last executing test programs: 1m13.010248361s ago: executing program 1 (id=167): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x70}, 0x1, 0x7}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) recvmmsg(r0, &(0x7f0000009500)=[{{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000000)=""/34, 0x22}, {&(0x7f0000000100)=""/96, 0x60}, {&(0x7f0000000200)=""/107, 0x6b}, {&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000001380)=""/148, 0x94}], 0x6, &(0x7f00000014c0)=""/45, 0x2d}, 0x8}, {{&(0x7f0000001500)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000003980)=[{&(0x7f0000001580)=""/46, 0x2e}, {&(0x7f00000015c0)=""/8, 0x8}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/22, 0x16}, {&(0x7f0000003640)=""/227, 0xe3}, {&(0x7f0000003740)=""/179, 0xb3}, {&(0x7f0000003800)=""/220, 0xdc}, {&(0x7f0000003900)=""/75, 0x4b}], 0x9}, 0x401}, {{&(0x7f0000004d00)=@hci, 0x80, &(0x7f0000009c40)=[{&(0x7f0000003ac0)=""/84, 0x54}, {&(0x7f0000003b40)=""/54, 0x36}, {&(0x7f0000003b80)=""/63, 0x3f}, {&(0x7f0000003bc0)=""/191, 0xbf}, {&(0x7f0000003c80)=""/110, 0x6e}, {&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/128, 0x80}], 0x7, &(0x7f0000004d80)=""/36, 0x24}, 0x401}, {{&(0x7f0000004dc0)=@tipc=@id, 0x80, &(0x7f0000006200)=[{&(0x7f0000004e40)=""/98, 0x62}, {&(0x7f0000004ec0)=""/4096, 0x1000}, {&(0x7f0000005ec0)=""/71, 0x47}, {&(0x7f0000005f40)=""/125, 0x7d}, {&(0x7f0000005fc0)=""/220, 0xdc}, {&(0x7f00000060c0)=""/63, 0x3f}, {&(0x7f0000006100)=""/227, 0xe3}], 0x7, &(0x7f0000006280)=""/217, 0xd9}, 0x555}, {{&(0x7f0000006380)=@ethernet={0x0, @local}, 0x80, &(0x7f0000006740)=[{&(0x7f0000006400)=""/239, 0xef}, {&(0x7f0000006500)=""/105, 0x69}, {&(0x7f0000006580)=""/73, 0x49}, {&(0x7f0000006600)=""/47, 0x2f}, {&(0x7f0000009cc0)=""/209, 0xd1}], 0x5, &(0x7f00000067c0)=""/89, 0x59}, 0x1f34}, {{&(0x7f0000006840)=@generic, 0x80, &(0x7f0000008a80)=[{&(0x7f00000068c0)=""/171, 0xab}, {&(0x7f0000006980)=""/158, 0x9e}, {&(0x7f0000006a40)=""/51, 0x33}, {&(0x7f0000006a80)=""/4096, 0x1000}, {&(0x7f0000007a80)=""/4096, 0x1000}], 0x5, &(0x7f0000008b00)=""/215, 0xd7}, 0x1}, {{0x0, 0x0, &(0x7f0000009000)=[{&(0x7f0000008c00)=""/51, 0x33}, {&(0x7f0000008c40)=""/136, 0x88}, {&(0x7f0000008d00)=""/80, 0x50}, {&(0x7f0000008d80)=""/84, 0x54}, {&(0x7f0000008e00)=""/43, 0x2b}, {&(0x7f0000008e40)=""/178, 0xb2}, {&(0x7f0000008f00)=""/233, 0xe9}], 0x7, &(0x7f0000009080)=""/99, 0x63}}, {{0x0, 0x0, &(0x7f00000093c0)=[{&(0x7f0000009100)=""/218, 0xda}, {&(0x7f0000009200)=""/21, 0x15}, {&(0x7f0000009240)=""/141, 0x8d}, {&(0x7f0000009300)=""/89, 0x59}, {&(0x7f0000009380)=""/5, 0x5}], 0x5, &(0x7f0000009440)=""/129, 0x81}, 0x7}], 0x8, 0x0, &(0x7f0000009740)) 1m12.119354476s ago: executing program 1 (id=181): r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xa00) 1m12.020754926s ago: executing program 1 (id=185): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000006, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) sendmsg$unix(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001fc0)='7', 0x1}], 0x1, 0x0, 0x0, 0x20800}, 0x20040000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x0}, 0x68) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/129, 0x81}], 0x3, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x4e0, &(0x7f0000000040)={0x0, 0x36d, 0xc010, 0x3, 0x16f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m11.87968611s ago: executing program 1 (id=186): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x0, 0x2) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000000000000100100000b00000014000000000000001001000001"], 0x28}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x80) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r3}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x835, 0x0) 1m11.839312603s ago: executing program 1 (id=188): mkdir(&(0x7f0000000000)='./file0\x00', 0x16e) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) 1m11.776669919s ago: executing program 1 (id=190): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) syz_io_uring_setup(0x2d07, &(0x7f00000007c0)={0x0, 0x76d, 0x10000, 0x1, 0x59c}, 0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RVERSION(r3, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.L'}, 0x41) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x80, 0x1004, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='cpu<=0||!') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000c2c1095700b7080000000000007b8af8ff00000000b7080000020000007b8af0ff0000f8ffffffbfa400000000000007040000f0ffffffb702000008000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) 56.686835836s ago: executing program 32 (id=190): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) syz_io_uring_setup(0x2d07, &(0x7f00000007c0)={0x0, 0x76d, 0x10000, 0x1, 0x59c}, 0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RVERSION(r3, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.L'}, 0x41) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x80, 0x1004, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='cpu<=0||!') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000c2c1095700b7080000000000007b8af8ff00000000b7080000020000007b8af0ff0000f8ffffffbfa400000000000007040000f0ffffffb702000008000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) 32.982760248s ago: executing program 4 (id=700): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd30, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0xfff3, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0xbebc20}, 0x3, 0x4000000, 0x421}}]}}]}, 0x58}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xa00) 32.919359454s ago: executing program 4 (id=701): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e"], 0x70}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) recvmmsg(r0, &(0x7f0000009500)=[{{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000000)=""/34, 0x22}, {&(0x7f0000000100)=""/96, 0x60}, {&(0x7f0000000200)=""/107, 0x6b}, {&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000001380)=""/148, 0x94}], 0x6, &(0x7f00000014c0)=""/45, 0x2d}, 0x8}, {{&(0x7f0000001500)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000003980)=[{&(0x7f0000001580)=""/46, 0x2e}, {&(0x7f00000015c0)=""/8, 0x8}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/22, 0x16}, {&(0x7f0000003640)=""/227, 0xe3}, {&(0x7f0000003740)=""/179, 0xb3}, {&(0x7f0000003800)=""/220, 0xdc}, {&(0x7f0000003900)=""/75, 0x4b}], 0x9}, 0x401}, {{&(0x7f0000004d00)=@hci, 0x80, &(0x7f0000009c40)=[{&(0x7f0000003ac0)=""/84, 0x54}, {&(0x7f0000003b40)=""/54, 0x36}, {&(0x7f0000003b80)=""/63, 0x3f}, {&(0x7f0000003bc0)=""/191, 0xbf}, {&(0x7f0000003c80)=""/110, 0x6e}, {&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/128, 0x80}], 0x7, &(0x7f0000004d80)=""/36, 0x24}, 0x401}, {{&(0x7f0000004dc0)=@tipc=@id, 0x80, &(0x7f0000006200)=[{&(0x7f0000004e40)=""/98, 0x62}, {&(0x7f0000004ec0)=""/4096, 0x1000}, {&(0x7f0000005ec0)=""/71, 0x47}, {&(0x7f0000005f40)=""/125, 0x7d}, {&(0x7f0000005fc0)=""/220, 0xdc}, {&(0x7f00000060c0)=""/63, 0x3f}, {&(0x7f0000006100)=""/227, 0xe3}], 0x7, &(0x7f0000006280)=""/217, 0xd9}, 0x555}, {{&(0x7f0000006380)=@ethernet={0x0, @local}, 0x80, &(0x7f0000006740)=[{&(0x7f0000006400)=""/239, 0xef}, {&(0x7f0000006500)=""/105, 0x69}, {&(0x7f0000006580)=""/73, 0x49}, {&(0x7f0000006600)=""/47, 0x2f}, {&(0x7f0000009cc0)=""/209, 0xd1}], 0x5, &(0x7f00000067c0)=""/89, 0x59}, 0x1f34}, {{&(0x7f0000006840)=@generic, 0x80, &(0x7f0000008a80)=[{&(0x7f00000068c0)=""/171, 0xab}, {&(0x7f0000006980)=""/158, 0x9e}, {&(0x7f0000006a40)=""/51, 0x33}, {&(0x7f0000006a80)=""/4096, 0x1000}, {&(0x7f0000007a80)=""/4096, 0x1000}], 0x5, &(0x7f0000008b00)=""/215, 0xd7}, 0x1}, {{0x0, 0x0, &(0x7f0000009000)=[{&(0x7f0000008c00)=""/51, 0x33}, {&(0x7f0000008c40)=""/136, 0x88}, {&(0x7f0000008d00)=""/80, 0x50}, {&(0x7f0000008d80)=""/84, 0x54}, {&(0x7f0000008e00)=""/43, 0x2b}, {&(0x7f0000008e40)=""/178, 0xb2}, {&(0x7f0000008f00)=""/233, 0xe9}], 0x7, &(0x7f0000009080)=""/99, 0x63}}, {{0x0, 0x0, &(0x7f00000093c0)=[{&(0x7f0000009100)=""/218, 0xda}, {0x0}, {&(0x7f0000009240)=""/141, 0x8d}, {&(0x7f0000009300)=""/89, 0x59}, {&(0x7f0000009380)=""/5, 0x5}], 0x5, &(0x7f0000009440)=""/129, 0x81}, 0x7}], 0x8, 0x0, &(0x7f0000009740)) 32.726915083s ago: executing program 4 (id=704): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000010c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 32.608993124s ago: executing program 4 (id=708): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRESOCT], 0x38}}, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="5953fcfffffffddbdf256b"], 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0/../file0\x00'}, 0x18) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) sendmmsg$sock(r6, &(0x7f0000005040)=[{{&(0x7f00000003c0)=@nl=@unspec, 0x80, &(0x7f00000004c0)=[{&(0x7f00000006c0)="1a3a03d80410bb3a09dce9c575d0039f1bd167369709e7ff1695400492ffd6a3e9bf594290f94ebeb5072e6526accbb8108eb3102025ca9483629196ec5988fbf4699432b00713532dfdeba86f340cb55a7ab1c80379a0748b18030f38dc6a982aa93319b925b4734ed112110db57e5256c34018a010f0729c299f30c47932d83a13914be0148c4d2e2ca661c2497b5d536b81fbfc8205cde62e50b4865d7a4f964c225c6b498497b84baf132cb081dbc611297a35b93b2e710663e5d7791da4e350164a345c7f997f596d125eec47a441d687b21ee20185509f04a52dfb8bfd12e353349c361d2aeb9200238c", 0xed}, {&(0x7f00000007c0)="8f7e4437748a451094756c0865ee8b0a53065cd74647543db1b393c60705f14288c96afb3b388ca00f55d5ba2c700efc9338649d3eb00729405af240542c63aff143fa3d654ddf8069224117cac8ddf2ec8cc7c50581e616392940728927204e965240c1a27cbe4d4869a1e995fb8033634c5c38c65ea107907b510d45dbc74713229d216184b84f3bce2609235ee7498262b46c786ed9744b7d9dcde62b512befc9d9", 0xa3}, {&(0x7f00000002c0)="472bddaf9aa6def48085688881a743", 0xf}, {&(0x7f0000000880)="cdaa8697a71d138f6771f88c10ec9d6d6b5ee42adcf870fa21c8d48f93c2f017b8e8ca5437ff6409ebb0d9319ddb42e273bc58d12f59956ecd70ee863434ca81d6439f2e9481b1e78aafd596d7d12f8fe34371b98ed89a610c8ee9dceff0945e4f2aec41da54faffc4d85f40a00aac3a9c6c5ee7e6093939a5", 0x79}], 0x4, &(0x7f0000000600)=[@txtime={{0x18, 0x1, 0x3d, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x30}}, {{&(0x7f0000000900)=@in6={0xa, 0x4e21, 0x7, @mcast2, 0x8}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000980)="930e954bc52bce64b94dbd137be3186710a7fde4143a88992b44d15db7c82a322e17ba989a9b05cb82f341ae5eb79dd07fe40c1c7eb1066d652d1aaf436e576a344cb6ef17f7d73573d49243025dd6dd1489276f26459583fb8ab3ed627529c9580adbebaadbff1a518520e47dd991d1b9be7311b53e399b8bb2b1c45fec3e7d70f2e05b4bc7bd62e174a084348d4157188ecd69d79f1d7cfbb9452928710f191d1a1aaab7e8d94e6beb083901b1af27f8258c0fd04833ac0c40e05b68e8db93579e6a10b4607336081f962a1f0665b210c3baf7f8de4fda22949d20", 0xdc}, {&(0x7f0000000a80)="0a7ebdd42dae7b102d78a9e3d1cb725f91f5ac78896f8997b85cc4636fce7d148a15b34a38d007c18ab0d5826cf1189a2be5f9fd205618312b3cff9412512d96ac2d18acef269d03f395667d5dfec61effec5b87c9952dd46969c0a448d79e128f11d41170cc6ff401aaca7bfa30ac909881ff1593e203849ffb785679593c87174f9db147bdbd98d6449e07723aabdfcab2ee", 0x93}, {&(0x7f0000000b40)="0e275c5218e3c2ec0d55e3deff993b59c960d6bcec366a149bbb65879451c7", 0x1f}, {&(0x7f0000000b80)="72ce5ae379f8800ade25ffba1e95c768f628d5c98d550521aac0fc0f9b3020715bf6aff356b2ce5b36be", 0x2a}, {&(0x7f0000002040)="9f38b92c391c2d7dc9d447c0be3396da0ad62947c69ce18642d7ee300648c31f01e48e290cbf6fdf0218e8ecdbae176a9b7becfeb3adddae52a2b5febf8a2d2a71fa386c4f339592ffb2c18644a48be499dd96ab66a0c616ca4143866cc04df71f1af0916bdc0a414ded99f5931421e628cb638ef465ac9f1d8a179d7ce9cdfe7cf955fb96bb6536cb629038ac330288b411e955f9d1acff1eef8924a7174adabeb0673eecb98cd25c72a397be4d81c5824657c31b15fbbe3a65dd0de26d879ff724d9a94f94c6417989ded4c8eb1b17ec6036c604d79c79d86b06efb23d8368bf7c039d47609de6d6cf5d1f674c6ee1642a4a6381dbc32c037ecf7ab49ce7ba76303ac2e01793703044a015f431b1f7ded8d345dfebe08c690852b7b29e8fe2a1c8380abc66201614832f07bed4b19abe1e618ae352e8975111310607f559cf5375ca58eabbe6de6002c9ad234c9afe72a5a744ad2f8ffe7bda461824aeb440450d149ecafccae51c30f3544a27b746d56ff5122508fcaf6de1f718b36841cf6138f8dc37d83677117c1b0d4af5733d8714b2b2bff92a34b3e0eda5ebf66bd390769c9a2b7b3d9e18b91a6f1da438a0f2f0dba33e81cbddfff31ed1af6a3ca8628639ec299873fa855865c96869361ccccb8e426af3dd9ee08b18efa9d95ce787e062e1917fd1cd26690388eec7d0656b441bff159dd9f7225de6adbc18932b9efc008f02884dfdd7e2498268baf806c89d8c8ddac3d9807e86277e148e6c0ac03faf90321655f428256dd94b036534b0cc3a06659fdf18961f62540779f2476226158960acdf3e9d73bbf202179189f0c4d0c107dd1298acbb38874d65ec3a372cd2e061daad59d2c29a044cbb89bf166e54da3bac830cbd0a60fa9c0d46b92b649801d294e8ffc756cdd2c6cad2dd4b4e37ac891487891ac77bdb987820e537c08001e6548c29e67466314977db05b02621023af29108df5b40872f6b9b58bbe281468049c219ca98e9b1e5d1516573c6152e52d63890859cf6e1b33667b31622c624fdcf29a80070c3c522ab6210f971365bb23d7ff0bcaf8eab9f39a18f16d38307b8a16f3669c5f5a4fa3ede1672f5c01ba5fe478863b4ef2beff05aef2ba147db21a10553095c5af06a30a6596bf705b468ce902e602e141f16ce6b25b0b46981670285b6e8f33ec9a0755a5771ad8a966523d8e3bc6ced708fead107b92a87b1d89b4e43dc4cd12db9fe5dcb130b72b1cb4167176125794ca2db9e2b874e7910405bc29790ec121fce4ea804d88cee7c53bb2c3910f95cd4c81f9a255216a621676ff3e78ce4759e283276938ade042d30755307032d8c8ae0feb72012c5c5ecfe05d7ad39d3b08baee7b171c8b0f5a64f7cf830fac1b19c1a26a1b29e6ca24c07894e490da0aa40d72773efc7c8d4861e2804dd88ed16afbb8e7ff286950b62d7f0dc97aad71eab4fd8d9937ff176c189847e6e2a8797a40f37e6419cabe2eab419f8cce1c87e5894250c27bab9e4b2cffe3fe6de224b04cac6172e39cdd896343a9cb69864b703e6e734d769cbb37e1f40f9a714cea0fae234a1f853723c8c1fb321afc505ee552b87f199a545b76274b21bccc904cbe5bc25091d0ac29ca4c721368f3ccefec450080f4ef7c254deaf207458b6f2401998c1950a2aed164e2833f9caadccec5eeb59a98aea23d7adff7908a0a3c46bc204156daec05cbe6608ddce26ca9e32d84669bdcd8f679f0098811295b899ce4d98f4a0dcd661b1c73b377bc086c8947767ec03ed01d5182c618e126811887c42b8f80cabaf48c9bbdbab52eb51ef1f602697942f19a798465469f9bbf3eb5e4d16eb3095750038f70a4b9e490713397c76609c5a07b1da34c0eca97d69d7aa328efcd9224a81dee282f9a74057a2e76eb02cd6119f70298bd4b32b5865260f573c88774aabecd36c208f77626d09739b38c14a14ee148ee28a663c8464b531dd4685761c3bed20d9037a05242924f53515627e75140f770573574f97be50ee1593bc2ebf036044bbe135d75c4cf4bce18ff21807b8b5847c720016b5369a3d7b49bd6162b571d4af494dbde5ed75f224c161e080b9320d8aa86ff4304b43ebd5b4e495451c0978e05b5a19a281cbb89d9c41f87969c4dd058268718cbae29d5d9702125603a7f7809b54769e4c8627a5752f8c9689b476f9302eb25518de7aff5edeb8a7f4de94964b2c17328ea3760c35c85cf9456aa78773037b990bb8b053a317133ac7aafee1bd0e36b71e1318815902eba0eb1f07fd0b86d62f2d6d51a3fd2f1f5ca7abd2017cb04ad63084d15e2f161bf63c22ae5cf09ffea1ea04ad83d21f02e7bfd1fe42fb83321d4ce30dc60352ad31d620a0f0d74360e3477528bffb2d90b842eda6ab400f0de7fb7654d5fdc894988bb6df63fcdadceb2becef9f1531eb6c7af541a42f93b0dcbb25f068023a5607a86dd44962651a86eab85aae4acb7feb4356d6d5abdeff30ff49083bdec3338c0771e72801cfb2cf95c2e5505e314c2366801305387c321e59a64189b7418cfd79da55f6faa4f41a63b8492bbae2dd4cf3481a7ed7ff547cf44bb7c0691cac480f94de2c185dc1d0cc5df10f00d5a5325af732e3bfefc402619f301840a704140fdfd66070d07647409b56d07a66ad9ae8b4dae2a85d71281f4ccd783a925f39043ff1266a756c3dc18ed2e84960ac91f77419b9a88ee806b4238024e36e790a989a06be2fa5009cf4f6159cc2dc75f7b2b50222e97e83b7862ee4d9ecd23f30296c787a5e6b68730e0acd915d74123f845e2200f3733d4af49e8828606045da8108d7cc0a6c171592ed0336ee795691f4c946d7c3678a44aadfee7011c94093fbba5b492cfb76be81ed5f9cf80c8336ed4b2dc95dd82cfec451a37443773904d8ebfc85064f3269b996228a4618a3426e4e8a9e44b789e18f56dc0a8d9b63977e01d3c2eecc2f9fc0df206ba5ff61c851877439863100429b85fa8d51f94e0ef737fcb54c317b7fe4fffcc81a53fe08bb076072b4e76fc3cd6740cb0006fd374f5eae0a105bb38a06994c2c57f33a541798d53c5281a8fbe1389a07b0a659f1fc9efc8cbc2427f4be6577243bf7a840b4967bc4cd655d1eaf0d786f9eae7d6116b9b30da9bfaeb025d7d2e2080c2ee6dbfb6df42ba94298f8e069fca7796b4e6133ba139ff114274ea2215a47634705ab804bd34f3d8964f99fb307899baa2db295b91e1a244bd1b9d39eea9ea2828380a1659b583ae37134d6c25c648ca40eeccdaf29a33ac357ebb4f1b9a52ee4b3f91a902c19b72bed8fa9ff24c49d204caf4397ec035f3e749aea0527d50c86a6ed55d67fa1eefd2ee9c91bfe2fd88c683a39af75093901950480d659bf9d1db58e0b3d35317e4fd5262688b409a75078e210fe5a16a901d27b1793fbaedd52f08069dd860a65d8a7d5bd59b648033b4ae8f5c5ed9a14517558d2489bdd55d9b3e82e82bb7c81268993ef7eb8cb400cb8208bf6ec9443ac9dba05ddf2d54c496515f09b5b6b1ae7cdfdf3500d7468453325cc22d76a97e60326cac8b35d540a62c37aec62a288f7c94bcfc605c9c16edf9fb13f7b784fd97e5a0e3c76e4fe935ce2b4b7a29d9ddcd1ff9dad8abcddd2abeff91cc407c0aef17c016720d177cc296c0fcda39de084b8f573dc5119ea0866bcd1e69b9831cdbddb92dfee9e1b2f1515f51a5b548da3e953885b16f016a08161489f027a17ac7e1c4865140ab30e79b467020d4e3538c5e7a8f519d1f8a2f5a18a91438463e8086c48b1cfccade9bfc66daf4212a08b9129582121971175d1f1532bcb523a049987f529feb5a9cc8dd15d2f4c1f9a56ecfa526099952c64d1ebe5e4ceedf7000b8990b8990bca48c8c081fdabd304077a04fad1ddf9d28398c4c4fbacb71ea4ee664a1fa700afbc5cccfb0975581392c83cc1d27959b6450701bf07a986ca7cb62fc3f302fc710222761a760ce0d56e898bd37edb24615fa91695c260624b4e01a9d17fb696ebc3ada65ded476d4959a6d1e6fe0f993cc52d5c27236d94b208d25a17ce24b560f0b4e608a435d82195c65d8f9a68894848e1aace13357f9f5e5dbcf273fab872992123c7e4f83d5e89e155dfa5c9a0afc1fb466491a547118c2479d8619b47b6ac9b0f31b7aafbb05178b26b6d766cedf998025d5ab3a25014267c2e7ff72d1eb76226c7d2cdb95069ee62a2f458d6411207c681d3398520305b6dd0ab1f36b2e2f3dc281a154d3ccd26311144c2405b422bd9bedb1355d5d7829198f67fbb4cc30301a14b05118fc57aabc00067ab3cf9a45191e9a489aa88ea9b845dafcf336a2e36837b832aac5410a6ad7bbf42082a22ad6d060b508d73288e69c654276dc77599b2f12d7b49194cf5fadef41edb1ee87ac93558df544c7f719a995b63a49e89a74889c6f68c7c53a2211c97e623408f6625831d85b2a0f0d59a057e671ca52b956171b0d35c705efa6a7d2fd78a1d891a3f8bebb9eb4f06e3bcff76416cd82e0b14072f86cbc98298562a7a86501c696df6cc4fdbc86e2c0a92590b919b020f8e1db8ae40463968afd844700dce9f19abc5ca4ce566ce8537c7b6ff0be5bbc76ec88e216ebee5170363e97d18d8a7837d6d6c9e783645396fe3e111702a1b08988801eeb3e16700dab3b98d91301db4562d6d9d3f16294d6fd4bfb61178c9cb0281dd083fe096833dfb1df2db330455131a52687b2bb8dda15e4686898bd1eaa3aa19da0f570877236047bf26ab058b3a945ea84c2037809614a1dfa3da38ebe3833f8e6b721c89404313f312a8aba048aff210907343ab1696231909e846b7aadc3163f3f43b2bc4537529dfc7c6bbc158c2d3fc225e1a307a20131b9b38c4e60887f934129121ece2cb98b2079a34552e819ce18f9e2499667bdfdb76040271112ca571718eccbba4fae353da7cacdda252384d9fa3f65a22d2fde3a7f0c3e090be07ab6e482464dc9157aecde0012b006ed633fbe35fef64fe3133c574b7b53518674fc9aef8a4dc594eff69c31d66f23ba33ec807e32e5aabe6ab4893447c29fa27eda8048bef642d95f7237f8f4cd5ba63286f3b0453e91a54a4bd26e17e2d2f9fa54852eaefe62187e2cbb6aaa87fbe6fafe6d99a0f19df020beaae072d859a7038119ae340977b4d1b9d7f8a7ccc27c838f45db80d9ef3e2277dd7e123c4321cbde583e95891566622340bf424b1e781f1661cca958aa79d97a63d5f6db2863e1c156e53140f6e3eef3a83b28e1b61674d819102bb853d2e3c5190427ddff477295de24145b6fd61031b056a27f52fb15712626366c1236200f805120e4e532594befe9d60d752a98801300a036b7b77f3fb742be06353d3c486fbeb15332ff5a2fd7d7bb61adf84824f2ee2ae8284f430bdf6b98afee8eae90178523a1fa17ce97830b6bc73cab9b54b613f0a4676e08ebc2e3b53a663397bb2eaee58dbf629220e873e673d66322c4c41a44feacca7d6eb81c1cdd0f891b1fdd44f32aa6d725016e6b44dc8a67033299e05349a23da86625f0ab8ff4d8cc5e568810b59d567a9cf779ab32a90cf162cd3eafb762cad4875c225489f18e0f1f31eaf9f3e8bf6d8fade402adc49ce489d3278f4cc5bd25e54960567b6ef121828256735cda9cdd96a0ad246cf7950d7e8f1d9f16ff085ea6c09f9d768cf074a49d3af47595923a5933d26b7dcea022ac6b4c66ad1214f48f2d82f1880eb6e44c0c617138b65b089851c610dacfc06da5ebb511a97cf1084402117e231f9bbfb8652a0", 0x1000}], 0x5, &(0x7f0000000c40)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x18}}, {{&(0x7f0000000c80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x4, 0x2, 0x1, {0xa, 0x4e22, 0x4, @empty, 0x69}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000d00)="7184e3269e261ef7fb751b3a426e4dac3b57fa150ef9af51b9c76d", 0x1b}, {&(0x7f0000000d40)="c211838bed4e6ee59545b04575b556c6bdfed6e4d3cb83cd7e358c3d0d51182b16d2f59a5fb20c6926faaba89dc72f", 0x2f}, {&(0x7f0000000d80)="ddb294ee590adf55b8f6a460fe8f3c94e4f938d69de3030baf97b2a2345d96e1c13622187039b2a0ceafc9159d238cad6b6e56628b2dcef13b55", 0x3a}, {&(0x7f0000000dc0)="2edb4a89c25dd3b05e7982a968262179f00f3e65b646ec3f86bfdba8c872543275f2b2321a88d8e64bdb39576aa139310e0ef86e678267cde093fdd701f17a95238c7f08c723f07281e7e234ca78bda547b3ecac1a2acf622b38f8af90b011ad", 0x60}, {&(0x7f0000000e40)="1cc302c1f66bb8c3980247ca491dbc5327a381249182ebf1e82683b3795e5c82d9673d6d25861108f973c75559e3ea37246b0eb689d9b2659c1b067761a40f50ce", 0x41}, {&(0x7f0000000ec0)="f5d11f11f79b33cd904defdf0c5e233b08ea00ab81cee25d3ce5d3ecbd775c2d8305fbd7f880f8d0719cd0fd51c466e2b7007a137e57fcd9fa2269c3f64303f0d6", 0x41}], 0x6, &(0x7f0000000fc0)=[@mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xfe}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000010c0)}, {&(0x7f0000001100)="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", 0xfb}, {&(0x7f0000001200)="66d9", 0x2}, {&(0x7f0000003040)="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", 0x1000}, {&(0x7f0000001240)="a6fb", 0x2}], 0x5, &(0x7f0000001300)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x18}}, {{&(0x7f0000001340)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)=[@mark={{0x14, 0x1, 0x24, 0x8}}], 0x18}}, {{&(0x7f0000001440)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-asm\x00'}, 0x80, &(0x7f0000001880)=[{&(0x7f00000014c0)="09bbac06c5a8aa2a1919114430e7d88f75f4885cd15c303e63134d7a4fb69f4c89111d3aad3977d244821a37e45dd73fcd6c9201f58b9f94ef0cea862b5c093a3b329efc1968de725139684297ed2dd863b763035548b05cbafed308c02623ad6f52", 0x62}, {&(0x7f0000001540)="ecfc3180dd5e69c3aa3cbf31e8fc6c01b36990a4320d64e2a5b70427572931000d644e8ab7fbf32c6c0221b484cde3db4b80e2294fb07b63b6a8e1964ef26d7432590cbac41f211c26ab657b", 0x4c}, {&(0x7f00000015c0)="9e3427a53a83e0d56628402d129476086543dabaf5379c89312b9309a538ef119492f15bc7307351c7eb6f", 0x2b}, {&(0x7f0000001600)="9c7d60b86cfdc34847f53f300d545426bdd4eeb96cd42ff1df73f141d78e34fe38f2efb0536c9ddac8b467f695ef39326f54f5ffa7fa865a41c70cc175403f61fee31794f297", 0x46}, {&(0x7f0000001680)="3715c4a786f758503a683447948fb0ef153a9a1955ba5cdf157a423bc724157d97671acf476d1e68df5839748f760cd58daf04bf1410cb9db618be1da8c09ea6745683ac7ee4ca96b2113f75c0af4e4b5bd4972fed68bbfc995b99681516c626f6c2444cd174fc2fcbb85773fdafd654d8abe6e89c0b1fb1d239c0cc95e439d0600362ab260916c1e2c65422ddfda1ff3ba440bd2ca7ff294b18180ef1e1f443b5426e27b2830fe4116f0804ce6ede82bf94ce9c0486221f5b959f48730545f2788b47b43f91bd767e6311418e8fd1fdde21e3dd8727d54e1415bed72b1d94af793cd452fcabbbefdd35522c3e5026315d59a35735496fd7", 0xf8}, {&(0x7f0000001780)="a5a3ba74e880fe12ad31793baec1dbca403270ee2323e7d469f5639bd549e879c69960915a73780296c91cff4ad0f53d2bba98867926bd147cd9031a252d8802648da8885106748794340999286f1248fc81bb0e18f62af5cf3590020444ec8811b943ca8530b8abd6fd5afabcf224fa2d5822014d5152cb7e880312f9483397c9c4361818ecc5d8bf4b546e23071bea1d8793b8429087270f1b7949090ecec285a3ba5c0bc3e6e0ffef14a36b2afe81a8b324ef58265bf9734e0aad41e41fd4578e856ad2ae2c96f050885306faa7168271c3b6c0562e34284b8e842aeab1bc1dfb53aff21905cd4958dfe901ed483c6312affd6a16a17d", 0xf8}, {&(0x7f0000004040)="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", 0x1000}], 0x7, &(0x7f0000001900)=[@mark={{0x14, 0x1, 0x24, 0x800}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x24000000000000}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x221a4d35}}], 0x90}}], 0x6, 0x40) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) umount2(&(0x7f0000000080)='./file0\x00', 0x2) 31.947783177s ago: executing program 4 (id=713): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r7, {}, {0x1}, {0xc, 0x3d}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x3c}}, 0x40) 31.837557288s ago: executing program 4 (id=715): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2, 0x0, 0x3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000000206010100000000000000000700000005000100070000000d000300686173683a6d616300000000120003006269747861703a69702c6d6163000000050001000700000011000300686173683a6e65742c6e657400000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4044081}, 0x4844) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r6}, 0x18) bind(r3, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x3, 0x2, 0x1, {0xa, 0x4e23, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x400}}}, 0x80) r7 = openat$nvram(0xffffffffffffff9c, 0x0, 0x604202, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r7) sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000bc0)={0x504, r8, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x43}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_NODE={0x238, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xec, 0x3, "75b9f05b62ce3c86b5b36f705f915db58fe200d466896bec60bd20117a1d9024df92469bd664f1180e6027ed1c8a9e9f2870a0838143ca55d3a837b5b37f1a5ad37eafe5d8f4c458dffd4434c2e835a0f45a2b47862086d6c12fd923116063d5874ad271c159537000aacec6d0c20c006fccdbc986cc62ef3079aea77b5f557089b2036c66b19ca5a368986433a1a45ef7d701c29f8b09a8a0047b35da22f18499c3d8aed84ebd50770022c8f49c113dfb1abcc0041fd388aa0ce644c9fca28f2284b3e039b589517599d81383cb5339c5424ceb071fbc522f3abdfd319132e4da7d38f3643ee7fd"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xfe, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "fee0055ccb31e376b9ce5d3615a573ebe561c574fc8368"}}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @empty, 0xfffffffc}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x8, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0x19c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0x82, 0x3, "8b8f7e38e152f5c3ea3d4e17b5c830b306d9dfa8216542d174a6483eaf0a7d46d1329f13990259375817b154294f3bf3aeacb9cfcb4cf6c1aa84574d44ee75adc6fe09c0849ff75b4eaf61774a677c79e0b1922e58d4181e3f24b289aeb50c7c7519d0ce38452cfaaa2c22119e1815cf317c7c1b65876474c3f9fbc21ccf"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xb6, 0x3, "f09e838414d95ca007311cc5b1bb7789c80bfff367158711e3ef033ccd17861e495ac6b3a84f089e5eccaa87bf854ae4139064aa8d0f6128cf6eb0698b63c64fb4fee1f23acb2abd3e56191c03e520aa45cc4bc0dc1334479e79866b4c0265801092c0c1f7e3655de1b508517eaf8bec1758769a820f2f34b558d9a58ed2ae74da095182cca9d661463ccc6ab1943cf9857eb60690c4390beb18caf38c0553dea5c9f85265c98579313c4399fcc3341b74fc"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "30612bb67f51b33916765a449e3488f5a8ca0c528c36"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x43, 0x3, "56c1df3381f94f1a3079ff3574636a68a61f471141ffdd80bdc8c5eee5e7433170471c09a79115fd6540b4e48c1db28f922a87ca8c33150719fa74c00022b6"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}]}, 0x504}, 0x1, 0x0, 0x0, 0x4048001}, 0x40005) sendmsg$DEVLINK_CMD_PORT_SPLIT(r7, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB="44de0000", @ANYRES16, @ANYBLOB="000126bd7000fcdbdf25090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000800090000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24040004}, 0x20000000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8003, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x11) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000003060102000000f4000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r12, 0x84, 0x6b, &(0x7f0000000480)=[@in6={0xa, 0x4e23, 0xfff, @empty, 0x2}, @in6={0xa, 0x4e23, 0x9, @loopback, 0xe27f}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e21, 0xfff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0xf, @empty, 0xd}], 0xb0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) getsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000280), &(0x7f0000000540)=0x4) connect$inet6(r11, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) 31.787186603s ago: executing program 33 (id=715): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2, 0x0, 0x3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000000206010100000000000000000700000005000100070000000d000300686173683a6d616300000000120003006269747861703a69702c6d6163000000050001000700000011000300686173683a6e65742c6e657400000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4044081}, 0x4844) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r6}, 0x18) bind(r3, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x3, 0x2, 0x1, {0xa, 0x4e23, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x400}}}, 0x80) r7 = openat$nvram(0xffffffffffffff9c, 0x0, 0x604202, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r7) sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000bc0)={0x504, r8, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x43}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_NODE={0x238, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xec, 0x3, "75b9f05b62ce3c86b5b36f705f915db58fe200d466896bec60bd20117a1d9024df92469bd664f1180e6027ed1c8a9e9f2870a0838143ca55d3a837b5b37f1a5ad37eafe5d8f4c458dffd4434c2e835a0f45a2b47862086d6c12fd923116063d5874ad271c159537000aacec6d0c20c006fccdbc986cc62ef3079aea77b5f557089b2036c66b19ca5a368986433a1a45ef7d701c29f8b09a8a0047b35da22f18499c3d8aed84ebd50770022c8f49c113dfb1abcc0041fd388aa0ce644c9fca28f2284b3e039b589517599d81383cb5339c5424ceb071fbc522f3abdfd319132e4da7d38f3643ee7fd"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xfe, 0x3, "3aa69d0ea2a6c2549ac4b98a6db642ed030305206f6663121bc8d25b1589b2b8b2612e3a2d90e9a4dd73f1658d2fee5116ecb61127c7933d52e11cd592d4a09c1c5b2a2780b7e1e52454c2acb072c3ce7bc82fe84a8a18a07ab3127608eeb5b5e96389f2ab9f0ee52b81679745cf8c4382880d0c722ae4b8636f4e21198bef6fac88406cc84230cee9dc75755290c6b435bbd6012c9e76a89069cf67d0ef3cefaefae163eda25a9cd3b1ed1368835cbffa716f3a76f1f9d382906781b88ee1a03eab0f01047c33b4a9158a717a68a84bd6ce9012dd249805dd26ae74dd00cbdc3b0d2a95f4a1767ae02cda87eb168073cd79cc53026a09082593"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "fee0055ccb31e376b9ce5d3615a573ebe561c574fc8368"}}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @empty, 0xfffffffc}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x8, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0x19c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0x82, 0x3, "8b8f7e38e152f5c3ea3d4e17b5c830b306d9dfa8216542d174a6483eaf0a7d46d1329f13990259375817b154294f3bf3aeacb9cfcb4cf6c1aa84574d44ee75adc6fe09c0849ff75b4eaf61774a677c79e0b1922e58d4181e3f24b289aeb50c7c7519d0ce38452cfaaa2c22119e1815cf317c7c1b65876474c3f9fbc21ccf"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xb6, 0x3, "f09e838414d95ca007311cc5b1bb7789c80bfff367158711e3ef033ccd17861e495ac6b3a84f089e5eccaa87bf854ae4139064aa8d0f6128cf6eb0698b63c64fb4fee1f23acb2abd3e56191c03e520aa45cc4bc0dc1334479e79866b4c0265801092c0c1f7e3655de1b508517eaf8bec1758769a820f2f34b558d9a58ed2ae74da095182cca9d661463ccc6ab1943cf9857eb60690c4390beb18caf38c0553dea5c9f85265c98579313c4399fcc3341b74fc"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "30612bb67f51b33916765a449e3488f5a8ca0c528c36"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x43, 0x3, "56c1df3381f94f1a3079ff3574636a68a61f471141ffdd80bdc8c5eee5e7433170471c09a79115fd6540b4e48c1db28f922a87ca8c33150719fa74c00022b6"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}]}, 0x504}, 0x1, 0x0, 0x0, 0x4048001}, 0x40005) sendmsg$DEVLINK_CMD_PORT_SPLIT(r7, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB="44de0000", @ANYRES16, @ANYBLOB="000126bd7000fcdbdf25090000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000800090000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24040004}, 0x20000000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8003, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x11) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000003060102000000f4000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r12, 0x84, 0x6b, &(0x7f0000000480)=[@in6={0xa, 0x4e23, 0xfff, @empty, 0x2}, @in6={0xa, 0x4e23, 0x9, @loopback, 0xe27f}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e21, 0xfff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0xf, @empty, 0xd}], 0xb0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) getsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000280), &(0x7f0000000540)=0x4) connect$inet6(r11, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) 3.460516258s ago: executing program 0 (id=1186): unshare(0x62040200) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32, @ANYBLOB="00000000050000004aa574770000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r1}, 0x18) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x28000600) r2 = socket$kcm(0x23, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000000c0)=r3, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000940)={r3, r3}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd02}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x8, 0x11, 0x0, @private1, @mcast2, {[], {0xfffc, 0xe22, 0x8}}}}}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 2.434436767s ago: executing program 0 (id=1204): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fchdir(0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_format(r4, &(0x7f0000000800)='-1\x00', 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCGFLAGS1(r8, 0x8004745a, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x18010, &(0x7f0000000000)={[{@minixdf}, {@dioread_nolock}]}, 0x3, 0x738, &(0x7f0000000780)="$eJzs3V9rW2UYAPDnnDambtVWUPEPyMSh4li61snYlduV3gwHA2+30malNl1qk8wl7GK78lZEURBBv4P3itd+AL+Cgn9GvZhXkZN/29qki1vbQPP7wUne55wTnvddxvtA30PeAMbWsewljXgxIi4mETOd80lE5FqtyYhz7fu27txcyo4kms1LfyWte7I47vtM5mhE3IqIFyLi51zEiXRn3kq9sbZYKhU3O/FcdX1jrlJvnFxdX1wprhSvnT19euH0mXfOnt27sb71wYfPF7qdnP/thyTOxXQnvH8ce6mdLpf9Ez7gvf1INkLJqDvAI5mMiInO+3MxExOtFgBwmDXzEU0AYMwk6j8AjJnu3wG6a3v7tQ42yB/nI2KqX/7JzprZVGsd8shW8sDKRBIRswfZUQ6lW7cj4srssZ3//5Ida7b/16m96CD76qds/jnXb/5Je/NP9Jl/prrPTjymwfPfvfwTA+a/i0PmeP/lWnlg/tsRLyWTffInvfzJgPxXhsz/493lfwdda34f8fr2+jMRDzxRkOz6fMjc1dVS8VT7tX+OY7WbH+02/iN961/SeoZlt/FvDDn+6c9f/eXWLvnffG337z+J+PN8Z42+K6uJnw2Z/9Pcu18OupblX+6O/9vj9115+Pf/3ZD5z7zycWPIWwEAAAAAAAAAAAAAAAAAAAAAAAAAAOBQSCNiOpK00GunaaHQ3sP72TiSlsqV6omr5dq15WjtlT0bubT7U8sz7TjJ4vnO7/F344VWe6sXvx0Rz0TEF/knW3FhqVxaHvXgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDj6Lb9///Jt/f/BwAOualRdwAAOHDqPwCMH/UfAMaP+g8A40f9B4Dxo/4DwPh5hPqf349+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA2Ll64kB3NrTs3l7J4+Xq9tla+fnK5WFkrrNeWCkvlzY3CSrm8UioWlsrr2z+fbItL5fLGwkLUbsxVi5XqXKXeuLxerl2rXl5dX1wpXi7mDmxkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADC86daRpIWISFvtNC0UIp6KiNnIJVdXS8VTEfF0RPyaz+WzeH7UnQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPVapN9YWS6XipoaGhkavMeqZCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7evU2/R90TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABil9PckIrLjjZnj09uvPpHczbfeI+KTby59dWOxWt2cz87/3Ttf/bpzfmEU/QcAHqZbp7t1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6qdQba4ulUnGzUk8i4m6zrX2md+nxGqMeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe+e/AAAA//829Mx2") 2.312776288s ago: executing program 0 (id=1209): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xfffffffffffffff0}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000001c0)={[{@usrquota}, {@nombcache}, {@minixdf}, {@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xbbbd}}]}, 0x1, 0x51c, &(0x7f0000000580)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) set_mempolicy(0x2, &(0x7f00000002c0)=0x4, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0xe, "433f000000a69e5ebb7bf7b55562"}}) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.213644158s ago: executing program 3 (id=1212): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@dioread_lock}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") r0 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r0, 0x0, 0x9, 0x2000403) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', 0x0) 2.08878881s ago: executing program 3 (id=1215): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffe0, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r7 = socket(0x1e, 0x80004, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000) fcntl$setlease(r6, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4}, &(0x7f0000000140)) 2.060820712s ago: executing program 0 (id=1216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r2 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0xd8, 0x8, 0x7, 0xe9, 0x0, 0x2, 0x2100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x1000, 0xff}, 0x0, 0x3ff, 0x1, 0x6, 0x8000, 0x7, 0x7, 0x0, 0x1, 0x0, 0xffff}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x6) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x1102, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, r2, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f0000000000)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r8, @ANYBLOB="05bf538734541c08000000e588bda4e1f97aeac906a65e516d3df89a196e9a74bf6008fffce32778464900000000000000001a2d52e8fcd605b877cc0083b23a42c26b4ead516734c626830d07a3727108b9bca275092ab8d86172765a0b98a87237fca1ce7a085bc6e359654f8d4c98f41e91118d4ed8a9ec22a2a9fb8cf1f2780e10150879a8d819315b9929ae8d2ac58787eb787396762cce21df878325a256036edf3e2d6598cf880430bba9f7082127813112133141a77f4dbb9b7a50e57b11bdd05842aa4cc8cd9d84fd19a94469b328ebcdf72d1b3d6436f53283077f50a13784a2a0432cceca2b7245"], 0x24}}, 0x18) 1.930699885s ago: executing program 3 (id=1220): sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7a5ae4c65dce95956162d85bf465d0b26b42af3277e9683cd5783e296ca235c819ec6b4719b3df186e047587a058ae33e772cabe4d5c444de76744c001ff409dd2420079f833a0a3b5694eb3faeff3aec2e0b797ed0c49dad4419bfa7fdf045b5612284e69fdfddaaa214047613f6b698fbbdb201c35ff8a"], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) io_uring_setup(0x3a10, &(0x7f0000000080)={0x0, 0x956c, 0x800, 0x2, 0x101, 0x0, r2}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000240)={[{@i_version}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@jqfmt_vfsold}, {@quota}]}, 0x2, 0x447, &(0x7f0000000500)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000640)='kfree\x00'}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x20, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, {0x0, 0x0, 0xffffffdc, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket(0x21, 0x6, 0x3a) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@deltaction={0x100, 0x31, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x787ed56b}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xaf}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7a59}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4081}, 0x0) io_submit(r9, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r8, &(0x7f0000000080)='\x00', 0x1}]) syz_io_uring_setup(0x6023, &(0x7f0000000300)={0x0, 0x4f5b, 0x40, 0x1, 0x116}, &(0x7f0000000100), &(0x7f00000003c0)) 1.475381068s ago: executing program 6 (id=1229): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x6002, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000340)='cpu\t<0&&\t') 1.447191831s ago: executing program 0 (id=1230): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x4, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) 1.411215635s ago: executing program 6 (id=1231): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xfffffffffffffff0}]}, 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000001c0)={[{@usrquota}, {@nombcache}, {@minixdf}, {@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xbbbd}}]}, 0x1, 0x51c, &(0x7f0000000580)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) set_mempolicy(0x2, &(0x7f00000002c0)=0x4, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0xe, "433f000000a69e5ebb7bf7b55562"}}) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 1.274774918s ago: executing program 5 (id=1233): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e"], 0x70}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) recvmmsg(r0, &(0x7f0000009500)=[{{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000000)=""/34, 0x22}, {&(0x7f0000000100)=""/96, 0x60}, {&(0x7f0000000200)=""/107, 0x6b}, {&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000001380)=""/148, 0x94}], 0x6, &(0x7f00000014c0)=""/45, 0x2d}, 0x8}, {{&(0x7f0000001500)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000003980)=[{&(0x7f0000001580)=""/46, 0x2e}, {&(0x7f00000015c0)=""/8, 0x8}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/22, 0x16}, {&(0x7f0000003640)=""/227, 0xe3}, {&(0x7f0000003740)=""/179, 0xb3}, {&(0x7f0000003800)=""/220, 0xdc}, {&(0x7f0000003900)=""/75, 0x4b}], 0x9}, 0x401}, {{&(0x7f0000004d00)=@hci, 0x80, &(0x7f0000009c40)=[{&(0x7f0000003ac0)=""/84, 0x54}, {&(0x7f0000003b40)=""/54, 0x36}, {&(0x7f0000003b80)=""/63, 0x3f}, {&(0x7f0000003bc0)=""/191, 0xbf}, {&(0x7f0000003c80)=""/110, 0x6e}, {&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/128, 0x80}], 0x7, &(0x7f0000004d80)=""/36, 0x24}, 0x401}, {{&(0x7f0000004dc0)=@tipc=@id, 0x80, &(0x7f0000006200)=[{&(0x7f0000004e40)=""/98, 0x62}, {&(0x7f0000004ec0)=""/4096, 0x1000}, {&(0x7f0000005ec0)=""/71, 0x47}, {&(0x7f0000005f40)=""/125, 0x7d}, {&(0x7f0000005fc0)=""/220, 0xdc}, {&(0x7f00000060c0)=""/63, 0x3f}, {&(0x7f0000006100)=""/227, 0xe3}], 0x7, &(0x7f0000006280)=""/217, 0xd9}, 0x555}, {{&(0x7f0000006380)=@ethernet={0x0, @local}, 0x80, &(0x7f0000006740)=[{&(0x7f0000006400)=""/239, 0xef}, {&(0x7f0000006500)=""/105, 0x69}, {&(0x7f0000006580)=""/73, 0x49}, {&(0x7f0000006600)=""/47, 0x2f}, {&(0x7f0000009cc0)=""/209, 0xd1}], 0x5, &(0x7f00000067c0)=""/89, 0x59}, 0x1f34}, {{&(0x7f0000006840)=@generic, 0x80, &(0x7f0000008a80)=[{&(0x7f00000068c0)=""/171, 0xab}, {&(0x7f0000006980)=""/158, 0x9e}, {&(0x7f0000006a40)=""/51, 0x33}, {&(0x7f0000006a80)=""/4096, 0x1000}, {&(0x7f0000007a80)=""/4096, 0x1000}], 0x5, &(0x7f0000008b00)=""/215, 0xd7}, 0x1}, {{0x0, 0x0, &(0x7f0000009000)=[{0x0}, {&(0x7f0000008c40)=""/136, 0x88}, {&(0x7f0000008d00)=""/80, 0x50}, {&(0x7f0000008d80)=""/84, 0x54}, {&(0x7f0000008e00)=""/43, 0x2b}, {&(0x7f0000008e40)=""/178, 0xb2}, {&(0x7f0000008f00)=""/233, 0xe9}], 0x7, &(0x7f0000009080)=""/99, 0x63}}, {{0x0, 0x0, &(0x7f00000093c0)=[{&(0x7f0000009100)=""/218, 0xda}, {&(0x7f0000009200)=""/21, 0x15}, {&(0x7f0000009240)=""/141, 0x8d}, {&(0x7f0000009300)=""/89, 0x59}, {&(0x7f0000009380)=""/5, 0x5}], 0x5, &(0x7f0000009440)=""/129, 0x81}, 0x7}], 0x8, 0x0, &(0x7f0000009740)) 1.269547538s ago: executing program 6 (id=1234): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f00000000c0)=""/32, 0x27000, 0x1000, 0x7fffffff, 0x1}, 0x20) 1.223885653s ago: executing program 3 (id=1235): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fchdir(0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_format(r4, &(0x7f0000000800)='-1\x00', 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCGFLAGS1(r8, 0x8004745a, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x18010, &(0x7f0000000000)={[{@minixdf}, {@dioread_nolock}]}, 0x3, 0x738, &(0x7f0000000780)="$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") 1.159921139s ago: executing program 5 (id=1237): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 1.14393142s ago: executing program 6 (id=1238): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@dioread_lock}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") r0 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r0, 0x0, 0x9, 0x2000403) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', 0x0) 1.088934996s ago: executing program 5 (id=1239): recvmmsg(0xffffffffffffffff, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000002c80)=""/4096, 0x1000}], 0x1}, 0x94}], 0x1, 0x10000, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c060000000000224e0000", 0x58}], 0x1) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000003980)}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000040)="cd09c468713e46961029f891744168055d8fd2fe9b44c9bf5f33ec0aed69a6397081d8cc97173a7dd3a7", 0x2a}, {&(0x7f0000000100)="50a2997fb0ab2ae0e3bc09dce460ea", 0xf}, {&(0x7f00000003c0)="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", 0xfc0}, {&(0x7f0000000140)="b562d7a99412479244c094ec56f6b464c0238b129d716ed58a37c5904db851cac532c2c114f46e5ee246ba472c070dc6c006d0090e991d399d5f0e37", 0x3c}], 0x4}}, {{0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {&(0x7f00000002c0)="4e12c4e98d70292d61879b6a86b523a7ec2d4d17b60c02eb7d7b001138e55d8991c004effff9f258f8d05c375747cf2fbfecd270cfd8d7471570e369670f85b9dd025f2742ff61bee71314e92a700cf960690e6a3b2a6cf6b14a5da683c9e5edeff61a62545d6a617ba38a663b40cc4df2e2977cc5443e2a8ffb616c21ed91252b0a45c39a3e1172c9d6dac193fab172f2cf1123c8b2b45717766f", 0x9b}], 0x2, &(0x7f0000001500)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x2f, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x1}]}}}, @rthdr={{0x78, 0x29, 0x39, {0x3c, 0xc, 0x0, 0x6b, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback]}}}], 0x98}}, {{&(0x7f00000015c0)={0xa, 0x4e23, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f00000026c0)}}], 0x4, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) open(&(0x7f00009e1000)='./file0\x00', 0x4f00, 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 923.792212ms ago: executing program 5 (id=1240): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="398d9937f699946540a888af69fab8d61139b38d29b01b5f8151c437af4bb42d6c60979f6fbcd09a796b254023802768e8e294e94fc18740e4fec9dc676d59edc30b9418521053f3f3f9d45ccc47703411160ef35069b938c75f23c5967622e5cbeeef66991ae5d791f066b5741427c2282c78dfe6cae899d8cb1203b77e7d7431", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440), 0x0, 0x32, &(0x7f0000000480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f00000001c0), 0x8, 0x1000000c, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) dup(r5) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x7fffffffffffffff, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4}, 0x0, 0x0) shutdown(r5, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000800)='cachefiles_ondemand_copen\x00', r1, 0x0, 0x200000003}, 0x18) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095", @ANYRESDEC=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0xe}}, './file1\x00'}) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000f803000000000000ff03000018230000", @ANYRES32=r6, @ANYBLOB="000000000900000008460900020000006c638000010000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0xfffffffc, 0x7b, &(0x7f00000005c0)=""/123, 0x40f00, 0x39, '\x00', r2, 0x18, r9, 0x8, &(0x7f0000000640)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x9, 0x4, 0x8}, 0x10, 0x9290, 0xffffffffffffffff, 0x9, &(0x7f00000006c0)=[r0, r8, r8, r6, r0, r6, r8, r0], &(0x7f0000000c00)=[{0x1, 0x2, 0x8, 0x7}, {0x1, 0x1, 0x9, 0x1}, {0x2, 0x4, 0xb, 0x7}, {0x3, 0x5, 0x7, 0x2}, {0x5, 0x4, 0x1, 0x3}, {0x2, 0x2, 0xe, 0x1}, {0x2, 0x3, 0x7, 0x2}, {0x5, 0x1, 0x0, 0x7}, {0x613f, 0x3, 0x4, 0x4}], 0x10, 0x800}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r6}, &(0x7f0000000040), &(0x7f00000003c0)=r10}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r11}, 0x10) dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)=ANY=[]) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r12}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) syz_clone(0x1200, 0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) 923.522702ms ago: executing program 6 (id=1241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x6002, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000340)='cpu\t<0&&\t') 916.905712ms ago: executing program 3 (id=1242): clock_gettime(0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x4040010) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) fadvise64(r0, 0x7, 0x7, 0x0) 894.435184ms ago: executing program 6 (id=1243): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000010c0)='thread_noise\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, 0x0, &(0x7f0000000600)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timerfd_create(0x8, 0x0) write(r2, &(0x7f00000001c0)="f1", 0x1) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 787.547355ms ago: executing program 3 (id=1245): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000010c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='AF', @ANYRES32=r2], 0x4) 573.044705ms ago: executing program 0 (id=1247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) fchdir(r3) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0f000000040000000400000019"], 0x50) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), 0x0}, 0x20) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r9 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(r9, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) 342.508457ms ago: executing program 2 (id=1252): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) write$tun(r0, &(0x7f0000000300)={@void, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x7ff, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x4e24, 0x17c1, 0x10, 0x0, @opaque="2382a972d15d0294"}}}}}}, 0x3a) 271.754504ms ago: executing program 2 (id=1253): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x6002, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000340)='cpu\t<0&&\t') 203.315081ms ago: executing program 2 (id=1254): r0 = memfd_create(&(0x7f0000000480)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x03\x00\x00\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xcaX\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\xb1\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedP\xff\xff\xff\xff\xff\xff\xff\xef)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xb4Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x9b-\xe3\xe6R\xa2T\x1e\n!\xad$\x93c\xd3\"\xd6\xa1\xd6\xfc\v\x81\x9e\xc1\xb3T\n\xd9\xff\x18 \xf8\xc4\xef\xd2\xb0\xf8\x80\xb8\x1e\xb7fo\x1c\a\xc9\x1a!D\xde\xc6\xf1\x13\xc2F\xc44A\x1d\xb7\xe6\xfbB\xee4\xa1\xdf+\xa5\xb1\xc2\xfb\xc0\t\x15\x7fA{\xe0\xc7\xe0\x96\xc9\xe6\x8fk\xe6\x87;\x03\xff\xb0\x10\x10\x1e\x14\x99\xc7\xd5)\x8d\xc7\xf0\xfd\xe9d\xc9\xce\x85\x88\x88\xcd\xf6\xb2\xbf\xf8E\xe4\xd8\xd0\xe00\xbd\xc2M\xe7\x1b\xac\xc0\v\xb0\xfc\"\x12\x8d\xa5\x96\x10\xf3\x82~2\xa3[\xa4w]\n\xb1+\xac\bR&B\xebW0\xe2\xffBO9y\x8e\xb6\x03\x99\r', 0x3) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00\x00\x00\x00', 0x4}], 0x1}, 0x0) r2 = dup(r0) write$binfmt_elf64(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e00cd220000c9030000000000004000000000000000ea02000000000000020001000500380001000600b10600040300000081000000ff000000000000000900000000000000070000000000000009"], 0x178) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000000050000000200000008"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r3}, &(0x7f0000000340), &(0x7f0000000380)='%pK \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000003000000180100002020752500000000004000207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000001000085000000060000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) 202.72313ms ago: executing program 2 (id=1255): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffe0, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r7 = socket(0x1e, 0x80004, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) fcntl$setlease(r6, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4}, &(0x7f0000000140)) 129.073358ms ago: executing program 2 (id=1256): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@void, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x7ff, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x4e24, 0x17c1, 0x10, 0x0, @opaque="2382a972d15d0294"}}}}}}, 0x3a) 99.288461ms ago: executing program 5 (id=1257): r0 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000073000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000580)={0x2, 0x4e22, @private=0xa01fdff}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) 15.590779ms ago: executing program 2 (id=1258): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffeda, &(0x7f0000000040)={&(0x7f0000000940)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x3}, {0xad, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044890) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000240)={@mcast1, 0x30, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000014000b032bbd7000fcdbdf250a281000", @ANYRES32=r11, @ANYBLOB="080008000604000014000100ff"], 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000010425bd7000fedbdf2500000000", @ANYRES32=r13, @ANYBLOB="7808020001a20100200012800900010069706970000000001000028006000f0008"], 0x40}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@loopback, @loopback, 0x0}, &(0x7f0000000080)=0xc) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r16, {0xfff1, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x1, 0x700, 0x81, 0x4c0, {{0x19, 0x4, 0x1, 0x15, 0x64, 0x66, 0x0, 0x1, 0x0, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010102, {[@lsrr={0x83, 0x13, 0x20, [@dev={0xac, 0x14, 0x14, 0x33}, @multicast1, @rand_addr=0x64010101, @remote]}, @rr={0x7, 0x1b, 0x1b, [@broadcast, @private=0xa010100, @broadcast, @multicast1, @empty, @broadcast]}, @rr={0x7, 0x1b, 0x9, [@multicast2, @rand_addr=0x64010102, @remote, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ra={0x94, 0x4}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80004000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)={0x3f8, r2, 0x20, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1b}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r11}, {0x220, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7792}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1a47}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x84, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x101}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xa0}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffffb}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 0s ago: executing program 5 (id=1259): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x75, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) socket$packet(0x11, 0xa, 0x300) socket$kcm(0x2, 0xa, 0x73) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES32=r0], &(0x7f00000002c0)='syzkaller\x00', 0x40, 0x0, 0x0, 0x41100}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf5", 0x92}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) sendto$inet(r5, &(0x7f0000000580)="17", 0x12571144d43d7ee5, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): 5654] do_syscall_64+0xd8/0x2c0 [ 79.750024][ T5654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.750054][ T5654] RIP: 0033:0x7fbcf868f749 [ 79.750135][ T5654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.750159][ T5654] RSP: 002b:00007fbcf70f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 79.750185][ T5654] RAX: ffffffffffffffda RBX: 00007fbcf88e5fa0 RCX: 00007fbcf868f749 [ 79.750203][ T5654] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008 [ 79.750220][ T5654] RBP: 00007fbcf70f7090 R08: 0000000000000000 R09: 0000000000000000 [ 79.750236][ T5654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.750253][ T5654] R13: 00007fbcf88e6038 R14: 00007fbcf88e5fa0 R15: 00007ffcb3fafe88 [ 79.750284][ T5654] [ 80.020264][ T5656] set_capacity_and_notify: 10 callbacks suppressed [ 80.020286][ T5656] loop5: detected capacity change from 0 to 2048 [ 80.198159][ T5679] loop3: detected capacity change from 0 to 512 [ 80.283986][ T5689] loop4: detected capacity change from 0 to 512 [ 80.357943][ T5689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.400625][ T5689] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.596713][ T5671] mmap: syz.2.550 (5671) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.626016][ T5703] loop5: detected capacity change from 0 to 512 [ 80.649641][ T5703] EXT4-fs: Ignoring removed nobh option [ 80.689850][ T5705] random: crng reseeded on system resumption [ 80.765980][ T5703] journal_path: Non-blockdev passed as './bus' [ 80.772309][ T5703] EXT4-fs: error: could not find journal device path [ 81.226104][ T5679] loop3: detected capacity change from 0 to 1024 [ 81.247971][ T5679] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.288367][ T29] kauditd_printk_skb: 389 callbacks suppressed [ 81.288386][ T29] audit: type=1326 audit(1766167789.721:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f476f446357 code=0x7ffc0000 [ 81.318937][ T29] audit: type=1326 audit(1766167789.721:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f476f4463b6 code=0x7ffc0000 [ 81.342345][ T29] audit: type=1326 audit(1766167789.721:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f476f48f34b code=0x7ffc0000 [ 81.365828][ T29] audit: type=1326 audit(1766167789.721:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f476f48f749 code=0x7ffc0000 [ 81.389293][ T29] audit: type=1326 audit(1766167789.721:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476f48f749 code=0x7ffc0000 [ 81.404857][ T5679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.412675][ T29] audit: type=1326 audit(1766167789.721:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476f48f749 code=0x7ffc0000 [ 81.412741][ T29] audit: type=1326 audit(1766167789.751:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f476f4c2005 code=0x7ffc0000 [ 81.414253][ T29] audit: type=1326 audit(1766167789.791:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f476f4c2005 code=0x7ffc0000 [ 81.430371][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.449051][ T29] audit: type=1326 audit(1766167789.791:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f476f4c2005 code=0x7ffc0000 [ 81.528050][ T29] audit: type=1326 audit(1766167789.791:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f476f4c2005 code=0x7ffc0000 [ 81.698239][ T5724] debugfs: 'ptm0' already exists in 'caif_serial' [ 81.728663][ T5724] loop4: detected capacity change from 0 to 512 [ 81.753684][ T5724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.774157][ T5724] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.787016][ T5724] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #12: comm syz.4.566: directory missing '.' [ 81.861089][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.025312][ T5745] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.569'. [ 82.048052][ T5745] netlink: zone id is out of range [ 82.053229][ T5745] netlink: zone id is out of range [ 82.070907][ T5745] netlink: zone id is out of range [ 82.076123][ T5745] netlink: zone id is out of range [ 82.112430][ T5745] netlink: zone id is out of range [ 82.117679][ T5745] netlink: zone id is out of range [ 82.138774][ T5745] netlink: zone id is out of range [ 82.151878][ T5745] netlink: zone id is out of range [ 82.179901][ T5745] netlink: zone id is out of range [ 82.333102][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.389664][ T5727] loop5: detected capacity change from 0 to 512 [ 82.397069][ T5770] loop4: detected capacity change from 0 to 512 [ 82.414648][ T5770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.433909][ T5770] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.448514][ T5770] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #12: comm syz.4.572: directory missing '.' [ 82.509174][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.563099][ T5779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.576'. [ 82.605965][ T5787] loop4: detected capacity change from 0 to 1024 [ 82.658811][ T3477] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 82.676142][ T3477] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 82.717948][ T5095] Bluetooth: hci0: Frame reassembly failed (-84) [ 82.727399][ T5787] loop4: detected capacity change from 0 to 2048 [ 82.751082][ T5727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.779719][ T5727] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.810220][ T5808] net_ratelimit: 355 callbacks suppressed [ 82.810241][ T5808] openvswitch: netlink: EtherType 0 is less than min 600 [ 82.834251][ T4832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.878819][ T5815] netlink: 24 bytes leftover after parsing attributes in process `syz.5.582'. [ 82.909180][ T3477] kernel read not supported for file /298/sessionid (pid: 3477 comm: kworker/1:5) [ 82.995844][ T5829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.011753][ T5829] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.157850][ T5840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.170493][ T5840] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.185542][ T5843] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.585: corrupted inode contents [ 83.199594][ T5843] EXT4-fs (loop4): Remounting filesystem read-only [ 83.207340][ T5843] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 83.331961][ T5844] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #18: comm syz.5.587: corrupted inode contents [ 83.344117][ T5844] EXT4-fs (loop5): Remounting filesystem read-only [ 83.351023][ T5844] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 83.388155][ T5852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.400908][ T5852] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.792684][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.813472][ T5857] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 83.821333][ T5857] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 83.912678][ T5860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.591'. [ 83.938451][ T5861] EXT4-fs (loop4): failed to initialize system zone (-117) [ 83.946972][ T5861] EXT4-fs (loop4): mount failed [ 83.988310][ T4832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.056775][ T5874] debugfs: 'ptm2' already exists in 'caif_serial' [ 84.095662][ T5878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.117314][ T5878] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.165279][ T5871] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #12: comm syz.4.595: directory missing '.' [ 84.213090][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.263124][ T5901] netlink: 28 bytes leftover after parsing attributes in process `syz.5.600'. [ 84.265398][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.272086][ T5901] netlink: 32 bytes leftover after parsing attributes in process `syz.5.600'. [ 84.290124][ T5901] netlink: 28 bytes leftover after parsing attributes in process `syz.5.600'. [ 84.312849][ T5901] netlink: 32 bytes leftover after parsing attributes in process `syz.5.600'. [ 84.487579][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.605'. [ 84.535925][ T5934] rock: directory entry would overflow storage [ 84.542249][ T5934] rock: sig=0x4f50, size=4, remaining=3 [ 84.547886][ T5934] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 84.786177][ T3608] Bluetooth: hci0: command 0x1003 tx timeout [ 84.792375][ T3526] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.106200][ T5992] set_capacity_and_notify: 8 callbacks suppressed [ 85.106222][ T5992] loop2: detected capacity change from 0 to 2048 [ 85.478349][ T6019] wg1 speed is unknown, defaulting to 1000 [ 85.484949][ T6019] lo speed is unknown, defaulting to 1000 [ 85.600441][ T6029] loop2: detected capacity change from 0 to 512 [ 85.658162][ T6029] EXT4-fs (loop2): orphan cleanup on readonly fs [ 85.665413][ T6029] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.618: Failed to acquire dquot type 1 [ 85.677941][ T6029] EXT4-fs (loop2): 1 truncate cleaned up [ 85.779321][ T6034] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 86.386802][ T6050] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 86.436879][ T6050] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 86.448894][ T6029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.464827][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 86.464847][ T29] audit: type=1400 audit(1766167794.901:4789): avc: denied { mount } for pid=6011 comm="syz.2.618" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 86.851497][ T29] audit: type=1400 audit(1766167794.961:4790): avc: denied { firmware_load } for pid=6011 comm="syz.2.618" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 86.896398][ T6054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.624'. [ 86.905330][ T6054] netlink: 32 bytes leftover after parsing attributes in process `syz.0.624'. [ 86.914320][ T6054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.624'. [ 86.983950][ T29] audit: type=1400 audit(1766167795.361:4791): avc: denied { read write } for pid=6055 comm="syz.4.625" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.007820][ T29] audit: type=1400 audit(1766167795.361:4792): avc: denied { open } for pid=6055 comm="syz.4.625" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.031357][ T29] audit: type=1400 audit(1766167795.361:4793): avc: denied { ioctl } for pid=6055 comm="syz.4.625" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.056280][ T29] audit: type=1400 audit(1766167795.361:4794): avc: denied { read } for pid=6055 comm="syz.4.625" dev="nsfs" ino=4026532632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 87.077514][ T29] audit: type=1400 audit(1766167795.361:4795): avc: denied { open } for pid=6055 comm="syz.4.625" path="net:[4026532632]" dev="nsfs" ino=4026532632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 87.100752][ T29] audit: type=1400 audit(1766167795.391:4796): avc: denied { create } for pid=6060 comm="syz.3.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 87.120172][ T29] audit: type=1400 audit(1766167795.391:4797): avc: denied { prog_load } for pid=6060 comm="syz.3.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 87.139182][ T29] audit: type=1400 audit(1766167795.391:4798): avc: denied { bpf } for pid=6060 comm="syz.3.626" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.167125][ T6054] netlink: 32 bytes leftover after parsing attributes in process `syz.0.624'. [ 87.210715][ T6061] loop3: detected capacity change from 0 to 2048 [ 87.338818][ T6061] EXT4-fs (loop3): failed to initialize system zone (-117) [ 87.346564][ T6061] EXT4-fs (loop3): mount failed [ 87.583409][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.673693][ T6081] loop2: detected capacity change from 0 to 2048 [ 87.709578][ T6081] EXT4-fs (loop2): failed to initialize system zone (-117) [ 87.717111][ T6081] EXT4-fs (loop2): mount failed [ 87.746592][ T6089] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 87.749944][ T6083] loop4: detected capacity change from 0 to 512 [ 87.770984][ T6083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.800591][ T6083] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.837803][ T6083] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #12: comm syz.4.633: directory missing '.' [ 87.892986][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.934628][ T6106] netlink: 'syz.4.637': attribute type 10 has an invalid length. [ 87.942524][ T6106] netlink: 40 bytes leftover after parsing attributes in process `syz.4.637'. [ 87.953123][ T6107] loop5: detected capacity change from 0 to 256 [ 87.960486][ T6107] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 87.999189][ T6106] team0: Port device geneve1 added [ 88.043315][ T6115] netlink: 24 bytes leftover after parsing attributes in process `syz.4.638'. [ 88.157666][ T6134] debugfs: 'ptm1' already exists in 'caif_serial' [ 88.306762][ T6159] debugfs: 'ptm1' already exists in 'caif_serial' [ 88.334460][ T6159] loop4: detected capacity change from 0 to 512 [ 88.347671][ T6159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.360681][ T6163] netlink: 44 bytes leftover after parsing attributes in process `syz.0.644'. [ 88.370392][ T6159] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.371125][ T6164] netlink: 44 bytes leftover after parsing attributes in process `syz.0.644'. [ 88.396548][ T6159] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #12: comm syz.4.643: directory missing '.' [ 88.452851][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.494284][ T6183] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 88.602323][ T6189] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.640912][ T6189] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.651873][ T6192] netlink: 'syz.3.648': attribute type 10 has an invalid length. [ 88.659699][ T6192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.648'. [ 88.693821][ T6192] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 88.712985][ T6192] team0: Failed to send options change via netlink (err -105) [ 88.720604][ T6192] team0: Port device geneve1 added [ 88.743873][ T6198] netlink: 24 bytes leftover after parsing attributes in process `syz.2.651'. [ 88.750628][ T6197] debugfs: 'ptm0' already exists in 'caif_serial' [ 88.763166][ T6189] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.798791][ T6189] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.813064][ T6197] loop5: detected capacity change from 0 to 512 [ 88.828415][ T6197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.887936][ T6197] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.928431][ T887] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.933180][ T6197] EXT4-fs warning (device loop5): ext4_empty_dir:3087: inode #12: comm syz.5.652: directory missing '.' [ 88.957047][ T67] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.969691][ T67] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.978939][ T67] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.019766][ T6222] loop2: detected capacity change from 0 to 512 [ 89.028480][ T4832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.061072][ T6222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.093556][ T6222] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.330882][ T6253] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.655: corrupted inode contents [ 89.354252][ T6253] EXT4-fs (loop2): Remounting filesystem read-only [ 89.408516][ T6253] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 89.437870][ T6266] netlink: 'syz.5.665': attribute type 10 has an invalid length. [ 89.467333][ T6266] team0: Failed to send options change via netlink (err -105) [ 89.474885][ T6266] team0: Port device geneve1 added [ 89.730996][ T6261] loop4: detected capacity change from 0 to 512 [ 89.761708][ T6261] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.786951][ T6287] wg1 speed is unknown, defaulting to 1000 [ 89.793179][ T6287] lo speed is unknown, defaulting to 1000 [ 89.893177][ T6261] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 89.923216][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.944167][ T6261] EXT4-fs (loop4): orphan cleanup on readonly fs [ 89.967972][ T6261] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.663: corrupted inode contents [ 90.005838][ T6261] EXT4-fs (loop4): Remounting filesystem read-only [ 90.026542][ T6261] EXT4-fs (loop4): 1 truncate cleaned up [ 90.032462][ T887] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 90.043063][ T887] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 90.059662][ T887] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 90.077730][ T6261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.145434][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.167400][ T6298] loop2: detected capacity change from 0 to 512 [ 90.178462][ T6298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.191770][ T6298] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.214798][ T6298] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #12: comm syz.2.674: directory missing '.' [ 90.348809][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.591027][ T6315] netlink: 'syz.2.679': attribute type 33 has an invalid length. [ 90.661086][ T6315] tipc: Enabling of bearer rejected, failed to enable media [ 90.836132][ T6341] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 90.848967][ T6342] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 90.862012][ T6342] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 90.894214][ T6341] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 90.942150][ T6350] debugfs: 'ptm0' already exists in 'caif_serial' [ 91.421167][ T6401] wg1 speed is unknown, defaulting to 1000 [ 91.427305][ T6401] lo speed is unknown, defaulting to 1000 [ 91.478810][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 91.478896][ T29] audit: type=1400 audit(1766167799.911:5206): avc: denied { read write } for pid=6399 comm="syz.5.699" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.509472][ T29] audit: type=1400 audit(1766167799.911:5207): avc: denied { open } for pid=6399 comm="syz.5.699" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.534926][ T6400] loop5: detected capacity change from 0 to 2048 [ 91.568703][ T6404] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 91.582331][ T6404] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 91.630169][ T29] audit: type=1400 audit(1766167799.971:5208): avc: denied { ioctl } for pid=6399 comm="syz.5.699" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.643063][ T6400] EXT4-fs (loop5): failed to initialize system zone (-117) [ 91.655671][ T29] audit: type=1400 audit(1766167799.981:5209): avc: denied { mounton } for pid=6399 comm="syz.5.699" path="/56/file0" dev="tmpfs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 91.665321][ T6400] EXT4-fs (loop5): mount failed [ 91.685385][ T29] audit: type=1400 audit(1766167799.991:5210): avc: denied { map_create } for pid=6403 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 91.685420][ T29] audit: type=1400 audit(1766167799.991:5211): avc: denied { map_read } for pid=6403 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 91.685451][ T29] audit: type=1400 audit(1766167800.001:5212): avc: denied { perfmon } for pid=6403 comm="syz.4.700" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.749833][ T29] audit: type=1400 audit(1766167800.071:5213): avc: denied { write } for pid=6405 comm="syz.4.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.769187][ T29] audit: type=1400 audit(1766167800.071:5214): avc: denied { map_write } for pid=6405 comm="syz.4.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 91.788186][ T29] audit: type=1400 audit(1766167800.071:5215): avc: denied { read } for pid=6405 comm="syz.4.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.959221][ T6429] __nla_validate_parse: 12 callbacks suppressed [ 91.959262][ T6429] netlink: 24 bytes leftover after parsing attributes in process `syz.4.708'. [ 91.985113][ T6433] loop5: detected capacity change from 0 to 512 [ 91.999062][ T6429] loop4: detected capacity change from 0 to 512 [ 92.011577][ T6429] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 92.013932][ T6434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.710'. [ 92.029661][ T6434] netlink: 32 bytes leftover after parsing attributes in process `syz.0.710'. [ 92.038651][ T6434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.710'. [ 92.057315][ T6434] netlink: 32 bytes leftover after parsing attributes in process `syz.0.710'. [ 92.073344][ T6438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.097091][ T6429] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.708: Allocating blocks 41-42 which overlap fs metadata [ 92.118650][ T6438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.131360][ T6429] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.708: Allocating blocks 41-42 which overlap fs metadata [ 92.149297][ T6438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.176348][ T6429] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.708: Failed to acquire dquot type 1 [ 92.192115][ T6438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.209755][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.711'. [ 92.220244][ T6429] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 92.284743][ T6429] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.708: corrupted inode contents [ 92.349925][ T6429] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.708: mark_inode_dirty error [ 92.374518][ T6429] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.708: corrupted inode contents [ 92.388422][ T6429] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.708: mark_inode_dirty error [ 92.414372][ T6429] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.708: corrupted inode contents [ 92.436582][ T6429] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 92.445353][ T6429] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.708: corrupted inode contents [ 92.472065][ T6429] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.708: mark_inode_dirty error [ 92.488274][ T6429] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 92.497897][ T6429] EXT4-fs (loop4): 1 truncate cleaned up [ 92.517309][ T6429] syz.4.708 (6429) used greatest stack depth: 9952 bytes left [ 92.611042][ T6433] loop5: detected capacity change from 0 to 1024 [ 92.639897][ T6433] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.700792][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.755506][ T6451] loop2: detected capacity change from 0 to 512 [ 92.778351][ T6451] ext4: Unknown parameter 'euid>00000000000000000000' [ 92.792574][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.907231][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.978264][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.055165][ T6472] loop2: detected capacity change from 0 to 512 [ 93.126043][ T6472] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 93.148188][ T31] bridge_slave_1: left allmulticast mode [ 93.153882][ T31] bridge_slave_1: left promiscuous mode [ 93.159598][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.166498][ T6472] EXT4-fs (loop2): mount failed [ 93.172649][ T31] bridge_slave_0: left allmulticast mode [ 93.178421][ T31] bridge_slave_0: left promiscuous mode [ 93.184243][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.378726][ T6508] loop9: detected capacity change from 0 to 7 [ 93.391657][ T6508] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.404968][ T6508] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.412963][ T6508] loop9: unable to read partition table [ 93.427810][ T6508] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 93.427810][ T6508] ) failed (rc=-5) [ 93.442612][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.451241][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.459582][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.474512][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.508900][ T3306] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.584661][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.725'. [ 93.619570][ T31] team0: Port device geneve1 removed [ 93.708111][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.718151][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.728833][ T31] bond0 (unregistering): Released all slaves [ 93.737191][ T6483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.722'. [ 93.746183][ T6483] netlink: 32 bytes leftover after parsing attributes in process `syz.0.722'. [ 93.755107][ T6483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.722'. [ 93.778892][ T6505] wg1 speed is unknown, defaulting to 1000 [ 93.785518][ T6505] lo speed is unknown, defaulting to 1000 [ 93.795269][ T6506] syzkaller0: tun_chr_ioctl cmd 35108 [ 93.855189][ T6526] FAULT_INJECTION: forcing a failure. [ 93.855189][ T6526] name failslab, interval 1, probability 0, space 0, times 0 [ 93.867993][ T6526] CPU: 0 UID: 0 PID: 6526 Comm: syz.5.728 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.868021][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.868038][ T6526] Call Trace: [ 93.868046][ T6526] [ 93.868057][ T6526] __dump_stack+0x1d/0x30 [ 93.868090][ T6526] dump_stack_lvl+0xe8/0x140 [ 93.868122][ T6526] dump_stack+0x15/0x1b [ 93.868145][ T6526] should_fail_ex+0x265/0x280 [ 93.868173][ T6526] should_failslab+0x8c/0xb0 [ 93.868203][ T6526] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 93.868235][ T6526] ? __alloc_skb+0x324/0x4d0 [ 93.868260][ T6526] __alloc_skb+0x324/0x4d0 [ 93.868387][ T6526] ? __alloc_skb+0x24d/0x4d0 [ 93.868509][ T6526] netlink_alloc_large_skb+0xbf/0xf0 [ 93.868546][ T6526] netlink_sendmsg+0x3cf/0x6b0 [ 93.868620][ T6526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.868738][ T6526] __sock_sendmsg+0x145/0x180 [ 93.868764][ T6526] ____sys_sendmsg+0x31e/0x4a0 [ 93.868836][ T6526] ___sys_sendmsg+0x17b/0x1d0 [ 93.868960][ T6526] __x64_sys_sendmsg+0xd4/0x160 [ 93.869002][ T6526] x64_sys_call+0x17ba/0x3000 [ 93.869027][ T6526] do_syscall_64+0xd8/0x2c0 [ 93.869067][ T6526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.869135][ T6526] RIP: 0033:0x7fa4d8e6f749 [ 93.869151][ T6526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.869170][ T6526] RSP: 002b:00007fa4d78d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.869191][ T6526] RAX: ffffffffffffffda RBX: 00007fa4d90c5fa0 RCX: 00007fa4d8e6f749 [ 93.869209][ T6526] RDX: 0000000000008080 RSI: 0000200000000000 RDI: 0000000000000003 [ 93.869226][ T6526] RBP: 00007fa4d78d7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.869309][ T6526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.869321][ T6526] R13: 00007fa4d90c6038 R14: 00007fa4d90c5fa0 R15: 00007ffe814d3608 [ 93.869414][ T6526] [ 94.069717][ T3396] wg1 speed is unknown, defaulting to 1000 [ 94.070028][ T6453] wg1 speed is unknown, defaulting to 1000 [ 94.075575][ T3396] syz0: Port: 1 Link DOWN [ 94.086004][ T6453] lo speed is unknown, defaulting to 1000 [ 94.108448][ T31] hsr_slave_0: left promiscuous mode [ 94.114304][ T31] hsr_slave_1: left promiscuous mode [ 94.120466][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.128022][ T31] batadv0: mtu less than device minimum [ 94.134379][ T31] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 94.145353][ T31] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 94.156518][ T31] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 94.167994][ T31] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 94.178995][ T31] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 94.190027][ T31] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 94.201499][ T31] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 94.212584][ T31] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 94.223750][ T31] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 94.240865][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.271319][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.291315][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.301918][ T31] batman_adv: batadv0: Interface deactivated: dummy0 [ 94.308829][ T31] batman_adv: batadv0: Removing interface: dummy0 [ 94.324809][ T31] veth1_macvtap: left promiscuous mode [ 94.330753][ T31] veth0_macvtap: left promiscuous mode [ 94.356002][ T31] veth1_vlan: left promiscuous mode [ 94.362922][ T31] veth0_vlan: left promiscuous mode [ 94.509114][ T31] team0 (unregistering): Port device team_slave_1 removed [ 94.521615][ T31] team0 (unregistering): Port device team_slave_0 removed [ 94.652172][ T6583] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 94.669788][ T6583] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 94.824303][ T6606] FAULT_INJECTION: forcing a failure. [ 94.824303][ T6606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.837588][ T6606] CPU: 1 UID: 0 PID: 6606 Comm: syz.5.748 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.837649][ T6606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.837665][ T6606] Call Trace: [ 94.837732][ T6606] [ 94.837743][ T6606] __dump_stack+0x1d/0x30 [ 94.837778][ T6606] dump_stack_lvl+0xe8/0x140 [ 94.837818][ T6606] dump_stack+0x15/0x1b [ 94.837899][ T6606] should_fail_ex+0x265/0x280 [ 94.837934][ T6606] should_fail+0xb/0x20 [ 94.837969][ T6606] should_fail_usercopy+0x1a/0x20 [ 94.838071][ T6606] strncpy_from_user+0x27/0x260 [ 94.838118][ T6606] getname_flags+0xae/0x3b0 [ 94.838152][ T6606] do_sys_openat2+0x60/0x150 [ 94.838245][ T6606] __x64_sys_open+0xe6/0x110 [ 94.838283][ T6606] x64_sys_call+0x166f/0x3000 [ 94.838379][ T6606] do_syscall_64+0xd8/0x2c0 [ 94.838417][ T6606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.838447][ T6606] RIP: 0033:0x7fa4d8e6f749 [ 94.838467][ T6606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.838493][ T6606] RSP: 002b:00007fa4d78d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 94.838533][ T6606] RAX: ffffffffffffffda RBX: 00007fa4d90c5fa0 RCX: 00007fa4d8e6f749 [ 94.838558][ T6606] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 00002000000003c0 [ 94.838580][ T6606] RBP: 00007fa4d78d7090 R08: 0000000000000000 R09: 0000000000000000 [ 94.838597][ T6606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.838619][ T6606] R13: 00007fa4d90c6038 R14: 00007fa4d90c5fa0 R15: 00007ffe814d3608 [ 94.838646][ T6606] [ 95.044340][ T6453] chnl_net:caif_netlink_parms(): no params data found [ 95.066688][ T6611] loop2: detected capacity change from 0 to 512 [ 95.081559][ T6611] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.101318][ T6611] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #12: comm syz.2.749: directory missing '.' [ 95.149423][ T6628] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 95.161029][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.168184][ T6453] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.175696][ T6453] bridge_slave_0: entered allmulticast mode [ 95.182493][ T6453] bridge_slave_0: entered promiscuous mode [ 95.189538][ T6628] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 95.200723][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.207888][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.219763][ T6453] bridge_slave_1: entered allmulticast mode [ 95.228560][ T6453] bridge_slave_1: entered promiscuous mode [ 95.299114][ T6453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.310917][ T6453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.357599][ T6453] team0: Port device team_slave_0 added [ 95.368979][ T6453] team0: Port device team_slave_1 added [ 95.419941][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.427228][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.453280][ T6453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.469520][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.476600][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.502721][ T6453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.560501][ T6453] hsr_slave_0: entered promiscuous mode [ 95.567147][ T6453] hsr_slave_1: entered promiscuous mode [ 95.573326][ T6453] debugfs: 'hsr0' already exists in 'hsr' [ 95.579191][ T6453] Cannot create hsr debugfs directory [ 95.780348][ T6688] loop2: detected capacity change from 0 to 512 [ 95.796276][ T6453] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 95.809095][ T6684] loop3: detected capacity change from 0 to 512 [ 95.820856][ T6453] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 95.834504][ T6688] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.836642][ T6684] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.871016][ T6684] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #12: comm syz.3.767: directory missing '.' [ 95.893759][ T6453] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 95.905896][ T6453] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 95.969442][ T6696] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.019505][ T6702] netlink: 'syz.3.770': attribute type 10 has an invalid length. [ 96.071370][ T6696] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.101315][ T6700] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.769: corrupted inode contents [ 96.114545][ T6453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.131142][ T6700] EXT4-fs (loop2): Remounting filesystem read-only [ 96.143391][ T6453] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.144411][ T6700] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 96.167612][ T6696] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.185262][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.192424][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.224793][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.232003][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.252719][ T6696] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.305401][ T186] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.324940][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.358635][ T6453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.370657][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.392268][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.567689][ T6453] veth0_vlan: entered promiscuous mode [ 96.576344][ T6453] veth1_vlan: entered promiscuous mode [ 96.595166][ T6453] veth0_macvtap: entered promiscuous mode [ 96.604134][ T6453] veth1_macvtap: entered promiscuous mode [ 96.613804][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 96.613820][ T29] audit: type=1400 audit(1766167805.051:5385): avc: denied { create } for pid=6738 comm="syz.3.778" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 96.620921][ T6453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.654926][ T6453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.667066][ T52] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.690665][ T52] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.699827][ T52] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.720174][ T52] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.756370][ T29] audit: type=1326 audit(1766167805.191:5386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476f48f749 code=0x7ffc0000 [ 96.806380][ T29] audit: type=1400 audit(1766167805.191:5387): avc: denied { mounton } for pid=6453 comm="syz-executor" path="/root/syzkaller.ItaT1q/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 96.831139][ T29] audit: type=1400 audit(1766167805.191:5388): avc: denied { mount } for pid=6453 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 96.853606][ T29] audit: type=1400 audit(1766167805.191:5389): avc: denied { mount } for pid=6453 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 96.875734][ T29] audit: type=1400 audit(1766167805.191:5390): avc: denied { mounton } for pid=6453 comm="syz-executor" path="/root/syzkaller.ItaT1q/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 96.902717][ T29] audit: type=1400 audit(1766167805.191:5391): avc: denied { mounton } for pid=6453 comm="syz-executor" path="/root/syzkaller.ItaT1q/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 96.930584][ T29] audit: type=1326 audit(1766167805.211:5392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476f48f749 code=0x7ffc0000 [ 96.954084][ T29] audit: type=1326 audit(1766167805.211:5393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f476f48f749 code=0x7ffc0000 [ 96.977530][ T29] audit: type=1326 audit(1766167805.211:5394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476f48f749 code=0x7ffc0000 [ 96.989456][ T6763] netlink: 'syz.0.785': attribute type 10 has an invalid length. [ 97.008772][ T6763] __nla_validate_parse: 17 callbacks suppressed [ 97.008791][ T6763] netlink: 40 bytes leftover after parsing attributes in process `syz.0.785'. [ 97.028678][ T6759] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.047747][ T6766] loop2: detected capacity change from 0 to 512 [ 97.065442][ T6768] tbf_change: 2 callbacks suppressed [ 97.065461][ T6768] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 97.080061][ T6766] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.098646][ T6759] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.148925][ T6759] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.211721][ T6759] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.292344][ T186] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.311262][ T186] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.327228][ T186] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.335907][ T186] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.432102][ T6807] tipc: Started in network mode [ 97.437181][ T6807] tipc: Node identity 3632ea71f0df, cluster identity 4711 [ 97.444565][ T6807] tipc: Enabled bearer , priority 0 [ 97.486036][ T6806] tipc: Disabling bearer [ 97.553752][ T6823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.809'. [ 97.562888][ T6823] netlink: 32 bytes leftover after parsing attributes in process `syz.3.809'. [ 97.571874][ T6823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.809'. [ 97.608271][ T6823] netlink: 32 bytes leftover after parsing attributes in process `syz.3.809'. [ 97.629436][ T6830] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.661429][ T6833] netlink: 'syz.5.808': attribute type 10 has an invalid length. [ 97.669320][ T6833] netlink: 40 bytes leftover after parsing attributes in process `syz.5.808'. [ 97.709837][ T6830] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.778996][ T6843] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 97.901743][ T6830] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.979646][ T6830] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.069329][ T186] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.106858][ T186] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.115151][ T186] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.133572][ T186] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.173300][ T6853] loop6: detected capacity change from 0 to 512 [ 98.230767][ T6853] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 98.269759][ T6855] FAULT_INJECTION: forcing a failure. [ 98.269759][ T6855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.276886][ T6853] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 98.284230][ T6855] CPU: 0 UID: 0 PID: 6855 Comm: syz.0.819 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.284294][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.284314][ T6855] Call Trace: [ 98.284324][ T6855] [ 98.284363][ T6855] __dump_stack+0x1d/0x30 [ 98.284402][ T6855] dump_stack_lvl+0xe8/0x140 [ 98.284439][ T6855] dump_stack+0x15/0x1b [ 98.284471][ T6855] should_fail_ex+0x265/0x280 [ 98.284512][ T6855] should_fail+0xb/0x20 [ 98.284621][ T6855] should_fail_usercopy+0x1a/0x20 [ 98.284661][ T6855] _copy_from_user+0x1c/0xb0 [ 98.284730][ T6855] dev_ethtool+0x52/0x1670 [ 98.284762][ T6855] ? full_name_hash+0x92/0xe0 [ 98.284804][ T6855] ? strcmp+0x22/0x50 [ 98.284835][ T6855] dev_ioctl+0x2e0/0x960 [ 98.284918][ T6855] sock_do_ioctl+0x197/0x220 [ 98.284952][ T6855] sock_ioctl+0x41b/0x610 [ 98.285102][ T6855] ? __pfx_sock_ioctl+0x10/0x10 [ 98.285150][ T6855] __se_sys_ioctl+0xce/0x140 [ 98.285203][ T6855] __x64_sys_ioctl+0x43/0x50 [ 98.285284][ T6855] x64_sys_call+0x14b0/0x3000 [ 98.285323][ T6855] do_syscall_64+0xd8/0x2c0 [ 98.285400][ T6855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.285433][ T6855] RIP: 0033:0x7fef84e7f749 [ 98.285472][ T6855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.285501][ T6855] RSP: 002b:00007fef838e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.285538][ T6855] RAX: ffffffffffffffda RBX: 00007fef850d5fa0 RCX: 00007fef84e7f749 [ 98.285558][ T6855] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 98.285578][ T6855] RBP: 00007fef838e7090 R08: 0000000000000000 R09: 0000000000000000 [ 98.285597][ T6855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.285616][ T6855] R13: 00007fef850d6038 R14: 00007fef850d5fa0 R15: 00007ffe186219e8 [ 98.285647][ T6855] [ 98.500100][ T6853] EXT4-fs (loop6): 1 truncate cleaned up [ 98.981857][ T6868] FAULT_INJECTION: forcing a failure. [ 98.981857][ T6868] name failslab, interval 1, probability 0, space 0, times 0 [ 98.996567][ T6868] CPU: 0 UID: 0 PID: 6868 Comm: syz.0.824 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.996605][ T6868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.996634][ T6868] Call Trace: [ 98.996642][ T6868] [ 98.996653][ T6868] __dump_stack+0x1d/0x30 [ 98.996689][ T6868] dump_stack_lvl+0xe8/0x140 [ 98.996763][ T6868] dump_stack+0x15/0x1b [ 98.996793][ T6868] should_fail_ex+0x265/0x280 [ 98.996829][ T6868] should_failslab+0x8c/0xb0 [ 98.996865][ T6868] kmem_cache_alloc_noprof+0x69/0x4b0 [ 98.996899][ T6868] ? pidfs_xattr_set+0xa3/0x150 [ 98.997056][ T6868] pidfs_xattr_set+0xa3/0x150 [ 98.997096][ T6868] ? __pfx_pidfs_xattr_set+0x10/0x10 [ 98.997146][ T6868] __vfs_removexattr+0x2c7/0x2f0 [ 98.997244][ T6868] __vfs_removexattr_locked+0x181/0x1c0 [ 98.997327][ T6868] vfs_removexattr+0x75/0x170 [ 98.997362][ T6868] path_removexattrat+0x356/0x570 [ 98.997421][ T6868] __x64_sys_fremovexattr+0x35/0x40 [ 98.997487][ T6868] x64_sys_call+0x4da/0x3000 [ 98.997515][ T6868] do_syscall_64+0xd8/0x2c0 [ 98.997644][ T6868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.997674][ T6868] RIP: 0033:0x7fef84e7f749 [ 98.997693][ T6868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.997712][ T6868] RSP: 002b:00007fef838e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c7 [ 98.997754][ T6868] RAX: ffffffffffffffda RBX: 00007fef850d5fa0 RCX: 00007fef84e7f749 [ 98.997772][ T6868] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 98.997789][ T6868] RBP: 00007fef838e7090 R08: 0000000000000000 R09: 0000000000000000 [ 98.997806][ T6868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.997824][ T6868] R13: 00007fef850d6038 R14: 00007fef850d5fa0 R15: 00007ffe186219e8 [ 98.997850][ T6868] [ 99.243372][ T6869] netlink: 24 bytes leftover after parsing attributes in process `syz.5.822'. [ 99.775546][ T6877] loop0: detected capacity change from 0 to 512 [ 99.794172][ T6877] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.833455][ T6892] netlink: 24 bytes leftover after parsing attributes in process `syz.6.832'. [ 99.869050][ T6877] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz.0.829: directory missing '.' [ 99.885396][ T6892] netlink: 24 bytes leftover after parsing attributes in process `syz.6.832'. [ 99.908710][ T6895] syzkaller0: entered promiscuous mode [ 99.914247][ T6895] syzkaller0: entered allmulticast mode [ 99.947022][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.6.832'. [ 100.010887][ T6906] bridge1: entered promiscuous mode [ 100.016233][ T6906] bridge1: entered allmulticast mode [ 100.062518][ T6910] loop0: detected capacity change from 0 to 512 [ 100.606754][ T6955] loop2: detected capacity change from 0 to 512 [ 100.993418][ T6966] lo speed is unknown, defaulting to 1000 [ 100.994495][ T6910] loop0: detected capacity change from 0 to 1024 [ 101.072697][ T6910] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.254893][ T6910] EXT4-fs mount: 16 callbacks suppressed [ 101.254967][ T6910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.486528][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.548140][ T6955] loop2: detected capacity change from 0 to 1024 [ 101.579967][ T6955] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.629693][ T29] kauditd_printk_skb: 401 callbacks suppressed [ 101.629712][ T29] audit: type=1326 audit(1766167810.041:5796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6968 comm="syz.6.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b27912005 code=0x7ffc0000 [ 101.659453][ T29] audit: type=1326 audit(1766167810.041:5797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6968 comm="syz.6.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b27912005 code=0x7ffc0000 [ 101.682884][ T29] audit: type=1326 audit(1766167810.051:5798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6968 comm="syz.6.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b27912005 code=0x7ffc0000 [ 101.706376][ T29] audit: type=1326 audit(1766167810.051:5799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6968 comm="syz.6.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b27912005 code=0x7ffc0000 [ 101.729836][ T29] audit: type=1326 audit(1766167810.051:5800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6968 comm="syz.6.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b27912005 code=0x7ffc0000 [ 101.753412][ T29] audit: type=1326 audit(1766167810.051:5801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6968 comm="syz.6.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b27912005 code=0x7ffc0000 [ 101.776903][ T29] audit: type=1326 audit(1766167810.061:5802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6968 comm="syz.6.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b27912005 code=0x7ffc0000 [ 101.800312][ T29] audit: type=1326 audit(1766167810.061:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6968 comm="syz.6.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b27912005 code=0x7ffc0000 [ 101.823691][ T29] audit: type=1326 audit(1766167810.061:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6968 comm="syz.6.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b27912005 code=0x7ffc0000 [ 101.850687][ T6955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.872789][ T6955] audit: audit_backlog=65 > audit_backlog_limit=64 [ 102.004617][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.014695][ T7011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.025012][ T7011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.084808][ T7011] __nla_validate_parse: 9 callbacks suppressed [ 102.084824][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.6.861'. [ 102.134838][ T7027] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 102.150129][ T7022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.867'. [ 102.167608][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.867'. [ 102.178320][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.867'. [ 102.208159][ T7033] debugfs: 'ptm0' already exists in 'caif_serial' [ 102.244146][ T7033] loop5: detected capacity change from 0 to 512 [ 102.262339][ T7033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.272546][ T7022] bridge2: entered promiscuous mode [ 102.275166][ T7033] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.280246][ T7022] bridge2: entered allmulticast mode [ 102.302171][ T7033] EXT4-fs warning (device loop5): ext4_empty_dir:3087: inode #12: comm syz.5.871: directory missing '.' [ 102.314232][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.873'. [ 102.353433][ T4832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.398606][ T7051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.875'. [ 102.438271][ T7057] netlink: 28 bytes leftover after parsing attributes in process `syz.5.874'. [ 102.447342][ T7057] netlink: 32 bytes leftover after parsing attributes in process `syz.5.874'. [ 102.456295][ T7057] netlink: 28 bytes leftover after parsing attributes in process `syz.5.874'. [ 102.524735][ T7065] loop0: detected capacity change from 0 to 512 [ 102.585559][ T7075] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 102.843132][ T7065] loop0: detected capacity change from 0 to 1024 [ 102.863519][ T7065] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.894911][ T7065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.938898][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.961950][ T7090] loop0: detected capacity change from 0 to 512 [ 102.977671][ T7090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.990730][ T7090] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.159226][ T7093] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #18: comm syz.0.883: corrupted inode contents [ 103.171389][ T7093] EXT4-fs (loop0): Remounting filesystem read-only [ 103.178019][ T7093] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 103.482892][ T7098] debugfs: 'ptm0' already exists in 'caif_serial' [ 103.499771][ T7098] loop5: detected capacity change from 0 to 512 [ 103.526016][ T7098] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.569112][ T7098] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.583706][ T7098] EXT4-fs warning (device loop5): ext4_empty_dir:3087: inode #12: comm syz.5.885: directory missing '.' [ 103.622923][ T7106] loop2: detected capacity change from 0 to 2048 [ 103.640310][ T4832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.692073][ T7106] EXT4-fs (loop2): failed to initialize system zone (-117) [ 103.699778][ T7106] EXT4-fs (loop2): mount failed [ 103.764905][ T7126] netlink: 28 bytes leftover after parsing attributes in process `syz.5.889'. [ 103.822605][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.835043][ T7137] loop5: detected capacity change from 0 to 512 [ 103.881722][ T7137] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.901231][ T7137] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.988982][ T7142] bridge3: entered promiscuous mode [ 103.994378][ T7142] bridge3: entered allmulticast mode [ 104.074690][ T7167] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.087979][ T7165] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7165 comm=syz.0.898 [ 104.100484][ T7165] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7165 comm=syz.0.898 [ 104.120733][ T7165] loop0: detected capacity change from 0 to 512 [ 104.128425][ T7168] netlink: 'syz.2.899': attribute type 10 has an invalid length. [ 104.140853][ T7167] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.150424][ T7165] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2807: inode #11: comm syz.0.898: corrupted xattr block 95: invalid header [ 104.166708][ T7165] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.898: bg 0: block 7: invalid block bitmap [ 104.167690][ T7161] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #18: comm syz.5.891: corrupted inode contents [ 104.180025][ T7165] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 104.191875][ T7161] EXT4-fs (loop5): Remounting filesystem read-only [ 104.206255][ T7161] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 104.209036][ T7168] net_ratelimit: 30 callbacks suppressed [ 104.209056][ T7168] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 104.232656][ T7165] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2971: inode #11: comm syz.0.898: corrupted xattr block 95: invalid header [ 104.251464][ T7165] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 104.260613][ T7165] EXT4-fs (loop0): 1 orphan inode deleted [ 104.262588][ T7167] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.267077][ T7165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.290001][ T7165] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.309846][ T7167] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.384290][ T186] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.395821][ T186] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.411713][ T186] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.431554][ T186] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.504618][ T7177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.529561][ T7180] EXT4-fs (loop2): failed to initialize system zone (-117) [ 104.538165][ T7180] EXT4-fs (loop2): mount failed [ 104.567801][ T7177] ext4 filesystem being mounted at /205/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.657109][ T7176] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz.0.902: directory missing '.' [ 104.669132][ T7200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.676496][ T7200] IPv6: NLM_F_CREATE should be set when creating new route [ 104.683732][ T7200] IPv6: NLM_F_CREATE should be set when creating new route [ 104.690977][ T7200] IPv6: NLM_F_CREATE should be set when creating new route [ 104.718670][ T4832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.728633][ T7197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.747284][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.756687][ T7197] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.787449][ T7197] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #12: comm syz.2.906: directory missing '.' [ 104.834924][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.925988][ T7222] debugfs: 'ptm0' already exists in 'caif_serial' [ 104.993947][ T7222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.008992][ T7222] ext4 filesystem being mounted at /210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.036116][ T7222] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #12: comm syz.2.911: directory missing '.' [ 105.078466][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.138983][ T7236] EXT4-fs (loop3): failed to initialize system zone (-117) [ 105.149405][ T7249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.163644][ T7249] ext4 filesystem being mounted at /210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.175825][ T7249] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz.0.921: directory missing '.' [ 105.203074][ T7236] EXT4-fs (loop3): mount failed [ 105.210337][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.239280][ T7253] veth0_to_bridge: entered promiscuous mode [ 105.255338][ T7252] veth0_to_bridge: left promiscuous mode [ 105.281572][ T7256] veth0_to_bridge: entered promiscuous mode [ 105.323801][ T7263] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 105.360122][ T7262] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm gtp: Parent and EA inode have the same ino 15 [ 105.386432][ T7262] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm gtp: Parent and EA inode have the same ino 15 [ 105.425505][ T7262] EXT4-fs (loop3): 1 orphan inode deleted [ 105.447229][ T7254] veth0_to_bridge: left promiscuous mode [ 105.455528][ T7262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.547957][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.582790][ T7285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.625043][ T7285] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.691877][ T7285] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #12: comm syz.2.932: directory missing '.' [ 105.750723][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.777313][ T7299] FAULT_INJECTION: forcing a failure. [ 105.777313][ T7299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.790572][ T7299] CPU: 1 UID: 0 PID: 7299 Comm: syz.6.936 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.790610][ T7299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.790629][ T7299] Call Trace: [ 105.790638][ T7299] [ 105.790649][ T7299] __dump_stack+0x1d/0x30 [ 105.790683][ T7299] dump_stack_lvl+0xe8/0x140 [ 105.790731][ T7299] dump_stack+0x15/0x1b [ 105.790759][ T7299] should_fail_ex+0x265/0x280 [ 105.790859][ T7299] should_fail+0xb/0x20 [ 105.790880][ T7299] should_fail_usercopy+0x1a/0x20 [ 105.790951][ T7299] _copy_to_iter+0xd2/0xe70 [ 105.791028][ T7299] ? avc_has_perm_noaudit+0xab/0x130 [ 105.791051][ T7299] ? avc_has_perm+0xf7/0x180 [ 105.791071][ T7299] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 105.791143][ T7299] __skb_datagram_iter+0x2f4/0x690 [ 105.791183][ T7299] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 105.791281][ T7299] skb_copy_datagram_iter+0x3d/0x110 [ 105.791386][ T7299] mptcp_recvmsg+0x4a0/0x1480 [ 105.791419][ T7299] ? selinux_socket_recvmsg+0x175/0x1b0 [ 105.791516][ T7299] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 105.791539][ T7299] inet_recvmsg+0x16b/0x290 [ 105.791565][ T7299] sock_recvmsg+0xf6/0x170 [ 105.791663][ T7299] __sys_recvfrom+0x122/0x1f0 [ 105.791700][ T7299] __x64_sys_recvfrom+0x76/0x90 [ 105.791730][ T7299] x64_sys_call+0x2918/0x3000 [ 105.791756][ T7299] do_syscall_64+0xd8/0x2c0 [ 105.791865][ T7299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.791888][ T7299] RIP: 0033:0x7f8b278df749 [ 105.791905][ T7299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.791938][ T7299] RSP: 002b:00007f8b26347038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 105.791959][ T7299] RAX: ffffffffffffffda RBX: 00007f8b27b35fa0 RCX: 00007f8b278df749 [ 105.791972][ T7299] RDX: fffffffffffffecb RSI: 0000200000000180 RDI: 0000000000000006 [ 105.791985][ T7299] RBP: 00007f8b26347090 R08: 0000000000000000 R09: 0000000000000000 [ 105.792049][ T7299] R10: 0000000000004100 R11: 0000000000000246 R12: 0000000000000001 [ 105.792062][ T7299] R13: 00007f8b27b36038 R14: 00007f8b27b35fa0 R15: 00007ffd6d12be08 [ 105.792083][ T7299] [ 106.158333][ T7347] FAULT_INJECTION: forcing a failure. [ 106.158333][ T7347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.171661][ T7347] CPU: 1 UID: 0 PID: 7347 Comm: syz.5.948 Not tainted syzkaller #0 PREEMPT(voluntary) [ 106.171715][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.171734][ T7347] Call Trace: [ 106.171742][ T7347] [ 106.171774][ T7347] __dump_stack+0x1d/0x30 [ 106.171809][ T7347] dump_stack_lvl+0xe8/0x140 [ 106.171841][ T7347] dump_stack+0x15/0x1b [ 106.171868][ T7347] should_fail_ex+0x265/0x280 [ 106.171901][ T7347] should_fail+0xb/0x20 [ 106.172005][ T7347] should_fail_usercopy+0x1a/0x20 [ 106.172154][ T7347] _copy_from_user+0x1c/0xb0 [ 106.172185][ T7347] __sys_bpf+0x183/0x7c0 [ 106.172222][ T7347] __x64_sys_bpf+0x41/0x50 [ 106.172349][ T7347] x64_sys_call+0x28e1/0x3000 [ 106.172381][ T7347] do_syscall_64+0xd8/0x2c0 [ 106.172425][ T7347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.172454][ T7347] RIP: 0033:0x7fa4d8e6f749 [ 106.172478][ T7347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.172593][ T7347] RSP: 002b:00007fa4d78d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.172621][ T7347] RAX: ffffffffffffffda RBX: 00007fa4d90c5fa0 RCX: 00007fa4d8e6f749 [ 106.172639][ T7347] RDX: 0000000000000090 RSI: 0000200000000880 RDI: 0000000000000005 [ 106.172657][ T7347] RBP: 00007fa4d78d7090 R08: 0000000000000000 R09: 0000000000000000 [ 106.172674][ T7347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.172692][ T7347] R13: 00007fa4d90c6038 R14: 00007fa4d90c5fa0 R15: 00007ffe814d3608 [ 106.172788][ T7347] [ 106.422568][ T7365] bridge0: entered promiscuous mode [ 106.428729][ T7340] set_capacity_and_notify: 9 callbacks suppressed [ 106.428749][ T7340] loop3: detected capacity change from 0 to 2048 [ 106.443952][ T7365] bridge0: port 3(macvtap0) entered blocking state [ 106.450638][ T7365] bridge0: port 3(macvtap0) entered disabled state [ 106.467599][ T7365] macvtap0: entered allmulticast mode [ 106.473111][ T7365] bridge0: entered allmulticast mode [ 106.521088][ T3306] loop3: p2 p3 p7 [ 106.535127][ T7340] loop3: p2 p3 p7 [ 106.550693][ T7365] macvtap0: left allmulticast mode [ 106.555902][ T7365] bridge0: left allmulticast mode [ 106.573702][ T7365] bridge0: left promiscuous mode [ 106.705768][ T29] kauditd_printk_skb: 483 callbacks suppressed [ 106.705787][ T29] audit: type=1400 audit(1766167815.131:6286): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 106.706383][ T7393] debugfs: 'ptm0' already exists in 'caif_serial' [ 106.760408][ T7393] loop0: detected capacity change from 0 to 512 [ 106.860679][ T7393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.953706][ T7393] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.060141][ T7393] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz.0.956: directory missing '.' [ 107.166209][ T29] audit: type=1400 audit(1766167815.571:6287): avc: denied { create } for pid=7407 comm="syz.6.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.185838][ T29] audit: type=1400 audit(1766167815.581:6288): avc: denied { setopt } for pid=7407 comm="syz.6.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.205417][ T29] audit: type=1400 audit(1766167815.581:6289): avc: denied { write } for pid=7407 comm="syz.6.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.335276][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.509801][ T29] audit: type=1326 audit(1766167815.881:6290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.6.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b278df749 code=0x7ffc0000 [ 107.533310][ T29] audit: type=1326 audit(1766167815.881:6291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.6.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8b278df749 code=0x7ffc0000 [ 107.556531][ T29] audit: type=1326 audit(1766167815.881:6292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.6.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b278df749 code=0x7ffc0000 [ 107.580040][ T29] audit: type=1326 audit(1766167815.881:6293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.6.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f8b278df749 code=0x7ffc0000 [ 107.603572][ T29] audit: type=1326 audit(1766167815.881:6294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.6.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b278df749 code=0x7ffc0000 [ 107.645354][ T7426] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 107.707384][ T7432] debugfs: 'ptm0' already exists in 'caif_serial' [ 107.730749][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 107.743510][ T6893] udevd[6893]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 107.749953][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 107.770308][ T29] audit: type=1400 audit(1766167816.201:6295): avc: denied { create } for pid=7434 comm="syz.6.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 107.784816][ T7436] loop6: detected capacity change from 0 to 2048 [ 107.805268][ T7435] debugfs: 'ptm1' already exists in 'caif_serial' [ 107.805657][ T7432] loop3: detected capacity change from 0 to 512 [ 107.841737][ T7435] loop0: detected capacity change from 0 to 512 [ 107.851585][ T7432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.875401][ T7439] loop5: detected capacity change from 0 to 512 [ 107.875942][ T7435] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.884221][ T7432] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.914615][ T7439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.936418][ T7436] EXT4-fs (loop6): failed to initialize system zone (-117) [ 107.943701][ T7436] EXT4-fs (loop6): mount failed [ 107.951140][ T7435] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.972103][ T7432] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #12: comm syz.3.958: directory missing '.' [ 107.983746][ T7439] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.004973][ T7435] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz.0.962: directory missing '.' [ 108.033001][ T7439] EXT4-fs warning (device loop5): ext4_empty_dir:3087: inode #12: comm syz.5.967: directory missing '.' [ 108.033283][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.139527][ T4832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.150353][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.300528][ T7470] loop5: detected capacity change from 0 to 512 [ 108.338688][ T7470] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.374901][ T7470] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.389071][ T7470] EXT4-fs warning (device loop5): ext4_empty_dir:3087: inode #12: comm syz.5.970: directory missing '.' [ 108.416223][ T7488] lo speed is unknown, defaulting to 1000 [ 108.453456][ T7489] __nla_validate_parse: 19 callbacks suppressed [ 108.453476][ T7489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.973'. [ 108.497035][ T7489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.973'. [ 108.525746][ T4832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.553472][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 108.575642][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 108.637510][ T7494] bridge3: entered promiscuous mode [ 108.642787][ T7494] bridge3: entered allmulticast mode [ 108.703737][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.5.976'. [ 108.776827][ T7502] netlink: 24 bytes leftover after parsing attributes in process `syz.5.978'. [ 108.785860][ T7502] netlink: 24 bytes leftover after parsing attributes in process `syz.5.978'. [ 108.801589][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.978'. [ 108.822446][ T7502] bridge4: entered promiscuous mode [ 108.827758][ T7502] bridge4: entered allmulticast mode [ 108.868805][ T7510] loop5: detected capacity change from 0 to 512 [ 108.892757][ T7510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.905751][ T7510] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.984843][ T7516] debugfs: 'ptm0' already exists in 'caif_serial' [ 109.009761][ T7516] loop3: detected capacity change from 0 to 512 [ 109.053179][ T7516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.086446][ T7516] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.120717][ T7516] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #12: comm syz.3.984: directory missing '.' [ 109.159711][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.186189][ T7528] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #18: comm syz.5.982: corrupted inode contents [ 109.235970][ T7528] EXT4-fs (loop5): Remounting filesystem read-only [ 109.244379][ T7528] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 109.265871][ T7548] loop6: detected capacity change from 0 to 512 [ 109.728987][ T7570] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 109.769918][ T4832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.870226][ T7572] netlink: 24 bytes leftover after parsing attributes in process `syz.5.993'. [ 109.887174][ T7572] netlink: 24 bytes leftover after parsing attributes in process `syz.5.993'. [ 109.964366][ T7572] bridge5: entered promiscuous mode [ 109.969713][ T7572] bridge5: entered allmulticast mode [ 110.294579][ T7548] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.331982][ T7593] FAULT_INJECTION: forcing a failure. [ 110.331982][ T7593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.345168][ T7593] CPU: 0 UID: 0 PID: 7593 Comm: syz.2.999 Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.345205][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.345222][ T7593] Call Trace: [ 110.345294][ T7593] [ 110.345304][ T7593] __dump_stack+0x1d/0x30 [ 110.345331][ T7593] dump_stack_lvl+0xe8/0x140 [ 110.345396][ T7593] dump_stack+0x15/0x1b [ 110.345436][ T7593] should_fail_ex+0x265/0x280 [ 110.345466][ T7593] should_fail+0xb/0x20 [ 110.345542][ T7593] should_fail_usercopy+0x1a/0x20 [ 110.345572][ T7593] _copy_to_user+0x20/0xa0 [ 110.345697][ T7593] simple_read_from_buffer+0xb5/0x130 [ 110.345727][ T7593] proc_fail_nth_read+0x10e/0x150 [ 110.345821][ T7593] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.345927][ T7593] vfs_read+0x1a8/0x770 [ 110.346020][ T7593] ? __rcu_read_unlock+0x4f/0x70 [ 110.346048][ T7593] ? __fget_files+0x184/0x1c0 [ 110.346072][ T7593] ? mutex_lock+0x58/0x90 [ 110.346106][ T7593] ksys_read+0xda/0x1a0 [ 110.346174][ T7593] __x64_sys_read+0x40/0x50 [ 110.346194][ T7593] x64_sys_call+0x2889/0x3000 [ 110.346221][ T7593] do_syscall_64+0xd8/0x2c0 [ 110.346268][ T7593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.346368][ T7593] RIP: 0033:0x7f476f48e15c [ 110.346506][ T7593] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 110.346526][ T7593] RSP: 002b:00007f476deef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.346627][ T7593] RAX: ffffffffffffffda RBX: 00007f476f6e5fa0 RCX: 00007f476f48e15c [ 110.346645][ T7593] RDX: 000000000000000f RSI: 00007f476deef0a0 RDI: 0000000000000008 [ 110.346662][ T7593] RBP: 00007f476deef090 R08: 0000000000000000 R09: 0000000000000000 [ 110.346678][ T7593] R10: 000000000000bc44 R11: 0000000000000246 R12: 0000000000000002 [ 110.346699][ T7593] R13: 00007f476f6e6038 R14: 00007f476f6e5fa0 R15: 00007fffdba7e928 [ 110.346718][ T7593] [ 110.671195][ T7548] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.768742][ T6453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.969116][ T7613] EXT4-fs (loop6): failed to initialize system zone (-117) [ 111.009935][ T7569] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.018100][ T7613] EXT4-fs (loop6): mount failed [ 111.062022][ T7621] loop3: p2 p3 p7 [ 111.093389][ T3005] loop3: p2 p3 p7 [ 111.160540][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 111.184596][ T7569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.249518][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 111.261426][ T6893] udevd[6893]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 111.296380][ T7630] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.317090][ T7630] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.350201][ T3306] loop3: p2 p3 p7 [ 111.367473][ T7631] loop3: p2 p3 p7 [ 111.423455][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.479497][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 111.484501][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 111.490098][ T6893] udevd[6893]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 111.511381][ T7635] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #18: comm syz.6.1012: corrupted inode contents [ 111.536769][ T7635] EXT4-fs (loop6): Remounting filesystem read-only [ 111.580991][ T7635] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 111.590751][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 111.625083][ T6453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.722246][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 111.722261][ T29] audit: type=1400 audit(1766167820.151:6415): avc: denied { read } for pid=7639 comm="syz.0.1013" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 111.783157][ T7658] lo speed is unknown, defaulting to 1000 [ 111.831211][ T29] audit: type=1400 audit(1766167820.151:6416): avc: denied { open } for pid=7639 comm="syz.0.1013" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 111.854860][ T29] audit: type=1400 audit(1766167820.151:6417): avc: denied { create } for pid=7639 comm="syz.0.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 111.874416][ T29] audit: type=1400 audit(1766167820.231:6418): avc: denied { read } for pid=7655 comm="syz.2.1020" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.897528][ T29] audit: type=1400 audit(1766167820.231:6419): avc: denied { open } for pid=7655 comm="syz.2.1020" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.921327][ T29] audit: type=1400 audit(1766167820.231:6420): avc: denied { ioctl } for pid=7655 comm="syz.2.1020" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.946112][ T29] audit: type=1400 audit(1766167820.241:6421): avc: denied { write } for pid=7655 comm="syz.2.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.966616][ T29] audit: type=1400 audit(1766167820.241:6422): avc: denied { read } for pid=7655 comm="syz.2.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.007309][ T7663] set_capacity_and_notify: 7 callbacks suppressed [ 112.007331][ T7663] loop3: detected capacity change from 0 to 512 [ 112.068230][ T29] audit: type=1400 audit(1766167820.481:6423): avc: denied { write } for pid=7670 comm="syz.2.1024" name="rt_acct" dev="proc" ino=4026532526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 112.091273][ T29] audit: type=1400 audit(1766167820.481:6424): avc: denied { create } for pid=7670 comm="syz.2.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.119939][ T7663] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 112.129098][ T7663] EXT4-fs (loop3): orphan cleanup on readonly fs [ 112.143683][ T7663] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 112.158644][ T7663] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 112.166930][ T7663] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1021: bg 0: block 40: padding at end of block bitmap is not set [ 112.183574][ T7663] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 112.196810][ T7663] EXT4-fs (loop3): 1 truncate cleaned up [ 112.208915][ T7663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.312306][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.403489][ T7708] netlink: 'syz.5.1034': attribute type 10 has an invalid length. [ 112.443917][ T7709] loop3: detected capacity change from 0 to 2048 [ 112.463363][ T7709] EXT4-fs (loop3): failed to initialize system zone (-117) [ 112.477228][ T7709] EXT4-fs (loop3): mount failed [ 112.632408][ T7726] loop3: detected capacity change from 0 to 512 [ 112.648522][ T7726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.661710][ T7726] ext4 filesystem being mounted at /205/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.674701][ T7721] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #12: comm syz.3.1040: directory missing '.' [ 112.704540][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.882954][ T7742] bridge5: entered promiscuous mode [ 112.888257][ T7742] bridge5: entered allmulticast mode [ 112.965978][ T7750] FAULT_INJECTION: forcing a failure. [ 112.965978][ T7750] name failslab, interval 1, probability 0, space 0, times 0 [ 112.979004][ T7750] CPU: 1 UID: 0 PID: 7750 Comm: syz.3.1050 Not tainted syzkaller #0 PREEMPT(voluntary) [ 112.979030][ T7750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.979124][ T7750] Call Trace: [ 112.979171][ T7750] [ 112.979228][ T7750] __dump_stack+0x1d/0x30 [ 112.979260][ T7750] dump_stack_lvl+0xe8/0x140 [ 112.979282][ T7750] dump_stack+0x15/0x1b [ 112.979302][ T7750] should_fail_ex+0x265/0x280 [ 112.979327][ T7750] should_failslab+0x8c/0xb0 [ 112.979374][ T7750] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 112.979402][ T7750] ? __d_alloc+0x37/0x340 [ 112.979461][ T7750] __d_alloc+0x37/0x340 [ 112.979526][ T7750] d_alloc_anon+0x17/0x20 [ 112.979552][ T7750] path_from_stashed+0x1cf/0x330 [ 112.979576][ T7750] pidfs_alloc_file+0xa2/0x180 [ 112.979610][ T7750] pidfd_prepare+0x11d/0x170 [ 112.979630][ T7750] __se_sys_pidfd_open+0x133/0x270 [ 112.979668][ T7750] __x64_sys_pidfd_open+0x31/0x40 [ 112.979698][ T7750] x64_sys_call+0x57c/0x3000 [ 112.979721][ T7750] do_syscall_64+0xd8/0x2c0 [ 112.979779][ T7750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.979800][ T7750] RIP: 0033:0x7fda8312f749 [ 112.979814][ T7750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.979831][ T7750] RSP: 002b:00007fda81b97028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 112.979849][ T7750] RAX: ffffffffffffffda RBX: 00007fda83385fa0 RCX: 00007fda8312f749 [ 112.979892][ T7750] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000021e [ 112.979904][ T7750] RBP: 00007fda81b97090 R08: 0000000000000000 R09: 0000000000000000 [ 112.979915][ T7750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.979932][ T7750] R13: 00007fda83386038 R14: 00007fda83385fa0 R15: 00007ffee06e6fc8 [ 112.979949][ T7750] [ 113.244437][ T7754] loop6: detected capacity change from 0 to 512 [ 113.264538][ T7754] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.376191][ T7754] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.459851][ T7776] loop3: detected capacity change from 0 to 1024 [ 113.467186][ T7754] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz.6.1051: directory missing '.' [ 113.478720][ T7776] EXT4-fs: Ignoring removed orlov option [ 113.506905][ T6453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.522249][ T7776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.560575][ T7790] lo speed is unknown, defaulting to 1000 [ 113.940108][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.087863][ T7823] __nla_validate_parse: 6 callbacks suppressed [ 114.087891][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1064'. [ 114.103813][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1064'. [ 114.130023][ T7823] bridge1: entered promiscuous mode [ 114.135310][ T7823] bridge1: entered allmulticast mode [ 114.176073][ T7825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1065'. [ 114.248672][ T7829] loop0: detected capacity change from 0 to 2048 [ 114.271365][ T7829] EXT4-fs (loop0): failed to initialize system zone (-117) [ 114.278823][ T7829] EXT4-fs (loop0): mount failed [ 114.609145][ T7857] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1077'. [ 114.652829][ T7862] loop5: detected capacity change from 0 to 2048 [ 114.670601][ T7862] EXT4-fs (loop5): failed to initialize system zone (-117) [ 114.686370][ T7862] EXT4-fs (loop5): mount failed [ 114.745034][ T7873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1082'. [ 114.775903][ T7874] lo speed is unknown, defaulting to 1000 [ 114.907645][ T7886] loop6: detected capacity change from 0 to 2048 [ 114.952229][ T3306] loop6: p2 p3 p7 [ 114.967210][ T7886] loop6: p2 p3 p7 [ 115.011695][ T7888] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1087'. [ 115.036730][ T6893] udevd[6893]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 115.036804][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 115.057994][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 115.078520][ T6893] udevd[6893]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 115.088730][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 115.094997][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 115.135192][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1090'. [ 115.203940][ T7902] loop6: detected capacity change from 0 to 1024 [ 115.214975][ T7902] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.227991][ T7902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.264700][ T6453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.280807][ T7904] loop2: detected capacity change from 0 to 2048 [ 115.314226][ T7904] EXT4-fs (loop2): failed to initialize system zone (-117) [ 115.342274][ T7904] EXT4-fs (loop2): mount failed [ 115.399100][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1097'. [ 115.414642][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1099'. [ 115.434570][ T7915] FAULT_INJECTION: forcing a failure. [ 115.434570][ T7915] name failslab, interval 1, probability 0, space 0, times 0 [ 115.447479][ T7915] CPU: 1 UID: 0 PID: 7915 Comm: syz.6.1097 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.447513][ T7915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.447538][ T7915] Call Trace: [ 115.447561][ T7915] [ 115.447572][ T7915] __dump_stack+0x1d/0x30 [ 115.447600][ T7915] dump_stack_lvl+0xe8/0x140 [ 115.447624][ T7915] dump_stack+0x15/0x1b [ 115.447711][ T7915] should_fail_ex+0x265/0x280 [ 115.447737][ T7915] should_failslab+0x8c/0xb0 [ 115.447826][ T7915] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 115.447860][ T7915] ? __alloc_skb+0x324/0x4d0 [ 115.447965][ T7915] __alloc_skb+0x324/0x4d0 [ 115.447989][ T7915] ? __alloc_skb+0x24d/0x4d0 [ 115.448014][ T7915] netlink_alloc_large_skb+0xbf/0xf0 [ 115.448048][ T7915] netlink_sendmsg+0x3cf/0x6b0 [ 115.448123][ T7915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.448162][ T7915] __sock_sendmsg+0x145/0x180 [ 115.448182][ T7915] ____sys_sendmsg+0x31e/0x4a0 [ 115.448215][ T7915] ___sys_sendmsg+0x17b/0x1d0 [ 115.448318][ T7915] __x64_sys_sendmsg+0xd4/0x160 [ 115.448363][ T7915] x64_sys_call+0x17ba/0x3000 [ 115.448390][ T7915] do_syscall_64+0xd8/0x2c0 [ 115.448489][ T7915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.448516][ T7915] RIP: 0033:0x7f8b278df749 [ 115.448543][ T7915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.448568][ T7915] RSP: 002b:00007f8b26347038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.448594][ T7915] RAX: ffffffffffffffda RBX: 00007f8b27b35fa0 RCX: 00007f8b278df749 [ 115.448611][ T7915] RDX: 0000000000000880 RSI: 0000200000000500 RDI: 0000000000000006 [ 115.448628][ T7915] RBP: 00007f8b26347090 R08: 0000000000000000 R09: 0000000000000000 [ 115.448687][ T7915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.448699][ T7915] R13: 00007f8b27b36038 R14: 00007f8b27b35fa0 R15: 00007ffd6d12be08 [ 115.448719][ T7915] [ 115.467591][ T7924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1101'. [ 115.561782][ T7926] 9p: Unknown access argument 18446744073709551615: -34 [ 115.567649][ T7930] FAULT_INJECTION: forcing a failure. [ 115.567649][ T7930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.639268][ T7922] SELinux: failed to load policy [ 115.639647][ T7930] CPU: 0 UID: 0 PID: 7930 Comm: syz.6.1102 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.639689][ T7930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.639710][ T7930] Call Trace: [ 115.639721][ T7930] [ 115.639732][ T7930] __dump_stack+0x1d/0x30 [ 115.639772][ T7930] dump_stack_lvl+0xe8/0x140 [ 115.639906][ T7930] dump_stack+0x15/0x1b [ 115.639941][ T7930] should_fail_ex+0x265/0x280 [ 115.639993][ T7930] should_fail+0xb/0x20 [ 115.640033][ T7930] should_fail_usercopy+0x1a/0x20 [ 115.640076][ T7930] _copy_to_user+0x20/0xa0 [ 115.640172][ T7930] simple_read_from_buffer+0xb5/0x130 [ 115.640249][ T7930] proc_fail_nth_read+0x10e/0x150 [ 115.640295][ T7930] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.640348][ T7930] vfs_read+0x1a8/0x770 [ 115.640383][ T7930] ksys_read+0xda/0x1a0 [ 115.640414][ T7930] __x64_sys_read+0x40/0x50 [ 115.640444][ T7930] x64_sys_call+0x2889/0x3000 [ 115.640548][ T7930] do_syscall_64+0xd8/0x2c0 [ 115.640601][ T7930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.640634][ T7930] RIP: 0033:0x7f8b278de15c [ 115.640657][ T7930] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 115.640686][ T7930] RSP: 002b:00007f8b26347030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 115.640742][ T7930] RAX: ffffffffffffffda RBX: 00007f8b27b35fa0 RCX: 00007f8b278de15c [ 115.640806][ T7930] RDX: 000000000000000f RSI: 00007f8b263470a0 RDI: 0000000000000005 [ 115.640825][ T7930] RBP: 00007f8b26347090 R08: 0000000000000000 R09: 0000000000000000 [ 115.640844][ T7930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.640922][ T7930] R13: 00007f8b27b36038 R14: 00007f8b27b35fa0 R15: 00007ffd6d12be08 [ 115.640950][ T7930] [ 115.901550][ T6893] loop3: p2 p3 p7 [ 115.926752][ T7925] loop3: p2 p3 p7 [ 115.956472][ T7922] ------------[ cut here ]------------ [ 115.962288][ T7922] EA inode 11 i_nlink=2 [ 115.962316][ T7922] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.2.1100/7922 [ 115.977323][ T7922] Modules linked in: [ 115.981272][ T7922] CPU: 0 UID: 0 PID: 7922 Comm: syz.2.1100 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.991144][ T7922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.001265][ T7922] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 116.008013][ T7922] Code: 41 cc 9c ff 4c 8d 2d fa b8 20 05 49 8d 7e 40 e8 c1 61 b8 ff 49 8b 6e 40 4c 89 e7 e8 d5 5c b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 3c f7 ba 03 66 66 66 2e 0f 1f 84 [ 116.027745][ T7922] RSP: 0018:ffffc90005f135a0 EFLAGS: 00010246 [ 116.033853][ T7922] RAX: ffff88810acc0a90 RBX: ffff88811a8ce950 RCX: ffffffff81bb545b [ 116.041973][ T7922] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0d40 [ 116.050039][ T7922] RBP: 000000000000000b R08: 000188811a8ce903 R09: 0000000000000000 [ 116.058086][ T7922] R10: ffffc90005f134d0 R11: 0001c90005f134d0 R12: ffff88811a8ce900 [ 116.066154][ T7922] R13: ffffffff86dc0d40 R14: ffff88811a8ce8b8 R15: 0000000000000001 [ 116.074153][ T7922] FS: 00007f476deef6c0(0000) GS:ffff8882aedc2000(0000) knlGS:0000000000000000 [ 116.083181][ T7922] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.089862][ T7922] CR2: 00007fb382c1d000 CR3: 000000010d272000 CR4: 00000000003506f0 [ 116.097988][ T7922] Call Trace: [ 116.101316][ T7922] [ 116.104283][ T7922] ext4_xattr_set_entry+0x77f/0x1020 [ 116.109770][ T7922] ext4_xattr_ibody_set+0x184/0x3c0 [ 116.115198][ T7922] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 116.121205][ T7922] __ext4_expand_extra_isize+0x246/0x280 [ 116.126964][ T7922] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 116.132489][ T7922] ext4_evict_inode+0x7c4/0xd40 [ 116.137468][ T7922] ? __pfx_ext4_evict_inode+0x10/0x10 [ 116.142900][ T7922] evict+0x2af/0x510 [ 116.146947][ T7922] ? __dquot_initialize+0x146/0x7c0 [ 116.152259][ T7922] iput+0x4bd/0x650 [ 116.156173][ T7922] ext4_process_orphan+0x1a9/0x1c0 [ 116.161344][ T7922] ext4_orphan_cleanup+0x6a8/0xa00 [ 116.166595][ T7922] ext4_fill_super+0x3411/0x37a0 [ 116.171619][ T7922] ? set_blocksize+0x1a8/0x310 [ 116.176458][ T7922] ? sb_set_blocksize+0xfc/0x170 [ 116.181494][ T7922] ? setup_bdev_super+0x30e/0x370 [ 116.186664][ T7922] ? __pfx_ext4_fill_super+0x10/0x10 [ 116.192011][ T7922] get_tree_bdev_flags+0x291/0x300 [ 116.197246][ T7922] ? __pfx_ext4_fill_super+0x10/0x10 [ 116.202662][ T7922] get_tree_bdev+0x1f/0x30 [ 116.207171][ T7922] ext4_get_tree+0x1c/0x30 [ 116.211699][ T7922] vfs_get_tree+0x57/0x1d0 [ 116.216193][ T7922] do_new_mount+0x24d/0x6a0 [ 116.220837][ T7922] path_mount+0x4ab/0xb80 [ 116.225227][ T7922] ? user_path_at+0xbf/0x130 [ 116.229901][ T7922] __se_sys_mount+0x28c/0x2e0 [ 116.234626][ T7922] __x64_sys_mount+0x67/0x80 [ 116.239452][ T7922] x64_sys_call+0x2cca/0x3000 [ 116.244208][ T7922] do_syscall_64+0xd8/0x2c0 [ 116.248820][ T7922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.254758][ T7922] RIP: 0033:0x7f476f490eea [ 116.259252][ T7922] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.278975][ T7922] RSP: 002b:00007f476deeee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 116.287481][ T7922] RAX: ffffffffffffffda RBX: 00007f476deeeef0 RCX: 00007f476f490eea [ 116.295581][ T7922] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f476deeeeb0 [ 116.303683][ T7922] RBP: 0000200000000180 R08: 00007f476deeeef0 R09: 0000000000800700 [ 116.311752][ T7922] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 116.319818][ T7922] R13: 00007f476deeeeb0 R14: 000000000000046f R15: 000000000000002c [ 116.327852][ T7922] [ 116.330900][ T7922] ---[ end trace 0000000000000000 ]--- [ 116.375513][ T7922] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.1100: iget: bad extra_isize 90 (inode size 256) [ 116.389966][ T7922] EXT4-fs (loop2): Remounting filesystem read-only [ 116.396910][ T7922] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 116.406069][ T7922] EXT4-fs (loop2): 1 orphan inode deleted [ 116.412523][ T7922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.429379][ T7922] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.597971][ T7966] netlink: 'syz.3.1114': attribute type 4 has an invalid length. [ 116.643560][ T7968] lo speed is unknown, defaulting to 1000 [ 116.769162][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 116.769182][ T29] audit: type=1400 audit(1766167825.201:6809): avc: denied { create } for pid=7983 comm="syz.2.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 116.815709][ T29] audit: type=1400 audit(1766167825.241:6810): avc: denied { ioctl } for pid=7983 comm="syz.2.1119" path="socket:[18086]" dev="sockfs" ino=18086 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 116.840754][ T29] audit: type=1400 audit(1766167825.241:6811): avc: denied { create } for pid=7983 comm="syz.2.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.860507][ T29] audit: type=1400 audit(1766167825.241:6812): avc: denied { setopt } for pid=7983 comm="syz.2.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.880041][ T29] audit: type=1400 audit(1766167825.241:6813): avc: denied { bind } for pid=7983 comm="syz.2.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.899572][ T29] audit: type=1400 audit(1766167825.241:6814): avc: denied { name_bind } for pid=7983 comm="syz.2.1119" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 116.921501][ T29] audit: type=1400 audit(1766167825.241:6815): avc: denied { node_bind } for pid=7983 comm="syz.2.1119" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 116.943230][ T29] audit: type=1400 audit(1766167825.241:6816): avc: denied { getopt } for pid=7983 comm="syz.2.1119" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.964850][ T29] audit: type=1400 audit(1766167825.241:6817): avc: denied { connect } for pid=7983 comm="syz.2.1119" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.986633][ T29] audit: type=1400 audit(1766167825.241:6818): avc: denied { name_connect } for pid=7983 comm="syz.2.1119" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 117.045593][ T7985] set_capacity_and_notify: 3 callbacks suppressed [ 117.045615][ T7985] loop2: detected capacity change from 0 to 8192 [ 117.145476][ T7991] loop5: detected capacity change from 0 to 512 [ 117.178174][ T7991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.206585][ T7991] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.229624][ T7985] SELinux: syz.2.1119 (7985) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 117.345244][ T7997] loop6: detected capacity change from 0 to 512 [ 117.369899][ T7997] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.426579][ T7953] loop0: detected capacity change from 0 to 1024 [ 117.460914][ T7997] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.462839][ T7953] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.487164][ T7997] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz.6.1123: directory missing '.' [ 117.526417][ T6453] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.564302][ T8005] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #18: comm syz.5.1121: corrupted inode contents [ 117.602959][ T8005] EXT4-fs (loop5): Remounting filesystem read-only [ 117.609763][ T8005] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 117.630788][ T8020] debugfs: 'ptm0' already exists in 'caif_serial' [ 117.641214][ T7953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.688554][ T8020] loop3: detected capacity change from 0 to 512 [ 117.732632][ T8020] ext4 filesystem being mounted at /225/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.775941][ T8020] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #12: comm syz.3.1127: directory missing '.' [ 117.943422][ T8059] loop3: detected capacity change from 0 to 1024 [ 117.950608][ T8059] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.071380][ T8071] loop0: detected capacity change from 0 to 2048 [ 118.133417][ T8076] loop3: detected capacity change from 0 to 2048 [ 118.150506][ T6893] loop0: p2 p3 p7 [ 118.160276][ T8076] EXT4-fs (loop3): failed to initialize system zone (-117) [ 118.168027][ T8076] EXT4-fs (loop3): mount failed [ 118.177743][ T8071] loop0: p2 p3 p7 [ 118.221919][ T8083] FAULT_INJECTION: forcing a failure. [ 118.221919][ T8083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.235289][ T8083] CPU: 0 UID: 0 PID: 8083 Comm: syz.3.1140 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 118.235364][ T8083] Tainted: [W]=WARN [ 118.235372][ T8083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.235385][ T8083] Call Trace: [ 118.235393][ T8083] [ 118.235402][ T8083] __dump_stack+0x1d/0x30 [ 118.235432][ T8083] dump_stack_lvl+0xe8/0x140 [ 118.235461][ T8083] dump_stack+0x15/0x1b [ 118.235488][ T8083] should_fail_ex+0x265/0x280 [ 118.235519][ T8083] should_fail+0xb/0x20 [ 118.235545][ T8083] should_fail_usercopy+0x1a/0x20 [ 118.235577][ T8083] _copy_to_iter+0x387/0xe70 [ 118.235677][ T8083] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 118.235756][ T8083] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 118.235869][ T8083] __skb_datagram_iter+0xc6/0x690 [ 118.235930][ T8083] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 118.235966][ T8083] skb_copy_datagram_iter+0x3d/0x110 [ 118.236001][ T8083] netlink_recvmsg+0x1a8/0x550 [ 118.236069][ T8083] ? __pfx_netlink_recvmsg+0x10/0x10 [ 118.236108][ T8083] sock_recvmsg+0x139/0x170 [ 118.236185][ T8083] ____sys_recvmsg+0xf5/0x280 [ 118.236277][ T8083] ___sys_recvmsg+0x11f/0x370 [ 118.236340][ T8083] do_recvmmsg+0x1ef/0x540 [ 118.236379][ T8083] ? get_timespec64+0xc9/0x100 [ 118.236404][ T8083] __x64_sys_recvmmsg+0xfb/0x170 [ 118.236470][ T8083] x64_sys_call+0x2b75/0x3000 [ 118.236527][ T8083] do_syscall_64+0xd8/0x2c0 [ 118.236565][ T8083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.236632][ T8083] RIP: 0033:0x7fda8312f749 [ 118.236648][ T8083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.236668][ T8083] RSP: 002b:00007fda81b97038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 118.236763][ T8083] RAX: ffffffffffffffda RBX: 00007fda83385fa0 RCX: 00007fda8312f749 [ 118.236849][ T8083] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 118.236862][ T8083] RBP: 00007fda81b97090 R08: 0000200000003700 R09: 0000000000000000 [ 118.236875][ T8083] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 118.236888][ T8083] R13: 00007fda83386038 R14: 00007fda83385fa0 R15: 00007ffee06e6fc8 [ 118.236909][ T8083] [ 119.230295][ T8112] __nla_validate_parse: 2 callbacks suppressed [ 119.230317][ T8112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1151'. [ 119.246399][ T8110] loop6: detected capacity change from 0 to 2048 [ 119.278863][ T8110] EXT4-fs (loop6): failed to initialize system zone (-117) [ 119.286323][ T8110] EXT4-fs (loop6): mount failed [ 119.430790][ T8129] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1156'. [ 119.440071][ T8129] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1156'. [ 119.450206][ T8130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1157'. [ 119.459594][ T8130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1157'. [ 119.480312][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1157'. [ 119.496650][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1157'. [ 119.541371][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1156'. [ 119.564893][ T8140] bridge2: entered promiscuous mode [ 119.570507][ T8140] bridge2: entered allmulticast mode [ 119.587336][ T8129] bridge7: entered promiscuous mode [ 119.592779][ T8129] bridge7: entered allmulticast mode [ 119.709772][ T8149] loop5: detected capacity change from 0 to 2048 [ 119.735747][ T8152] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1162'. [ 119.751525][ T8149] EXT4-fs (loop5): failed to initialize system zone (-117) [ 119.752686][ T8151] bridge8: entered promiscuous mode [ 119.764126][ T8151] bridge8: entered allmulticast mode [ 119.769458][ T8149] EXT4-fs (loop5): mount failed [ 119.932043][ T8152] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm syz.3.1162: corrupted inode contents [ 120.058038][ T8152] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #3: comm syz.3.1162: mark_inode_dirty error [ 120.073264][ T8152] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm syz.3.1162: corrupted inode contents [ 120.085746][ T8152] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1162: mark_inode_dirty error [ 120.104631][ T8152] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1162: Failed to acquire dquot type 0 [ 120.173821][ T8152] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1162: corrupted inode contents [ 120.240541][ T8152] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #16: comm syz.3.1162: mark_inode_dirty error [ 120.259055][ T8152] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1162: corrupted inode contents [ 120.271472][ T8152] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1162: mark_inode_dirty error [ 120.285192][ T8152] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1162: corrupted inode contents [ 120.385787][ T8152] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 120.431208][ T8152] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1162: corrupted inode contents [ 120.478258][ T8152] EXT4-fs error (device loop3): ext4_truncate:4635: inode #16: comm syz.3.1162: mark_inode_dirty error [ 120.490032][ T8152] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 120.501648][ T8152] EXT4-fs (loop3): 1 truncate cleaned up [ 120.509109][ T8152] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.573696][ T8190] syz_tun: entered allmulticast mode [ 120.687572][ T8152] syz.3.1162 (8152) used greatest stack depth: 9680 bytes left [ 120.701342][ T8192] EXT4-fs (loop0): failed to initialize system zone (-117) [ 120.714189][ T8192] EXT4-fs (loop0): mount failed [ 120.765697][ T8198] debugfs: 'ptm0' already exists in 'caif_serial' [ 120.805763][ T8198] ext4 filesystem being mounted at /256/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.834503][ T8198] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz.0.1180: directory missing '.' [ 120.867010][ T8204] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.914896][ T8216] netlink: 'syz.6.1182': attribute type 10 has an invalid length. [ 120.922890][ T8216] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1182'. [ 120.934990][ T8204] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.982239][ T8216] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 120.991383][ T8216] team0: Failed to send options change via netlink (err -105) [ 120.998965][ T8216] team0: Port device geneve1 added [ 121.010576][ T8204] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.061039][ T8204] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.104472][ T8242] lo speed is unknown, defaulting to 1000 [ 121.164807][ T8230] loop3: p2 p3 p7 [ 121.176702][ T31] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.196177][ T52] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.210594][ T52] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.236453][ T887] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.240592][ T3005] loop3: p2 p3 p7 [ 121.385382][ T8257] EXT4-fs (loop5): failed to initialize system zone (-117) [ 121.398434][ T8257] EXT4-fs (loop5): mount failed [ 121.511118][ T8267] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.525008][ T8267] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz.6.1195: directory missing '.' [ 121.580374][ T8274] Cannot find add_set index 0 as target [ 121.814736][ T29] kauditd_printk_skb: 1036 callbacks suppressed [ 121.814754][ T29] audit: type=1400 audit(1766167830.241:7853): avc: denied { create } for pid=8308 comm="syz.5.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 121.844187][ T8309] ip6tnl0: entered promiscuous mode [ 121.849651][ T8309] ip6tnl0: entered allmulticast mode [ 121.857096][ T29] audit: type=1400 audit(1766167830.241:7854): avc: denied { ioctl } for pid=8308 comm="syz.5.1201" path="socket:[19767]" dev="sockfs" ino=19767 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 121.861223][ T8309] syzkaller1: entered promiscuous mode [ 121.881936][ T29] audit: type=1400 audit(1766167830.241:7855): avc: denied { ioctl } for pid=8308 comm="syz.5.1201" path="socket:[19768]" dev="sockfs" ino=19768 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 121.887463][ T8309] syzkaller1: entered allmulticast mode [ 121.912052][ T29] audit: type=1400 audit(1766167830.241:7856): avc: denied { write } for pid=8308 comm="syz.5.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 121.937067][ T29] audit: type=1400 audit(1766167830.261:7857): avc: denied { create } for pid=8308 comm="syz.5.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.957942][ T29] audit: type=1400 audit(1766167830.291:7858): avc: denied { ioctl } for pid=8308 comm="syz.5.1201" path="socket:[19770]" dev="sockfs" ino=19770 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.982889][ T29] audit: type=1326 audit(1766167830.381:7859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.0.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fef84eb2005 code=0x7ffc0000 [ 122.009332][ T29] audit: type=1400 audit(1766167830.441:7860): avc: denied { write } for pid=8310 comm="syz.3.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 122.029663][ T29] audit: type=1400 audit(1766167830.441:7861): avc: denied { read } for pid=8310 comm="syz.3.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 122.069239][ T29] audit: type=1326 audit(1766167830.481:7862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.0.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fef84e7f749 code=0x7ffc0000 [ 122.129410][ T8315] set_capacity_and_notify: 6 callbacks suppressed [ 122.129430][ T8315] loop0: detected capacity change from 0 to 2048 [ 122.159217][ T8315] EXT4-fs (loop0): failed to initialize system zone (-117) [ 122.169130][ T8315] EXT4-fs (loop0): mount failed [ 122.254291][ T8327] debugfs: 'ptm0' already exists in 'caif_serial' [ 122.280629][ T8327] loop0: detected capacity change from 0 to 512 [ 122.324189][ T8327] ext4 filesystem being mounted at /261/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.346560][ T8334] loop3: detected capacity change from 0 to 1024 [ 122.370780][ T8334] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.394194][ T8327] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz.0.1209: directory missing '.' [ 122.556715][ T8344] bridge6: entered promiscuous mode [ 122.562014][ T8344] bridge6: entered allmulticast mode [ 122.618052][ T8369] loop6: detected capacity change from 0 to 2048 [ 122.641507][ T8369] EXT4-fs (loop6): failed to initialize system zone (-117) [ 122.667050][ T8369] EXT4-fs (loop6): mount failed [ 122.765685][ T8391] loop3: detected capacity change from 0 to 512 [ 122.788043][ T8391] EXT4-fs: Ignoring removed i_version option [ 122.800461][ T8391] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 122.844186][ T8398] loop6: detected capacity change from 0 to 1024 [ 122.850784][ T8391] EXT4-fs (loop3): 1 truncate cleaned up [ 122.900429][ T8398] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.012644][ T8403] bridge7: entered promiscuous mode [ 123.018134][ T8403] bridge7: entered allmulticast mode [ 123.075077][ T8411] loop5: detected capacity change from 0 to 512 [ 123.107414][ T8411] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.166271][ T8411] EXT4-fs warning (device loop5): ext4_empty_dir:3087: inode #12: comm syz.5.1227: directory missing '.' [ 123.193459][ T8422] loop6: detected capacity change from 0 to 512 [ 123.208823][ T8422] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.232692][ T8422] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz.6.1231: directory missing '.' [ 123.374037][ T8449] bridge7: entered promiscuous mode [ 123.379411][ T8449] bridge7: entered allmulticast mode [ 123.394505][ T8446] loop3: detected capacity change from 0 to 2048 [ 123.410198][ T8447] debugfs: 'ptm1' already exists in 'caif_serial' [ 123.443096][ T8453] loop6: detected capacity change from 0 to 1024 [ 123.458963][ T8447] ext4 filesystem being mounted at /253/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.469825][ T8446] EXT4-fs (loop3): failed to initialize system zone (-117) [ 123.479882][ T8453] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.492075][ T8446] EXT4-fs (loop3): mount failed [ 123.521948][ T8447] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #12: comm syz.2.1236: directory missing '.' [ 123.658459][ T8484] EXT4-fs: Ignoring removed oldalloc option [ 123.664478][ T8484] EXT4-fs: Ignoring removed bh option [ 124.166778][ T8512] bridge9: entered promiscuous mode [ 124.172064][ T8512] bridge9: entered allmulticast mode [ 124.541047][ T8484] ================================================================== [ 124.549189][ T8484] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 124.557387][ T8484] [ 124.559717][ T8484] write to 0xffff88811a8ccfc4 of 4 bytes by task 8497 on cpu 0: [ 124.567349][ T8484] xas_set_mark+0x12b/0x140 [ 124.571879][ T8484] __folio_start_writeback+0x155/0x340 [ 124.577355][ T8484] ext4_bio_write_folio+0x5ad/0x9f0 [ 124.582603][ T8484] mpage_process_page_bufs+0x4a1/0x620 [ 124.588079][ T8484] mpage_prepare_extent_to_map+0x7a3/0xc20 [ 124.593913][ T8484] ext4_do_writepages+0x6fe/0x27e0 [ 124.599083][ T8484] ext4_writepages+0x179/0x300 [ 124.603868][ T8484] do_writepages+0x1c6/0x310 [ 124.608479][ T8484] file_write_and_wait_range+0x156/0x2c0 [ 124.614129][ T8484] generic_buffers_fsync_noflush+0x45/0x130 [ 124.620070][ T8484] ext4_sync_file+0x1ab/0x690 [ 124.624753][ T8484] vfs_fsync_range+0x10d/0x130 [ 124.629527][ T8484] ext4_buffered_write_iter+0x34f/0x3c0 [ 124.635264][ T8484] ext4_file_write_iter+0x387/0xf60 [ 124.640489][ T8484] iter_file_splice_write+0x66b/0xa20 [ 124.645869][ T8484] direct_splice_actor+0x156/0x2a0 [ 124.650983][ T8484] splice_direct_to_actor+0x312/0x680 [ 124.656360][ T8484] do_splice_direct+0xda/0x150 [ 124.661134][ T8484] do_sendfile+0x380/0x650 [ 124.665557][ T8484] __x64_sys_sendfile64+0x105/0x150 [ 124.670762][ T8484] x64_sys_call+0x2db1/0x3000 [ 124.675450][ T8484] do_syscall_64+0xd8/0x2c0 [ 124.679971][ T8484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.685878][ T8484] [ 124.688209][ T8484] read to 0xffff88811a8ccfc4 of 4 bytes by task 8484 on cpu 1: [ 124.695760][ T8484] __writeback_single_inode+0x201/0x7c0 [ 124.701330][ T8484] writeback_single_inode+0x16d/0x3f0 [ 124.706727][ T8484] sync_inode_metadata+0x5b/0x90 [ 124.711683][ T8484] generic_buffers_fsync_noflush+0xee/0x130 [ 124.717599][ T8484] ext4_sync_file+0x1ab/0x690 [ 124.722300][ T8484] vfs_fsync_range+0x10d/0x130 [ 124.727098][ T8484] ext4_buffered_write_iter+0x34f/0x3c0 [ 124.732747][ T8484] ext4_file_write_iter+0x387/0xf60 [ 124.737971][ T8484] iter_file_splice_write+0x66b/0xa20 [ 124.743395][ T8484] direct_splice_actor+0x156/0x2a0 [ 124.748518][ T8484] splice_direct_to_actor+0x312/0x680 [ 124.753906][ T8484] do_splice_direct+0xda/0x150 [ 124.758770][ T8484] do_sendfile+0x380/0x650 [ 124.763217][ T8484] __x64_sys_sendfile64+0x105/0x150 [ 124.768437][ T8484] x64_sys_call+0x2db1/0x3000 [ 124.773133][ T8484] do_syscall_64+0xd8/0x2c0 [ 124.777654][ T8484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.783576][ T8484] [ 124.785895][ T8484] value changed: 0x0a000021 -> 0x00000021 [ 124.791607][ T8484] [ 124.793932][ T8484] Reported by Kernel Concurrency Sanitizer on: [ 124.800094][ T8484] CPU: 1 UID: 0 PID: 8484 Comm: syz.6.1243 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 124.811644][ T8484] Tainted: [W]=WARN [ 124.815461][ T8484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 124.825518][ T8484] ================================================================== [ 124.935076][ T8529] __nla_validate_parse: 8 callbacks suppressed [ 124.935092][ T8529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1258'. [ 124.981037][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1258'. [ 125.008464][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1258'. [ 125.020997][ T8529] bridge10: entered promiscuous mode [ 125.026473][ T8529] bridge10: entered allmulticast mode