100793ms ago: executing program 2 (id=4698): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0, 0x1a000}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) 915.142852ms ago: executing program 2 (id=4699): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) 895.428293ms ago: executing program 2 (id=4700): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 885.333763ms ago: executing program 2 (id=4701): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xfeffffff}, 0x1c) 872.657323ms ago: executing program 2 (id=4702): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x704, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff7ffffa, 0x31fe37ce6a365a9f, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x10000000, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x80000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a6558", 0x0, 0x1000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xfeffffff}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x0, 0x1, 'M'}, 0x9) 721.530696ms ago: executing program 9 (id=4703): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100086, 0x0, 0xfffffffc, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 658.734627ms ago: executing program 9 (id=4704): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf251b00000008009a0001000000070021"], 0x24}}, 0x40004) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x20000000000001e3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x28, r9, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x5, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x28}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x83}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xb5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 610.263329ms ago: executing program 9 (id=4705): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000200000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x16}, 0x4010) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20040044) 609.812388ms ago: executing program 9 (id=4706): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/74, 0x4a) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x402) getdents(0xffffffffffffffff, 0x0, 0x0) 553.78245ms ago: executing program 9 (id=4707): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e1a, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 553.32203ms ago: executing program 9 (id=4708): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 450.147471ms ago: executing program 0 (id=4712): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 438.330692ms ago: executing program 7 (id=4713): syz_open_dev$usbfs(0x0, 0x1ff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x100000000}, 0x18) 311.043964ms ago: executing program 0 (id=4714): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket(0x18, 0x1, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) setsockopt$sock_int(r2, 0x1, 0x6, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) close_range(r1, 0xffffffffffffffff, 0x0) 284.556275ms ago: executing program 0 (id=4715): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) dup(r0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xec25, 0x400, 0x1, 0xd4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xa) 222.891706ms ago: executing program 3 (id=4716): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) 220.736506ms ago: executing program 7 (id=4717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/74, 0x4a) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x402) getdents(0xffffffffffffffff, 0x0, 0x0) 209.506026ms ago: executing program 3 (id=4718): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x14) 202.594286ms ago: executing program 7 (id=4719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x31, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 166.156497ms ago: executing program 7 (id=4720): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00'}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x85, 0x85, 0x6, [@enum64={0xe, 0x7, 0x0, 0x13, 0x1, 0x6, [{0x1, 0x1, 0x1}, {0x1, 0x54e99de6, 0x7}, {0x7, 0x0, 0x9971}, {0x2, 0x5, 0xfffff801}, {0xa, 0x6, 0x9}, {0xc, 0x1, 0x1}, {0xb, 0x5, 0x8}]}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}, @datasec={0xb, 0x1, 0x0, 0xf, 0x1, [{0x1, 0x7cf, 0x10000}], '\t'}]}, {0x0, [0x61, 0x30, 0x30, 0x61]}}, &(0x7f0000000380)=""/29, 0xa6, 0x1d, 0x0, 0x0, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x8000}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x1000, &(0x7f0000000f00)=""/4096, 0x41100, 0xd, '\x00', r3, @fallback=0x33, r4, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xf, 0x7f, 0x800}, 0x10, 0xffffffffffffffff, r1, 0x3, &(0x7f0000000480)=[r1, r1, r1, r1, r1], &(0x7f00000004c0)=[{0x2, 0x3, 0x7, 0xb}, {0x5, 0x2, 0xe, 0x3}, {0x5, 0x3, 0x3, 0xc}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000100), &(0x7f00000001c0)=0x8) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) 38.14893ms ago: executing program 7 (id=4721): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0, 0x1a000}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) 0s ago: executing program 7 (id=4722): syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): ks suppressed [ 232.761362][T12749] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3382'. [ 232.779763][T12749] netlink: 'syz.0.3382': attribute type 10 has an invalid length. [ 232.788748][T12749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3382'. [ 233.047786][T12762] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3388'. [ 233.111032][T12774] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3394'. [ 233.121292][T12774] netlink: 'syz.0.3394': attribute type 10 has an invalid length. [ 233.129976][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3394'. [ 233.166144][T12778] loop8: detected capacity change from 0 to 764 [ 233.198294][ T9474] Symlink component flag not implemented [ 233.204041][ T9474] Symlink component flag not implemented [ 233.433171][ T3384] hid-generic 0000:3000000:0000.004B: unknown main item tag 0x4 [ 233.443146][ T3384] hid-generic 0000:3000000:0000.004B: hidraw0: HID v0.00 Device [sy] on syz0 [ 233.486728][ T31] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.497101][ T31] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.549706][ T31] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.560163][ T31] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.640003][ T31] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.650358][ T31] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.673068][ T3384] hid-generic 0000:3000000:0000.004C: hidraw0: HID v0.00 Device [sy] on syz0 [ 233.709697][ T31] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.720068][ T31] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.727010][ T3384] hid-generic 0000:3000000:0000.004D: hidraw0: HID v0.00 Device [sy] on syz0 [ 233.758888][T12796] chnl_net:caif_netlink_parms(): no params data found [ 233.811773][T12810] chnl_net:caif_netlink_parms(): no params data found [ 233.834126][T12796] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.841276][T12796] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.848667][T12796] bridge_slave_0: entered allmulticast mode [ 233.855418][T12796] bridge_slave_0: entered promiscuous mode [ 233.880991][T12796] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.888110][T12796] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.895568][T12796] bridge_slave_1: entered allmulticast mode [ 233.902287][T12796] bridge_slave_1: entered promiscuous mode [ 233.961692][T12857] loop3: detected capacity change from 0 to 512 [ 233.977908][T12857] EXT4-fs: Ignoring removed mblk_io_submit option [ 233.984514][T12857] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.994235][T12857] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 234.002688][T12857] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 234.013856][ T31] bond0 (unregistering): Released all slaves [ 234.046129][T12796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.056928][T12796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.067525][T12857] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.3423: Allocating blocks 41-42 which overlap fs metadata [ 234.075117][T12810] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.086379][T12857] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.3423: Allocating blocks 41-42 which overlap fs metadata [ 234.088300][T12810] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.103004][T12857] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.3423: Failed to acquire dquot type 1 [ 234.109160][T12810] bridge_slave_0: entered allmulticast mode [ 234.121458][T12857] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 234.126580][T12810] bridge_slave_0: entered promiscuous mode [ 234.143197][T12857] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.3423: corrupted inode contents [ 234.159471][T12857] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #12: comm syz.3.3423: mark_inode_dirty error [ 234.171808][T12857] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.3423: corrupted inode contents [ 234.185031][T12857] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.3423: mark_inode_dirty error [ 234.199592][T12857] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.3423: corrupted inode contents [ 234.213248][ T31] hsr_slave_0: left promiscuous mode [ 234.213248][T12857] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 234.228589][ T31] hsr_slave_1: left promiscuous mode [ 234.234147][T12857] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.3423: corrupted inode contents [ 234.248833][ T31] veth1_macvtap: left promiscuous mode [ 234.254388][ T31] veth0_macvtap: left promiscuous mode [ 234.260137][ T31] veth1_vlan: left promiscuous mode [ 234.265410][T12857] EXT4-fs error (device loop3): ext4_truncate:4666: inode #12: comm syz.3.3423: mark_inode_dirty error [ 234.277289][T12857] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 234.296063][T12857] EXT4-fs (loop3): 1 truncate cleaned up [ 234.302197][T12857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.359799][T12810] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.367047][T12810] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.374353][T12810] bridge_slave_1: entered allmulticast mode [ 234.380830][T12810] bridge_slave_1: entered promiscuous mode [ 234.389959][T12796] team0: Port device team_slave_0 added [ 234.396734][T12796] team0: Port device team_slave_1 added [ 234.443664][T12796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.450654][T12796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.476618][T12796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.488300][T12810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.499007][T12796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.506017][T12796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.531987][T12796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.546515][T12810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.562257][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.586822][T12810] team0: Port device team_slave_0 added [ 234.594449][T12796] hsr_slave_0: entered promiscuous mode [ 234.601005][T12796] hsr_slave_1: entered promiscuous mode [ 234.607167][T12796] debugfs: 'hsr0' already exists in 'hsr' [ 234.612906][T12796] Cannot create hsr debugfs directory [ 234.619335][T12810] team0: Port device team_slave_1 added [ 234.637040][T12880] FAULT_INJECTION: forcing a failure. [ 234.637040][T12880] name failslab, interval 1, probability 0, space 0, times 0 [ 234.649856][T12880] CPU: 0 UID: 0 PID: 12880 Comm: syz.2.3432 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 234.649908][T12880] Tainted: [W]=WARN [ 234.649985][T12880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 234.649994][T12880] Call Trace: [ 234.650000][T12880] [ 234.650007][T12880] __dump_stack+0x1d/0x30 [ 234.650024][T12880] dump_stack_lvl+0xe8/0x140 [ 234.650040][T12880] dump_stack+0x15/0x1b [ 234.650100][T12880] should_fail_ex+0x265/0x280 [ 234.650125][T12880] should_failslab+0x8c/0xb0 [ 234.650150][T12880] __kmalloc_noprof+0xa5/0x3e0 [ 234.650242][T12880] ? copy_splice_read+0xc2/0x660 [ 234.650264][T12880] copy_splice_read+0xc2/0x660 [ 234.650287][T12880] ? __pfx_copy_splice_read+0x10/0x10 [ 234.650306][T12880] splice_direct_to_actor+0x26f/0x680 [ 234.650327][T12880] ? __pfx_direct_splice_actor+0x10/0x10 [ 234.650358][T12880] do_splice_direct+0xda/0x150 [ 234.650378][T12880] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 234.650483][T12880] do_sendfile+0x380/0x650 [ 234.650549][T12880] __x64_sys_sendfile64+0x105/0x150 [ 234.650575][T12880] x64_sys_call+0x2bb0/0x2ff0 [ 234.650621][T12880] do_syscall_64+0xd2/0x200 [ 234.650648][T12880] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 234.650673][T12880] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 234.650709][T12880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.650733][T12880] RIP: 0033:0x7f098176eba9 [ 234.650749][T12880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.650805][T12880] RSP: 002b:00007f09801d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 234.650825][T12880] RAX: ffffffffffffffda RBX: 00007f09819b5fa0 RCX: 00007f098176eba9 [ 234.650837][T12880] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 234.650848][T12880] RBP: 00007f09801d7090 R08: 0000000000000000 R09: 0000000000000000 [ 234.650858][T12880] R10: 7fffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 234.650882][T12880] R13: 00007f09819b6038 R14: 00007f09819b5fa0 R15: 00007fffcb0bc568 [ 234.650901][T12880] [ 234.862823][T12810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.869878][T12810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.895917][T12810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.912433][ T29] kauditd_printk_skb: 402 callbacks suppressed [ 234.912446][ T29] audit: type=1400 audit(1758085356.646:24759): avc: denied { execute } for pid=12877 comm="syz.3.3431" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=43224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 234.967338][T12810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.974347][T12810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.000335][T12810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.012489][ T29] audit: type=1400 audit(1758085356.746:24760): avc: denied { bind } for pid=12877 comm="syz.3.3431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 235.051438][ T29] audit: type=1400 audit(1758085356.776:24761): avc: denied { setopt } for pid=12877 comm="syz.3.3431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 235.112780][T12810] hsr_slave_0: entered promiscuous mode [ 235.120207][ T9242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.120404][T12810] hsr_slave_1: entered promiscuous mode [ 235.136165][T12810] debugfs: 'hsr0' already exists in 'hsr' [ 235.142262][T12810] Cannot create hsr debugfs directory [ 235.183651][ T29] audit: type=1326 audit(1758085356.916:24762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.7.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 235.207375][ T29] audit: type=1326 audit(1758085356.916:24763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.7.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 235.231644][ T29] audit: type=1326 audit(1758085356.916:24764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.7.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 235.255300][ T29] audit: type=1326 audit(1758085356.916:24765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.7.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 235.279103][ T29] audit: type=1326 audit(1758085356.916:24766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.7.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 235.302705][ T29] audit: type=1326 audit(1758085356.916:24767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.7.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 235.308348][T12897] loop7: detected capacity change from 0 to 512 [ 235.326373][ T29] audit: type=1326 audit(1758085356.916:24768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.7.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 235.357075][T12897] EXT4-fs: Ignoring removed mblk_io_submit option [ 235.363643][T12897] EXT4-fs: Ignoring removed nomblk_io_submit option [ 235.373049][T12897] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 235.373088][ T2101] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.381544][T12897] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 235.419240][T12897] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.3439: Allocating blocks 41-42 which overlap fs metadata [ 235.463898][T12897] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.3439: Allocating blocks 41-42 which overlap fs metadata [ 235.479392][ T2101] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.492543][T12897] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.3439: Failed to acquire dquot type 1 [ 235.508915][T12905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3440'. [ 235.532235][ T2101] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.562461][T12897] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 235.578387][T12897] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #12: comm syz.7.3439: corrupted inode contents [ 235.592428][ T2101] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.605047][T12897] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #12: comm syz.7.3439: mark_inode_dirty error [ 235.656259][T12897] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #12: comm syz.7.3439: corrupted inode contents [ 235.669644][T12897] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.3439: mark_inode_dirty error [ 235.692894][T12897] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #12: comm syz.7.3439: corrupted inode contents [ 235.716888][T12897] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 235.758105][ T2101] bridge_slave_1: left allmulticast mode [ 235.763781][ T2101] bridge_slave_1: left promiscuous mode [ 235.769492][ T2101] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.793309][T12897] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #12: comm syz.7.3439: corrupted inode contents [ 235.806832][T12897] EXT4-fs error (device loop7): ext4_truncate:4666: inode #12: comm syz.7.3439: mark_inode_dirty error [ 235.818705][ T2101] bridge_slave_0: left allmulticast mode [ 235.824336][ T2101] bridge_slave_0: left promiscuous mode [ 235.830229][ T2101] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.841655][T12897] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 235.850783][T12897] EXT4-fs (loop7): 1 truncate cleaned up [ 235.859985][T12897] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.941743][ T3391] hid_parser_main: 8 callbacks suppressed [ 235.941760][ T3391] hid-generic 0000:3000000:0000.004E: unknown main item tag 0x4 [ 235.955325][ T3391] hid-generic 0000:3000000:0000.004E: unknown main item tag 0x2 [ 235.969442][ T3391] hid-generic 0000:3000000:0000.004E: unknown main item tag 0x3 [ 235.978373][ T3391] hid-generic 0000:3000000:0000.004E: hidraw0: HID v0.00 Device [sy] on syz0 [ 236.008387][ T2101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.019165][ T2101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.034735][ T2101] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 236.043908][ T2101] bond0 (unregistering): Released all slaves [ 236.083850][ T2101] bond1 (unregistering): Released all slaves [ 236.144476][ T2101] hsr_slave_0: left promiscuous mode [ 236.152993][ T2101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.160417][ T2101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.175155][ T2101] veth1_macvtap: left promiscuous mode [ 236.190786][ T2101] veth0_macvtap: left promiscuous mode [ 236.196337][ T2101] veth1_vlan: left promiscuous mode [ 236.219665][ T9242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.289799][ T2101] team0 (unregistering): Port device team_slave_1 removed [ 236.299594][ T2101] team0 (unregistering): Port device C removed [ 236.402621][T12951] loop7: detected capacity change from 0 to 512 [ 236.420757][T12951] EXT4-fs: Ignoring removed mblk_io_submit option [ 236.427668][T12951] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.436037][T12951] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 236.444468][T12951] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 236.473168][T12951] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.3459: Allocating blocks 41-42 which overlap fs metadata [ 236.495319][T12951] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.3459: Allocating blocks 41-42 which overlap fs metadata [ 236.525264][T12951] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.3459: Failed to acquire dquot type 1 [ 236.573815][T12951] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 236.608045][T12951] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #12: comm syz.7.3459: corrupted inode contents [ 236.660424][T12796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 236.675827][T12796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 236.687659][T12796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 236.700351][T12951] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #12: comm syz.7.3459: mark_inode_dirty error [ 236.702333][T12796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 236.724157][T12973] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 236.739997][T12951] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #12: comm syz.7.3459: corrupted inode contents [ 236.766305][T12951] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.3459: mark_inode_dirty error [ 236.774409][T12976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3470'. [ 236.780428][T12951] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #12: comm syz.7.3459: corrupted inode contents [ 236.799866][T12951] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 236.808557][T12951] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #12: comm syz.7.3459: corrupted inode contents [ 236.821456][T12951] EXT4-fs error (device loop7): ext4_truncate:4666: inode #12: comm syz.7.3459: mark_inode_dirty error [ 236.832772][T12951] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 236.846730][T12951] EXT4-fs (loop7): 1 truncate cleaned up [ 236.854545][T12951] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.897779][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 236.904233][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 236.912093][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 236.919944][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 236.927795][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 236.935620][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 236.943445][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 236.951267][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 236.959110][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 236.966931][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 236.974744][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 236.982571][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 236.990419][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 236.998265][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.006117][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.013924][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.021772][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.029631][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.037474][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.045285][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.053124][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.060945][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.068801][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.076641][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.084483][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.092303][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.100133][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.107981][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.115822][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.123629][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.131509][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.139341][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.147181][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.155025][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.162876][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.170721][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.178577][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.186412][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.194246][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.202338][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.210206][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.218060][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.226010][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.233828][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.241664][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.249495][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.257336][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.265155][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.272998][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.280846][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.288702][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.296528][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.304382][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.312232][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.320086][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.327924][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.335787][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.343595][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.351455][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.359290][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.367141][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.374945][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.382791][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.390609][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.398452][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.406283][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.414119][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.421949][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.429824][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.437682][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.445540][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.453346][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.461194][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.469034][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.476899][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.484726][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.492604][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.500420][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.508308][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.516121][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.523931][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.531747][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.539568][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.547454][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.555296][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.563130][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.570981][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.578809][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.586651][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.594535][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.607596][ T9242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.624969][T12810] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 237.635272][ T2101] IPVS: stop unused estimator thread 0... [ 237.657451][T12810] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 237.786925][T12810] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 237.799721][T12810] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 237.900758][T12796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.924916][T12796] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.969368][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.976586][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.030260][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.037353][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.052714][T13048] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3495'. [ 238.157241][T12810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.198001][T12810] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.224688][T12796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.250554][ T2101] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.257732][ T2101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.283032][T12810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 238.293454][T12810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.308235][ T2101] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.315319][ T2101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.373968][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3499'. [ 238.455791][T12810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.474457][T12796] veth0_vlan: entered promiscuous mode [ 238.489634][T12796] veth1_vlan: entered promiscuous mode [ 238.513109][T12796] veth0_macvtap: entered promiscuous mode [ 238.521560][T12796] veth1_macvtap: entered promiscuous mode [ 238.532842][T12796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.544529][T12796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.575307][ T3384] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x4 [ 238.583024][ T3384] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x2 [ 238.613482][ T3384] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x3 [ 238.623467][ T3428] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.634338][ T3384] hid-generic 0000:3000000:0000.004F: hidraw0: HID v0.00 Device [sy] on syz0 [ 238.647194][ T3428] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.663893][ T3428] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.695320][ T3428] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.716892][ T3384] hid-generic 0000:3000000:0000.0050: unknown main item tag 0x4 [ 238.724698][ T3384] hid-generic 0000:3000000:0000.0050: unknown main item tag 0x2 [ 238.751881][ T3384] hid-generic 0000:3000000:0000.0050: unknown main item tag 0x3 [ 238.775905][ T3384] hid-generic 0000:3000000:0000.0050: hidraw0: HID v0.00 Device [sy] on syz0 [ 238.776515][T13106] loop3: detected capacity change from 0 to 1024 [ 238.799259][T12810] veth0_vlan: entered promiscuous mode [ 238.806834][T13106] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 238.817856][T13106] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 238.830739][T12810] veth1_vlan: entered promiscuous mode [ 238.844970][T12810] veth0_macvtap: entered promiscuous mode [ 238.851219][T13106] JBD2: no valid journal superblock found [ 238.857017][T13106] EXT4-fs (loop3): Could not load journal inode [ 238.865442][T12810] veth1_macvtap: entered promiscuous mode [ 238.878585][T12810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.900325][T12810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.910975][ T2101] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.928963][ T2101] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.957511][T13116] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 238.965555][ T2101] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.977050][ T2101] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.078655][ T2957] hid-generic 0000:3000000:0000.0051: unknown main item tag 0x4 [ 239.079266][ T3398] hid-generic 0000:3000000:0000.0052: hidraw0: HID v0.00 Device [sy] on syz0 [ 239.097270][ T2957] hid-generic 0000:3000000:0000.0051: hidraw1: HID v0.00 Device [sy] on syz0 [ 239.189848][T13132] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 239.208934][T13142] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 239.291147][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3530'. [ 239.304743][ T3398] hid-generic 0000:3000000:0000.0053: hidraw0: HID v0.00 Device [sy] on syz0 [ 239.565406][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3543'. [ 239.574361][T13189] netlink: 324 bytes leftover after parsing attributes in process `syz.9.3543'. [ 239.609282][ T2957] hid-generic 0000:3000000:0000.0054: hidraw0: HID v0.00 Device [sy] on syz0 [ 239.919333][ T29] kauditd_printk_skb: 891 callbacks suppressed [ 239.919367][ T29] audit: type=1326 audit(1758085361.656:25652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13169 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5c74255b67 code=0x7ffc0000 [ 239.952802][ T29] audit: type=1326 audit(1758085361.686:25653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.2.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0981765b67 code=0x7ffc0000 [ 239.976451][ T29] audit: type=1326 audit(1758085361.686:25654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.2.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f098170ada9 code=0x7ffc0000 [ 240.000095][ T29] audit: type=1326 audit(1758085361.686:25655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.2.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0981765b67 code=0x7ffc0000 [ 240.023746][ T29] audit: type=1326 audit(1758085361.686:25656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.2.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f098170ada9 code=0x7ffc0000 [ 240.047243][ T29] audit: type=1326 audit(1758085361.686:25657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.2.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098176eba9 code=0x7ffc0000 [ 240.070854][ T29] audit: type=1326 audit(1758085361.686:25658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13169 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5c741fada9 code=0x7ffc0000 [ 240.094376][ T29] audit: type=1326 audit(1758085361.686:25659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13169 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5c74255b67 code=0x7ffc0000 [ 240.118347][ T29] audit: type=1326 audit(1758085361.686:25660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13169 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5c741fada9 code=0x7ffc0000 [ 240.142009][ T29] audit: type=1326 audit(1758085361.686:25661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13169 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7425eba9 code=0x7ffc0000 [ 240.200287][ T2957] hid-generic 0000:3000000:0000.0055: hidraw0: HID v0.00 Device [sy] on syz0 [ 240.286520][T13223] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 240.365455][T13238] SELinux: security policydb version 17 (MLS) not backwards compatible [ 240.374066][T13238] SELinux: failed to load policy [ 240.515441][ T2957] hid-generic 0000:3000000:0000.0056: hidraw0: HID v0.00 Device [sy] on syz0 [ 240.578297][ T3398] hid-generic 0000:3000000:0000.0057: hidraw0: HID v0.00 Device [sy] on syz0 [ 240.588803][ T3384] hid-generic 0000:3000000:0000.0058: hidraw1: HID v0.00 Device [sy] on syz0 [ 240.649994][ T3384] hid-generic 0000:3000000:0000.0059: hidraw0: HID v0.00 Device [sy] on syz0 [ 240.833027][T13301] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 240.872557][ T2957] hid-generic 0000:3000000:0000.005A: hidraw0: HID v0.00 Device [sy] on syz0 [ 240.925245][T13313] syzkaller1: entered promiscuous mode [ 240.930760][T13313] syzkaller1: entered allmulticast mode [ 241.022553][T13331] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 241.075562][ T2957] hid_parser_main: 29 callbacks suppressed [ 241.075579][ T2957] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x4 [ 241.089136][ T2957] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x2 [ 241.098272][ T2957] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x3 [ 241.106629][ T2957] hid-generic 0000:3000000:0000.005B: hidraw0: HID v0.00 Device [sy] on syz0 [ 241.167688][ T3398] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x4 [ 241.175438][ T3398] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x2 [ 241.183190][ T3398] hid-generic 0000:3000000:0000.005C: unknown main item tag 0x3 [ 241.192819][ T3398] hid-generic 0000:3000000:0000.005C: hidraw0: HID v0.00 Device [sy] on syz0 [ 241.219213][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3616'. [ 241.323437][T13356] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 241.417493][ T2957] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x4 [ 241.425270][ T2957] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x2 [ 241.433583][ T2957] hid-generic 0000:3000000:0000.005D: unknown main item tag 0x3 [ 241.442859][ T2957] hid-generic 0000:3000000:0000.005D: hidraw0: HID v0.00 Device [sy] on syz0 [ 241.503202][T13378] rdma_op ffff8881182e7d80 conn xmit_rdma 0000000000000000 [ 241.519244][T13380] FAULT_INJECTION: forcing a failure. [ 241.519244][T13380] name failslab, interval 1, probability 0, space 0, times 0 [ 241.531979][T13380] CPU: 1 UID: 0 PID: 13380 Comm: syz.7.3630 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 241.532052][T13380] Tainted: [W]=WARN [ 241.532058][T13380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 241.532068][T13380] Call Trace: [ 241.532080][T13380] [ 241.532088][T13380] __dump_stack+0x1d/0x30 [ 241.532109][T13380] dump_stack_lvl+0xe8/0x140 [ 241.532127][T13380] dump_stack+0x15/0x1b [ 241.532144][T13380] should_fail_ex+0x265/0x280 [ 241.532168][T13380] should_failslab+0x8c/0xb0 [ 241.532263][T13380] kmem_cache_alloc_noprof+0x50/0x310 [ 241.532290][T13380] ? audit_log_start+0x365/0x6c0 [ 241.532356][T13380] audit_log_start+0x365/0x6c0 [ 241.532389][T13380] audit_seccomp+0x48/0x100 [ 241.532415][T13380] ? __seccomp_filter+0x68c/0x10d0 [ 241.532486][T13380] __seccomp_filter+0x69d/0x10d0 [ 241.532507][T13380] ? proc_id_connector+0x114/0x270 [ 241.532530][T13380] ? set_dumpable+0xb5/0x150 [ 241.532550][T13380] ? key_fsgid_changed+0x80/0x90 [ 241.532670][T13380] __secure_computing+0x82/0x150 [ 241.532764][T13380] syscall_trace_enter+0xcf/0x1e0 [ 241.532797][T13380] do_syscall_64+0xac/0x200 [ 241.532834][T13380] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 241.532857][T13380] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 241.532884][T13380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.532909][T13380] RIP: 0033:0x7f006645d5bc [ 241.532924][T13380] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 241.532938][T13380] RSP: 002b:00007f0064ebf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 241.532956][T13380] RAX: ffffffffffffffda RBX: 00007f00666a5fa0 RCX: 00007f006645d5bc [ 241.532969][T13380] RDX: 000000000000000f RSI: 00007f0064ebf0a0 RDI: 0000000000000006 [ 241.532979][T13380] RBP: 00007f0064ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 241.532991][T13380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.533002][T13380] R13: 00007f00666a6038 R14: 00007f00666a5fa0 R15: 00007fff3ae3f628 [ 241.533070][T13380] [ 241.535370][T13382] FAULT_INJECTION: forcing a failure. [ 241.535370][T13382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.574576][T13371] syzkaller1: entered promiscuous mode [ 241.575717][T13382] CPU: 0 UID: 0 PID: 13382 Comm: syz.3.3631 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 241.575781][T13382] Tainted: [W]=WARN [ 241.575787][T13382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 241.575798][T13382] Call Trace: [ 241.575805][T13382] [ 241.575812][T13382] __dump_stack+0x1d/0x30 [ 241.575900][T13382] dump_stack_lvl+0xe8/0x140 [ 241.575919][T13382] dump_stack+0x15/0x1b [ 241.575934][T13382] should_fail_ex+0x265/0x280 [ 241.575958][T13382] should_fail+0xb/0x20 [ 241.575977][T13382] should_fail_usercopy+0x1a/0x20 [ 241.576050][T13382] _copy_from_iter+0xd2/0xe80 [ 241.576076][T13382] ? __build_skb_around+0x1a0/0x200 [ 241.576144][T13382] ? __alloc_skb+0x223/0x320 [ 241.576166][T13382] netlink_sendmsg+0x471/0x6b0 [ 241.576204][T13382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.576229][T13382] __sock_sendmsg+0x142/0x180 [ 241.576335][T13382] ____sys_sendmsg+0x31e/0x4e0 [ 241.576362][T13382] ___sys_sendmsg+0x17b/0x1d0 [ 241.576396][T13382] __x64_sys_sendmsg+0xd4/0x160 [ 241.576467][T13382] x64_sys_call+0x191e/0x2ff0 [ 241.576614][T13382] do_syscall_64+0xd2/0x200 [ 241.576641][T13382] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 241.576669][T13382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.576689][T13382] RIP: 0033:0x7f5c7425eba9 [ 241.576705][T13382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.576741][T13382] RSP: 002b:00007f5c72cc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.576759][T13382] RAX: ffffffffffffffda RBX: 00007f5c744a5fa0 RCX: 00007f5c7425eba9 [ 241.576771][T13382] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000005 [ 241.576783][T13382] RBP: 00007f5c72cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 241.576795][T13382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.576807][T13382] R13: 00007f5c744a6038 R14: 00007f5c744a5fa0 R15: 00007ffd4d0c4568 [ 241.576860][T13382] [ 241.618904][T13387] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 241.619748][T13371] syzkaller1: entered allmulticast mode [ 242.015417][ T3405] hid-generic 0000:3000000:0000.005E: unknown main item tag 0x4 [ 242.023675][ T3405] hid-generic 0000:3000000:0000.005E: hidraw0: HID v0.00 Device [sy] on syz0 [ 242.174648][T13420] netlink: 'syz.7.3648': attribute type 21 has an invalid length. [ 242.192346][T13420] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3648'. [ 242.201466][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3648'. [ 242.212993][T13420] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3648'. [ 242.503324][T13444] netlink: 'syz.0.3658': attribute type 10 has an invalid length. [ 242.521721][T13444] macvlan1: entered promiscuous mode [ 242.527246][T13444] macvlan1: entered allmulticast mode [ 242.536124][T13444] veth1_vlan: entered allmulticast mode [ 242.543555][T13444] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 243.024588][T13491] netlink: 'syz.2.3673': attribute type 21 has an invalid length. [ 243.056024][T13490] __nla_validate_parse: 12 callbacks suppressed [ 243.056041][T13490] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3680'. [ 243.076316][T13490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3680'. [ 243.088123][T13490] veth0: entered promiscuous mode [ 243.117280][T13490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3680'. [ 243.128584][T13497] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3682'. [ 243.304368][T13521] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3691'. [ 243.323280][T13521] netlink: 308 bytes leftover after parsing attributes in process `syz.7.3691'. [ 243.387866][T13528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3694'. [ 243.401766][T13526] delete_channel: no stack [ 243.510260][T13534] loop7: detected capacity change from 0 to 1024 [ 243.517420][T13534] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 243.528467][T13534] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 243.529800][T13534] JBD2: no valid journal superblock found [ 243.544236][T13534] EXT4-fs (loop7): Could not load journal inode [ 244.061891][T13553] FAULT_INJECTION: forcing a failure. [ 244.061891][T13553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.061961][T13553] CPU: 1 UID: 0 PID: 13553 Comm: syz.2.3705 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 244.061993][T13553] Tainted: [W]=WARN [ 244.061999][T13553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 244.062012][T13553] Call Trace: [ 244.062018][T13553] [ 244.062026][T13553] __dump_stack+0x1d/0x30 [ 244.062045][T13553] dump_stack_lvl+0xe8/0x140 [ 244.062085][T13553] dump_stack+0x15/0x1b [ 244.062099][T13553] should_fail_ex+0x265/0x280 [ 244.062175][T13553] should_fail+0xb/0x20 [ 244.062194][T13553] should_fail_usercopy+0x1a/0x20 [ 244.062219][T13553] _copy_from_user+0x1c/0xb0 [ 244.062265][T13553] sg_new_write+0x71a/0x890 [ 244.062355][T13553] ? do_vfs_ioctl+0x866/0xe10 [ 244.062372][T13553] sg_ioctl+0xb81/0x1360 [ 244.062453][T13553] ? __pfx_sg_ioctl+0x10/0x10 [ 244.062467][T13553] __se_sys_ioctl+0xce/0x140 [ 244.062483][T13553] __x64_sys_ioctl+0x43/0x50 [ 244.062545][T13553] x64_sys_call+0x1816/0x2ff0 [ 244.062643][T13553] do_syscall_64+0xd2/0x200 [ 244.062671][T13553] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 244.062693][T13553] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 244.062719][T13553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.062763][T13553] RIP: 0033:0x7f098176eba9 [ 244.062776][T13553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.062862][T13553] RSP: 002b:00007f09801d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.062879][T13553] RAX: ffffffffffffffda RBX: 00007f09819b5fa0 RCX: 00007f098176eba9 [ 244.062892][T13553] RDX: 0000200000000040 RSI: 0000000000002285 RDI: 0000000000000007 [ 244.062905][T13553] RBP: 00007f09801d7090 R08: 0000000000000000 R09: 0000000000000000 [ 244.062917][T13553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.062930][T13553] R13: 00007f09819b6038 R14: 00007f09819b5fa0 R15: 00007fffcb0bc568 [ 244.062983][T13553] [ 244.150234][T13524] delete_channel: no stack [ 244.163636][T13559] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3707'. [ 244.513612][T13587] rdma_op ffff888103634180 conn xmit_rdma 0000000000000000 [ 244.781310][T13605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3727'. [ 244.932185][ T29] kauditd_printk_skb: 1696 callbacks suppressed [ 244.932200][ T29] audit: type=1326 audit(1758085366.666:27354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.9.3730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662733eba9 code=0x7ffc0000 [ 244.962205][ T29] audit: type=1326 audit(1758085366.666:27355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.9.3730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662733eba9 code=0x7ffc0000 [ 244.997429][ T29] audit: type=1326 audit(1758085366.716:27356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13608 comm="syz.0.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb85f4c5b67 code=0x7ffc0000 [ 245.021172][ T29] audit: type=1326 audit(1758085366.716:27357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13608 comm="syz.0.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb85f46ada9 code=0x7ffc0000 [ 245.044668][ T29] audit: type=1326 audit(1758085366.716:27358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13608 comm="syz.0.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85f4ceba9 code=0x7ffc0000 [ 245.068390][ T29] audit: type=1326 audit(1758085366.716:27359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13608 comm="syz.0.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb85f4c5b67 code=0x7ffc0000 [ 245.095177][ T29] audit: type=1326 audit(1758085366.716:27360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13608 comm="syz.0.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb85f46ada9 code=0x7ffc0000 [ 245.118862][ T29] audit: type=1326 audit(1758085366.716:27361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13608 comm="syz.0.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85f4ceba9 code=0x7ffc0000 [ 245.142610][ T29] audit: type=1326 audit(1758085366.736:27362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.9.3730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f662733eba9 code=0x7ffc0000 [ 245.166280][ T29] audit: type=1326 audit(1758085366.736:27363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.9.3730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662733eba9 code=0x7ffc0000 [ 245.357938][T13631] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3735'. [ 245.401112][T13636] rdma_op ffff8881184fa580 conn xmit_rdma 0000000000000000 [ 265.025388][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 291.113020][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 291.113035][ T29] audit: type=1400 audit(1758085412.836:27514): avc: denied { read } for pid=13642 comm="syz.7.3743" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 291.127455][T13650] random: crng reseeded on system resumption [ 291.142149][ T29] audit: type=1400 audit(1758085412.836:27515): avc: denied { open } for pid=13642 comm="syz.7.3743" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 291.171968][ T29] audit: type=1400 audit(1758085412.846:27516): avc: denied { remount } for pid=13640 comm="syz.0.3739" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 291.219876][ T29] audit: type=1400 audit(1758085412.866:27517): avc: denied { write } for pid=13649 comm="syz.9.3744" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 291.243211][ T29] audit: type=1400 audit(1758085412.866:27518): avc: denied { open } for pid=13649 comm="syz.9.3744" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 291.266966][ T29] audit: type=1400 audit(1758085412.896:27519): avc: denied { firmware_load } for pid=51 comm="kworker/u8:3" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 291.291905][ T29] audit: type=1400 audit(1758085412.916:27520): avc: denied { ioctl } for pid=13649 comm="syz.9.3744" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x330e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 291.372220][ T29] audit: type=1400 audit(1758085413.106:27521): avc: denied { create } for pid=13657 comm="syz.3.3747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 291.581530][ T29] audit: type=1400 audit(1758085413.316:27522): avc: denied { create } for pid=13664 comm="syz.2.3749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 291.601477][ T29] audit: type=1400 audit(1758085413.316:27523): avc: denied { bind } for pid=13664 comm="syz.2.3749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 291.753095][T13676] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3750'. [ 291.766445][T13676] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3750'. [ 293.286350][T13697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.464925][T13697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.479369][T13697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.488052][T13697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.555262][ T3405] IPVS: starting estimator thread 0... [ 293.706380][T13709] IPVS: using max 2592 ests per chain, 129600 per kthread [ 293.838837][T13714] netlink: 'syz.3.3767': attribute type 4 has an invalid length. [ 295.601152][T13744] loop7: detected capacity change from 0 to 8192 [ 295.639219][T13744] FAT-fs (loop7): error, clusters badly computed (2 != 1) [ 295.646433][T13744] FAT-fs (loop7): Filesystem has been set read-only [ 297.598163][T13784] loop9: detected capacity change from 0 to 256 [ 297.657589][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 297.657603][ T29] audit: type=1400 audit(2000000000.019:27547): avc: denied { bind } for pid=13777 comm="syz.3.3787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 297.877236][T13801] lo speed is unknown, defaulting to 1000 [ 297.883891][T13801] lo speed is unknown, defaulting to 1000 [ 297.889874][T13801] lo speed is unknown, defaulting to 1000 [ 297.945042][T13801] infiniband sz1: set active [ 297.949752][T13801] infiniband sz1: added lo [ 298.025087][ T29] audit: type=1400 audit(2000000000.239:27548): avc: denied { create } for pid=13796 comm="syz.0.3796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 298.027965][ T3417] lo speed is unknown, defaulting to 1000 [ 298.045543][ T29] audit: type=1400 audit(2000000000.239:27549): avc: denied { write } for pid=13796 comm="syz.0.3796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 298.060871][T13801] RDS/IB: sz1: added [ 298.075580][T13801] smc: adding ib device sz1 with port count 1 [ 298.081781][T13801] smc: ib device sz1 port 1 has pnetid [ 298.088682][T13801] lo speed is unknown, defaulting to 1000 [ 298.164161][T13801] lo speed is unknown, defaulting to 1000 [ 298.237130][T13801] lo speed is unknown, defaulting to 1000 [ 298.310448][T13801] lo speed is unknown, defaulting to 1000 [ 298.345671][T13801] lo speed is unknown, defaulting to 1000 [ 298.381457][T13801] lo speed is unknown, defaulting to 1000 [ 298.434595][ T3405] lo speed is unknown, defaulting to 1000 [ 298.445969][ T29] audit: type=1400 audit(2000000000.389:27550): avc: denied { create } for pid=13798 comm="syz.9.3797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 298.465990][ T29] audit: type=1400 audit(2000000000.389:27551): avc: denied { ioctl } for pid=13798 comm="syz.9.3797" path="socket:[47347]" dev="sockfs" ino=47347 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 298.743858][T13816] loop7: detected capacity change from 0 to 256 [ 298.840463][T13816] FAT-fs (loop7): codepage cp850 not found [ 299.466277][T13849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 300.529246][T13895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.539833][T13895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.565011][ T29] audit: type=1400 audit(2000000002.909:27552): avc: denied { getopt } for pid=13884 comm="syz.2.3829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 301.182586][T13909] netlink: 'syz.2.3837': attribute type 12 has an invalid length. [ 301.198467][ T29] audit: type=1400 audit(2000000003.559:27553): avc: denied { name_bind } for pid=13910 comm="syz.0.3838" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 301.283999][ T29] audit: type=1400 audit(2000000003.639:27554): avc: denied { ioctl } for pid=13914 comm="syz.2.3840" path="socket:[47553]" dev="sockfs" ino=47553 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 301.412411][ T29] audit: type=1400 audit(2000000003.769:27555): avc: denied { mounton } for pid=13919 comm="syz.0.3842" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 301.537601][T13922] /dev/nullb0: Can't lookup blockdev [ 301.638043][T13929] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3845'. [ 301.711711][ T29] audit: type=1400 audit(2000000004.069:27556): avc: denied { listen } for pid=13925 comm="syz.3.3844" lport=57701 faddr=fc01::1 fport=65535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 302.714945][T13960] loop7: detected capacity change from 0 to 256 [ 302.787165][T13960] vfat: Unknown parameter 'shoshortname' [ 302.864604][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 302.864616][ T29] audit: type=1400 audit(2000000005.219:27561): avc: denied { unmount } for pid=9242 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 303.096863][ T29] audit: type=1400 audit(2000000005.449:27562): avc: denied { setopt } for pid=13965 comm="syz.7.3858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 303.191114][T13977] loop9: detected capacity change from 0 to 512 [ 303.200751][T13977] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 303.213050][T13977] EXT4-fs (loop9): 1 truncate cleaned up [ 303.220675][T13977] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.233040][ T29] audit: type=1400 audit(2000000005.589:27563): avc: denied { mount } for pid=13974 comm="syz.9.3864" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 303.268926][ T29] audit: type=1400 audit(2000000005.589:27564): avc: denied { add_name } for pid=13974 comm="syz.9.3864" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.290124][ T29] audit: type=1400 audit(2000000005.589:27565): avc: denied { create } for pid=13974 comm="syz.9.3864" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 303.310729][ T29] audit: type=1400 audit(2000000005.589:27566): avc: denied { read write } for pid=13974 comm="syz.9.3864" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 303.333653][ T29] audit: type=1400 audit(2000000005.589:27567): avc: denied { open } for pid=13974 comm="syz.9.3864" path="/64/file0/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 303.361934][T12810] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.707529][T14006] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 304.733438][T14010] loop9: detected capacity change from 0 to 512 [ 304.743781][T14010] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 305.456600][ T29] audit: type=1400 audit(2000000007.619:27568): avc: denied { read } for pid=13997 comm="syz.2.3870" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 305.479933][ T29] audit: type=1400 audit(2000000007.729:27569): avc: denied { ioctl } for pid=13997 comm="syz.2.3870" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 305.620732][T14010] EXT4-fs (loop9): 1 truncate cleaned up [ 305.627711][T14010] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.728751][T14036] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3880'. [ 305.740327][T14033] loop7: detected capacity change from 0 to 512 [ 306.482072][T14033] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.512166][T14033] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.535024][T12810] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.616387][ T9242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.713573][ T29] audit: type=1400 audit(2000000009.059:27570): avc: denied { nlmsg_write } for pid=14050 comm="syz.2.3892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 308.063060][T14101] rdma_op ffff888126800d80 conn xmit_rdma 0000000000000000 [ 308.885071][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 308.885088][ T29] audit: type=1400 audit(2000000011.209:27572): avc: denied { sqpoll } for pid=14115 comm="syz.7.3912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 309.068796][T14126] loop7: detected capacity change from 0 to 2048 [ 309.077220][T14129] /dev/nullb0: Can't lookup blockdev [ 309.100004][T14126] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 309.168094][T14126] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 309.197710][T14126] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 309.210142][T14126] EXT4-fs (loop7): This should not happen!! Data will be lost [ 309.210142][T14126] [ 309.219892][T14126] EXT4-fs (loop7): Total free blocks count 0 [ 309.226069][T14126] EXT4-fs (loop7): Free/Dirty block details [ 309.232039][T14126] EXT4-fs (loop7): free_blocks=2415919104 [ 309.237782][T14126] EXT4-fs (loop7): dirty_blocks=32 [ 309.243044][T14126] EXT4-fs (loop7): Block reservation details [ 309.249236][T14126] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 309.281823][ T9242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 309.693532][T14155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.788874][T14155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.802107][T14158] netlink: 'syz.7.3925': attribute type 1 has an invalid length. [ 309.810048][T14158] netlink: 'syz.7.3925': attribute type 1 has an invalid length. [ 309.818029][T14158] netlink: 'syz.7.3925': attribute type 1 has an invalid length. [ 310.211812][T14177] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3933'. [ 310.220967][T14177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.233837][T14177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.298312][ T29] audit: type=1326 audit(2000000012.659:27573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.7.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 310.298437][ T29] audit: type=1326 audit(2000000012.659:27574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.7.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 310.298627][ T29] audit: type=1326 audit(2000000012.659:27575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.7.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 310.298736][ T29] audit: type=1326 audit(2000000012.659:27576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.7.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 310.298851][ T29] audit: type=1326 audit(2000000012.659:27577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.7.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 310.299010][ T29] audit: type=1326 audit(2000000012.659:27578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.7.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 310.299130][ T29] audit: type=1326 audit(2000000012.659:27579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.7.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 310.299244][ T29] audit: type=1326 audit(2000000012.659:27580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.7.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 310.299564][ T29] audit: type=1326 audit(2000000012.659:27581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.7.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 310.408597][T14187] loop9: detected capacity change from 0 to 512 [ 310.411844][T14187] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 310.588483][T14187] EXT4-fs (loop9): 1 truncate cleaned up [ 310.588819][T14187] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.655384][T12810] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.901853][T14210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3946'. [ 310.922927][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119409000: rx timeout, send abort [ 311.090823][T14221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3951'. [ 311.431177][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119409000: abort rx timeout. Force session deactivation [ 311.589147][ C1] vcan0: j1939_tp_rxtimer: 0xffff888118dcb800: rx timeout, send abort [ 311.875574][T14233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.888101][T14233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.900419][T14241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3959'. [ 312.097406][ C1] vcan0: j1939_tp_rxtimer: 0xffff888118dcb800: abort rx timeout. Force session deactivation [ 312.322262][T14266] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3968'. [ 312.335667][T14266] netlink: 'syz.2.3968': attribute type 10 has an invalid length. [ 312.350147][T14266] veth1_vlan: entered allmulticast mode [ 312.357195][T14266] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 312.368757][T14266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3968'. [ 312.478988][T14288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3979'. [ 312.520222][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811942da00: rx timeout, send abort [ 312.554914][T14295] loop0: detected capacity change from 0 to 1024 [ 312.562713][T14295] EXT4-fs: Ignoring removed bh option [ 312.580574][T14295] EXT4-fs: Ignoring removed nobh option [ 312.581058][T14272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.586210][T14295] EXT4-fs: Ignoring removed bh option [ 312.600795][T14272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.613540][T14297] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3983'. [ 312.619826][T14295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.627027][T14297] netlink: 'syz.2.3983': attribute type 10 has an invalid length. [ 312.651418][T14297] veth1_vlan: left allmulticast mode [ 312.664280][T14297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3983'. [ 312.673827][T14294] usb usb8: usbfs: process 14294 (syz.3.3978) did not claim interface 0 before use [ 312.704015][T12796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.756435][T14313] rdma_op ffff88810468f180 conn xmit_rdma 0000000000000000 [ 312.832763][T14320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3993'. [ 313.028439][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811942da00: abort rx timeout. Force session deactivation [ 313.097474][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881196f9800: rx timeout, send abort [ 313.210794][T14329] netlink: 'syz.2.3997': attribute type 10 has an invalid length. [ 313.418183][T14335] loop3: detected capacity change from 0 to 512 [ 313.424959][T14335] EXT4-fs: Ignoring removed mblk_io_submit option [ 313.435813][T14335] EXT4-fs: Ignoring removed nomblk_io_submit option [ 313.445775][T14335] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 313.454243][T14335] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 313.466465][T14335] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.3999: Allocating blocks 41-42 which overlap fs metadata [ 313.480640][T14335] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.3999: Allocating blocks 41-42 which overlap fs metadata [ 313.494761][T14335] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.3999: Failed to acquire dquot type 1 [ 313.508112][T14335] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 313.523114][T14335] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.3999: corrupted inode contents [ 313.536820][T14335] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #12: comm syz.3.3999: mark_inode_dirty error [ 313.548504][T14335] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.3999: corrupted inode contents [ 313.560831][T14335] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.3999: mark_inode_dirty error [ 313.573399][T14335] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.3999: corrupted inode contents [ 313.586331][T14335] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 313.595212][T14335] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.3999: corrupted inode contents [ 313.605742][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881196f9800: abort rx timeout. Force session deactivation [ 313.607544][T14335] EXT4-fs error (device loop3): ext4_truncate:4666: inode #12: comm syz.3.3999: mark_inode_dirty error [ 313.631343][T14335] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 313.640559][T14335] EXT4-fs (loop3): 1 truncate cleaned up [ 313.646779][T14335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.753138][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.788047][T14358] loop3: detected capacity change from 0 to 512 [ 313.826127][T14358] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 313.866004][T14358] EXT4-fs (loop3): 1 truncate cleaned up [ 313.873124][T14358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.975058][ T29] kauditd_printk_skb: 440 callbacks suppressed [ 313.975074][ T29] audit: type=1326 audit(2000000016.319:28018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14359 comm="syz.9.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662733eba9 code=0x7ffc0000 [ 314.004867][ T29] audit: type=1326 audit(2000000016.319:28019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14359 comm="syz.9.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662733eba9 code=0x7ffc0000 [ 314.028566][ T29] audit: type=1326 audit(2000000016.319:28020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14359 comm="syz.9.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f662733eba9 code=0x7ffc0000 [ 314.052211][ T29] audit: type=1326 audit(2000000016.319:28021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14359 comm="syz.9.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662733eba9 code=0x7ffc0000 [ 314.075854][ T29] audit: type=1326 audit(2000000016.319:28022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14359 comm="syz.9.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662733eba9 code=0x7ffc0000 [ 314.099396][ T29] audit: type=1326 audit(2000000016.319:28023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14359 comm="syz.9.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f662733eba9 code=0x7ffc0000 [ 314.122966][ T29] audit: type=1326 audit(2000000016.319:28024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14359 comm="syz.9.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662733eba9 code=0x7ffc0000 [ 314.146638][ T29] audit: type=1326 audit(2000000016.319:28025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14359 comm="syz.9.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662733eba9 code=0x7ffc0000 [ 314.170221][ T29] audit: type=1326 audit(2000000016.319:28026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14359 comm="syz.9.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f662733eba9 code=0x7ffc0000 [ 314.172352][T14351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.193701][ T29] audit: type=1326 audit(2000000016.319:28027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14359 comm="syz.9.4010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662733eba9 code=0x7ffc0000 [ 314.202897][T14351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.245858][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.391728][T14380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.404098][T14380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.621220][T14394] loop3: detected capacity change from 0 to 512 [ 314.717253][T14394] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 314.728755][T14394] EXT4-fs (loop3): 1 truncate cleaned up [ 314.729173][T14394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.755875][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.795734][T14402] netlink: 'syz.3.4025': attribute type 10 has an invalid length. [ 314.962320][T14422] loop3: detected capacity change from 0 to 1024 [ 314.962602][T14422] EXT4-fs: Ignoring removed bh option [ 314.962713][T14422] EXT4-fs: Ignoring removed nobh option [ 314.962799][T14422] EXT4-fs: Ignoring removed bh option [ 314.988724][T14422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.008294][T14428] loop0: detected capacity change from 0 to 512 [ 315.008789][T14428] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 315.010225][T14428] EXT4-fs (loop0): 1 truncate cleaned up [ 315.031772][T14428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.048176][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.072798][T12796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.165655][T14437] lo speed is unknown, defaulting to 1000 [ 315.269247][T14431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.269354][T14431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.315923][T14454] loop9: detected capacity change from 0 to 512 [ 315.322854][T14454] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 315.335817][T14454] EXT4-fs (loop9): 1 truncate cleaned up [ 315.342030][T14454] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.377204][T14459] loop7: detected capacity change from 0 to 512 [ 315.384712][T14459] EXT4-fs: Ignoring removed mblk_io_submit option [ 315.391231][T14459] EXT4-fs: Ignoring removed nomblk_io_submit option [ 315.400210][T12810] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.409946][T14459] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 315.418487][T14459] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 315.441363][T14459] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.4050: Allocating blocks 41-42 which overlap fs metadata [ 315.441605][T14459] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.4050: Allocating blocks 41-42 which overlap fs metadata [ 315.478527][T14459] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.4050: Failed to acquire dquot type 1 [ 315.491896][T14459] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 315.492280][T14459] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #12: comm syz.7.4050: corrupted inode contents [ 315.492410][T14459] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #12: comm syz.7.4050: mark_inode_dirty error [ 315.492527][T14459] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #12: comm syz.7.4050: corrupted inode contents [ 315.492669][T14459] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.4050: mark_inode_dirty error [ 315.492798][T14459] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #12: comm syz.7.4050: corrupted inode contents [ 315.492937][T14459] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 315.493080][T14459] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #12: comm syz.7.4050: corrupted inode contents [ 315.493293][T14459] EXT4-fs error (device loop7): ext4_truncate:4666: inode #12: comm syz.7.4050: mark_inode_dirty error [ 315.493401][T14459] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 315.493555][T14459] EXT4-fs (loop7): 1 truncate cleaned up [ 315.493943][T14459] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.679051][T14478] lo speed is unknown, defaulting to 1000 [ 315.905780][ T9242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.112407][T14501] loop7: detected capacity change from 0 to 256 [ 316.242449][T14524] rdma_op ffff8881184fa580 conn xmit_rdma 0000000000000000 [ 316.270703][T14529] __nla_validate_parse: 7 callbacks suppressed [ 316.270715][T14529] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.4080'. [ 316.291342][T14529] netlink: 'syz.9.4080': attribute type 10 has an invalid length. [ 316.299824][T14529] macvlan1: entered promiscuous mode [ 316.305289][T14529] macvlan1: entered allmulticast mode [ 316.313717][T14529] veth1_vlan: entered allmulticast mode [ 316.320998][T14529] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 316.332557][T14529] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4080'. [ 316.368129][T14536] loop9: detected capacity change from 0 to 256 [ 317.052478][T14564] loop9: detected capacity change from 0 to 256 [ 317.353535][T14581] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4102'. [ 317.362868][T14581] netlink: 308 bytes leftover after parsing attributes in process `syz.7.4102'. [ 317.372006][T14581] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4102'. [ 317.426714][T14596] rdma_op ffff88810deded80 conn xmit_rdma 0000000000000000 [ 317.539436][T14598] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4109'. [ 317.548452][T14598] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4109'. [ 317.557510][T14598] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4109'. [ 317.570321][T14598] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4109'. [ 317.630305][T14598] capability: warning: `syz.9.4109' uses 32-bit capabilities (legacy support in use) [ 318.164255][T14626] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4120'. [ 318.173262][ C1] vcan0: j1939_tp_rxtimer: 0xffff888107ed0c00: rx timeout, send abort [ 318.389096][T14643] netlink: 'syz.3.4129': attribute type 10 has an invalid length. [ 318.412116][T14646] loop7: detected capacity change from 0 to 512 [ 318.475287][T14646] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.581453][ T9242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.632236][T14668] loop9: detected capacity change from 0 to 1024 [ 318.639184][T14668] EXT4-fs: Ignoring removed bh option [ 318.644644][T14668] EXT4-fs: Ignoring removed nobh option [ 318.650258][T14668] EXT4-fs: Ignoring removed bh option [ 318.663368][T14662] lo speed is unknown, defaulting to 1000 [ 318.673380][ C1] vcan0: j1939_tp_rxtimer: 0xffff888107ed0c00: abort rx timeout. Force session deactivation [ 318.686982][T14668] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.735385][T12810] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.792606][T14677] loop3: detected capacity change from 0 to 256 [ 319.375743][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 319.375757][ T29] audit: type=1400 audit(2000000021.639:28210): avc: denied { prog_load } for pid=14707 comm="syz.2.4153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 319.401240][ T29] audit: type=1400 audit(2000000021.639:28211): avc: denied { bpf } for pid=14707 comm="syz.2.4153" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 319.421928][ T29] audit: type=1400 audit(2000000021.639:28212): avc: denied { perfmon } for pid=14707 comm="syz.2.4153" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 319.443055][ T29] audit: type=1400 audit(2000000021.649:28213): avc: denied { prog_run } for pid=14707 comm="syz.2.4153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 319.462213][ T29] audit: type=1400 audit(2000000021.649:28214): avc: denied { map_create } for pid=14707 comm="syz.2.4153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 319.481684][ T29] audit: type=1400 audit(2000000021.659:28215): avc: denied { map_read map_write } for pid=14707 comm="syz.2.4153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 319.501699][ T29] audit: type=1400 audit(2000000021.659:28216): avc: denied { open } for pid=14707 comm="syz.2.4153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 319.521188][ T29] audit: type=1400 audit(2000000021.659:28217): avc: denied { kernel } for pid=14707 comm="syz.2.4153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 319.540846][ T29] audit: type=1326 audit(2000000021.659:28218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14707 comm="syz.2.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098176eba9 code=0x7ffc0000 [ 319.564403][ T29] audit: type=1326 audit(2000000021.659:28219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14707 comm="syz.2.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f098176eba9 code=0x7ffc0000 [ 319.756764][T14728] netlink: 'syz.9.4163': attribute type 13 has an invalid length. [ 319.764604][T14728] netlink: 'syz.9.4163': attribute type 17 has an invalid length. [ 319.800599][T14728] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 320.250780][T14765] loop7: detected capacity change from 0 to 256 [ 320.281690][T14768] loop7: detected capacity change from 0 to 512 [ 320.289172][T14768] EXT4-fs: Ignoring removed mblk_io_submit option [ 320.296157][T14768] EXT4-fs: Ignoring removed nomblk_io_submit option [ 320.319427][T14768] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 320.328057][T14768] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 320.370266][T14768] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.4181: Allocating blocks 41-42 which overlap fs metadata [ 320.387989][T14768] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.4181: Allocating blocks 41-42 which overlap fs metadata [ 320.402638][T14768] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.4181: Failed to acquire dquot type 1 [ 320.415382][T14768] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 320.431708][T14768] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #12: comm syz.7.4181: corrupted inode contents [ 320.443818][T14768] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #12: comm syz.7.4181: mark_inode_dirty error [ 320.455534][T14768] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #12: comm syz.7.4181: corrupted inode contents [ 320.467610][T14768] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.4181: mark_inode_dirty error [ 320.479255][T14768] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #12: comm syz.7.4181: corrupted inode contents [ 320.491511][T14768] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 320.501587][T14768] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #12: comm syz.7.4181: corrupted inode contents [ 320.520803][T14768] EXT4-fs error (device loop7): ext4_truncate:4666: inode #12: comm syz.7.4181: mark_inode_dirty error [ 320.533110][T14768] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 320.542401][T14768] EXT4-fs (loop7): 1 truncate cleaned up [ 320.549838][T14768] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.629332][ T9242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.779436][T14816] loop0: detected capacity change from 0 to 512 [ 320.786536][T14816] EXT4-fs: Ignoring removed mblk_io_submit option [ 320.793079][T14816] EXT4-fs: Ignoring removed nomblk_io_submit option [ 320.816384][T14816] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 320.824989][T14816] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 320.874353][T14799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.886379][T14799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.888373][T14816] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.4203: Allocating blocks 41-42 which overlap fs metadata [ 320.916920][T14833] lo speed is unknown, defaulting to 1000 [ 321.024474][T14816] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.4203: Failed to acquire dquot type 1 [ 321.038518][T14816] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 321.053598][T14816] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.4203: corrupted inode contents [ 321.065807][T14816] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #12: comm syz.0.4203: mark_inode_dirty error [ 321.080118][T14816] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.4203: corrupted inode contents [ 321.093837][T14816] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.4203: mark_inode_dirty error [ 321.106451][T14816] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.4203: corrupted inode contents [ 321.119846][T14816] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 321.129273][T14816] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.4203: corrupted inode contents [ 321.141465][T14816] EXT4-fs error (device loop0): ext4_truncate:4666: inode #12: comm syz.0.4203: mark_inode_dirty error [ 321.153372][T14816] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 321.162965][T14816] EXT4-fs (loop0): 1 truncate cleaned up [ 321.202940][T14816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.240939][T14859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.252818][T14859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.270596][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881196f9c00: rx timeout, send abort [ 321.493504][T14875] __nla_validate_parse: 27 callbacks suppressed [ 321.493521][T14875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4228'. [ 321.515819][T14875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 321.529310][T14875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4228'. [ 321.543456][T14875] bond1 (unregistering): Released all slaves [ 321.594216][T12796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.669810][T14885] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4232'. [ 321.678852][T14885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4232'. [ 321.687832][T14885] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4232'. [ 321.696895][T14885] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4232'. [ 321.778841][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881196f9c00: abort rx timeout. Force session deactivation [ 321.797575][T14899] loop9: detected capacity change from 0 to 512 [ 321.817590][T14899] EXT4-fs: Ignoring removed mblk_io_submit option [ 321.833491][T14899] EXT4-fs: Ignoring removed nomblk_io_submit option [ 321.864073][T14899] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 321.872596][T14899] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 322.321420][T14899] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.4239: Allocating blocks 41-42 which overlap fs metadata [ 322.343533][T14899] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.4239: Failed to acquire dquot type 1 [ 322.355421][T14899] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 322.393401][T14899] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #12: comm syz.9.4239: corrupted inode contents [ 322.411936][T14899] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #12: comm syz.9.4239: mark_inode_dirty error [ 322.423575][T14899] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #12: comm syz.9.4239: corrupted inode contents [ 322.439855][T14899] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #12: comm syz.9.4239: mark_inode_dirty error [ 322.453625][T14899] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #12: comm syz.9.4239: corrupted inode contents [ 322.466767][T14899] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 322.475791][T14899] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #12: comm syz.9.4239: corrupted inode contents [ 322.488898][T14899] EXT4-fs error (device loop9): ext4_truncate:4666: inode #12: comm syz.9.4239: mark_inode_dirty error [ 322.500603][T14899] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 322.509914][T14899] EXT4-fs (loop9): 1 truncate cleaned up [ 322.516884][T14899] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.559520][T12810] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.584675][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4247'. [ 322.593675][T14922] netlink: 308 bytes leftover after parsing attributes in process `syz.9.4247'. [ 322.602895][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4247'. [ 322.655868][T14924] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.4248'. [ 322.684405][T14924] netlink: 'syz.7.4248': attribute type 10 has an invalid length. [ 322.733515][T14929] SELinux: Context &ve֌mX 0^1%+h}Wۇ@  py%^-E is not valid (left unmapped). [ 322.786588][T14930] netlink: 'syz.9.4251': attribute type 13 has an invalid length. [ 322.792048][T14929] SELinux: Context =}3aeJC ^VZ;NRʭIyG; &r}Tڽ+Hο:Gt^o**5"RI՚"]rK>$\ [ 322.792048][T14929] %LدDN 7G8-EFiG3=58w7@[Ka)Wnc@A_1(sf is not valid (left unmapped). [ 322.794415][T14930] netlink: 'syz.9.4251': attribute type 17 has an invalid length. [ 322.820072][T14929] SELinux: Context =JY aQBFIgbw`%_R&vʸ+( is not valid (left unmapped). [ 322.874708][T14935] lo speed is unknown, defaulting to 1000 [ 322.913432][T14930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 323.151749][T14972] rdma_op ffff888126802980 conn xmit_rdma 0000000000000000 [ 323.338397][T15000] SELinux: Context =JY aQBFIgbw`%_R&vʸ+(XT. _0DVE#f2ZwJ is not valid (left unmapped). [ 323.423768][T15013] rdma_op ffff88810468f180 conn xmit_rdma 0000000000000000 [ 323.544327][T15031] loop9: detected capacity change from 0 to 512 [ 323.555814][T15031] EXT4-fs: Ignoring removed mblk_io_submit option [ 323.562454][T15031] EXT4-fs: Ignoring removed nomblk_io_submit option [ 323.581096][T15031] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 323.589622][T15031] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 323.676577][T15031] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.4298: Allocating blocks 41-42 which overlap fs metadata [ 323.696409][T15031] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.4298: Failed to acquire dquot type 1 [ 323.717228][T15031] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 323.732257][T15031] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #12: comm syz.9.4298: corrupted inode contents [ 323.745564][T15031] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #12: comm syz.9.4298: mark_inode_dirty error [ 323.746742][T15035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.765534][T15035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.768071][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811972ac00: rx timeout, send abort [ 323.785165][T15031] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #12: comm syz.9.4298: corrupted inode contents [ 323.807261][T15031] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #12: comm syz.9.4298: mark_inode_dirty error [ 323.818932][T15031] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #12: comm syz.9.4298: corrupted inode contents [ 323.831167][T15031] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 323.840252][T15031] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #12: comm syz.9.4298: corrupted inode contents [ 323.855023][T15031] EXT4-fs error (device loop9): ext4_truncate:4666: inode #12: comm syz.9.4298: mark_inode_dirty error [ 323.866931][T15031] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 323.876489][T15031] EXT4-fs (loop9): 1 truncate cleaned up [ 323.882831][T15031] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.946591][T12810] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.995299][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119720400: rx timeout, send abort [ 324.217141][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119552c00: rx timeout, send abort [ 324.281475][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811972ac00: abort rx timeout. Force session deactivation [ 324.384505][ T2957] hid_parser_main: 2 callbacks suppressed [ 324.384523][ T2957] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x4 [ 324.398095][ T2957] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x2 [ 324.407916][ T29] kauditd_printk_skb: 791 callbacks suppressed [ 324.407936][ T29] audit: type=1326 audit(2000000026.739:28998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.7.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 324.437804][ T29] audit: type=1326 audit(2000000026.739:28999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.7.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 324.461481][ T29] audit: type=1326 audit(2000000026.739:29000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.7.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 324.484971][ T29] audit: type=1326 audit(2000000026.779:29001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.7.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 324.508699][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119720400: abort rx timeout. Force session deactivation [ 324.518886][ T2957] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x3 [ 324.526668][ T2957] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x0 [ 324.534328][ T2957] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x0 [ 324.541993][ T2957] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x0 [ 324.549647][ T2957] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x0 [ 324.557311][ T2957] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x0 [ 324.566101][ T2957] hid-generic 0000:3000000:0000.005F: hidraw0: HID v0.00 Device [sy] on syz0 [ 324.576219][ T29] audit: type=1326 audit(2000000026.929:29002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.7.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 324.600500][ T29] audit: type=1326 audit(2000000026.969:29003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.7.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 324.624967][ T29] audit: type=1326 audit(2000000026.969:29004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.7.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 324.674273][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119553400: rx timeout, send abort [ 324.695647][ T29] audit: type=1326 audit(2000000027.059:29005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15112 comm="syz.7.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 324.719318][ T29] audit: type=1326 audit(2000000027.059:29006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15112 comm="syz.7.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 324.742890][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119552c00: abort rx timeout. Force session deactivation [ 324.763182][ T29] audit: type=1326 audit(2000000027.059:29007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15112 comm="syz.7.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 325.069892][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119721800: rx timeout, send abort [ 325.087738][ T3391] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x4 [ 325.095533][ T3391] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x2 [ 325.104026][ T3391] hid-generic 0000:3000000:0000.0060: hidraw0: HID v0.00 Device [sy] on syz0 [ 325.182531][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119553400: abort rx timeout. Force session deactivation [ 325.303481][T15199] netlink: 'syz.0.4373': attribute type 13 has an invalid length. [ 325.311423][T15199] netlink: 'syz.0.4373': attribute type 17 has an invalid length. [ 325.366547][T15199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.382025][ T23] lo speed is unknown, defaulting to 1000 [ 325.548947][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119720400: rx timeout, send abort [ 325.578193][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119721800: abort rx timeout. Force session deactivation [ 325.596153][T15201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.604786][T15201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.057168][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119720400: abort rx timeout. Force session deactivation [ 326.554242][ T23] hid-generic 0000:3000000:0000.0061: hidraw0: HID v0.00 Device [sy] on syz0 [ 326.572936][T15246] __nla_validate_parse: 27 callbacks suppressed [ 326.572949][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4392'. [ 326.589305][T15246] netlink: 308 bytes leftover after parsing attributes in process `syz.7.4392'. [ 326.598459][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4392'. [ 326.728561][T15257] SELinux: Context =JY aQBFIgbw`%_R&vʸ+(XT. _0DVE#f2ZwJ]cPd_]!I^}5*qSqW is not valid (left unmapped). [ 326.782693][T15265] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.4401'. [ 326.824739][T15265] netlink: 'syz.9.4401': attribute type 10 has an invalid length. [ 326.832807][T15265] veth1_vlan: left allmulticast mode [ 326.840607][T15265] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4401'. [ 326.871223][T15272] loop9: detected capacity change from 0 to 512 [ 326.878787][T15272] EXT4-fs: Ignoring removed mblk_io_submit option [ 326.887692][T15272] EXT4-fs: Ignoring removed nomblk_io_submit option [ 326.898296][T15272] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 326.906780][T15272] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 326.929387][T15272] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.4404: Allocating blocks 41-42 which overlap fs metadata [ 326.943656][T15272] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.4404: Allocating blocks 41-42 which overlap fs metadata [ 326.958435][T15272] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.4404: Failed to acquire dquot type 1 [ 326.970301][T15272] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 326.985131][T15272] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #12: comm syz.9.4404: corrupted inode contents [ 326.990289][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4408'. [ 326.999130][T15272] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #12: comm syz.9.4404: mark_inode_dirty error [ 327.008328][T15282] netlink: 308 bytes leftover after parsing attributes in process `syz.2.4408'. [ 327.017822][T15272] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #12: comm syz.9.4404: corrupted inode contents [ 327.026407][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4408'. [ 327.048302][T15272] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #12: comm syz.9.4404: mark_inode_dirty error [ 327.063053][T15272] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #12: comm syz.9.4404: corrupted inode contents [ 327.076810][T15272] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 327.085906][T15272] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #12: comm syz.9.4404: corrupted inode contents [ 327.098006][T15272] EXT4-fs error (device loop9): ext4_truncate:4666: inode #12: comm syz.9.4404: mark_inode_dirty error [ 327.110585][T15272] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 327.119843][T15272] EXT4-fs (loop9): 1 truncate cleaned up [ 327.126820][T15272] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.186671][T12810] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.300463][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119425000: rx timeout, send abort [ 327.347598][T15302] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4415'. [ 327.475114][T15313] netlink: 'syz.0.4415': attribute type 10 has an invalid length. [ 327.502787][T15313] veth1_vlan: left allmulticast mode [ 327.530427][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4415'. [ 327.722101][T15344] netlink: 'syz.0.4435': attribute type 10 has an invalid length. [ 327.775243][T15349] lo speed is unknown, defaulting to 1000 [ 327.808708][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119425000: abort rx timeout. Force session deactivation [ 328.163764][T15376] netlink: 'syz.7.4448': attribute type 13 has an invalid length. [ 328.163804][T15376] netlink: 'syz.7.4448': attribute type 17 has an invalid length. [ 328.204935][T15376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 328.332680][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810123ca00: rx timeout, send abort [ 328.744600][ C0] vcan0: j1939_tp_rxtimer: 0xffff888118dd6800: rx timeout, send abort [ 328.832719][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810123ca00: abort rx timeout. Force session deactivation [ 329.017791][T15428] netlink: 'syz.9.4472': attribute type 10 has an invalid length. [ 329.252859][ C0] vcan0: j1939_tp_rxtimer: 0xffff888118dd6800: abort rx timeout. Force session deactivation [ 329.564353][T15462] netlink: 'syz.0.4487': attribute type 10 has an invalid length. [ 329.727843][ T29] kauditd_printk_skb: 475 callbacks suppressed [ 329.727871][ T29] audit: type=1326 audit(2000000032.089:29479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15490 comm="syz.0.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85f4ceba9 code=0x7ffc0000 [ 329.760468][ T29] audit: type=1326 audit(2000000032.089:29480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15490 comm="syz.0.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fb85f4ceba9 code=0x7ffc0000 [ 329.784231][ T29] audit: type=1326 audit(2000000032.089:29481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15490 comm="syz.0.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85f4ceba9 code=0x7ffc0000 [ 329.807900][ T29] audit: type=1326 audit(2000000032.089:29482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15490 comm="syz.0.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85f4ceba9 code=0x7ffc0000 [ 329.831627][ T29] audit: type=1326 audit(2000000032.089:29483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15490 comm="syz.0.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb85f4ceba9 code=0x7ffc0000 [ 329.855208][ T29] audit: type=1326 audit(2000000032.089:29484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15490 comm="syz.0.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85f4ceba9 code=0x7ffc0000 [ 329.878749][ T29] audit: type=1326 audit(2000000032.089:29485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15490 comm="syz.0.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb85f4d0ac7 code=0x7ffc0000 [ 329.902354][ T29] audit: type=1326 audit(2000000032.089:29486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15490 comm="syz.0.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb85f4d0a3c code=0x7ffc0000 [ 329.902395][ T29] audit: type=1326 audit(2000000032.089:29487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15490 comm="syz.0.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb85f4d0974 code=0x7ffc0000 [ 329.902415][ T29] audit: type=1326 audit(2000000032.089:29488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15490 comm="syz.0.4502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb85f4d0974 code=0x7ffc0000 [ 329.986803][T15497] rdma_op ffff8881247e9980 conn xmit_rdma 0000000000000000 [ 330.064936][T15503] netlink: 'syz.9.4507': attribute type 10 has an invalid length. [ 330.253444][T15528] rdma_op ffff888126801580 conn xmit_rdma 0000000000000000 [ 330.272457][T15530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.282648][T15530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.432967][ C1] vcan0: j1939_tp_rxtimer: 0xffff888118dd9800: rx timeout, send abort [ 330.561200][T15543] netlink: 'syz.3.4523': attribute type 10 has an invalid length. [ 330.901963][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811995fe00: rx timeout, send abort [ 330.933003][ C1] vcan0: j1939_tp_rxtimer: 0xffff888118dd9800: abort rx timeout. Force session deactivation [ 330.999720][T15572] loop7: detected capacity change from 0 to 1024 [ 331.007728][T15554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.016550][T15572] EXT4-fs: Ignoring removed bh option [ 331.022110][T15572] EXT4-fs: Ignoring removed nobh option [ 331.027752][T15572] EXT4-fs: Ignoring removed bh option [ 331.047596][T15554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.068176][T15580] loop3: detected capacity change from 0 to 256 [ 331.074899][T15572] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.148381][ T9242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.410197][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811995fe00: abort rx timeout. Force session deactivation [ 331.840145][T15625] __nla_validate_parse: 47 callbacks suppressed [ 331.840160][T15625] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4558'. [ 331.859741][T15625] netlink: 'syz.0.4558': attribute type 10 has an invalid length. [ 331.860097][T15625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4558'. [ 331.961311][T15637] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4564'. [ 332.132666][T15643] lo speed is unknown, defaulting to 1000 [ 332.280541][T15650] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.4566'. [ 332.339028][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4566'. [ 332.442074][T15655] rdma_op ffff8881003da980 conn xmit_rdma 0000000000000000 [ 332.469790][T15653] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4568'. [ 332.478807][T15653] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4568'. [ 332.487834][T15653] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4568'. [ 332.505047][T15653] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4568'. [ 332.560439][T15666] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4576'. [ 332.702724][T15685] rdma_op ffff8881003da980 conn xmit_rdma 0000000000000000 [ 333.467352][T15710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.491461][T15710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.560871][T15723] rdma_op ffff8881003da980 conn xmit_rdma 0000000000000000 [ 333.679329][T15740] SELinux: Context =JY aQBFIgbw`%_R&vʸ+(XT. _0DVE#f2ZwJ]cPd_]!I^}5*qSqW?t is not valid (left unmapped). [ 333.808487][T15754] rdma_op ffff8881247ead80 conn xmit_rdma 0000000000000000 [ 333.871315][T15758] lo speed is unknown, defaulting to 1000 [ 334.004272][T15766] loop3: detected capacity change from 0 to 512 [ 334.011097][T15766] EXT4-fs: Ignoring removed mblk_io_submit option [ 334.021014][T15766] EXT4-fs: Ignoring removed nomblk_io_submit option [ 334.037785][T15766] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 334.046291][T15766] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 334.086422][T15766] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.4618: Allocating blocks 41-42 which overlap fs metadata [ 334.095618][T15775] lo speed is unknown, defaulting to 1000 [ 334.101403][T15766] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.4618: Allocating blocks 41-42 which overlap fs metadata [ 334.120857][T15766] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.4618: Failed to acquire dquot type 1 [ 334.137486][T15766] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 334.156423][T15766] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.4618: corrupted inode contents [ 334.175118][T15766] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #12: comm syz.3.4618: mark_inode_dirty error [ 334.187709][T15766] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.4618: corrupted inode contents [ 334.205194][T15766] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.4618: mark_inode_dirty error [ 334.217323][T15766] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.4618: corrupted inode contents [ 334.232524][T15766] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 334.241496][T15766] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.4618: corrupted inode contents [ 334.253490][T15766] EXT4-fs error (device loop3): ext4_truncate:4666: inode #12: comm syz.3.4618: mark_inode_dirty error [ 334.266406][T15766] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 334.275647][T15766] EXT4-fs (loop3): 1 truncate cleaned up [ 334.281682][T15766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.336043][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.345837][T15780] netlink: 'syz.0.4623': attribute type 10 has an invalid length. [ 334.395912][T15794] loop3: detected capacity change from 0 to 512 [ 334.402883][T15794] EXT4-fs: Ignoring removed mblk_io_submit option [ 334.410843][T15794] EXT4-fs: Ignoring removed nomblk_io_submit option [ 334.418402][T15794] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 334.426881][T15794] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 334.447239][T15794] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.4630: Allocating blocks 41-42 which overlap fs metadata [ 334.462057][T15794] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.4630: Allocating blocks 41-42 which overlap fs metadata [ 334.478236][T15794] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.4630: Failed to acquire dquot type 1 [ 334.490096][T15794] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 334.519240][T15794] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.4630: corrupted inode contents [ 334.536076][T15794] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #12: comm syz.3.4630: mark_inode_dirty error [ 334.561021][T15794] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.4630: corrupted inode contents [ 334.580460][T15794] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.4630: mark_inode_dirty error [ 334.616050][T15794] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.4630: corrupted inode contents [ 334.632061][T15794] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 334.642021][T15794] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.4630: corrupted inode contents [ 334.655348][T15794] EXT4-fs error (device loop3): ext4_truncate:4666: inode #12: comm syz.3.4630: mark_inode_dirty error [ 334.668050][T15794] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 334.678010][T15794] EXT4-fs (loop3): 1 truncate cleaned up [ 334.684046][T15794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.737562][ T29] kauditd_printk_skb: 429 callbacks suppressed [ 334.737577][ T29] audit: type=1326 audit(2000000037.099:29910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.7.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0066455b67 code=0x7ffc0000 [ 334.769397][ T29] audit: type=1326 audit(2000000037.139:29911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.7.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f00663fada9 code=0x7ffc0000 [ 334.793018][ T29] audit: type=1326 audit(2000000037.139:29912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.7.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0066455b67 code=0x7ffc0000 [ 334.816528][ T29] audit: type=1326 audit(2000000037.139:29913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.7.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f00663fada9 code=0x7ffc0000 [ 334.840028][ T29] audit: type=1326 audit(2000000037.139:29914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.7.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 334.863998][ T29] audit: type=1326 audit(2000000037.179:29915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.7.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0066455b67 code=0x7ffc0000 [ 334.887537][ T29] audit: type=1326 audit(2000000037.179:29916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.7.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f00663fada9 code=0x7ffc0000 [ 334.911213][ T29] audit: type=1326 audit(2000000037.179:29917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.7.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f006645eba9 code=0x7ffc0000 [ 334.934782][ T29] audit: type=1326 audit(2000000037.189:29918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.7.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0066455b67 code=0x7ffc0000 [ 334.958308][ T29] audit: type=1326 audit(2000000037.189:29919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.7.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f00663fada9 code=0x7ffc0000 [ 334.984109][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.219800][T15863] SELinux: Context =JY aQBFIgbw`%_R&vʸ+(XT. _0DVE#f2ZwJ]cPd_]!I^ is not valid (left unmapped). [ 335.223702][T15861] netlink: 'syz.7.4658': attribute type 10 has an invalid length. [ 335.257362][T15865] netlink: 'syz.9.4663': attribute type 13 has an invalid length. [ 335.265278][T15865] netlink: 'syz.9.4663': attribute type 17 has an invalid length. [ 335.287227][T15865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.451900][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881184eba00: rx timeout, send abort [ 335.616538][T15911] netlink: 'syz.0.4684': attribute type 13 has an invalid length. [ 335.624393][T15911] netlink: 'syz.0.4684': attribute type 17 has an invalid length. [ 335.643649][T15911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.951909][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881184eb400: rx timeout, send abort [ 335.960161][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881184eba00: abort rx timeout. Force session deactivation [ 335.993358][T15941] rdma_op ffff88813411e180 conn xmit_rdma 0000000000000000 [ 336.407933][T15966] rdma_op ffff888126802180 conn xmit_rdma 0000000000000000 [ 336.455772][T15968] netlink: 'syz.7.4711': attribute type 10 has an invalid length. [ 336.460187][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881184eb400: abort rx timeout. Force session deactivation [ 336.631169][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811958a200: rx timeout, send abort [ 336.731934][T15983] loop3: detected capacity change from 0 to 2048 [ 336.774904][T15983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 336.790830][T15988] lo speed is unknown, defaulting to 1000 [ 336.890016][T15997] rdma_op ffff88813b511580 conn xmit_rdma 0000000000000000 [ 336.916921][T15995] openvswitch: netlink: Message has 6 unknown bytes. [ 336.935963][T15983] ================================================================== [ 336.944076][T15983] BUG: KCSAN: data-race in mem_cgroup_track_foreign_dirty_slowpath / mem_cgroup_track_foreign_dirty_slowpath [ 336.955631][T15983] [ 336.957956][T15983] write to 0xffff888119790558 of 8 bytes by task 15982 on cpu 0: [ 336.965653][T15983] mem_cgroup_track_foreign_dirty_slowpath+0x321/0x440 [ 336.972503][T15983] __folio_mark_dirty+0x3f8/0x4d0 [ 336.977520][T15983] mark_buffer_dirty+0x11e/0x210 [ 336.982445][T15983] block_page_mkwrite+0x287/0x3d0 [ 336.987469][T15983] ext4_page_mkwrite+0x859/0xb90 [ 336.992395][T15983] handle_mm_fault+0x15cb/0x2c20 [ 336.997328][T15983] do_user_addr_fault+0x636/0x1090 [ 337.002462][T15983] exc_page_fault+0x62/0xa0 [ 337.006966][T15983] asm_exc_page_fault+0x26/0x30 [ 337.011805][T15983] [ 337.014110][T15983] read to 0xffff888119790558 of 8 bytes by task 15983 on cpu 1: [ 337.021719][T15983] mem_cgroup_track_foreign_dirty_slowpath+0xd5/0x440 [ 337.028482][T15983] __folio_mark_dirty+0x3f8/0x4d0 [ 337.033497][T15983] mark_buffer_dirty+0x11e/0x210 [ 337.038421][T15983] folio_zero_new_buffers+0x28c/0x2e0 [ 337.043787][T15983] block_write_end+0x200/0x210 [ 337.048539][T15983] ext4_da_write_end+0x1d3/0x800 [ 337.053468][T15983] generic_perform_write+0x30f/0x490 [ 337.058744][T15983] ext4_buffered_write_iter+0x1ee/0x3c0 [ 337.064288][T15983] ext4_file_write_iter+0x383/0xf00 [ 337.069490][T15983] vfs_write+0x52a/0x960 [ 337.073721][T15983] ksys_write+0xda/0x1a0 [ 337.077958][T15983] __x64_sys_write+0x40/0x50 [ 337.082535][T15983] x64_sys_call+0x27fe/0x2ff0 [ 337.087206][T15983] do_syscall_64+0xd2/0x200 [ 337.091704][T15983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.097595][T15983] [ 337.099910][T15983] value changed: 0x0000000100000bb2 -> 0x0000000100000e17 [ 337.106999][T15983] [ 337.109307][T15983] Reported by Kernel Concurrency Sanitizer on: [ 337.115440][T15983] CPU: 1 UID: 0 PID: 15983 Comm: syz.3.4718 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 337.126798][T15983] Tainted: [W]=WARN [ 337.130587][T15983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 337.140627][T15983] ================================================================== [ 337.148884][ C1] vcan0: j1939_tp_rxtimer: 0xffff888107edfe00: rx timeout, send abort [ 337.157078][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811958a200: abort rx timeout. Force session deactivation [ 337.331765][T15983] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 337.346773][T15983] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 337.359255][T15983] EXT4-fs (loop3): This should not happen!! Data will be lost [ 337.359255][T15983] [ 337.368908][T15983] EXT4-fs (loop3): Total free blocks count 0 [ 337.375173][T15983] EXT4-fs (loop3): Free/Dirty block details [ 337.381048][T15983] EXT4-fs (loop3): free_blocks=2415919104 [ 337.386771][T15983] EXT4-fs (loop3): dirty_blocks=8208 [ 337.392042][T15983] EXT4-fs (loop3): Block reservation details [ 337.398024][T15983] EXT4-fs (loop3): i_reserved_data_blocks=513 [ 337.449437][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 337.657083][ C1] vcan0: j1939_tp_rxtimer: 0xffff888107edfe00: abort rx timeout. Force session deactivation