last executing test programs: 6m57.899779227s ago: executing program 4 (id=2967): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'erspan0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x700, 0x7800, 0x200, 0x2, {{0xc, 0x4, 0x1, 0x1, 0x30, 0x65, 0x0, 0x94, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@end, @ssrr={0x89, 0x17, 0xf2, [@rand_addr=0x64010101, @loopback, @empty, @remote, @empty]}, @end]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0xfffffffffffffdd0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x28040001) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) r6 = creat(0x0, 0xf4) r7 = dup2(r6, r6) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r7, 0x1276, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x200000e, 0x20031, r2, 0xffffe000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000340)) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) 6m57.474195785s ago: executing program 4 (id=2976): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x80400251}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r2, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r3, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) 6m57.30325467s ago: executing program 4 (id=2980): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 6m56.720382222s ago: executing program 4 (id=2986): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_config_ext={0xd, 0x6a7}, 0x100000, 0x5, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0x4, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) migrate_pages(0x0, 0x7, 0x0, &(0x7f0000001fc0)=0x7c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) syz_clone(0x4400, &(0x7f00000001c0)="d440a8a5", 0x4, &(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000300)="ed6661550b5aa3df756ae94b3c9ec63b61a9de7f56364c1c81292d92b173a91a8bd05472a0658400cbaddb4c63ede408da44fe803f7245cff7f76951fc4bdd68f83f9e39a268534c4e7e47481d851233bdb5f94087c06c18309bcd3304175bbca0f9a45aa94745d8711a30a7832a6522b57b3653336dc3765dfc605449") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x100000000, 0x2000000000000000, 0x3, 0x0, 0xffffffffffffffff, 0x7b, 0x0, 0x9b}) mlockall(0x1) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) 6m56.300179799s ago: executing program 4 (id=2993): socket$netlink(0x10, 0x3, 0x15) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b0000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x1, 0x288}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffffd, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r3, 0x3516, 0x0, 0x28, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x14cf6bfc8a5a2223) r7 = syz_io_uring_setup(0x2e89, &(0x7f0000000580)={0x0, 0xd235, 0x10101, 0x0, 0x28a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/45, 0x2d}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x24040844) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) modify_ldt$read(0x20, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6}) io_uring_enter(r7, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed3) bind$inet(0xffffffffffffffff, 0x0, 0x0) 6m55.671858444s ago: executing program 4 (id=2999): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x80400251}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r1, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r2, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) 6m55.654106556s ago: executing program 32 (id=2999): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x80400251}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r1, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r2, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) 6m16.20301653s ago: executing program 5 (id=3537): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0), 0x3, 0x445, &(0x7f0000000b00)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff3000/0x9000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00000004c0)="bc64da538b5afbf4e6e96d7bd3e75c486f84df5d97cb065ace202e7c285b848d85f1d1a71e3818cc63704912fe6aaada8345833b7c92bfd4ecae6ebf088da05890545afdd4cce46688fa895c1e9facef00cd6f5007acef383ddb2ae6cdcfa31e7782a054914979b26c76f269e8a760feb4186881cf072d4d0679abad70671be616295ce19f814673cea71ee3746a16e2d63fb0d3ad909216eda0", 0x9a, r2}, 0x68) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x45, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000880), 0x428000, 0x0) r6 = syz_open_dev$sg(&(0x7f00000009c0), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f00000014c0)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) r7 = pidfd_getfd(r5, r3, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000980)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x1ac, 0x8, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6000}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}]}, @NFTA_RULE_USERDATA={0x103, 0x7, 0x1, 0x0, "146cd83780f3323b9df80c481a94b1eb23b503f40b558b68baaa071931e213669eb8bc29f9cd512bf55396e0fcd7fdd06069a6195ec07d67ba4f40875cb8d875886fe8279217f259a03e4fb74ffc0fe4104cba347d67b99ca4d3a351dbcd156c36661567121dca8f7ec3612c21152e51b9ae7a10983709801b1d3bf8bf22ebb078370a17c4611a4fb89759e7f129aa79fb5a4320b7d798863fcf4a2cf3335a7133826e834544a7fe24710c5bd6b7e5dea933c157c5d562ae6b57eaf2ed5fdd26d4e71570889bc9b1352115a2084b4192a642cb6e3f1c2fb5efe9005329f2e54b76d4f216a4fd4a8fae847d08ee9e256511d1cf79aebf11c59ab3a73084538a"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1d4}}, 0x20000014) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r4], 0x20}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r8, &(0x7f0000000840)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f00000008c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="00042bbd7000fddbdf254c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00580067000000000000000c00580011000000000000f51114000c0058001c000000000000000c0058000c000000000000000c00580057000000000000000c0058004f000000000000000c0058005c0000000098421de736e745eae3cc3208f4f385326f160d5fa4f96c77335d0430f6653b220c57770ae4c7f6"], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008004) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e2100000008f503400000000806000140000100000900010073797a30000000000900020073797a320000000008000b4000000003140000001100", @ANYRES16=r1, @ANYRES8=r0, @ANYRES64=r2, @ANYRES64=r2], 0x9c}}, 0x0) close(r3) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r10, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045993cdf29c2f3ce190690786401010fac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7cc200009078006000220c4df5a906fda1c374565c22117b675ce80937a6eced4c39c9b5cd44080a0000000300000e07fe06e2d4c3d9080a7fffffff000000090510ae0eea5fdf6e9be2088e4cce3eef"], 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x6) getsockopt$bt_BT_POWER(r11, 0x112, 0x9, &(0x7f0000000140)=0xfd, &(0x7f0000000240)=0x1) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r12}, 0x10) 6m15.026876594s ago: executing program 5 (id=3548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, 0x0, &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') readv(r2, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 6m14.453087195s ago: executing program 5 (id=3553): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000100030000008500000800000000850000007d0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000440)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) read(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000002050016000200000004001200050017"], 0x60}}, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) close(r8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0xc100, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x25dfdbfb, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x10, 0x8}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0x20, 0x4, 0x3, 0xa51}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000032000850000001b000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r12, 0x0, 0x5}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) 6m14.049052161s ago: executing program 5 (id=3562): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x0, 0x0, 0x0, 0x358, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000011c0)={[{}, {@errors_remount}, {@errors_remount}, {@noinit_itable}]}, 0x0, 0x4e5, &(0x7f0000000980)="$eJzs3UFrHG0dAPD/THZ9mzavm6qHWrAttpIU7SZpbBs8VAXRU0Gt9xqTbQjZZEuyaZtQNMUPIIio4EVPXgQ/gCD9CCIU9C4qimirBw/Vkd2djWm6m6R0s8ub/f3gycwzOzv/559lnp1nZtgJYGhdiojJiMiyLLsaEaV8eZqX2GmVxnovXzxZaJQksuzu35NI8mXtbb2XT8/kbzsVEV//SsS3kjfjbmxtr8xXq5X1vD5VX01eZdn2teXV+aXKUmVtdnbm5tytuRtz0z3Jczwibn/pzz/83s+/fPvXn3n0h3t/nfx2K8GWvXn0Uiv1YvN/0VaIiPXjCDYghWaGLTcG3BYAAA7WON7/SER8MiKuRilGmkdzAAAAwEmSfX4sXiWt638AAADAyZRGxFgkaTm/33cs0rRcbt3D+7E4nVZrG/VPZ6Xd8wXjUUzvL1cr0/m9A+NRTBr1mfwe23b9+r76bEScjYgflEab9fJCrbo40DMfAAAAMDzO7Bv//6vUGv8DAAAAJ8z4oBsAAAAAHDvjfwAAADj5jP8BAADgRPvqnTuNkrWff734cGtzpfbw2mJlY6W8urlQXqitPygv1WpLzd/sWz1se9Va7cFnY23z8VS9slGf2tjavrda21yr31t+7RHYAAAAQB+dvfjs90lE7HxuNI2ILNnzWjEiG9m7cqH/7QOOT/o2K//p+NoB9N/IoBsADIxDehhexUE3ABi4w/qBrjfv/Kb3bQEAAI7HxMd3r/83CzA88uv/STLohgB95/o/DC/X/2F4FQ86AjAogBMvPcKu/u7X/7PsrRoFAAD03FizJGk5HweMRZqWyxHvNx8LUEzuL1cr0xHx4Yj4Xan4XqM+03xn4vQAAAAAAAAAAAAAAAAAAAAAAAAAABxRliWRdTG6uw4AAADwQRaR/iXJn/81Uboytv/8wIeSf5ea04h49JO7P3o8X6+vzzSW/2N3ef3H+fLr/T57AQAAAHTSHqe3x/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0EsvXzxZaJd+xv3bFyNivFP8QpxqTk9FMSJO/zOJwp73JREx0oP4O08j4lyn+EmjWTGet2J//DQiRgcc/0wP4sMwe9bof77Qaf9L41Jz2nn/K+TlXXXv/9Ld/m+kS//3fqcNpm8uOv/8l1Nd4z+NOF/o3P+04ydd4l8+Yo7f/Mb2drfXsp9FTHT8/kleizWVFB5MbWxtX1tenV+qLFXWZmdnbs7dmrsxNz11f7layf92jPH9T/zqvwflf7pL/PFD8r9yxPz/8/zxi4+2Zov7XirGT7Ns8nLnz/9cl/jt775P5R93oz7Rnt9pze914Re/vXDxgPwXu+R/2Oc/ecT8r37tu3884qoAQB9sbG2vzFerlXUzZo5tZjT6GHQ+DlqnfRDbh/Z8Jw/1rtvJSoPYTwfYKQEAAMfi/wf9g24JAAAAAAAAAAAAAAAAAAAADK/DfgYsevBzYvtj7gwmVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAA/0vAAD//+XXyps=") r2 = semget$private(0x0, 0x6, 0x40d) semtimedop(r2, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c3000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) semop(r2, &(0x7f0000000300)=[{0x2, 0x0, 0x2000}], 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSETKEYCODE(r8, 0x4b4d, &(0x7f0000000300)={0x9ac0c63, 0x7}) kcmp(r0, r7, 0x5, r1, r8) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0xa9c, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x48020000, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) 6m12.847198527s ago: executing program 5 (id=3569): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000006c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") 6m12.556126073s ago: executing program 5 (id=3578): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0xfffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x20, 0x0, 0x204, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd109, 0x2, @perf_config_ext={0x6, 0x1}, 0x100412, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000b80)=ANY=[], 0x0, 0xfc5f}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 6m12.529045985s ago: executing program 33 (id=3578): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0xfffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x20, 0x0, 0x204, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd109, 0x2, @perf_config_ext={0x6, 0x1}, 0x100412, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000b80)=ANY=[], 0x0, 0xfc5f}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1m11.332072521s ago: executing program 1 (id=7941): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8f, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r9, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r0, &(0x7f00000017c0), 0x0, 0x0) 1m11.126216529s ago: executing program 1 (id=7945): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 1m11.049470286s ago: executing program 1 (id=7949): r0 = socket$nl_generic(0x11, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000c40)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x801, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070056060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff6d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded85d3cdd66d9c79f0529d045625b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c700e3806f825f1d0da2a304e06543b56d35235d7897a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664b44e22b72e843e7cf55f394cf75d1cd57c9150bfb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f9574f20e7f513a2a7c5dad90e7d479724d69fa0c0bf97af1231a49ea166f743279d240e2e6f01d8704f313d68b16198be5f6a50e9e0fd20893b2922df566d2622edee5000000000000000000d91c6da09fa7cdbbf16d4780d8c2401c55aff772aced3ff966ff76d796c171f5f7a31e1b14b0c0c712c0fdd2710f37a3d15710d68e7326a7db043c57784bd9bdb047db75"], &(0x7f0000000100)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffc, 0x6, 0x4, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="4523058ad486", 0x0, 0x6, 0x0, 0x1, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f00000001c0), 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000007750000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) 1m10.173955403s ago: executing program 1 (id=7956): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r3 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x5ce, 0x0, 0x6, 0x3a2}) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r4, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb) close_range(r3, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x18) timer_delete(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$inet6(0xa, 0x80002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@mblk_io_submit}, {@quota}]}, 0x2, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fd0400000000000000c2542ded71038259ca171ce1ac08ef54ecef0e1e14ef3dc177e9b48b00", "f28359738e22924c66810000000000d31cf4965dbdb0aa530000000000000001", [0x200]}) r8 = openat(0xffffffffffffff9c, 0x0, 0x183042, 0x8) pwrite64(r8, &(0x7f0000000100), 0x0, 0xe7c) r9 = syz_open_dev$evdev(0x0, 0x2, 0xc0082) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000000700)=0xfffffffe) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r10, &(0x7f0000000140)='2', 0xfdef, 0xfecc) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002080)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x1, 0xd2}}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x7, 0x4, 0x401}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 1m9.818172695s ago: executing program 1 (id=7962): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1m9.468896465s ago: executing program 1 (id=7966): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x28081) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newqdisc={0x43c, 0x24, 0x4ee4e6a52ff56541, 0x30bd27, 0x4000005, {0x0, 0x0, 0x42c, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x410, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1ad6}, @TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x6, 0x6b16, 0x7, 0xfffffffd, 0x8, 0x8, 0x3, 0x7, 0xb, 0x5, 0x0, 0x80, 0x9, 0x30, 0x8, 0x81, 0x9, 0x2, 0x8, 0x40, 0x8, 0x80000001, 0x80, 0x10000400, 0x7a2, 0x5, 0x400, 0x3, 0xfffffffa, 0x6, 0x6, 0xaf8, 0x8, 0x3, 0x3ff, 0x9, 0x2, 0x3, 0x10001, 0x1, 0x5, 0x10001, 0x3, 0x59, 0x3, 0xd54e, 0x40, 0x6, 0xd, 0x0, 0x28, 0x9, 0xa4800000, 0x3, 0xa0, 0xad4, 0x7, 0x4, 0x1, 0x7, 0x4, 0x102, 0x5, 0x4, 0x402, 0x3, 0xf6a5, 0x7fffffff, 0x8, 0x2, 0xcff, 0xfffffacf, 0x0, 0x4, 0x10001, 0xa, 0x1, 0x2, 0x8002, 0x5, 0x5, 0x5, 0xfffffffb, 0x5, 0x0, 0x4, 0x4edcaeea, 0x2, 0xe, 0xe, 0xfff, 0x4, 0x496c01fc, 0x4, 0x7fffffff, 0x9, 0x8, 0x12, 0x9, 0x80000001, 0x325b, 0x7, 0x0, 0x80000006, 0x2, 0xffffffff, 0x5, 0x1, 0x18001, 0x5, 0x94, 0x0, 0x9, 0x2fcb, 0x3, 0x5, 0x7, 0x1, 0xffffffff, 0x4, 0x0, 0x4, 0x3, 0x4, 0x5, 0xa993, 0x200, 0x6847adf1, 0x6, 0x9, 0x81, 0x7, 0x5, 0x5, 0x7fffffff, 0x8, 0xc, 0xd, 0x2, 0x1, 0x7fffffff, 0x8, 0x0, 0x8, 0x8, 0x91e, 0x4, 0xe, 0x8001, 0x8, 0x40000, 0x0, 0x9, 0xd, 0x5, 0x8, 0xfe, 0x8, 0x0, 0x1, 0x6, 0x9, 0x6, 0x3ff, 0x5, 0x1, 0xf682, 0x40, 0x6, 0x8, 0x3, 0x1fffe, 0xfffdfffe, 0x5, 0x1, 0xfffffff8, 0xa608, 0x23972b48, 0x407, 0x2, 0x0, 0xd, 0x4, 0xa, 0x5, 0x6, 0x10, 0x5, 0x5, 0x10, 0x41, 0x9, 0x76, 0x3, 0xfffffffa, 0x7, 0x2, 0x20004, 0x40, 0x9, 0x6, 0x2ef, 0xfffffffb, 0xcf30, 0x8, 0x4, 0xffffff8a, 0x0, 0x4, 0x80000000, 0x4, 0x2, 0x0, 0x2, 0x6, 0xfff, 0x4, 0x1, 0x40, 0x5, 0x9, 0x5, 0x8, 0x80000000, 0x0, 0x3, 0xeff, 0x6, 0x8001, 0x8, 0xc, 0x3, 0x1, 0x0, 0x5, 0x8, 0x6c67, 0x800, 0xffffff59, 0x9, 0x0, 0x303, 0x7, 0x1, 0x2, 0x6, 0x6561, 0x7, 0x4, 0xc, 0x42, 0x3c04, 0x5f, 0x5fa, 0x1]}]}}]}, 0x43c}}, 0x8000) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%-010d \x00'}, 0x20) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000780)={0x1, 0x0, 0x1000, 0x48, &(0x7f0000000580)="87a7bb6323a02af0ea00bbe17581eab1783547045fb2e17171c1e3abf54943305bdb9c761e2dba5bb96178475b0cbc5a68a763ff776b8a796538280f8fdd536d8601f7d21d64eb92", 0xaa, 0x0, &(0x7f00000006c0)="50473b41f83d4d6d24c087bb48baa6812340afce287dca705b2e2f300d3815e47c7a4d53ae86677575a845e6e7881fbbef0ca9e41a9fb24c5ae99f4181d3583066b3b34a029a81be807b01b47223c7d72e2a35009fc6e927fb63641af18060d0e183603b50b89ecf5814ce1bf5751c5018f0cc05a38d3261ebb635de852786f729fb7eeae0b5a22e0447c51566ac132a82bb91167f7e7cb1873605cea53d2a70a37b2e15989e0c9c4689"}) r6 = fsmount(r4, 0x1, 0x0) fchdir(r6) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000280)=""/219, 0xdb, 0x0, &(0x7f0000000200)=""/15, 0xf}}, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0xffffff80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x10, &(0x7f0000000000)=@raw=[@alu={0x0, 0x0, 0x7, 0x1, 0x1, 0xfffffffffffffff4, 0x4}, @alu={0x4, 0x0, 0x9, 0x6, 0x1, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10200, 0x0, 0x0, 0x0, 0xff}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000080)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41000, 0x22, '\x00', r3, @fallback=0x10, r6, 0x8, &(0x7f0000000180)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x4, 0x9, 0x400}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[r8], &(0x7f0000000540), 0x10, 0x59}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) setrlimit(0xe, &(0x7f00000008c0)={0x4107, 0x2}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000900000/0x3000)=nil, 0x3000) 1m9.468395276s ago: executing program 34 (id=7966): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x28081) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newqdisc={0x43c, 0x24, 0x4ee4e6a52ff56541, 0x30bd27, 0x4000005, {0x0, 0x0, 0x42c, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x410, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1ad6}, @TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x6, 0x6b16, 0x7, 0xfffffffd, 0x8, 0x8, 0x3, 0x7, 0xb, 0x5, 0x0, 0x80, 0x9, 0x30, 0x8, 0x81, 0x9, 0x2, 0x8, 0x40, 0x8, 0x80000001, 0x80, 0x10000400, 0x7a2, 0x5, 0x400, 0x3, 0xfffffffa, 0x6, 0x6, 0xaf8, 0x8, 0x3, 0x3ff, 0x9, 0x2, 0x3, 0x10001, 0x1, 0x5, 0x10001, 0x3, 0x59, 0x3, 0xd54e, 0x40, 0x6, 0xd, 0x0, 0x28, 0x9, 0xa4800000, 0x3, 0xa0, 0xad4, 0x7, 0x4, 0x1, 0x7, 0x4, 0x102, 0x5, 0x4, 0x402, 0x3, 0xf6a5, 0x7fffffff, 0x8, 0x2, 0xcff, 0xfffffacf, 0x0, 0x4, 0x10001, 0xa, 0x1, 0x2, 0x8002, 0x5, 0x5, 0x5, 0xfffffffb, 0x5, 0x0, 0x4, 0x4edcaeea, 0x2, 0xe, 0xe, 0xfff, 0x4, 0x496c01fc, 0x4, 0x7fffffff, 0x9, 0x8, 0x12, 0x9, 0x80000001, 0x325b, 0x7, 0x0, 0x80000006, 0x2, 0xffffffff, 0x5, 0x1, 0x18001, 0x5, 0x94, 0x0, 0x9, 0x2fcb, 0x3, 0x5, 0x7, 0x1, 0xffffffff, 0x4, 0x0, 0x4, 0x3, 0x4, 0x5, 0xa993, 0x200, 0x6847adf1, 0x6, 0x9, 0x81, 0x7, 0x5, 0x5, 0x7fffffff, 0x8, 0xc, 0xd, 0x2, 0x1, 0x7fffffff, 0x8, 0x0, 0x8, 0x8, 0x91e, 0x4, 0xe, 0x8001, 0x8, 0x40000, 0x0, 0x9, 0xd, 0x5, 0x8, 0xfe, 0x8, 0x0, 0x1, 0x6, 0x9, 0x6, 0x3ff, 0x5, 0x1, 0xf682, 0x40, 0x6, 0x8, 0x3, 0x1fffe, 0xfffdfffe, 0x5, 0x1, 0xfffffff8, 0xa608, 0x23972b48, 0x407, 0x2, 0x0, 0xd, 0x4, 0xa, 0x5, 0x6, 0x10, 0x5, 0x5, 0x10, 0x41, 0x9, 0x76, 0x3, 0xfffffffa, 0x7, 0x2, 0x20004, 0x40, 0x9, 0x6, 0x2ef, 0xfffffffb, 0xcf30, 0x8, 0x4, 0xffffff8a, 0x0, 0x4, 0x80000000, 0x4, 0x2, 0x0, 0x2, 0x6, 0xfff, 0x4, 0x1, 0x40, 0x5, 0x9, 0x5, 0x8, 0x80000000, 0x0, 0x3, 0xeff, 0x6, 0x8001, 0x8, 0xc, 0x3, 0x1, 0x0, 0x5, 0x8, 0x6c67, 0x800, 0xffffff59, 0x9, 0x0, 0x303, 0x7, 0x1, 0x2, 0x6, 0x6561, 0x7, 0x4, 0xc, 0x42, 0x3c04, 0x5f, 0x5fa, 0x1]}]}}]}, 0x43c}}, 0x8000) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%-010d \x00'}, 0x20) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000780)={0x1, 0x0, 0x1000, 0x48, &(0x7f0000000580)="87a7bb6323a02af0ea00bbe17581eab1783547045fb2e17171c1e3abf54943305bdb9c761e2dba5bb96178475b0cbc5a68a763ff776b8a796538280f8fdd536d8601f7d21d64eb92", 0xaa, 0x0, &(0x7f00000006c0)="50473b41f83d4d6d24c087bb48baa6812340afce287dca705b2e2f300d3815e47c7a4d53ae86677575a845e6e7881fbbef0ca9e41a9fb24c5ae99f4181d3583066b3b34a029a81be807b01b47223c7d72e2a35009fc6e927fb63641af18060d0e183603b50b89ecf5814ce1bf5751c5018f0cc05a38d3261ebb635de852786f729fb7eeae0b5a22e0447c51566ac132a82bb91167f7e7cb1873605cea53d2a70a37b2e15989e0c9c4689"}) r6 = fsmount(r4, 0x1, 0x0) fchdir(r6) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000280)=""/219, 0xdb, 0x0, &(0x7f0000000200)=""/15, 0xf}}, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0xffffff80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x10, &(0x7f0000000000)=@raw=[@alu={0x0, 0x0, 0x7, 0x1, 0x1, 0xfffffffffffffff4, 0x4}, @alu={0x4, 0x0, 0x9, 0x6, 0x1, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10200, 0x0, 0x0, 0x0, 0xff}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000080)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41000, 0x22, '\x00', r3, @fallback=0x10, r6, 0x8, &(0x7f0000000180)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x4, 0x9, 0x400}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[r8], &(0x7f0000000540), 0x10, 0x59}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) setrlimit(0xe, &(0x7f00000008c0)={0x4107, 0x2}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000900000/0x3000)=nil, 0x3000) 19.834338182s ago: executing program 7 (id=8616): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, 0x0, 0x58) close(r0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) syz_usb_connect$cdc_ecm(0x1, 0x6c, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109025a00010107c0090904000602020600070b2406000063fb5e34409b05240002000d240f01f7ffffff6e0b008081052401020808051c800c6a03000c240708ffff05000180000009058202ff03030880090503024000e4f203"], &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x7, 0x2, 0x8, 0xff, 0x3}, 0x26, &(0x7f00000004c0)=ANY=[@ANYBLOB="050f2600030a1003000400037f00000c100a0a400000000f00ff1d0b10010c09002ee3b4733000fc010007"], 0x1, [{0xb1, &(0x7f00000006c0)=ANY=[@ANYBLOB="b103cacbef49ff8916049d5da224dcc4aa491934329a68b8b668efc28d6cd12f1d738662a628386048fca5b3ffc3b75c652b53673bfa56f57e41ae17dedbd74de8e11315d643d3cc4d1d1db5805899e3577026e9ac19b819090628f193a1f7556db8b743ef97004c3d176b7c42fcbda835ff2ab9d732e295cbc98236f880adb64d596e457b53b51811dd4c8f61df47fbda0c684780e8b6b08ab205c9854577b7cea20d"]}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000047098d19a20afd2b00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) timerfd_create(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 17.250915151s ago: executing program 7 (id=8653): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x140, 0x12, 0x60a, 0x0, 0x202, 0x298, 0x2e8, 0x2e8, 0x298, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x1, 0x8b, 0xd2, 0x4, 0x4, 0x4, 0xa216}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@srh1={{0x90}, {0x3c, 0x1, 0xd1, 0x1, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @dev={0xfe, 0x80, '\x00', 0x22}, [0xff, 0xffffff00, 0x0, 0xffff00], [0xffffff00, 0x0, 0xff, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff000000], 0x900, 0x804}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 17.237555832s ago: executing program 7 (id=8654): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9998500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 17.185250047s ago: executing program 7 (id=8656): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, r0, 0x28f42000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd, 0x6a7}, 0x100000, 0x5, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x1, 0x5}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x100000000, 0x2000000000000000, 0x3, 0x0, 0xffffffffffffffff, 0x7b, 0x0, 0x9b}) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000001480)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x800000, 0x0, 0x0, 0x0, &(0x7f0000001540), 0x0) unshare(0x2c020400) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, 0x0, 0x0) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)={'some', 0x20, 0x3, 0x20, 0x7fffffff}, 0x2f) fchdir(0xffffffffffffffff) flock(0xffffffffffffffff, 0x6) mknod(&(0x7f0000000240)='./bus\x00', 0x1000, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) socket$key(0xf, 0x3, 0x2) 16.961857117s ago: executing program 7 (id=8658): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000004880)=[{{&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_retopts={{0x36, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x0, [{@broadcast, 0x401}, {@multicast1}]}, @rr={0x7, 0xf, 0xc, [@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}], 0x38}}], 0x1, 0x4000080) 16.677013872s ago: executing program 7 (id=8661): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000840)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r1, @ANYRES16, @ANYRESOCT, @ANYRES16, @ANYRESOCT=r2], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x2}, 0x18) splice(r0, 0x0, r2, 0x0, 0xa85, 0x4) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$sock(r5, 0x0, 0x0, 0x4068854) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000340)='syzkaller\x00', 0x6, 0x63, &(0x7f00000005c0)=""/99, 0x1e00, 0x0, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f00000006c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0xe, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x112}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_aout(r2, &(0x7f0000000a00)=ANY=[@ANYRESOCT=r4, @ANYBLOB="885f782699c023ae91352466c992e8dfd881dbe6a7fdd17a31c4a0eab2f08bf89e473fdd", @ANYRES16, @ANYRESOCT=r3], 0xffffffffffffffb8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000001c0)='kfree\x00', r9}, 0x18) r10 = socket$unix(0x1, 0x1, 0x0) fgetxattr(r10, &(0x7f0000000000)=@random={'btrfs.', '{@\x00'}, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x6f, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x7fd, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xce9d8d60ab13d530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') 16.676641112s ago: executing program 35 (id=8661): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000840)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r1, @ANYRES16, @ANYRESOCT, @ANYRES16, @ANYRESOCT=r2], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x2}, 0x18) splice(r0, 0x0, r2, 0x0, 0xa85, 0x4) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$sock(r5, 0x0, 0x0, 0x4068854) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000340)='syzkaller\x00', 0x6, 0x63, &(0x7f00000005c0)=""/99, 0x1e00, 0x0, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f00000006c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0xe, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x112}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_aout(r2, &(0x7f0000000a00)=ANY=[@ANYRESOCT=r4, @ANYBLOB="885f782699c023ae91352466c992e8dfd881dbe6a7fdd17a31c4a0eab2f08bf89e473fdd", @ANYRES16, @ANYRESOCT=r3], 0xffffffffffffffb8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000001c0)='kfree\x00', r9}, 0x18) r10 = socket$unix(0x1, 0x1, 0x0) fgetxattr(r10, &(0x7f0000000000)=@random={'btrfs.', '{@\x00'}, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x6f, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x7fd, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xce9d8d60ab13d530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') 13.157616854s ago: executing program 8 (id=8705): socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r3, 0x0, 0x0}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000040)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @jmp={0x5, 0x0, 0x2, 0x5, 0x4, 0x40, 0x10}], &(0x7f0000000380)='syzkaller\x00', 0xfffff801, 0x2e, &(0x7f0000000400)=""/46, 0x41100, 0x63, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xc, 0xc, 0xffff}, 0x10, 0x18e8, r5, 0x0, &(0x7f0000000700)=[r3, r3, r3], 0x0, 0x10, 0x48000}, 0x94) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x8, '\x00', 0x0, r6, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x4000, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) 13.108774939s ago: executing program 8 (id=8707): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000d80)=[{&(0x7f0000000340)="47302b0a093ed7bb1057", 0xa}, {&(0x7f0000000dc0)="8901c45adf5d61bf687e1f2b373ab38f4dfc22ddf7075a48a3f09635546b9097cacb95813fdf1c457c53150d89d55c2b0fecca5089b3495aeb736e2c84e1b407fdc5f675036feb471cd0bfa5a800e53b03404d23558d7440b44d117efe9f21472e9d7d8300a003a0ea8c2efbc7951fe507eb0d3eb8459a4440a1b47e73a490e3a39eac0dcd19df2aaa252c13c15f9027dc17365a877e26787d1ee3241e173841a4c73b0f473353550feb9254c991803a70fe37680dcae915f97936f9f41e8399b17608d8869960b22cec11a48336fb8c3c3b20db79b1042776c69e89a90c0dbb23f7a47399acf792215136f5ed270000", 0xf0}, {&(0x7f0000000d40)="e30bab9bc2126a3c892607bb283d368b995745000000000000", 0x19}], 0x3) openat$cgroup_devices(r1, &(0x7f0000000a00)='devices.deny\x00', 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") creat(&(0x7f0000000800)='./file1\x00', 0x182) open(&(0x7f0000000740)='./bus\x00', 0x163361, 0x501c998c4dfcafcd) mount(0x0, &(0x7f0000001040)='./file1\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="546503f8cca523b85ec42939ee00000019b9038122cbe8590bb7204e09311858f02a9c7952569807c162aea1782788b28ff7fe3f23248b83aac220fdccbc3b7baf4d7583512fa89da34006346b2f1f7b1a0b", @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000f00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d00)=@ipv6_getaddr={0x18, 0x16, 0x200, 0x70bd25, 0x9, {0xa, 0x1f, 0x8, 0xc8}}, 0x18}, 0x1, 0x0, 0x0, 0x34000845}, 0x400c080) 12.874985989s ago: executing program 8 (id=8710): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$kcm(0x21, 0x2, 0x2) shutdown(r1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0xa}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000000)=0x2, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) utime(&(0x7f0000000000)='./file0\x00', 0x0) listen(r2, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000200", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r5}, &(0x7f00000005c0), &(0x7f0000000600)=r6}, 0x20) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r7, &(0x7f0000000300)='asymmetric\x00', &(0x7f00000001c0)='id:\xff\xffe{') getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) 12.776571788s ago: executing program 8 (id=8712): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, r0, 0x28f42000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd, 0x6a7}, 0x100000, 0x5, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x1, 0x5}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x100000000, 0x2000000000000000, 0x3, 0x0, 0xffffffffffffffff, 0x7b, 0x0, 0x9b}) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000001480)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x800000, 0x0, 0x0, 0x0, &(0x7f0000001540), 0x0) unshare(0x2c020400) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, 0x0, 0x0) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)={'some', 0x20, 0x3, 0x20, 0x7fffffff}, 0x2f) fchdir(0xffffffffffffffff) flock(0xffffffffffffffff, 0x6) mknod(&(0x7f0000000240)='./bus\x00', 0x1000, 0x0) 12.30215362s ago: executing program 8 (id=8718): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001800010000000000000000000200009e67"], 0x20}}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x5, 0x402c00) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200), 0x244403, 0x0) fgetxattr(r4, &(0x7f0000000b00)=@known='trusted.overlay.nlink\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r3, 0xffffffffffffffff}, 0x4) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000021c0)='lo\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510001c00660000073d1acdeb3c917d411414aa1101907800000000"], 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x140, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x21, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000a00000000000000050000001800000003000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000003c4bc0fffcffffffb7080000000000007b8af8ff00000000b7080000100000207b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000018130000", @ANYRES32=0x1, @ANYBLOB="0000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x53, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000700)=[r4, 0xffffffffffffffff], &(0x7f0000000840)=[{0x4, 0x5, 0xa, 0x9}, {0x5, 0x4, 0x1, 0x7}, {0x2, 0x1, 0xf, 0x4}, {0x0, 0x1, 0xc, 0x6}, {0x2, 0x3, 0xd}, {0x3, 0x1, 0x1, 0x6}, {0x0, 0x5, 0xa, 0x6}, {0x4, 0x4, 0xf, 0xc}, {0x0, 0x3, 0x0, 0xc}], 0x10, 0x81}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x3}, 0x76e0}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r9, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r11, 0x407, 0x0) sendmsg$inet_sctp(r11, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f00000001c0)='N', 0x1}, {&(0x7f0000000000)="7601fc190fdaa2fa9bd3332cf52bef808f87efdc01915c04718bff6a94832e45f235ae0d208804ac8216e307fc7da506ea18087155", 0x35}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000000400)="b24124604873de1c9e34f8789c076768bf072279f9b9d9d95181d0f008ed75b8d9cf764f48dd0cda9c11d23547bf038b37406a62370952692815b2e9abbbc90718e726295180d0c24dd58a94803df022f259e8af923531c2f342c619acb984df8284c6b6d866b97a5ef1d6334e9be89254dfed059b6867bd68138cb7cbe71f87f627098d27583ec92ca2bd", 0x8b}, {&(0x7f0000000200)="2b5059f04187ff5d6d73a60b237e4da6f24352cdbcdba245d6adbca4846df3fe1e395ab7e91a7af7dfd9e16ca19b4324272e7fa099f8f31279fb668522dcea", 0x3f}], 0x5, 0x0, 0x0, 0x2804c044}, 0x4000891) bind$inet(r11, &(0x7f0000000900)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r10, 0x80049363, &(0x7f00000000c0)) r12 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r12, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0x4) 9.350723971s ago: executing program 8 (id=8744): creat(&(0x7f0000000000)='./file0\x00', 0xa0) unshare(0x8040480) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)=0x2600) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000002000100240012800b00010065727370616e0000140002800600020030000000080004"], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0xffff, 0x1543, @empty, 0x11}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "4506000000927650", "0bf70000000000000000061000000001", '\x00', "ba0200"}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x66020000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) socket$isdn(0x22, 0x2, 0x2) socket$xdp(0x2c, 0x3, 0x0) unshare(0x4000000) clock_getres(0xfffffffffffffff1, 0x0) 9.350233151s ago: executing program 36 (id=8744): creat(&(0x7f0000000000)='./file0\x00', 0xa0) unshare(0x8040480) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)=0x2600) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000002000100240012800b00010065727370616e0000140002800600020030000000080004"], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0xffff, 0x1543, @empty, 0x11}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "4506000000927650", "0bf70000000000000000061000000001", '\x00', "ba0200"}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x66020000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) socket$isdn(0x22, 0x2, 0x2) socket$xdp(0x2c, 0x3, 0x0) unshare(0x4000000) clock_getres(0xfffffffffffffff1, 0x0) 6.463964687s ago: executing program 9 (id=8783): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x1000000000}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") (fail_nth: 1) 6.186738312s ago: executing program 9 (id=8784): bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r0, 0x1, {0x0, 0x1, 0x2}, 0xfe}, 0x18) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000003c0), 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0xe8, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x2204c080}, 0x40000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@mcast1}, &(0x7f0000000140)=0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="6cc7", @ANYRES16=0x0, @ANYBLOB="00082dbd7000ffdbdf250b00000008000300040000001400018008000700", @ANYBLOB="08000300000000002c0006800500020077000000060005004e2200000800060010000000060005004e22000006000100020000000800030000000000080003000200"], 0x6c}, 0x1, 0x0, 0x0, 0x8041}, 0x20008880) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x75}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x4080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x15, 0x6, 0x42af) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000fbffffff14000a00b7001000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]}) sync_file_range(0xffffffffffffffff, 0x10000, 0x8, 0x7) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="000069b526b1d23a555400e7ca000000000000950000000000bf00"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000005c0)) 5.905504847s ago: executing program 9 (id=8792): bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r0, 0x1, {0x0, 0x1, 0x2}, 0xfe}, 0x18) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000003c0), 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x138, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x2204c080}, 0x40000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@mcast1, 0x0}, &(0x7f0000000140)=0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, r1}, 0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00082dbd7000ffdbdf250b00000008000300040000001400018008000700", @ANYRES32=r1, @ANYBLOB="08000300000000002c0006800500020077000000060005004e2200000800060010000000060005004e220000060001000200000008000300000000000800030002000000"], 0x6c}, 0x1, 0x0, 0x0, 0x8041}, 0x20008880) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x15, 0x6, 0x42af) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) getpid() r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000fbffffff14000a00b7001000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]}) sync_file_range(0xffffffffffffffff, 0x10000, 0x8, 0x7) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") 5.722617093s ago: executing program 9 (id=8795): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, r0, 0x28f42000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd, 0x6a7}, 0x100000, 0x5, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$eJzs3cFvG1kZAPDPTpw4aXaTXfYACHbL7kJBVZ3E3Y1We4DlhBBaCbFHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lANSgQjUIHEwmvEkdVO7iZrEzsa/nzSa9+ZN/L3XdN6rvyZ+AQytqxGxGxFjEXE7Iqaz67nsiE/aR3Lf0737S/t795dy0Wp99s9c2p5ci46vSVzJXrMYET/6XsRPcy/GbWzvrC1Wq5XNrD7brG3MNrZ3bqzWFlcqK5X1cnlhfmHuo5sfls9srO/UxrLSVx//cfdbP0+6NZVd6RzHWWoPvXAYJzEaET84j2ADMJKNZ2zQHeGV5CPizYh4N33+p2Mk/W4CAJdZqzUdrenOOgBw2eXTHFguX8pyAVORz5dK7RzeWzGZr9Ybzet36lvry+1c2UwU8ndWq5W5LFc4E4VcUp9Py8/q5SP1mxHxRkT8cnwirZeW6tXlQf7DBwCG2JUj6/9/xtvrPwBwyRUH3QEAoO+s/wAwfKz/ADB8rP8AMHza6//EoLsBAPSR9/8AMHys/wAwVH746afJ0drPPv96+e721lr97o3lSmOtVNtaKi3VNzdKK/X6SvqZPbXjXq9ar2/MfxBb92a+vdFozja2d27V6lvrzVvp53rfqhTSu3b7MDIAoJc33nn0l1yyIn88kR7RsZdDYaA9A85bftAdAAZmZNAdAAbGbl8wvE7xHl96AD7vuuzN202x2y8ItVqt1jl0CeiPa1+S/4dh1ZH/91PAMGTk/2F4yf/D8Gq1cifd8z9OeiMAcLHJ8QM9fgzgzez8u+w/B36yfPSOh+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwWETNRyN1ZrVbmIuL1iPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3+1HNNb185LI5FxM9+/dmv7i02m5t/ihjL/Wv84HrzYXa93P/eAwDHO1in03PHG/mne/eXDo5+9ufJdyOi2I6/vzcW+4fxR2M0PRejEBGT/85l9bZcR+7iNHYfRMQXu40/F1NpDqS98+nR+Ens1/oaP/9c/Hza1j4nfxZfOIO+wLB5lMw/n3R7/vJxNT13f/6L6Qx1etn8l7zU0n46Bz6LfzD/jfSY/66eNMYHf/h+uzSRffGz3Z6fPIj48mjEQez9jvnnIH6uR/z3Txj/r195+91eba3fRFyL7vE7Y802axuzje2dG6u1xZXKSmW9XF6YX5j76OaH5dk0Rz3bezX4x8fXX+/Vlox/skf84jHj//oJx//b/93+8ddeEv+b73WLn4+3XhI/WRO/ccL4i5O/L/ZqS+Iv9xj/cd//6yeM//hvOy9sGw4ADE5je2dtsVqtbCooXPxC8lf2AnSja+E7/Yo1Ft2bfvFe+5k+0tRqvVKsXjPGWWTdgIvg8KGPiP8OujMAAAAAAAAAAAAAAEBX/fiNpUGPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvr/wEAAP//M+fPJQ==") capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x1, 0x5}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x100000000, 0x2000000000000000, 0x3, 0x0, 0xffffffffffffffff, 0x7b, 0x0, 0x9b}) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000001480)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x800000, 0x0, 0x0, 0x0, &(0x7f0000001540), 0x0) unshare(0x2c020400) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, 0x0, 0x0) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)={'some', 0x20, 0x3, 0x20, 0x7fffffff}, 0x2f) fchdir(0xffffffffffffffff) mknod(&(0x7f0000000240)='./bus\x00', 0x1000, 0x0) 5.177503161s ago: executing program 9 (id=8802): bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r0, 0x1, {0x0, 0x1, 0x2}, 0xfe}, 0x18) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000003c0), 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0xe8, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x2204c080}, 0x40000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@mcast1}, &(0x7f0000000140)=0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="6cc7", @ANYRES16=0x0, @ANYBLOB="00082dbd7000ffdbdf250b00000008000300040000001400018008000700", @ANYBLOB="08000300000000002c0006800500020077000000060005004e2200000800060010000000060005004e22000006000100020000000800030000000000080003000200"], 0x6c}, 0x1, 0x0, 0x0, 0x8041}, 0x20008880) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x75}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x4080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x15, 0x6, 0x42af) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000fbffffff14000a00b7001000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]}) sync_file_range(0xffffffffffffffff, 0x10000, 0x8, 0x7) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="000069b526b1d23a555400e7ca000000000000950000000000bf000000"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000005c0)) 3.018255892s ago: executing program 6 (id=8822): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) ioctl$VT_DISALLOCATE(r1, 0x5608) 2.880926024s ago: executing program 2 (id=8825): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x2200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") lstat(0x0, 0x0) 2.801073061s ago: executing program 2 (id=8827): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x100, 0x43, 0xa0, 0x100, 0x98, 0x1d0, 0x178, 0x178, 0x1d0, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xe0, 0x100, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}, {0x20, 0x30, 0x6, 0x7}}, @common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r7, 0x0, 0x400000000}, 0x18) write$binfmt_format(r6, &(0x7f0000000800)='-1\x00', 0x3) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="5913fcfffffffddbdf256b"], 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x12, 0x3, @l2={'ib', 0x3a, 'caif0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x20004000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xfff}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x80) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fbdbdf252100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000006e007a86331ec70e081a00000500f6008f000000"], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB='(\t\x00\x00', @ANYRES16=r4, @ANYBLOB="00042dbd7000fedbdf258900000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x928}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x8000000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) 2.746390017s ago: executing program 6 (id=8829): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xc11, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) pipe2$9p(&(0x7f00000001c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYRES8=r1], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xffa0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r9, 0x0, 0x115}, 0x18) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r11, r2, 0x4}, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250401f2800c0018000bac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) 2.692733491s ago: executing program 3 (id=8830): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) process_vm_readv(r0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 2.667471923s ago: executing program 3 (id=8831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000001480)='/proc/bus/input/handlers\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES8], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) 2.420583615s ago: executing program 9 (id=8833): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000003500)=[{{&(0x7f0000000140)=@caif=@dgm, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/107, 0x6b}, {&(0x7f0000000380)=""/237, 0xed}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000540)=""/241, 0xf1}, {&(0x7f0000000640)=""/180, 0xb4}], 0x5, &(0x7f0000000700)=""/218, 0xda}}, {{&(0x7f0000000800)=@nl, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000880)=""/104, 0x68}, {&(0x7f0000000900)=""/112, 0x70}, {&(0x7f0000000040)=""/28, 0x1c}, {&(0x7f00000000c0)=""/38, 0x26}], 0x4, &(0x7f0000000980)=""/181, 0xb5}}, {{&(0x7f0000000a40), 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000ac0)=""/214, 0xd6}], 0x1, &(0x7f0000000c00)=""/109, 0x6d}, 0xc}, {{&(0x7f0000000c80)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000d00)=""/191, 0xbf}, {&(0x7f0000000dc0)=""/134, 0x86}, {&(0x7f0000000e80)=""/37, 0x25}, {&(0x7f0000000ec0)=""/119, 0x77}, {&(0x7f0000001f40)=""/207, 0xcf}, {&(0x7f0000002040)=""/172, 0xac}, {&(0x7f0000002100)=""/197, 0xc5}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/198, 0xc6}, {&(0x7f0000003300)=""/3, 0x3}], 0xa, &(0x7f0000003400)=""/227, 0xe3}, 0x7}], 0x4, 0x2022, &(0x7f0000003600)={0x0, 0x3938700}) mknod(&(0x7f0000000080)='./file0\x00', 0x8001420, 0x4) open$dir(0x0, 0xe8c40, 0x0) open$dir(&(0x7f0000000340)='./file0\x00', 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0b000000050000000400000032a900"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32=r1, @ANYBLOB="00001c5ef6d8536acd1e3df155000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000b09948cdeb7995511239a48d4b19d1f8"], &(0x7f0000000280)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @address_request={0x11, 0x0, 0x0, 0x8}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) tkill(0x0, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8, 0x0, 0x5}, 0x18) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x77ff, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) 2.419821475s ago: executing program 37 (id=8833): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000003500)=[{{&(0x7f0000000140)=@caif=@dgm, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/107, 0x6b}, {&(0x7f0000000380)=""/237, 0xed}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000540)=""/241, 0xf1}, {&(0x7f0000000640)=""/180, 0xb4}], 0x5, &(0x7f0000000700)=""/218, 0xda}}, {{&(0x7f0000000800)=@nl, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000880)=""/104, 0x68}, {&(0x7f0000000900)=""/112, 0x70}, {&(0x7f0000000040)=""/28, 0x1c}, {&(0x7f00000000c0)=""/38, 0x26}], 0x4, &(0x7f0000000980)=""/181, 0xb5}}, {{&(0x7f0000000a40), 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000ac0)=""/214, 0xd6}], 0x1, &(0x7f0000000c00)=""/109, 0x6d}, 0xc}, {{&(0x7f0000000c80)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000d00)=""/191, 0xbf}, {&(0x7f0000000dc0)=""/134, 0x86}, {&(0x7f0000000e80)=""/37, 0x25}, {&(0x7f0000000ec0)=""/119, 0x77}, {&(0x7f0000001f40)=""/207, 0xcf}, {&(0x7f0000002040)=""/172, 0xac}, {&(0x7f0000002100)=""/197, 0xc5}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/198, 0xc6}, {&(0x7f0000003300)=""/3, 0x3}], 0xa, &(0x7f0000003400)=""/227, 0xe3}, 0x7}], 0x4, 0x2022, &(0x7f0000003600)={0x0, 0x3938700}) mknod(&(0x7f0000000080)='./file0\x00', 0x8001420, 0x4) open$dir(0x0, 0xe8c40, 0x0) open$dir(&(0x7f0000000340)='./file0\x00', 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0b000000050000000400000032a900"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32=r1, @ANYBLOB="00001c5ef6d8536acd1e3df155000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000b09948cdeb7995511239a48d4b19d1f8"], &(0x7f0000000280)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @address_request={0x11, 0x0, 0x0, 0x8}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) tkill(0x0, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8, 0x0, 0x5}, 0x18) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x77ff, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) 2.341650152s ago: executing program 6 (id=8835): r0 = socket$nl_generic(0x11, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="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"/1247], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000c40)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x801, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffc, 0x6, 0x4, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="4523058ad486", 0x0, 0x6, 0x0, 0x1, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f00000001c0), 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000007750000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='timer_start\x00', r6}, 0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) 2.275176969s ago: executing program 3 (id=8837): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='tryl'], 0xd) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00'}, 0x18) socket(0x8000000010, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES8=r2, @ANYRES32=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) pwritev(r5, &(0x7f0000000100)=[{&(0x7f0000000700)='0', 0x1}], 0x1, 0x2, 0xffffffcd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00'}, 0x18) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r8, 0x0, 0x2}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4002}, 0x50) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x4e21, @private=0xa010101}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r9, 0x40089413, &(0x7f0000000680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00'}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x810) r10 = epoll_create1(0x0) epoll_pwait2(r10, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 2.047958518s ago: executing program 0 (id=8839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r3}, 0x3d) r4 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000028001100000006907864010100ffffffff4e244001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5012000090780000c3542060df7a02143d236eff24283f422a26e4147f23fdac17ea7b5cfcc6eb0853e9f1d4be2ebf4e920607bfb0708808bf9ff4b0f7a45a8fd8491d2c000000000000000325e2168d84cf5b876d2cc0cc0c2f0080c69468e2a76aa47b9cf4d65faf18bfdfbfc93dc738d6352578952b93e3dff774ea691692aee324573cb545a8"], 0x0) syz_emit_ethernet(0x124e, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffe}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r5) fcntl$setlease(r4, 0x400, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000180)=0xe, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r10, 0x0, 0x4}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000007c0)={r11, &(0x7f0000000a40), 0x0}, 0x20) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c01000010001307fefffffffcdbdf25640101010000000000000000000000002001000000000000000000000000000100000000452100020a0000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}, 0x9439, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 1.948084907s ago: executing program 2 (id=8840): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) 1.898774252s ago: executing program 2 (id=8841): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x100, 0x43, 0xa0, 0x100, 0x98, 0x1d0, 0x178, 0x178, 0x1d0, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xe0, 0x100, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}, {0x20, 0x30, 0x6, 0x7}}, @common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r7, 0x0, 0x400000000}, 0x18) write$binfmt_format(r6, &(0x7f0000000800)='-1\x00', 0x3) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="5913fcfffffffddbdf256b"], 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x12, 0x3, @l2={'ib', 0x3a, 'caif0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x20004000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xfff}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x80) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fbdbdf252100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000006e007a86331ec70e081a00000500f6008f000000"], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB='(\t\x00\x00', @ANYRES16=r4, @ANYBLOB="00042dbd7000fedbdf258900000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x928}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x8000000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) 1.879432063s ago: executing program 6 (id=8842): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x0, 0x0, 0x0, 0x358, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000011c0)={[{}, {@errors_remount}, {@errors_remount}, {@noinit_itable}]}, 0x0, 0x4e5, &(0x7f0000000980)="$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") r3 = semget$private(0x0, 0x6, 0x40d) semtimedop(r3, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) semop(r3, &(0x7f0000000300)=[{0x2, 0x0, 0x2000}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSETKEYCODE(r9, 0x4b4d, &(0x7f0000000300)={0x9ac0c63, 0x7}) kcmp(r0, r8, 0x5, r2, r9) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0xa9c, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) 1.702277159s ago: executing program 0 (id=8843): bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r0, 0x1, {0x0, 0x1, 0x2}, 0xfe}, 0x18) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000003c0), 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x140, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x2204c080}, 0x40000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@mcast1, 0x0}, &(0x7f0000000140)=0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, r1}, 0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00082dbd7000ffdbdf250b00000008000300040000001400018008000700", @ANYRES32=r1, @ANYBLOB="08000300000000002c0006800500020077000000060005004e2200000800060010000000060005004e220000060001000200000008000300000000000800030002000000"], 0x6c}, 0x1, 0x0, 0x0, 0x8041}, 0x20008880) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x4080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x15, 0x6, 0x42af) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) getpid() r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000fbffffff14000a00b7001000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x10000, 0x8, 0x7) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="000069b526b1d23a555400e7ca000000000000950000000000bf00000000"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000005c0)) 1.247887049s ago: executing program 3 (id=8844): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xc11, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) pipe2$9p(&(0x7f00000001c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYRES8=r1], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xffa0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r9, 0x0, 0x115}, 0x18) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r11, r2, 0x4}, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250401f2800c0018000bac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) 1.087944334s ago: executing program 0 (id=8845): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) 1.040637548s ago: executing program 2 (id=8846): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x100, 0x43, 0xa0, 0x100, 0x98, 0x1d0, 0x178, 0x178, 0x1d0, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xe0, 0x100, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}, {0x20, 0x30, 0x6, 0x7}}, @common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r7, 0x0, 0x400000000}, 0x18) write$binfmt_format(r6, &(0x7f0000000800)='-1\x00', 0x3) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="5913fcfffffffddbdf256b"], 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x12, 0x3, @l2={'ib', 0x3a, 'caif0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x20004000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xfff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x80) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fbdbdf252100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000006e007a86331ec70e081a00000500f6008f0000000400ec00"], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x810) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB='(\t\x00\x00', @ANYRES16=r4, @ANYBLOB="00042dbd7000fedbdf258900000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900070000005500000064021d80e401008005000800940000000500060000000000bc010d8064000280050004000000000005000600000000001400050009000600b20001000700050080000200050006000000000005000700000000002b0002002913174d2f204f483908490e533108024836260e194605182b18471d193a522e0925504f560c46009c00008005000400010000001400010016053648010003020360060b3612030205000700010000000d000100480c0c301b090601050000002d000200451752530f18542c0033000714152b0431214f4934121018172a3b0f4e483e24344731450a442d055200000020000100300b11020202360960021624131b603002240630300409094803360b14000500050001800400000005000900d3cc0100380001800500070000000000050006000200000005000700020000001400050077000200001007000500050000000000050007000200000074000380190001006048186c1a240501d0090112181248601b1802050500000005000400000000000f0002004e51170b1b551100284f1d0014000300b3040000010002000000090001800300140003000700f1ff0600030000000d0048ff6c001400050003000600020001001e000400020002000c000180050004000200000005000800a90000000c0002000800000000000000340000800c00030002000000000000000c0003002400000000000000040004000c000200040000000000000005000b00000000001400008005000b000100000005000600000000002800008005000b0001000000050006000100000005000600000000000c00030001000000000000000c00008005000600000000008c011d801800008006000500f20000000c00020000000000000000007001008004000400060005004600000005000700ef00000005000b00010000000c00020008000000000000003c010d809c00038005000400020000002800020016331b070719253f35102000271e0620040f521025051828313951221d3428414101004605000400010000003400020002061d4d09082f1c0f493841321d263c173e215010041d26484e460e0c08492a260300443701533b102327261d38085214000500010006003d0d07000800080054040000050004000000000005000600020000000500070001000000900002801400030075020700080002000500e11a040006000500070002000000140005000100000001000600270079a9ff01020049fe040001000000140003000a00f1ff018001000000020084034d7b14000300980502003c000800020008000700adb81300010012160218090c1b0b0202581604040c000500040002000000050007000100000005000400010000000c0002800500060001000000050009000000000058001d80100000800c0002009b060000000000004400008004000400050009000100000005000b00010000000c000200a15a0000000000000c000200030000000000000005000900000000000c000300ff7f0000000000009c011d80980100800500070007000000050009000100000005000c00020000000500070071000000050008000900000005000800f6000000050008002e00000048010d805800028005000700010000002800020004481c252b53323e21463d0b3b3d4811230127514c0c4a201044384b553c3219403a39c0050004000100000014000300ff00ff0f1f0604000200a3040500faff0500070000000000b400018014000300030007005f323700100009000100030045000200423e010b4917443c3117301def1427003b2804362100213e4c021254543f4501112e060c450d3e28102e10121454402a522746133c340a210d3c3d28082705172800000004000200050007000200000011000100240906423e1b161648480b000200000005000400010000002300020025002114460f264f364841334857491a06182a0b0806561821331f1a5016080005000400010000002000018014000500010002000500fcff6ed9ffffcba600000500040002000000180000801400050006000500040081ff08000100010000000c000300070000000000000005000a0000000000d0011d800c00008005000c00010000008401008005000600010000252729f264253f5c0006000500fd00000005000b000100000005000c000000000030010d80680003801a000200141025173910251d56270a032a412d081a261a52010e000005000400000000001400050000048c0d010009009c896c00001002002c000200083a393c09013c27555618350d3933113039381618332b3d0d0c401b4152491f4d4e4920334a08083c00008014000300971209000000020081000e0005002e0c050007000000000005000600010000000a0001002424040904010000050007000100000044000280050006000100000014000300420000000900b2090d000100070005000500060001000000050004000200000014000300070002002800070005000500040009004400038005000700000000001400050008000b00000c05000600000004000500050006000200000013000100050c0918306000180118351b246c0100050006000200000005000b00010000000c000200ffffffffffffff7f05000a00010000000c00020000000000000000001800008005000800a70000000c00020043000000000000000400008020000080050008000b00000005000900010000000400040005000700140000004c011d800c00008005000a0000000000380000800400040005000800e000000005000a000000000005000a00000000000500090000000000050009000000000005000b00010000007c0000800c000300ff0f00000000000058000d8054000080450002002521410f3518430502173842043907530b171350173d2714214d30300e0312313e322e36183c5723130823171a13575350325038083b221648294a2520082f4c2600000005000400020000000c000300f8ffffffffffffff0500070069000000580000800c000200030000000000000005000600000000000c000200010000000000000005000700b70000000c00030008000000000000000500090001000000"], 0x928}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x8000000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) 947.070816ms ago: executing program 6 (id=8847): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000840)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r1, @ANYRES16, @ANYRESOCT, @ANYRES16, @ANYRESOCT=r2], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x2}, 0x18) splice(r0, 0x0, r2, 0x0, 0xa85, 0x4) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$sock(r5, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x4068854) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000340)='syzkaller\x00', 0x6, 0x63, &(0x7f00000005c0)=""/99, 0x1e00, 0x0, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f00000006c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0xe, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x112}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_aout(r2, &(0x7f0000000a00)=ANY=[@ANYRESOCT=r4, @ANYBLOB="885f782699c023ae91352466c992e8dfd881dbe6a7fdd17a31c4a0eab2f08bf89e473fdd", @ANYRES16, @ANYRESOCT=r3], 0xffffffffffffffb8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000001c0)='kfree\x00', r9}, 0x18) r10 = socket$unix(0x1, 0x1, 0x0) fgetxattr(r10, &(0x7f0000000000)=@random={'btrfs.', '{@\x00'}, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x6f, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x7fd, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xce9d8d60ab13d530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') 923.550118ms ago: executing program 3 (id=8848): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) fcntl$setlease(r2, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) clock_gettime(0x0, &(0x7f0000000080)) close_range(r4, 0xffffffffffffffff, 0x0) 865.928603ms ago: executing program 0 (id=8849): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @empty, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0x40c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r3 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x2}) r5 = request_key(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0xfffffffffffffff9) keyctl$join(0x1, &(0x7f00000004c0)={'syz', 0x2}) keyctl$get_keyring_id(0x0, r5, 0x5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x2200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") lstat(0x0, 0x0) 722.796756ms ago: executing program 6 (id=8850): r0 = socket$nl_generic(0x11, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="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"/1247], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000c40)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x801, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffc, 0x6, 0x4, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="4523058ad486", 0x0, 0x6, 0x0, 0x1, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f00000001c0), 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000007750000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='timer_start\x00', r6}, 0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) 565.38438ms ago: executing program 0 (id=8851): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) 417.253243ms ago: executing program 0 (id=8852): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd8a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), 0xffffffffffffffff) r4 = io_uring_setup(0x80070c5, &(0x7f00000002c0)={0x0, 0xf76f, 0x10, 0x1, 0x154}) r5 = socket(0x2b, 0x1, 0x1) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0x541b, 0x0) close_range(r4, r5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r6], 0x22c}, 0x1, 0x0, 0x0, 0x40250c5}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000740)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 103.547681ms ago: executing program 2 (id=8853): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb831b5bebb5cfe51, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x35}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=r0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500000006000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) 0s ago: executing program 3 (id=8854): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x4}}) read(r3, &(0x7f00000002c0)=""/200, 0x39) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): cks suppressed [ 668.386935][T29815] loop6: detected capacity change from 0 to 512 [ 668.432149][T29815] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.8491: EA inode hash validation failed [ 668.437747][T29818] loop7: detected capacity change from 0 to 128 [ 668.454666][T29815] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.8491: corrupted inode contents [ 668.471169][T29800] syz.2.8487 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 668.476863][T29815] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #15: comm syz.6.8491: mark_inode_dirty error [ 668.485271][T29800] CPU: 0 UID: 0 PID: 29800 Comm: syz.2.8487 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 668.485321][T29800] Tainted: [W]=WARN [ 668.485329][T29800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 668.485342][T29800] Call Trace: [ 668.485350][T29800] [ 668.485359][T29800] __dump_stack+0x1d/0x30 [ 668.485452][T29800] dump_stack_lvl+0x95/0xd0 [ 668.485475][T29800] dump_stack+0x15/0x1b [ 668.485495][T29800] dump_header+0x81/0x240 [ 668.485517][T29800] oom_kill_process+0x295/0x350 [ 668.485656][T29800] out_of_memory+0x97b/0xb80 [ 668.485694][T29800] try_charge_memcg+0x610/0xa10 [ 668.485788][T29800] obj_cgroup_charge_pages+0xa6/0x150 [ 668.485825][T29800] __memcg_kmem_charge_page+0x9f/0x170 [ 668.485855][T29800] __alloc_frozen_pages_noprof+0x18f/0x360 [ 668.485959][T29800] alloc_pages_mpol+0xb3/0x260 [ 668.485989][T29800] alloc_pages_noprof+0x90/0x130 [ 668.486018][T29800] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 668.486092][T29800] __kvmalloc_node_noprof+0x492/0x6b0 [ 668.486118][T29800] ? ip_set_alloc+0x24/0x30 [ 668.486148][T29800] ? ip_set_alloc+0x24/0x30 [ 668.486178][T29800] ip_set_alloc+0x24/0x30 [ 668.486205][T29800] hash_netiface_create+0x282/0x740 [ 668.486293][T29800] ? __pfx_hash_netiface_create+0x10/0x10 [ 668.486386][T29800] ip_set_create+0x3cc/0x970 [ 668.486425][T29800] ? __nla_parse+0x40/0x60 [ 668.486479][T29800] nfnetlink_rcv_msg+0x4c6/0x590 [ 668.486572][T29800] netlink_rcv_skb+0x123/0x220 [ 668.486601][T29800] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 668.486632][T29800] nfnetlink_rcv+0x167/0x16c0 [ 668.486662][T29800] ? kmem_cache_free+0xe3/0x3a0 [ 668.486698][T29800] ? __kfree_skb+0x109/0x150 [ 668.486722][T29800] ? nlmon_xmit+0x4f/0x60 [ 668.486810][T29800] ? consume_skb+0x49/0x150 [ 668.486833][T29800] ? nlmon_xmit+0x4f/0x60 [ 668.486853][T29800] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 668.486883][T29800] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 668.486927][T29800] ? __dev_queue_xmit+0x148/0x1ee0 [ 668.486955][T29800] ? ref_tracker_free+0x37d/0x3e0 [ 668.486983][T29800] ? __netlink_deliver_tap+0x4dc/0x500 [ 668.487064][T29800] netlink_unicast+0x5c0/0x690 [ 668.487105][T29800] netlink_sendmsg+0x58b/0x6b0 [ 668.487136][T29800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 668.487164][T29800] __sock_sendmsg+0x145/0x180 [ 668.487228][T29800] ____sys_sendmsg+0x31e/0x4a0 [ 668.487258][T29800] ___sys_sendmsg+0x17b/0x1d0 [ 668.487297][T29800] __x64_sys_sendmsg+0xd4/0x160 [ 668.487327][T29800] x64_sys_call+0x17ba/0x3000 [ 668.487482][T29800] do_syscall_64+0xca/0x2b0 [ 668.487514][T29800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.487576][T29800] RIP: 0033:0x7f2dea8ff749 [ 668.487592][T29800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.487616][T29800] RSP: 002b:00007f2de9367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.487636][T29800] RAX: ffffffffffffffda RBX: 00007f2deab55fa0 RCX: 00007f2dea8ff749 [ 668.487668][T29800] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 668.487682][T29800] RBP: 00007f2dea983f91 R08: 0000000000000000 R09: 0000000000000000 [ 668.487695][T29800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.487709][T29800] R13: 00007f2deab56038 R14: 00007f2deab55fa0 R15: 00007ffe2b1bda98 [ 668.487728][T29800] [ 668.487764][T29800] memory: usage 307200kB, limit 307200kB, failcnt 1975 [ 668.512694][T29815] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.8491: corrupted inode contents [ 668.522634][T29800] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 668.522653][T29800] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 668.522666][T29800] Memory cgroup stats for /syz2: [ 668.776208][T29800] cache 0 [ 668.867418][T29800] rss 0 [ 668.867429][T29800] shmem 0 [ 668.867436][T29800] mapped_file 0 [ 668.867444][T29800] dirty 0 [ 668.867452][T29800] writeback 0 [ 668.867503][T29800] workingset_refault_anon 38058 [ 668.867513][T29800] workingset_refault_file 5106 [ 668.867520][T29800] swap 200704 [ 668.867526][T29800] swapcached 0 [ 668.867532][T29800] pgpgin 947193 [ 668.867539][T29800] pgpgout 947179 [ 668.867570][T29800] pgfault 841631 [ 668.867576][T29800] pgmajfault 5387 [ 668.867583][T29800] inactive_anon 0 [ 668.867589][T29800] active_anon 0 [ 668.867598][T29800] inactive_file 0 [ 668.867677][T29800] active_file 57344 [ 668.867685][T29800] unevictable 0 [ 668.867692][T29800] hierarchical_memory_limit 314572800 [ 668.867702][T29800] hierarchical_memsw_limit 9223372036854771712 [ 668.867718][T29800] total_cache 0 [ 668.867727][T29800] total_rss 0 [ 668.867734][T29800] total_shmem 0 [ 668.867741][T29800] total_mapped_file 0 [ 668.867750][T29800] total_dirty 0 [ 668.867758][T29800] total_writeback 0 [ 668.867767][T29800] total_workingset_refault_anon 38058 [ 668.867845][T29800] total_workingset_refault_file 5106 [ 668.867855][T29800] total_swap 200704 [ 668.867864][T29800] total_swapcached 0 [ 668.867872][T29800] total_pgpgin 947193 [ 668.867881][T29800] total_pgpgout 947179 [ 668.867891][T29800] total_pgfault 841631 [ 668.867899][T29800] total_pgmajfault 5387 [ 668.867908][T29800] total_inactive_anon 0 [ 668.867919][T29800] total_active_anon 0 [ 668.867928][T29800] total_inactive_file 0 [ 668.867936][T29800] total_active_file 57344 [ 668.867943][T29800] total_unevictable 0 [ 668.867950][T29800] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.8487,pid=29799,uid=0 [ 668.868045][T29800] Memory cgroup out of memory: Killed process 29799 (syz.2.8487) total-vm:96016kB, anon-rss:1136kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 668.960027][T29815] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3000: inode #15: comm syz.6.8491: mark_inode_dirty error [ 668.960172][T29815] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3003: inode #15: comm syz.6.8491: mark inode dirty (error -117) [ 668.960475][T29815] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 668.960601][T29815] EXT4-fs (loop6): 1 orphan inode deleted [ 668.961106][T29815] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.150920][T25316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.503550][T29828] syzkaller0: entered promiscuous mode [ 669.509142][T29828] syzkaller0: entered allmulticast mode [ 669.547136][T22987] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.774077][T29843] loop0: detected capacity change from 0 to 128 [ 669.782558][T29843] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 669.794901][T29843] ext4 filesystem being mounted at /540/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 669.819599][T22704] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 670.046063][T29857] loop6: detected capacity change from 0 to 512 [ 670.054968][T29857] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.8506: EA inode hash validation failed [ 670.067760][T29857] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.8506: corrupted inode contents [ 670.079834][T29857] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #15: comm syz.6.8506: mark_inode_dirty error [ 670.081643][T29859] loop0: detected capacity change from 0 to 128 [ 670.098089][T29857] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.8506: corrupted inode contents [ 670.110413][T29857] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3000: inode #15: comm syz.6.8506: mark_inode_dirty error [ 670.116882][T29859] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 670.122615][T29857] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3003: inode #15: comm syz.6.8506: mark inode dirty (error -117) [ 670.135237][T29859] ext4 filesystem being mounted at /544/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 670.180395][T29857] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 670.189648][T29857] EXT4-fs (loop6): 1 orphan inode deleted [ 670.203361][T29857] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 670.251983][T25316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.371926][T29885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8514'. [ 670.380832][T29885] openvswitch: netlink: Flow actions attr not present in new flow. [ 670.412203][T29890] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8516'. [ 670.526569][T29898] rdma_rxe: rxe_newlink: failed to add lo [ 670.554480][T29895] loop6: detected capacity change from 0 to 32768 [ 670.596395][T29895] loop6: p2 p3 < p5 > p4 < > [ 670.601150][T29895] loop6: partition table partially beyond EOD, truncated [ 670.608416][T29895] loop6: p2 size 83886080 extends beyond EOD, truncated [ 670.618457][T29895] loop6: p4 start 7696384 is beyond EOD, truncated [ 670.624951][T29895] loop6: p5 start 68609 is beyond EOD, truncated [ 670.646563][T29906] xt_ecn: cannot match TCP bits for non-tcp packets [ 670.710835][T29910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8523'. [ 670.721444][T29910] tipc: Failed to obtain node identity [ 670.727708][T29910] tipc: Enabling of bearer rejected, failed to enable media [ 670.737364][T29910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29910 comm=syz.2.8523 [ 670.790784][T29912] loop6: detected capacity change from 0 to 8192 [ 670.863022][T22704] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 670.886451][T29914] openvswitch: netlink: Flow actions attr not present in new flow. [ 671.181056][T29927] loop7: detected capacity change from 0 to 512 [ 671.187589][ T29] kauditd_printk_skb: 1466 callbacks suppressed [ 671.187603][ T29] audit: type=1400 audit(1768262154.076:111722): avc: denied { mounton } for pid=29926 comm="syz.7.8531" path="/109/file0" dev="tmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 671.214696][T29927] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 671.224989][T29927] EXT4-fs (loop7): orphan cleanup on readonly fs [ 671.232241][T29927] Quota error (device loop7): find_block_dqentry: Quota for id 0 referenced but not present [ 671.242860][T29927] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 671.252284][T29927] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.8531: Failed to acquire dquot type 1 [ 671.263756][T29927] EXT4-fs (loop7): Remounting filesystem read-only [ 671.270797][T29927] EXT4-fs (loop7): 1 truncate cleaned up [ 671.277177][T29927] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 671.289618][ T29] audit: type=1400 audit(1768262154.186:111723): avc: denied { mount } for pid=29926 comm="syz.7.8531" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 671.289985][T29927] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.338587][ T29] audit: type=1400 audit(1768262154.226:111724): avc: denied { execmem } for pid=29926 comm="syz.7.8531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 671.405247][ T29] audit: type=1400 audit(1768262154.286:111725): avc: denied { create } for pid=29932 comm="syz.3.8533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 671.427583][ T29] audit: type=1400 audit(1768262154.316:111726): avc: denied { wake_alarm } for pid=29932 comm="syz.3.8533" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 671.482687][ T29] audit: type=1400 audit(1768262154.366:111727): avc: denied { create } for pid=29935 comm="syz.2.8534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 671.503392][ T29] audit: type=1326 audit(1768262154.366:111728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29935 comm="syz.2.8534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dea8ff749 code=0x7ffc0000 [ 671.527854][ T29] audit: type=1326 audit(1768262154.366:111729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29935 comm="syz.2.8534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dea8ff749 code=0x7ffc0000 [ 671.560113][T29933] loop3: detected capacity change from 0 to 128 [ 671.568171][T29933] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 671.580419][T29933] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.615166][T22987] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 671.634732][T29940] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 671.645718][T29940] loop3: detected capacity change from 0 to 512 [ 671.652314][T29940] EXT4-fs: Ignoring removed mblk_io_submit option [ 671.659097][T29940] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 671.669188][T29940] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 671.677960][T29940] System zones: 1-12 [ 671.682271][T29940] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.8535: corrupted in-inode xattr: e_value size too large [ 671.696890][T29940] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.8535: couldn't read orphan inode 15 (err -117) [ 671.710050][T29940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 671.735431][T22987] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.767495][T29943] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 671.775507][T29943] EXT4-fs (loop3): orphan cleanup on readonly fs [ 671.782513][T29943] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.8536: Failed to acquire dquot type 1 [ 671.794043][T29943] EXT4-fs (loop3): Remounting filesystem read-only [ 671.801318][T29943] EXT4-fs (loop3): 1 truncate cleaned up [ 671.807568][T29943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 671.820410][T29943] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.856192][T29949] openvswitch: netlink: Flow actions attr not present in new flow. [ 671.975107][T29951] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.8539: error while reading EA inode 32 err=-116 [ 671.991627][T29951] EXT4-fs (loop0): Remounting filesystem read-only [ 671.998390][T29951] EXT4-fs (loop0): 1 orphan inode deleted [ 672.004749][T29951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.072171][T29955] lo speed is unknown, defaulting to 1000 [ 672.106555][T29955] lo speed is unknown, defaulting to 1000 [ 672.112771][T29955] lo speed is unknown, defaulting to 1000 [ 672.189082][T22704] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.390590][T29966] rdma_rxe: rxe_newlink: failed to add lo [ 672.434078][T29971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8545'. [ 672.443470][T29973] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.8546: EA inode hash validation failed [ 672.443712][T29973] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.8546: corrupted inode contents [ 672.456261][T29971] openvswitch: netlink: Flow actions attr not present in new flow. [ 672.479867][T29973] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #15: comm syz.6.8546: mark_inode_dirty error [ 672.491848][T29973] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.8546: corrupted inode contents [ 672.503914][T29973] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3000: inode #15: comm syz.6.8546: mark_inode_dirty error [ 672.516509][T29973] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3003: inode #15: comm syz.6.8546: mark inode dirty (error -117) [ 672.529266][T29973] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 672.538938][T29973] EXT4-fs (loop6): 1 orphan inode deleted [ 672.545237][T29973] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.575129][T25316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.684297][T29983] bio_check_eod: 32660 callbacks suppressed [ 672.684341][T29983] syz.3.8550: attempt to access beyond end of device [ 672.684341][T29983] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 672.703769][T29983] syz.3.8550: attempt to access beyond end of device [ 672.703769][T29983] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 672.717672][T29983] syz.3.8550: attempt to access beyond end of device [ 672.717672][T29983] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 672.731185][T29983] syz.3.8550: attempt to access beyond end of device [ 672.731185][T29983] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 672.744765][T29983] syz.3.8550: attempt to access beyond end of device [ 672.744765][T29983] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 672.758811][T29983] syz.3.8550: attempt to access beyond end of device [ 672.758811][T29983] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 672.772307][T29983] syz.3.8550: attempt to access beyond end of device [ 672.772307][T29983] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 672.785873][T29983] syz.3.8550: attempt to access beyond end of device [ 672.785873][T29983] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 672.800251][T29983] syz.3.8550: attempt to access beyond end of device [ 672.800251][T29983] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 672.814599][T29983] syz.3.8550: attempt to access beyond end of device [ 672.814599][T29983] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 672.865846][T29990] xt_hashlimit: max too large, truncated to 1048576 [ 673.255713][T30007] FAULT_INJECTION: forcing a failure. [ 673.255713][T30007] name failslab, interval 1, probability 0, space 0, times 0 [ 673.255740][T30007] CPU: 1 UID: 0 PID: 30007 Comm: syz.2.8559 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 673.255767][T30007] Tainted: [W]=WARN [ 673.255774][T30007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 673.255786][T30007] Call Trace: [ 673.255793][T30007] [ 673.255801][T30007] __dump_stack+0x1d/0x30 [ 673.255847][T30007] dump_stack_lvl+0x95/0xd0 [ 673.255869][T30007] dump_stack+0x15/0x1b [ 673.255917][T30007] should_fail_ex+0x265/0x280 [ 673.255930][T30007] should_failslab+0x8c/0xb0 [ 673.255943][T30007] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 673.256011][T30007] ? __alloc_skb+0x2ff/0x4b0 [ 673.256114][T30007] __alloc_skb+0x2ff/0x4b0 [ 673.256126][T30007] ? __alloc_skb+0x228/0x4b0 [ 673.256146][T30007] unicast_flush_resp+0x28/0xc0 [ 673.256203][T30007] pfkey_flush+0xcc/0x190 [ 673.256228][T30007] ? pfkey_broadcast+0x223/0x240 [ 673.256313][T30007] pfkey_sendmsg+0x718/0x900 [ 673.256345][T30007] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 673.256367][T30007] __sock_sendmsg+0x145/0x180 [ 673.256408][T30007] ____sys_sendmsg+0x31e/0x4a0 [ 673.256523][T30007] ___sys_sendmsg+0x17b/0x1d0 [ 673.256554][T30007] __x64_sys_sendmsg+0xd4/0x160 [ 673.256583][T30007] x64_sys_call+0x17ba/0x3000 [ 673.256608][T30007] do_syscall_64+0xca/0x2b0 [ 673.256639][T30007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.256658][T30007] RIP: 0033:0x7f2dea8ff749 [ 673.256671][T30007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.256750][T30007] RSP: 002b:00007f2de9367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.256767][T30007] RAX: ffffffffffffffda RBX: 00007f2deab55fa0 RCX: 00007f2dea8ff749 [ 673.256778][T30007] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 673.256791][T30007] RBP: 00007f2de9367090 R08: 0000000000000000 R09: 0000000000000000 [ 673.256865][T30007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.256878][T30007] R13: 00007f2deab56038 R14: 00007f2deab55fa0 R15: 00007ffe2b1bda98 [ 673.256896][T30007] [ 673.498464][T30016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8563'. [ 673.507477][T30016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8563'. [ 673.603884][T30027] Falling back ldisc for ptm0. [ 673.668092][T30033] FAULT_INJECTION: forcing a failure. [ 673.668092][T30033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 673.681230][T30033] CPU: 0 UID: 0 PID: 30033 Comm: syz.6.8571 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 673.681261][T30033] Tainted: [W]=WARN [ 673.681268][T30033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 673.681279][T30033] Call Trace: [ 673.681286][T30033] [ 673.681293][T30033] __dump_stack+0x1d/0x30 [ 673.681336][T30025] set_capacity_and_notify: 5 callbacks suppressed [ 673.681348][T30025] loop7: detected capacity change from 0 to 8192 [ 673.681380][T30033] dump_stack_lvl+0x95/0xd0 [ 673.681408][T30033] dump_stack+0x15/0x1b [ 673.681426][T30033] should_fail_ex+0x265/0x280 [ 673.681448][T30033] should_fail+0xb/0x20 [ 673.681473][T30033] should_fail_usercopy+0x1a/0x20 [ 673.681497][T30033] _copy_to_user+0x20/0xa0 [ 673.681524][T30033] simple_read_from_buffer+0xb5/0x130 [ 673.681543][T30033] proc_fail_nth_read+0x10e/0x150 [ 673.681630][T30033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 673.681656][T30033] vfs_read+0x1a8/0x770 [ 673.681673][T30033] ? __rcu_read_unlock+0x4f/0x70 [ 673.681693][T30033] ? __fget_files+0x184/0x1c0 [ 673.681787][T30033] ? mutex_lock+0x58/0x90 [ 673.681812][T30033] ksys_read+0xda/0x1a0 [ 673.681832][T30033] __x64_sys_read+0x40/0x50 [ 673.681850][T30033] x64_sys_call+0x2889/0x3000 [ 673.681888][T30033] do_syscall_64+0xca/0x2b0 [ 673.681921][T30033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.681983][T30033] RIP: 0033:0x7f00f4f6e15c [ 673.681999][T30033] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 673.682017][T30033] RSP: 002b:00007f00f39d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 673.682100][T30033] RAX: ffffffffffffffda RBX: 00007f00f51c5fa0 RCX: 00007f00f4f6e15c [ 673.682113][T30033] RDX: 000000000000000f RSI: 00007f00f39d70a0 RDI: 0000000000000004 [ 673.682126][T30033] RBP: 00007f00f39d7090 R08: 0000000000000000 R09: 0000000000000000 [ 673.682138][T30033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.682151][T30033] R13: 00007f00f51c6038 R14: 00007f00f51c5fa0 R15: 00007ffcb8c679a8 [ 673.682170][T30033] [ 673.750508][T30036] loop6: detected capacity change from 0 to 512 [ 673.828329][T30040] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 673.897523][T30036] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.8572: EA inode hash validation failed [ 673.907248][T30043] loop3: detected capacity change from 0 to 512 [ 673.907500][T30043] EXT4-fs: Ignoring removed mblk_io_submit option [ 673.907722][T30043] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 673.942648][T30043] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 673.950790][T30036] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.8572: corrupted inode contents [ 673.966676][T30043] System zones: 1-12 [ 673.966765][T30036] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #15: comm syz.6.8572: mark_inode_dirty error [ 673.975940][T30043] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.8575: corrupted in-inode xattr: e_value size too large [ 673.991262][T30036] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.8572: corrupted inode contents [ 674.015521][T30036] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3000: inode #15: comm syz.6.8572: mark_inode_dirty error [ 674.027774][T30043] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.8575: couldn't read orphan inode 15 (err -117) [ 674.039716][T30036] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3003: inode #15: comm syz.6.8572: mark inode dirty (error -117) [ 674.052532][T30036] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 674.062036][T30043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.082500][T30036] EXT4-fs (loop6): 1 orphan inode deleted [ 674.089603][T30036] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.130280][T25316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.150148][T22987] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.179669][T30060] loop6: detected capacity change from 0 to 1024 [ 674.187349][T30060] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 674.244739][T30067] xt_ecn: cannot match TCP bits for non-tcp packets [ 674.312146][T30069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8580'. [ 674.322313][T30069] tipc: Failed to obtain node identity [ 674.327806][T30069] tipc: Enabling of bearer rejected, failed to enable media [ 674.337492][T30069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30069 comm=syz.2.8580 [ 674.481583][T30076] loop0: detected capacity change from 0 to 512 [ 674.499149][T30076] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 674.508383][T30076] EXT4-fs (loop0): orphan cleanup on readonly fs [ 674.510702][T30075] loop3: detected capacity change from 0 to 8192 [ 674.515203][T30076] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.8584: Failed to acquire dquot type 1 [ 674.532503][T30076] EXT4-fs (loop0): Remounting filesystem read-only [ 674.539076][T30076] EXT4-fs (loop0): 1 truncate cleaned up [ 674.545813][T30076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 674.559003][T30076] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.692515][T30085] loop3: detected capacity change from 0 to 512 [ 674.699724][T30085] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 674.716608][T30085] EXT4-fs (loop3): 1 truncate cleaned up [ 674.722971][T30085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.807243][T30088] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8587'. [ 675.034422][T30092] loop6: detected capacity change from 0 to 512 [ 675.042650][T30092] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.8589: EA inode hash validation failed [ 675.055323][T30092] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.8589: corrupted inode contents [ 675.067636][T30092] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #15: comm syz.6.8589: mark_inode_dirty error [ 675.080076][T30092] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.8589: corrupted inode contents [ 675.092286][T30092] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3000: inode #15: comm syz.6.8589: mark_inode_dirty error [ 675.104404][T30092] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3003: inode #15: comm syz.6.8589: mark inode dirty (error -117) [ 675.117718][T30092] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 675.126803][T30092] EXT4-fs (loop6): 1 orphan inode deleted [ 675.132941][T30092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.157365][T25316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.474070][T30103] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 675.474070][T30103] program syz.0.8592 not setting count and/or reply_len properly [ 675.628589][T22987] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.673563][T30113] FAULT_INJECTION: forcing a failure. [ 675.673563][T30113] name failslab, interval 1, probability 0, space 0, times 0 [ 675.686768][T30113] CPU: 0 UID: 0 PID: 30113 Comm: syz.3.8596 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 675.686788][T30113] Tainted: [W]=WARN [ 675.686792][T30113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 675.686799][T30113] Call Trace: [ 675.686803][T30113] [ 675.686808][T30113] __dump_stack+0x1d/0x30 [ 675.686858][T30113] dump_stack_lvl+0x95/0xd0 [ 675.686912][T30113] dump_stack+0x15/0x1b [ 675.686929][T30113] should_fail_ex+0x265/0x280 [ 675.686943][T30113] should_failslab+0x8c/0xb0 [ 675.686987][T30113] __kmalloc_cache_noprof+0x65/0x4c0 [ 675.687038][T30113] ? __se_sys_memfd_create+0x1d6/0x6b0 [ 675.687056][T30113] ? mutex_unlock+0x4f/0x90 [ 675.687147][T30113] __se_sys_memfd_create+0x1d6/0x6b0 [ 675.687231][T30113] __x64_sys_memfd_create+0x31/0x40 [ 675.687256][T30113] x64_sys_call+0x28cb/0x3000 [ 675.687269][T30113] do_syscall_64+0xca/0x2b0 [ 675.687288][T30113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.687300][T30113] RIP: 0033:0x7febdd59f749 [ 675.687370][T30113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.687380][T30113] RSP: 002b:00007febdc006d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 675.687392][T30113] RAX: ffffffffffffffda RBX: 00000000000005c2 RCX: 00007febdd59f749 [ 675.687418][T30113] RDX: 00007febdc006dec RSI: 0000000000000000 RDI: 00007febdd624960 [ 675.687426][T30113] RBP: 0000200000000000 R08: 00007febdc006b07 R09: 0000000000000000 [ 675.687433][T30113] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 675.687440][T30113] R13: 00007febdc006dec R14: 00007febdc006df0 R15: 00007fff424ba8b8 [ 675.687450][T30113] [ 675.860319][T30115] loop7: detected capacity change from 0 to 512 [ 675.878150][T30115] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 675.886280][T30115] EXT4-fs (loop7): orphan cleanup on readonly fs [ 675.893101][T30115] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.8597: Failed to acquire dquot type 1 [ 675.896822][T30122] loop3: detected capacity change from 0 to 128 [ 675.916041][T30115] EXT4-fs (loop7): Remounting filesystem read-only [ 675.922562][T30115] EXT4-fs (loop7): 1 truncate cleaned up [ 675.931364][T30115] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 675.944120][T30115] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.981175][T30126] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.8601: EA inode hash validation failed [ 676.104753][T30126] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.8601: corrupted inode contents [ 676.116859][T30126] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.8601: mark_inode_dirty error [ 676.128472][T30126] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.8601: corrupted inode contents [ 676.140708][T30126] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.8601: mark_inode_dirty error [ 676.153420][T30126] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.8601: mark inode dirty (error -117) [ 676.166220][T30126] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 676.175263][T30126] EXT4-fs (loop0): 1 orphan inode deleted [ 676.222527][T30132] lo speed is unknown, defaulting to 1000 [ 676.274236][T30132] lo speed is unknown, defaulting to 1000 [ 676.280559][T30132] lo speed is unknown, defaulting to 1000 [ 676.342152][T30131] audit_log_start: 732 callbacks suppressed [ 676.342191][T30131] audit: audit_backlog=65 > audit_backlog_limit=64 [ 676.354652][T30131] audit: audit_lost=38 audit_rate_limit=0 audit_backlog_limit=64 [ 676.362374][T30131] audit: backlog limit exceeded [ 676.435324][ T29] audit: type=1326 audit(1768262159.026:112456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30121 comm="syz.3.8599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febdd59f749 code=0x7ffc0000 [ 676.459059][ T29] audit: type=1326 audit(1768262159.026:112457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30121 comm="syz.3.8599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febdd59f749 code=0x7ffc0000 [ 676.482779][ T29] audit: type=1326 audit(1768262159.026:112458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30121 comm="syz.3.8599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febdd59f749 code=0x7ffc0000 [ 676.506418][ T29] audit: type=1326 audit(1768262159.026:112459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30121 comm="syz.3.8599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febdd59f749 code=0x7ffc0000 [ 676.526352][T30126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.530122][ T29] audit: type=1326 audit(1768262159.026:112460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30121 comm="syz.3.8599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febdd59f749 code=0x7ffc0000 [ 676.565644][ T29] audit: type=1326 audit(1768262159.026:112461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30121 comm="syz.3.8599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febdd59f749 code=0x7ffc0000 [ 676.589321][ T29] audit: type=1326 audit(1768262159.026:112462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30121 comm="syz.3.8599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febdd59f749 code=0x7ffc0000 [ 676.647268][T22704] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.029102][T30159] FAULT_INJECTION: forcing a failure. [ 677.029102][T30159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.042199][T30159] CPU: 1 UID: 0 PID: 30159 Comm: syz.0.8608 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 677.042229][T30159] Tainted: [W]=WARN [ 677.042235][T30159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 677.042245][T30159] Call Trace: [ 677.042251][T30159] [ 677.042290][T30159] __dump_stack+0x1d/0x30 [ 677.042315][T30159] dump_stack_lvl+0x95/0xd0 [ 677.042391][T30159] dump_stack+0x15/0x1b [ 677.042436][T30159] should_fail_ex+0x265/0x280 [ 677.042460][T30159] should_fail+0xb/0x20 [ 677.042480][T30159] should_fail_usercopy+0x1a/0x20 [ 677.042499][T30159] _copy_from_user+0x1c/0xb0 [ 677.042554][T30159] ___sys_sendmsg+0xc1/0x1d0 [ 677.042595][T30159] __x64_sys_sendmsg+0xd4/0x160 [ 677.042624][T30159] x64_sys_call+0x17ba/0x3000 [ 677.042716][T30159] do_syscall_64+0xca/0x2b0 [ 677.042742][T30159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.042764][T30159] RIP: 0033:0x7f91cb93f749 [ 677.042781][T30159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.042817][T30159] RSP: 002b:00007f91ca35d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 677.042835][T30159] RAX: ffffffffffffffda RBX: 00007f91cbb96180 RCX: 00007f91cb93f749 [ 677.042847][T30159] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000008 [ 677.042858][T30159] RBP: 00007f91ca35d090 R08: 0000000000000000 R09: 0000000000000000 [ 677.042869][T30159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.042880][T30159] R13: 00007f91cbb96218 R14: 00007f91cbb96180 R15: 00007ffef0d2d018 [ 677.042896][T30159] [ 677.279120][T30163] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 677.312405][T30163] EXT4-fs: Ignoring removed mblk_io_submit option [ 677.326930][T30163] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 677.340261][T30163] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 677.355906][T30163] System zones: 1-12 [ 677.366252][T30163] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.8614: corrupted in-inode xattr: e_value size too large [ 677.391086][T30163] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.8614: couldn't read orphan inode 15 (err -117) [ 677.414877][T30163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.465569][T25316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.532112][T30169] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 677.540121][T30169] EXT4-fs (loop6): orphan cleanup on readonly fs [ 677.545828][T20272] Bluetooth: hci0: Frame reassembly failed (-84) [ 677.547132][T30169] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.8615: Failed to acquire dquot type 1 [ 677.547692][T30169] EXT4-fs (loop6): Remounting filesystem read-only [ 677.555096][T30173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.564861][T30169] EXT4-fs (loop6): 1 truncate cleaned up [ 677.585829][T30169] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 677.598482][T30169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.611162][T30173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.656275][T30173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30173 comm=syz.7.8616 [ 677.713738][T30145] bio_check_eod: 16851 callbacks suppressed [ 677.713752][T30145] syz.3.8606: attempt to access beyond end of device [ 677.713752][T30145] loop3: rw=8388608, sector=153, nr_sectors = 8 limit=128 [ 677.734197][T30145] syz.3.8606: attempt to access beyond end of device [ 677.734197][T30145] loop3: rw=8388608, sector=153, nr_sectors = 8 limit=128 [ 677.734239][T30145] syz.3.8606: attempt to access beyond end of device [ 677.734239][T30145] loop3: rw=8388608, sector=153, nr_sectors = 8 limit=128 [ 677.734283][T30145] syz.3.8606: attempt to access beyond end of device [ 677.734283][T30145] loop3: rw=8388608, sector=153, nr_sectors = 8 limit=128 [ 677.734348][T30145] syz.3.8606: attempt to access beyond end of device [ 677.734348][T30145] loop3: rw=8388608, sector=153, nr_sectors = 8 limit=128 [ 677.734388][T30145] syz.3.8606: attempt to access beyond end of device [ 677.734388][T30145] loop3: rw=8388608, sector=153, nr_sectors = 8 limit=128 [ 677.734495][T30145] syz.3.8606: attempt to access beyond end of device [ 677.734495][T30145] loop3: rw=8388608, sector=153, nr_sectors = 8 limit=128 [ 677.734539][T30145] syz.3.8606: attempt to access beyond end of device [ 677.734539][T30145] loop3: rw=8388608, sector=153, nr_sectors = 8 limit=128 [ 677.734582][T30145] syz.3.8606: attempt to access beyond end of device [ 677.734582][T30145] loop3: rw=8388608, sector=153, nr_sectors = 8 limit=128 [ 677.734675][T30145] syz.3.8606: attempt to access beyond end of device [ 677.734675][T30145] loop3: rw=8388608, sector=153, nr_sectors = 8 limit=128 [ 677.955199][T30184] lo speed is unknown, defaulting to 1000 [ 677.989797][T30184] lo speed is unknown, defaulting to 1000 [ 677.995894][T30184] lo speed is unknown, defaulting to 1000 [ 678.207352][T30182] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 678.276087][T30182] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 678.343970][T30179] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 678.352082][T30179] EXT4-fs (loop0): orphan cleanup on readonly fs [ 678.360504][T30179] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.8618: Failed to acquire dquot type 1 [ 678.371924][T30179] EXT4-fs (loop0): Remounting filesystem read-only [ 678.378530][T30179] EXT4-fs (loop0): 1 truncate cleaned up [ 678.384685][T30179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 678.398079][T30179] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.473082][T22987] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 678.811045][T30207] forcing mempool usage for bio_alloc_bioset+0x449/0xa50 [ 678.881944][T30211] set_capacity_and_notify: 6 callbacks suppressed [ 678.881956][T30211] loop6: detected capacity change from 0 to 128 [ 678.895111][T30210] ip6t_srh: unknown srh match flags 4000 [ 679.147674][T30225] syzkaller0: entered promiscuous mode [ 679.153164][T30225] syzkaller0: entered allmulticast mode [ 679.588031][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 679.992987][T30271] xt_CT: You must specify a L4 protocol and not use inversions on it [ 680.018678][T30273] rdma_rxe: rxe_newlink: failed to add lo [ 680.284582][T30281] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 680.284582][T30281] program syz.7.8656 not setting count and/or reply_len properly [ 680.304752][T30281] loop7: detected capacity change from 0 to 512 [ 680.320715][T30281] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.334339][T30281] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 680.369813][T28192] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 680.383076][T28192] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 680.415822][T30293] xt_ecn: cannot match TCP bits for non-tcp packets [ 680.479118][T30294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8659'. [ 680.489095][T30294] tipc: Failed to obtain node identity [ 680.494586][T30294] tipc: Enabling of bearer rejected, failed to enable media [ 680.504201][T30294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30294 comm=syz.2.8659 [ 680.619908][T30296] loop6: detected capacity change from 0 to 1024 [ 680.628044][T30296] EXT4-fs: Ignoring removed orlov option [ 680.634930][T30289] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.668499][T20297] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.727253][T20297] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.770202][T30304] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 680.782276][T20297] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.795789][T30304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8664'. [ 680.820767][T20297] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.857566][T30299] lo speed is unknown, defaulting to 1000 [ 680.904079][T20297] bridge_slave_1: left allmulticast mode [ 680.909870][T20297] bridge_slave_1: left promiscuous mode [ 680.915539][T20297] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.933147][T20297] bridge_slave_0: left allmulticast mode [ 680.938859][T20297] bridge_slave_0: left promiscuous mode [ 680.944510][T20297] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.049911][T20297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.060101][T30327] loop0: detected capacity change from 0 to 8192 [ 681.065274][T20297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.077029][T20297] bond0 (unregistering): Released all slaves [ 681.085474][T30299] lo speed is unknown, defaulting to 1000 [ 681.091987][T30299] lo speed is unknown, defaulting to 1000 [ 681.098371][T30320] siw: device registration error -23 [ 681.118551][T20297] tipc: Disabling bearer [ 681.123854][T20297] tipc: Left network mode [ 681.179832][T20297] hsr_slave_0: left promiscuous mode [ 681.185474][T20297] hsr_slave_1: left promiscuous mode [ 681.191359][T20297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.199425][T20297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.207623][T20297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.215001][T20297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.225913][T20297] veth1_macvtap: left promiscuous mode [ 681.234065][T20297] veth0_macvtap: left promiscuous mode [ 681.239691][T20297] veth1_vlan: left promiscuous mode [ 681.240167][T30335] FAULT_INJECTION: forcing a failure. [ 681.240167][T30335] name failslab, interval 1, probability 0, space 0, times 0 [ 681.245042][T20297] veth0_vlan: left promiscuous mode [ 681.258198][T30335] CPU: 0 UID: 0 PID: 30335 Comm: syz.0.8673 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 681.258230][T30335] Tainted: [W]=WARN [ 681.258238][T30335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 681.258250][T30335] Call Trace: [ 681.258256][T30335] [ 681.258344][T30335] __dump_stack+0x1d/0x30 [ 681.258369][T30335] dump_stack_lvl+0x95/0xd0 [ 681.258391][T30335] dump_stack+0x15/0x1b [ 681.258411][T30335] should_fail_ex+0x265/0x280 [ 681.258487][T30335] should_failslab+0x8c/0xb0 [ 681.258575][T30335] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 681.258649][T30335] ? sidtab_sid2str_get+0xa0/0x130 [ 681.258678][T30335] kmemdup_noprof+0x2b/0x70 [ 681.258709][T30335] sidtab_sid2str_get+0xa0/0x130 [ 681.258760][T30335] security_sid_to_context_core+0x1eb/0x2e0 [ 681.258789][T30335] security_sid_to_context+0x27/0x40 [ 681.258815][T30335] selinux_lsmprop_to_secctx+0x67/0xf0 [ 681.258843][T30335] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 681.258877][T30335] audit_log_subj_ctx+0xa4/0x3e0 [ 681.258898][T30335] ? skb_put+0xa9/0xf0 [ 681.258923][T30335] audit_log_task_context+0x48/0x70 [ 681.258945][T30335] audit_log_task+0xf4/0x250 [ 681.259042][T30335] ? kstrtouint+0x76/0xc0 [ 681.259062][T30335] audit_seccomp+0x61/0x100 [ 681.259089][T30335] ? __seccomp_filter+0x832/0x1260 [ 681.259114][T30335] __seccomp_filter+0x843/0x1260 [ 681.259181][T30335] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 681.259208][T30335] ? vfs_write+0x7e8/0x960 [ 681.259241][T30335] ? __rcu_read_unlock+0x4f/0x70 [ 681.259261][T30335] ? __fget_files+0x184/0x1c0 [ 681.259285][T30335] __secure_computing+0x82/0x150 [ 681.259308][T30335] syscall_trace_enter+0xcf/0x1e0 [ 681.259380][T30335] do_syscall_64+0xa4/0x2b0 [ 681.259410][T30335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.259481][T30335] RIP: 0033:0x7f91cb93f749 [ 681.259496][T30335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.259554][T30335] RSP: 002b:00007f91ca39f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 681.259578][T30335] RAX: ffffffffffffffda RBX: 00007f91cbb95fa0 RCX: 00007f91cb93f749 [ 681.259591][T30335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 681.259665][T30335] RBP: 00007f91ca39f090 R08: 0000000000000000 R09: 0000000000000000 [ 681.259678][T30335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.259691][T30335] R13: 00007f91cbb96038 R14: 00007f91cbb95fa0 R15: 00007ffef0d2d018 [ 681.259709][T30335] [ 681.513502][T30341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8675'. [ 681.635298][ T29] kauditd_printk_skb: 1255 callbacks suppressed [ 681.635313][ T29] audit: type=1400 audit(1768262164.516:113713): avc: denied { module_load } for pid=30337 comm="syz.2.8674" path="/88/bus" dev="tmpfs" ino=491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 681.665879][T30348] Invalid ELF header magic: != ELF [ 681.700474][T20297] team0 (unregistering): Port device team_slave_1 removed [ 681.725175][T20297] team0 (unregistering): Port device team_slave_0 removed [ 681.737600][ T29] audit: type=1400 audit(1768262164.626:113714): avc: denied { create } for pid=30337 comm="syz.2.8674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 681.784560][T30353] rdma_rxe: rxe_newlink: failed to add lo [ 681.799375][ T29] audit: type=1400 audit(1768262164.646:113715): avc: denied { ioctl } for pid=30337 comm="syz.2.8674" path="socket:[106119]" dev="sockfs" ino=106119 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 681.825113][ T29] audit: type=1400 audit(1768262164.646:113716): avc: denied { bind } for pid=30337 comm="syz.2.8674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 681.844779][ T29] audit: type=1400 audit(1768262164.646:113717): avc: denied { write } for pid=30352 comm="syz.6.8677" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 681.869785][ T29] audit: type=1400 audit(1768262164.656:113718): avc: denied { validate_trans } for pid=30352 comm="syz.6.8677" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 681.890531][ T29] audit: type=1400 audit(1768262164.656:113719): avc: denied { create } for pid=30352 comm="syz.6.8677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 681.910813][ T29] audit: type=1400 audit(1768262164.656:113720): avc: denied { setopt } for pid=30352 comm="syz.6.8677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 681.930554][ T29] audit: type=1400 audit(1768262164.666:113721): avc: denied { bind } for pid=30352 comm="syz.6.8677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 681.950848][ T29] audit: type=1400 audit(1768262164.666:113722): avc: denied { create } for pid=30352 comm="syz.6.8677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 681.973748][T30341] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 681.985430][T30299] chnl_net:caif_netlink_parms(): no params data found [ 682.008947][T30348] lo speed is unknown, defaulting to 1000 [ 682.053759][T30348] lo speed is unknown, defaulting to 1000 [ 682.062032][T30348] lo speed is unknown, defaulting to 1000 [ 682.081919][T30363] netlink: 'syz.0.8678': attribute type 1 has an invalid length. [ 682.089932][T30363] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8678'. [ 682.108660][T30299] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.115709][T30299] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.123594][T30299] bridge_slave_0: entered allmulticast mode [ 682.130219][T30299] bridge_slave_0: entered promiscuous mode [ 682.158532][T30299] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.165609][T30299] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.180155][T30299] bridge_slave_1: entered allmulticast mode [ 682.187204][T30299] bridge_slave_1: entered promiscuous mode [ 682.209222][T30299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.228221][T30299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.252855][T30368] siw: device registration error -23 [ 682.262516][T30299] team0: Port device team_slave_0 added [ 682.278971][T30370] loop3: detected capacity change from 0 to 128 [ 682.282565][T30299] team0: Port device team_slave_1 added [ 682.311598][T30299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.318607][T30299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.344541][T30299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.356546][T30299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.363536][T30299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.389743][T30299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.419884][T30299] hsr_slave_0: entered promiscuous mode [ 682.426188][T30299] hsr_slave_1: entered promiscuous mode [ 682.432137][T30299] debugfs: 'hsr0' already exists in 'hsr' [ 682.437959][T30299] Cannot create hsr debugfs directory [ 682.568529][T30299] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 682.577759][T30299] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 682.595774][T30299] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 682.623327][T30299] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 682.663129][T30299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.682673][T30299] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.694301][T20291] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.701389][T20291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.716116][T30370] bio_check_eod: 21698 callbacks suppressed [ 682.716129][T30370] syz.3.8682: attempt to access beyond end of device [ 682.716129][T30370] loop3: rw=8388608, sector=153, nr_sectors = 8 limit=128 [ 682.738619][T30384] loop0: detected capacity change from 0 to 128 [ 682.738753][T20291] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.745438][T30370] syz.3.8682: attempt to access beyond end of device [ 682.745438][T30370] loop3: rw=8388608, sector=153, nr_sectors = 8 limit=128 [ 682.751912][T20291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.773614][T30299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 682.789200][T30384] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 682.793095][T30370] syz.3.8682: attempt to access beyond end of device [ 682.793095][T30370] loop3: rw=8388608, sector=153, nr_sectors = 8 limit=128 [ 682.814870][T30370] syz.3.8682: attempt to access beyond end of device [ 682.814870][T30370] loop3: rw=8388608, sector=153, nr_sectors = 8 limit=128 [ 682.830048][T30370] syz.3.8682: attempt to access beyond end of device [ 682.830048][T30370] loop3: rw=8388608, sector=153, nr_sectors = 8 limit=128 [ 682.843949][T30370] syz.3.8682: attempt to access beyond end of device [ 682.843949][T30370] loop3: rw=8388608, sector=153, nr_sectors = 8 limit=128 [ 682.859780][T30370] syz.3.8682: attempt to access beyond end of device [ 682.859780][T30370] loop3: rw=8388608, sector=153, nr_sectors = 8 limit=128 [ 682.873980][T30370] syz.3.8682: attempt to access beyond end of device [ 682.873980][T30370] loop3: rw=8388608, sector=153, nr_sectors = 8 limit=128 [ 682.889679][T30370] syz.3.8682: attempt to access beyond end of device [ 682.889679][T30370] loop3: rw=8388608, sector=153, nr_sectors = 8 limit=128 [ 682.903798][T30370] syz.3.8682: attempt to access beyond end of device [ 682.903798][T30370] loop3: rw=8388608, sector=153, nr_sectors = 8 limit=128 [ 682.963536][T30299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.000987][T30401] loop6: detected capacity change from 0 to 8192 [ 683.099979][T30299] veth0_vlan: entered promiscuous mode [ 683.118792][T30299] veth1_vlan: entered promiscuous mode [ 683.145433][T30299] veth0_macvtap: entered promiscuous mode [ 683.153747][T30299] veth1_macvtap: entered promiscuous mode [ 683.168612][T30299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.179175][T30299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.191813][T20291] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.204386][T20291] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.225816][T20291] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.240995][T20291] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.258665][T30425] loop3: detected capacity change from 0 to 512 [ 683.265413][T30425] EXT4-fs: Ignoring removed oldalloc option [ 683.265477][T30425] EXT4-fs: Ignoring removed i_version option [ 683.265497][T30425] EXT4-fs: Ignoring removed nomblk_io_submit option [ 683.272948][T30425] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 683.280468][T30425] EXT4-fs (loop3): 1 truncate cleaned up [ 683.287099][T30428] loop8: detected capacity change from 0 to 1024 [ 683.317004][T30428] EXT4-fs (loop8): bad geometry: first data block is 0 with a 1k block and cluster size [ 683.421432][T30433] loop8: detected capacity change from 0 to 1024 [ 683.429228][T30433] EXT4-fs: Ignoring removed orlov option [ 683.489631][T30438] siw: device registration error -23 [ 683.498911][T30439] Invalid ELF header magic: != ELF [ 683.744293][T30445] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 683.761593][T30445] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 683.771216][T30445] EXT4-fs (loop8): orphan cleanup on readonly fs [ 683.789428][T30445] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.8701: Failed to acquire dquot type 0 [ 683.809850][T30445] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.8701: Failed to acquire dquot type 0 [ 683.842928][T30445] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.8701: Freeing blocks not in datazone - block = 0, count = 4096 [ 683.875774][T30445] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.8701: Failed to acquire dquot type 0 [ 683.890387][T30445] EXT4-fs (loop8): 1 orphan inode deleted [ 683.907390][T30448] set_capacity_and_notify: 1 callbacks suppressed [ 683.907403][T30448] loop0: detected capacity change from 0 to 8192 [ 683.991218][T30450] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 684.002145][T30450] loop8: detected capacity change from 0 to 512 [ 684.026708][T30450] EXT4-fs: Ignoring removed mblk_io_submit option [ 684.042910][T30450] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 684.057123][T30450] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 684.065629][T30452] loop0: detected capacity change from 0 to 512 [ 684.075238][T30450] System zones: 1-12 [ 684.082439][T30452] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.8704: EA inode hash validation failed [ 684.096663][T30450] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.8703: corrupted in-inode xattr: e_value size too large [ 684.106844][T30452] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.8704: corrupted inode contents [ 684.122805][T30452] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.8704: mark_inode_dirty error [ 684.131607][T30450] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.8703: couldn't read orphan inode 15 (err -117) [ 684.149140][T30452] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.8704: corrupted inode contents [ 684.163196][T30452] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.8704: mark_inode_dirty error [ 684.175500][T30452] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.8704: mark inode dirty (error -117) [ 684.188994][T30452] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 684.198824][T30452] EXT4-fs (loop0): 1 orphan inode deleted [ 684.241304][T30458] ip6t_srh: unknown srh match flags 4000 [ 684.268342][T30461] loop8: detected capacity change from 0 to 256 [ 684.275265][T30461] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 684.287641][T30461] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 684.336876][T30463] netlink: 'syz.6.8708': attribute type 1 has an invalid length. [ 684.349487][T30461] loop8: detected capacity change from 0 to 512 [ 684.363674][T30461] EXT4-fs: Ignoring removed i_version option [ 684.369687][T30461] EXT4-fs: Ignoring removed bh option [ 684.398062][T30463] 8021q: adding VLAN 0 to HW filter on device bond3 [ 684.406945][T30461] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 684.480492][T30466] bond3: (slave veth3): Enslaving as an active interface with a down link [ 684.496793][T30471] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8709'. [ 684.528126][T30473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8711'. [ 684.530832][T30466] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 684.537109][T30473] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8711'. [ 684.544291][T30466] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 684.662739][T30481] FAULT_INJECTION: forcing a failure. [ 684.662739][T30481] name failslab, interval 1, probability 0, space 0, times 0 [ 684.675460][T30481] CPU: 1 UID: 0 PID: 30481 Comm: syz.3.8714 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 684.675494][T30481] Tainted: [W]=WARN [ 684.675501][T30481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 684.675529][T30481] Call Trace: [ 684.675537][T30481] [ 684.675545][T30481] __dump_stack+0x1d/0x30 [ 684.675571][T30481] dump_stack_lvl+0x95/0xd0 [ 684.675655][T30481] dump_stack+0x15/0x1b [ 684.675671][T30481] should_fail_ex+0x265/0x280 [ 684.675690][T30481] should_failslab+0x8c/0xb0 [ 684.675768][T30481] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 684.675791][T30481] ? __alloc_skb+0x2ff/0x4b0 [ 684.675874][T30481] __alloc_skb+0x2ff/0x4b0 [ 684.675893][T30481] ? __alloc_skb+0x228/0x4b0 [ 684.675920][T30481] netlink_alloc_large_skb+0xbf/0xf0 [ 684.675947][T30481] netlink_sendmsg+0x3cf/0x6b0 [ 684.676055][T30481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 684.676086][T30481] __sock_sendmsg+0x145/0x180 [ 684.676106][T30481] ____sys_sendmsg+0x31e/0x4a0 [ 684.676152][T30481] ___sys_sendmsg+0x17b/0x1d0 [ 684.676350][T30481] __x64_sys_sendmsg+0xd4/0x160 [ 684.676378][T30481] x64_sys_call+0x17ba/0x3000 [ 684.676452][T30481] do_syscall_64+0xca/0x2b0 [ 684.676479][T30481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.676497][T30481] RIP: 0033:0x7febdd59f749 [ 684.676585][T30481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.676603][T30481] RSP: 002b:00007febdc007038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 684.676631][T30481] RAX: ffffffffffffffda RBX: 00007febdd7f5fa0 RCX: 00007febdd59f749 [ 684.676645][T30481] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 684.676659][T30481] RBP: 00007febdc007090 R08: 0000000000000000 R09: 0000000000000000 [ 684.676673][T30481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.676686][T30481] R13: 00007febdd7f6038 R14: 00007febdd7f5fa0 R15: 00007fff424ba8b8 [ 684.676706][T30481] [ 684.700848][T30477] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 684.700848][T30477] program syz.8.8712 not setting count and/or reply_len properly [ 684.759114][T30489] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 684.781458][T30482] loop8: detected capacity change from 0 to 512 [ 684.803265][T30491] loop3: detected capacity change from 0 to 512 [ 684.826856][T30489] loop6: detected capacity change from 0 to 512 [ 684.845947][T30491] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.8717: EA inode hash validation failed [ 684.852474][T30489] EXT4-fs: Ignoring removed mblk_io_submit option [ 684.858988][T30491] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.8717: corrupted inode contents [ 684.868698][T30489] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 684.875127][T30491] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.8717: mark_inode_dirty error [ 684.883464][T30489] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 684.897196][T30491] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.8717: corrupted inode contents [ 684.902942][T30489] System zones: [ 684.910058][T30482] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 684.915833][T30489] 1-12 [ 684.943430][T30491] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.8717: mark_inode_dirty error [ 684.953689][T30489] [ 685.027080][T30491] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.8717: mark inode dirty (error -117) [ 685.027288][T30489] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.8716: corrupted in-inode xattr: e_value size too large [ 685.039821][T30491] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 685.055200][T30489] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.8716: couldn't read orphan inode 15 (err -117) [ 685.065098][T30299] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 685.074931][T30491] EXT4-fs (loop3): 1 orphan inode deleted [ 685.108452][T30299] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 685.145121][T30502] loop6: detected capacity change from 0 to 512 [ 685.156014][T30502] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 685.171664][T30502] EXT4-fs (loop6): 1 truncate cleaned up [ 685.523999][T30515] lo speed is unknown, defaulting to 1000 [ 685.558164][T30515] lo speed is unknown, defaulting to 1000 [ 685.564164][T30515] lo speed is unknown, defaulting to 1000 [ 686.090953][T30530] loop0: detected capacity change from 0 to 128 [ 686.236662][T30538] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 686.270894][T30538] EXT4-fs: Ignoring removed mblk_io_submit option [ 686.295017][T30538] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 686.323845][T30538] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 686.344142][T30538] System zones: 1-12 [ 686.348410][T30538] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.8731: corrupted in-inode xattr: e_value size too large [ 686.365943][T30538] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.8731: couldn't read orphan inode 15 (err -117) [ 686.498249][T30546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8732'. [ 686.637482][ T29] kauditd_printk_skb: 1015 callbacks suppressed [ 686.637497][ T29] audit: type=1326 audit(1768262169.526:114732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30535 comm="syz.3.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7febdd5d2005 code=0x7ffc0000 [ 686.696070][ T29] audit: type=1326 audit(1768262169.556:114733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30535 comm="syz.3.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7febdd5d2005 code=0x7ffc0000 [ 686.719837][ T29] audit: type=1326 audit(1768262169.556:114734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30535 comm="syz.3.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7febdd5d2005 code=0x7ffc0000 [ 686.743575][ T29] audit: type=1326 audit(1768262169.556:114735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30535 comm="syz.3.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7febdd5d2005 code=0x7ffc0000 [ 686.767223][ T29] audit: type=1326 audit(1768262169.556:114736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30535 comm="syz.3.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7febdd5d2005 code=0x7ffc0000 [ 686.790927][ T29] audit: type=1326 audit(1768262169.556:114737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30535 comm="syz.3.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7febdd5d2005 code=0x7ffc0000 [ 686.814562][ T29] audit: type=1326 audit(1768262169.556:114738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30535 comm="syz.3.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7febdd5d2005 code=0x7ffc0000 [ 686.838189][ T29] audit: type=1326 audit(1768262169.566:114739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30535 comm="syz.3.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7febdd5d2005 code=0x7ffc0000 [ 686.861878][ T29] audit: type=1326 audit(1768262169.566:114740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30535 comm="syz.3.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7febdd5d2005 code=0x7ffc0000 [ 686.885647][ T29] audit: type=1326 audit(1768262169.566:114741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30535 comm="syz.3.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7febdd5d2005 code=0x7ffc0000 [ 687.277069][T30557] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 687.301423][T30559] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8737'. [ 687.318470][T30557] EXT4-fs (loop3): 1 truncate cleaned up [ 687.343309][T30564] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8739'. [ 687.352332][T30564] FAULT_INJECTION: forcing a failure. [ 687.352332][T30564] name failslab, interval 1, probability 0, space 0, times 0 [ 687.364986][T30564] CPU: 1 UID: 0 PID: 30564 Comm: syz.6.8739 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 687.365074][T30564] Tainted: [W]=WARN [ 687.365080][T30564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 687.365111][T30564] Call Trace: [ 687.365117][T30564] [ 687.365125][T30564] __dump_stack+0x1d/0x30 [ 687.365150][T30564] dump_stack_lvl+0x95/0xd0 [ 687.365167][T30564] dump_stack+0x15/0x1b [ 687.365183][T30564] should_fail_ex+0x265/0x280 [ 687.365201][T30564] should_failslab+0x8c/0xb0 [ 687.365293][T30564] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 687.365311][T30564] ? __alloc_skb+0x2ff/0x4b0 [ 687.365329][T30564] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 687.365429][T30564] __alloc_skb+0x2ff/0x4b0 [ 687.365499][T30564] ? __alloc_skb+0x228/0x4b0 [ 687.365517][T30564] __neigh_notify+0x5b/0x110 [ 687.365534][T30564] __neigh_update+0x977/0x15d0 [ 687.365589][T30564] neigh_add+0x872/0xa30 [ 687.365611][T30564] ? __pfx_neigh_add+0x10/0x10 [ 687.365662][T30564] rtnetlink_rcv_msg+0x65a/0x6d0 [ 687.365692][T30564] ? avc_has_perm_noaudit+0xab/0x130 [ 687.365758][T30564] netlink_rcv_skb+0x123/0x220 [ 687.365781][T30564] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 687.365809][T30564] rtnetlink_rcv+0x1c/0x30 [ 687.365831][T30564] netlink_unicast+0x5c0/0x690 [ 687.365898][T30564] netlink_sendmsg+0x58b/0x6b0 [ 687.365924][T30564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 687.366016][T30564] __sock_sendmsg+0x145/0x180 [ 687.366035][T30564] __sys_sendto+0x268/0x330 [ 687.366066][T30564] __x64_sys_sendto+0x76/0x90 [ 687.366100][T30564] x64_sys_call+0x29a7/0x3000 [ 687.366124][T30564] do_syscall_64+0xca/0x2b0 [ 687.366256][T30564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.366338][T30564] RIP: 0033:0x7f00f4f6f749 [ 687.366355][T30564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.366374][T30564] RSP: 002b:00007f00f39d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 687.366409][T30564] RAX: ffffffffffffffda RBX: 00007f00f51c5fa0 RCX: 00007f00f4f6f749 [ 687.366423][T30564] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000003 [ 687.366437][T30564] RBP: 00007f00f39d7090 R08: 0000000000000000 R09: 0000000000000000 [ 687.366451][T30564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.366465][T30564] R13: 00007f00f51c6038 R14: 00007f00f51c5fa0 R15: 00007ffcb8c679a8 [ 687.366483][T30564] [ 687.610545][T30568] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8736'. [ 687.891531][T30573] ext4 filesystem being mounted at /595/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.981532][ T1915] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.031109][ T1915] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.057210][T30580] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 688.069713][T30580] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 688.099448][ T1915] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.121132][T30581] lo speed is unknown, defaulting to 1000 [ 688.158962][ T1915] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.176847][T30581] lo speed is unknown, defaulting to 1000 [ 688.190244][T30581] lo speed is unknown, defaulting to 1000 [ 688.259395][T30604] xt_ecn: cannot match TCP bits for non-tcp packets [ 688.287611][T30581] chnl_net:caif_netlink_parms(): no params data found [ 688.327426][T30612] FAULT_INJECTION: forcing a failure. [ 688.327426][T30612] name failslab, interval 1, probability 0, space 0, times 0 [ 688.340187][T30612] CPU: 1 UID: 0 PID: 30612 Comm: syz.3.8754 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 688.340221][T30612] Tainted: [W]=WARN [ 688.340228][T30612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 688.340238][T30612] Call Trace: [ 688.340244][T30612] [ 688.340285][T30612] __dump_stack+0x1d/0x30 [ 688.340310][T30612] dump_stack_lvl+0x95/0xd0 [ 688.340333][T30612] dump_stack+0x15/0x1b [ 688.340353][T30612] should_fail_ex+0x265/0x280 [ 688.340376][T30612] should_failslab+0x8c/0xb0 [ 688.340460][T30612] __kmalloc_cache_noprof+0x65/0x4c0 [ 688.340561][T30612] ? tipc_sub_subscribe+0xc7/0x340 [ 688.340645][T30612] tipc_sub_subscribe+0xc7/0x340 [ 688.340663][T30612] ? idr_alloc+0x89/0xd0 [ 688.340689][T30612] tipc_conn_rcv_sub+0x100/0x210 [ 688.340706][T30612] tipc_topsrv_kern_subscr+0x148/0x1b0 [ 688.340802][T30612] tipc_group_create+0x24d/0x290 [ 688.340832][T30612] tipc_sk_join+0x130/0x2e0 [ 688.340933][T30612] tipc_setsockopt+0x598/0x620 [ 688.340982][T30612] ? __pfx_tipc_setsockopt+0x10/0x10 [ 688.341079][T30612] __sys_setsockopt+0x184/0x200 [ 688.341103][T30612] __x64_sys_setsockopt+0x64/0x80 [ 688.341129][T30612] x64_sys_call+0x21d5/0x3000 [ 688.341217][T30612] do_syscall_64+0xca/0x2b0 [ 688.341292][T30612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.341314][T30612] RIP: 0033:0x7febdd59f749 [ 688.341330][T30612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.341347][T30612] RSP: 002b:00007febdc007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 688.341467][T30612] RAX: ffffffffffffffda RBX: 00007febdd7f5fa0 RCX: 00007febdd59f749 [ 688.341478][T30612] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000007 [ 688.341490][T30612] RBP: 00007febdc007090 R08: 0000000000000010 R09: 0000000000000000 [ 688.341504][T30612] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 688.341516][T30612] R13: 00007febdd7f6038 R14: 00007febdd7f5fa0 R15: 00007fff424ba8b8 [ 688.341532][T30612] [ 688.341539][T30612] tipc: Subscription rejected, no memory [ 688.388270][T30615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8751'. [ 688.481658][T30620] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 688.531344][T30623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30623 comm=syz.2.8751 [ 688.588834][T30620] EXT4-fs (loop3): 1 truncate cleaned up [ 688.597393][ T1915] bridge_slave_1: left allmulticast mode [ 688.603052][ T1915] bridge_slave_1: left promiscuous mode [ 688.608804][ T1915] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.617216][ T1915] bridge_slave_0: left allmulticast mode [ 688.622894][ T1915] bridge_slave_0: left promiscuous mode [ 688.629142][ T1915] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.671828][T30630] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size [ 688.708593][T30633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8756'. [ 688.720414][ T1915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.730651][ T1915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.740570][ T1915] bond0 (unregistering): Released all slaves [ 688.749134][T30618] tipc: Failed to obtain node identity [ 688.754684][T30618] tipc: Enabling of bearer rejected, failed to enable media [ 688.780998][T30581] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.788303][T30581] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.795767][T30581] bridge_slave_0: entered allmulticast mode [ 688.802579][T30581] bridge_slave_0: entered promiscuous mode [ 688.811745][ T1915] hsr_slave_0: left promiscuous mode [ 688.819221][ T1915] hsr_slave_1: left promiscuous mode [ 688.824929][ T1915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.832326][ T1915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.840021][ T1915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 688.847402][ T1915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.858039][ T1915] veth1_macvtap: left promiscuous mode [ 688.863570][ T1915] veth0_macvtap: left promiscuous mode [ 688.869460][ T1915] veth1_vlan: left promiscuous mode [ 688.874742][ T1915] veth0_vlan: left promiscuous mode [ 688.935930][ T1915] team0 (unregistering): Port device team_slave_1 removed [ 688.945740][ T1915] team0 (unregistering): Port device team_slave_0 removed [ 688.977056][T30581] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.984102][T30581] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.991816][T30581] bridge_slave_1: entered allmulticast mode [ 688.999520][T30581] bridge_slave_1: entered promiscuous mode [ 689.018413][T30581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.029014][T30581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.047884][T30581] team0: Port device team_slave_0 added [ 689.054363][T30581] team0: Port device team_slave_1 added [ 689.068888][T30581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.075823][T30581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.101780][T30581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.113890][T30581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.120841][T30581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.146762][T30581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.174167][T30581] hsr_slave_0: entered promiscuous mode [ 689.180620][T30581] hsr_slave_1: entered promiscuous mode [ 689.187182][T30581] debugfs: 'hsr0' already exists in 'hsr' [ 689.192927][T30581] Cannot create hsr debugfs directory [ 689.265181][T30581] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 689.274163][T30644] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8763'. [ 689.283326][T30581] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 689.292798][T30581] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 689.304932][T30581] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 689.358329][T30581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.366275][T30655] hub 9-0:1.0: USB hub found [ 689.370043][T30581] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.377253][T30655] hub 9-0:1.0: 8 ports detected [ 689.392441][T20270] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.399619][T20270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.413288][ T2178] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.420412][ T2178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.515347][T30581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.609312][T30685] FAULT_INJECTION: forcing a failure. [ 689.609312][T30685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.623060][T30685] CPU: 0 UID: 0 PID: 30685 Comm: syz.0.8774 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 689.623088][T30685] Tainted: [W]=WARN [ 689.623148][T30685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 689.623159][T30685] Call Trace: [ 689.623164][T30685] [ 689.623171][T30685] __dump_stack+0x1d/0x30 [ 689.623195][T30685] dump_stack_lvl+0x95/0xd0 [ 689.623229][T30685] dump_stack+0x15/0x1b [ 689.623249][T30685] should_fail_ex+0x265/0x280 [ 689.623273][T30685] should_fail+0xb/0x20 [ 689.623293][T30685] should_fail_usercopy+0x1a/0x20 [ 689.623314][T30685] _copy_from_user+0x1c/0xb0 [ 689.623382][T30685] __se_sys_copy_file_range+0x146/0x3b0 [ 689.623406][T30685] ? fput+0x8f/0xc0 [ 689.623428][T30685] __x64_sys_copy_file_range+0x78/0x90 [ 689.623507][T30685] x64_sys_call+0x2c93/0x3000 [ 689.623606][T30685] do_syscall_64+0xca/0x2b0 [ 689.623637][T30685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.623679][T30685] RIP: 0033:0x7f91cb93f749 [ 689.623692][T30685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.623765][T30685] RSP: 002b:00007f91ca39f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 689.623797][T30685] RAX: ffffffffffffffda RBX: 00007f91cbb95fa0 RCX: 00007f91cb93f749 [ 689.623808][T30685] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 689.623819][T30685] RBP: 00007f91ca39f090 R08: 0000000000000003 R09: 0000000000000000 [ 689.623830][T30685] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 689.623844][T30685] R13: 00007f91cbb96038 R14: 00007f91cbb95fa0 R15: 00007ffef0d2d018 [ 689.623864][T30685] [ 689.680523][T30581] veth0_vlan: entered promiscuous mode [ 689.833881][T30581] veth1_vlan: entered promiscuous mode [ 689.856349][T30581] veth0_macvtap: entered promiscuous mode [ 689.862770][T30694] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8775'. [ 689.863761][T30581] veth1_macvtap: entered promiscuous mode [ 689.888869][T30581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.927799][T30581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.938962][ T1915] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.948901][T30699] set_capacity_and_notify: 8 callbacks suppressed [ 689.948914][T30699] loop6: detected capacity change from 0 to 128 [ 689.962967][ T1915] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.972616][ T1915] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.981509][T30699] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 689.993586][ T1915] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.058710][T30708] loop6: detected capacity change from 0 to 1024 [ 690.065616][T30708] EXT4-fs: Ignoring removed nomblk_io_submit option [ 690.115459][T30712] loop3: detected capacity change from 0 to 512 [ 690.123379][T30712] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 690.143961][T30712] EXT4-fs (loop3): 1 truncate cleaned up [ 690.206864][T30715] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8780'. [ 690.489633][T30707] syz.6.8779 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 690.500760][T30707] CPU: 0 UID: 0 PID: 30707 Comm: syz.6.8779 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 690.500821][T30707] Tainted: [W]=WARN [ 690.500828][T30707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 690.500839][T30707] Call Trace: [ 690.500844][T30707] [ 690.500851][T30707] __dump_stack+0x1d/0x30 [ 690.500875][T30707] dump_stack_lvl+0x95/0xd0 [ 690.500896][T30707] dump_stack+0x15/0x1b [ 690.500916][T30707] dump_header+0x81/0x240 [ 690.500934][T30707] oom_kill_process+0x295/0x350 [ 690.501028][T30707] out_of_memory+0x97b/0xb80 [ 690.501050][T30707] try_charge_memcg+0x610/0xa10 [ 690.501089][T30707] charge_memcg+0x51/0xc0 [ 690.501118][T30707] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 690.501164][T30707] __read_swap_cache_async+0x17b/0x2d0 [ 690.501195][T30707] swap_cluster_readahead+0x262/0x3c0 [ 690.501265][T30707] swapin_readahead+0xde/0x820 [ 690.501292][T30707] ? __rcu_read_unlock+0x4f/0x70 [ 690.501320][T30707] ? swap_cache_get_folio+0x277/0x280 [ 690.501347][T30707] do_swap_page+0x2b4/0x21e0 [ 690.501392][T30707] ? _raw_spin_unlock+0x26/0x50 [ 690.501416][T30707] ? __schedule+0x85f/0xcd0 [ 690.501440][T30707] ? __pfx_default_wake_function+0x10/0x10 [ 690.501586][T30707] handle_mm_fault+0x9d8/0x2c60 [ 690.501622][T30707] do_user_addr_fault+0x630/0x1080 [ 690.501653][T30707] exc_page_fault+0x62/0xa0 [ 690.501679][T30707] asm_exc_page_fault+0x26/0x30 [ 690.501718][T30707] RIP: 0033:0x7f00f4e459c8 [ 690.501733][T30707] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d fa 23 38 00 00 0f 8e 09 fe ff ff e8 23 98 fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 [ 690.501748][T30707] RSP: 002b:00007ffcb8c67b10 EFLAGS: 00010216 [ 690.501762][T30707] RAX: 00000000000a870d RBX: 00007f00f51c7da0 RCX: 00000000000a8368 [ 690.501776][T30707] RDX: 00000000000003a5 RSI: 00007ffcb8c67af0 RDI: 0000000000000001 [ 690.501894][T30707] RBP: 00007f00f51c7da0 R08: 00000000379cae73 R09: 7fffffffffffffff [ 690.501906][T30707] R10: 3fffffffffffffff R11: 0000000000000293 R12: 00000000000a88b7 [ 690.501918][T30707] R13: 00007ffcb8c67c00 R14: ffffffffffffffff R15: 00007ffcb8c67c20 [ 690.501981][T30707] [ 690.502063][T30707] memory: usage 307200kB, limit 307200kB, failcnt 1015 [ 690.724237][T30707] memory+swap: usage 307888kB, limit 9007199254740988kB, failcnt 0 [ 690.732624][T30707] kmem: usage 303016kB, limit 9007199254740988kB, failcnt 0 [ 690.739943][T30707] Memory cgroup stats for /syz6: [ 690.742355][T30707] cache 4218880 [ 690.751028][T30707] rss 0 [ 690.753831][T30707] shmem 4194304 [ 690.757299][T30707] mapped_file 0 [ 690.760769][T30707] dirty 0 [ 690.763702][T30707] writeback 8192 [ 690.767315][T30707] workingset_refault_anon 410 [ 690.771986][T30707] workingset_refault_file 637 [ 690.776665][T30707] swap 704512 [ 690.780017][T30707] swapcached 24576 [ 690.783811][T30707] pgpgin 415005 [ 690.787306][T30707] pgpgout 413959 [ 690.790843][T30707] pgfault 392220 [ 690.794377][T30707] pgmajfault 207 [ 690.797928][T30707] inactive_anon 8192 [ 690.801810][T30707] active_anon 16384 [ 690.805607][T30707] inactive_file 0 [ 690.809268][T30707] active_file 65536 [ 690.810010][T30720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8782'. [ 690.813067][T30707] unevictable 4194304 [ 690.813076][T30707] hierarchical_memory_limit 314572800 [ 690.813085][T30707] hierarchical_memsw_limit 9223372036854771712 [ 690.813094][T30707] total_cache 4218880 [ 690.813100][T30707] total_rss 0 [ 690.813128][T30707] total_shmem 4194304 [ 690.813135][T30707] total_mapped_file 0 [ 690.852655][T30707] total_dirty 0 [ 690.856123][T30707] total_writeback 8192 [ 690.860178][T30707] total_workingset_refault_anon 410 [ 690.865409][T30707] total_workingset_refault_file 637 [ 690.870664][T30707] total_swap 704512 [ 690.874515][T30707] total_swapcached 24576 [ 690.878765][T30707] total_pgpgin 415005 [ 690.882788][T30707] total_pgpgout 413959 [ 690.886869][T30707] total_pgfault 392220 [ 690.890923][T30707] total_pgmajfault 207 [ 690.894988][T30707] total_inactive_anon 8192 [ 690.899422][T30707] total_active_anon 16384 [ 690.903739][T30707] total_inactive_file 0 [ 690.907920][T30707] total_active_file 65536 [ 690.912237][T30707] total_unevictable 4194304 [ 690.916752][T30707] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.8779,pid=30707,uid=0 [ 690.931443][T30707] Memory cgroup out of memory: Killed process 30707 (syz.6.8779) total-vm:96016kB, anon-rss:1136kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 690.931945][T30724] FAULT_INJECTION: forcing a failure. [ 690.931945][T30724] name failslab, interval 1, probability 0, space 0, times 0 [ 690.961929][T30724] CPU: 0 UID: 0 PID: 30724 Comm: syz.9.8783 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 690.962026][T30724] Tainted: [W]=WARN [ 690.962034][T30724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 690.962049][T30724] Call Trace: [ 690.962055][T30724] [ 690.962062][T30724] __dump_stack+0x1d/0x30 [ 690.962094][T30724] dump_stack_lvl+0x95/0xd0 [ 690.962115][T30724] dump_stack+0x15/0x1b [ 690.962134][T30724] should_fail_ex+0x265/0x280 [ 690.962191][T30724] should_failslab+0x8c/0xb0 [ 690.962221][T30724] __kmalloc_cache_noprof+0x65/0x4c0 [ 690.962241][T30724] ? __se_sys_memfd_create+0x1d6/0x6b0 [ 690.962266][T30724] ? mutex_unlock+0x4f/0x90 [ 690.962289][T30724] __se_sys_memfd_create+0x1d6/0x6b0 [ 690.962341][T30724] __x64_sys_memfd_create+0x31/0x40 [ 690.962403][T30724] x64_sys_call+0x28cb/0x3000 [ 690.962498][T30724] do_syscall_64+0xca/0x2b0 [ 690.962528][T30724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.962611][T30724] RIP: 0033:0x7f2ac02ef749 [ 690.962626][T30724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.962641][T30724] RSP: 002b:00007f2abed4ed68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 690.962659][T30724] RAX: ffffffffffffffda RBX: 00000000000005c2 RCX: 00007f2ac02ef749 [ 690.962673][T30724] RDX: 00007f2abed4edec RSI: 0000000000000000 RDI: 00007f2ac0374960 [ 690.962693][T30724] RBP: 0000200000000000 R08: 00007f2abed4eb07 R09: 0000000000000000 [ 690.962707][T30724] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 690.962720][T30724] R13: 00007f2abed4edec R14: 00007f2abed4edf0 R15: 00007ffd78d5a0c8 [ 690.962740][T30724] [ 691.143252][T22704] bond0: (slave syz_tun): Releasing backup interface [ 691.296706][T30728] loop9: detected capacity change from 0 to 128 [ 691.321037][T30717] lo speed is unknown, defaulting to 1000 [ 691.369596][T30750] netlink: 'syz.2.8789': attribute type 1 has an invalid length. [ 691.372205][T30728] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.374508][T30717] lo speed is unknown, defaulting to 1000 [ 691.374839][T30717] lo speed is unknown, defaulting to 1000 [ 691.548305][T30749] loop6: detected capacity change from 0 to 128 [ 691.569313][T30717] chnl_net:caif_netlink_parms(): no params data found [ 691.581887][T30758] loop9: detected capacity change from 0 to 128 [ 691.588422][T30749] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.603617][T30758] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.656652][ T29] kauditd_printk_skb: 450 callbacks suppressed [ 691.656706][ T29] audit: type=1400 audit(1768262174.546:115192): avc: denied { create } for pid=30768 comm="syz.9.8795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 691.659283][T30755] hub 9-0:1.0: USB hub found [ 691.688117][T30772] loop6: detected capacity change from 0 to 512 [ 691.694535][T30759] lo speed is unknown, defaulting to 1000 [ 691.702508][T30772] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 691.716058][T30755] hub 9-0:1.0: 8 ports detected [ 691.754191][T30759] lo speed is unknown, defaulting to 1000 [ 691.759489][T30772] EXT4-fs (loop6): 1 truncate cleaned up [ 691.766442][T30717] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.773516][T30717] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.781635][T30717] bridge_slave_0: entered allmulticast mode [ 691.788386][T30717] bridge_slave_0: entered promiscuous mode [ 691.795310][T30717] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.802398][T30717] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.810094][T30717] bridge_slave_1: entered allmulticast mode [ 691.816900][T30717] bridge_slave_1: entered promiscuous mode [ 691.828816][T30759] lo speed is unknown, defaulting to 1000 [ 691.839587][T30717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.857355][T30717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.869982][ T29] audit: type=1400 audit(1768262174.756:115193): avc: denied { tracepoint } for pid=30768 comm="syz.9.8795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 691.891541][T30781] __nla_validate_parse: 2 callbacks suppressed [ 691.891561][T30781] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8796'. [ 691.911870][T30769] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 691.911870][T30769] program syz.9.8795 not setting count and/or reply_len properly [ 691.934603][ T29] audit: type=1400 audit(1768262174.756:115194): avc: denied { write } for pid=30768 comm="syz.9.8795" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 691.958657][T30769] loop9: detected capacity change from 0 to 512 [ 691.969687][T30717] team0: Port device team_slave_0 added [ 691.978407][T30717] team0: Port device team_slave_1 added [ 691.989120][T30769] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 692.006857][ T29] audit: type=1400 audit(1768262174.896:115195): avc: denied { remove_name } for pid=30768 comm="syz.9.8795" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 692.030381][ T29] audit: type=1400 audit(1768262174.896:115196): avc: denied { rename } for pid=30768 comm="syz.9.8795" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 692.052963][ T29] audit: type=1400 audit(1768262174.896:115197): avc: denied { unlink } for pid=30768 comm="syz.9.8795" name="file3" dev="loop9" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 692.082113][T30717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.089074][T30717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.114961][T30717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.126880][ T29] audit: type=1400 audit(1768262175.016:115198): avc: denied { create } for pid=30768 comm="syz.9.8795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 692.158999][ T29] audit: type=1400 audit(1768262175.016:115199): avc: denied { create } for pid=30768 comm="syz.9.8795" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 692.187704][ T29] audit: type=1400 audit(1768262175.076:115200): avc: denied { rmdir } for pid=30581 comm="syz-executor" name="lost+found" dev="loop9" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 692.196646][T30581] EXT4-fs error (device loop9): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 692.225703][T30581] EXT4-fs error (device loop9): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 692.227023][T30717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.246015][T30717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.272621][T30717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.367281][T30717] hsr_slave_0: entered promiscuous mode [ 692.380589][T30717] hsr_slave_1: entered promiscuous mode [ 692.393216][T30717] debugfs: 'hsr0' already exists in 'hsr' [ 692.398987][T30717] Cannot create hsr debugfs directory [ 692.406547][T30796] netlink: 'syz.2.8803': attribute type 1 has an invalid length. [ 692.414278][T30796] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8803'. [ 692.534524][T25316] EXT4-fs unmount: 46 callbacks suppressed [ 692.534551][T25316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.550112][ T29] audit: type=1400 audit(1768262175.416:115201): avc: denied { write } for pid=30802 comm="syz.2.8805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 692.616647][T30808] loop6: detected capacity change from 0 to 512 [ 692.623322][T30808] EXT4-fs: Ignoring removed orlov option [ 692.630213][T30808] EXT4-fs: Mount option(s) incompatible with ext2 [ 692.770200][T30717] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 692.781721][T30717] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 692.790864][T30717] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 692.799834][T30717] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 692.830752][T30825] ip6t_srh: unknown srh match flags 4000 [ 692.840462][T30717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.855483][T30717] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.864752][ T2178] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.871817][ T2178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.883160][T20302] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.890316][T20302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.947026][T30717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.010256][T30717] veth0_vlan: entered promiscuous mode [ 693.019266][T30717] veth1_vlan: entered promiscuous mode [ 693.032865][T30842] loop3: detected capacity change from 0 to 1024 [ 693.038352][T30717] veth0_macvtap: entered promiscuous mode [ 693.040244][T30842] EXT4-fs: Ignoring removed nomblk_io_submit option [ 693.047199][T30717] veth1_macvtap: entered promiscuous mode [ 693.063849][T30717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.075126][T30842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 693.078783][T30717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.106133][ T2178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.115642][ T2178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.124821][ T2178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.133961][ T2178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.209289][T30853] EXT4-fs: Ignoring removed nomblk_io_submit option [ 693.217224][T30853] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 693.225166][T30853] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 693.233599][T30853] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 693.243149][T30853] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 693.252468][T30853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 693.327474][T30855] ext4: Unknown parameter '' [ 693.433501][T30859] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 693.448159][T30859] EXT4-fs (loop6): 1 truncate cleaned up [ 693.466679][T30859] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 693.595780][T30717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.608339][T30862] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8815'. [ 693.695483][T30865] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 693.713715][T30842] syz.3.8813 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 693.719395][T30865] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 693.728594][T30842] CPU: 0 UID: 0 PID: 30842 Comm: syz.3.8813 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 693.728630][T30842] Tainted: [W]=WARN [ 693.728638][T30842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 693.728651][T30842] Call Trace: [ 693.728658][T30842] [ 693.728667][T30842] __dump_stack+0x1d/0x30 [ 693.728716][T30842] dump_stack_lvl+0x95/0xd0 [ 693.728740][T30842] dump_stack+0x15/0x1b [ 693.728775][T30842] dump_header+0x81/0x240 [ 693.728797][T30842] oom_kill_process+0x295/0x350 [ 693.728825][T30842] out_of_memory+0x97b/0xb80 [ 693.728849][T30842] try_charge_memcg+0x610/0xa10 [ 693.728889][T30842] obj_cgroup_charge_pages+0xa6/0x150 [ 693.728992][T30842] __memcg_kmem_charge_page+0x9f/0x170 [ 693.729053][T30842] __alloc_frozen_pages_noprof+0x18f/0x360 [ 693.729085][T30842] alloc_pages_mpol+0xb3/0x260 [ 693.729116][T30842] alloc_pages_noprof+0x90/0x130 [ 693.729199][T30842] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 693.729241][T30842] __kvmalloc_node_noprof+0x492/0x6b0 [ 693.729279][T30842] ? ip_set_alloc+0x24/0x30 [ 693.729325][T30842] ? ip_set_alloc+0x24/0x30 [ 693.729428][T30842] ip_set_alloc+0x24/0x30 [ 693.729518][T30842] hash_netiface_create+0x282/0x740 [ 693.729551][T30842] ? __pfx_hash_netiface_create+0x10/0x10 [ 693.729618][T30842] ip_set_create+0x3cc/0x970 [ 693.729658][T30842] ? __nla_parse+0x40/0x60 [ 693.729685][T30842] nfnetlink_rcv_msg+0x4c6/0x590 [ 693.729799][T30842] netlink_rcv_skb+0x123/0x220 [ 693.729824][T30842] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 693.729888][T30842] nfnetlink_rcv+0x167/0x16c0 [ 693.729914][T30842] ? xas_load+0x405/0x430 [ 693.729976][T30842] ? xas_load+0x405/0x430 [ 693.730003][T30842] ? folio_mark_accessed+0x236/0x3a0 [ 693.730032][T30842] ? find_get_block_common+0x6de/0x8e0 [ 693.730059][T30842] ? bdev_getblk+0x35b/0x3f0 [ 693.730114][T30842] ? folio_mark_accessed+0x240/0x3a0 [ 693.730140][T30842] ? check_xattrs+0x27f/0x7f0 [ 693.730287][T30842] ? __ext4_sb_bread_gfp+0xd9/0x170 [ 693.730386][T30842] ? should_fail_ex+0x30/0x280 [ 693.730482][T30842] ? selinux_nlmsg_lookup+0x99/0x890 [ 693.730509][T30842] ? __rcu_read_unlock+0x34/0x70 [ 693.730563][T30842] ? __netlink_lookup+0x266/0x2a0 [ 693.730597][T30842] netlink_unicast+0x5c0/0x690 [ 693.730627][T30842] netlink_sendmsg+0x58b/0x6b0 [ 693.730661][T30842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 693.730691][T30842] __sock_sendmsg+0x145/0x180 [ 693.730713][T30842] ____sys_sendmsg+0x31e/0x4a0 [ 693.730796][T30842] ___sys_sendmsg+0x17b/0x1d0 [ 693.730836][T30842] __x64_sys_sendmsg+0xd4/0x160 [ 693.730868][T30842] x64_sys_call+0x17ba/0x3000 [ 693.730960][T30842] do_syscall_64+0xca/0x2b0 [ 693.730993][T30842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.731041][T30842] RIP: 0033:0x7febdd59f749 [ 693.731059][T30842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.731078][T30842] RSP: 002b:00007febdc007038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 693.731100][T30842] RAX: ffffffffffffffda RBX: 00007febdd7f5fa0 RCX: 00007febdd59f749 [ 693.731115][T30842] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 693.731192][T30842] RBP: 00007febdd623f91 R08: 0000000000000000 R09: 0000000000000000 [ 693.731206][T30842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.731274][T30842] R13: 00007febdd7f6038 R14: 00007febdd7f5fa0 R15: 00007fff424ba8b8 [ 693.731294][T30842] [ 693.731302][T30842] memory: usage 307180kB, limit 307200kB, failcnt 3020 [ 694.086972][T30842] memory+swap: usage 307880kB, limit 9007199254740988kB, failcnt 0 [ 694.094898][T30842] kmem: usage 307084kB, limit 9007199254740988kB, failcnt 0 [ 694.102174][T30842] Memory cgroup stats for /syz3: [ 694.106351][T30842] cache 8192 [ 694.114473][T30842] rss 4096 [ 694.118166][T30842] shmem 0 [ 694.121090][T30842] mapped_file 0 [ 694.124526][T30842] dirty 0 [ 694.127476][T30842] writeback 0 [ 694.130786][T30842] workingset_refault_anon 2646 [ 694.135536][T30842] workingset_refault_file 5588 [ 694.140317][T30842] swap 716800 [ 694.143639][T30842] swapcached 12288 [ 694.148070][T30842] pgpgin 696556 [ 694.151725][T30842] pgpgout 696532 [ 694.155389][T30842] pgfault 729174 [ 694.158975][T30842] pgmajfault 676 [ 694.161959][T30717] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 694.162524][T30842] inactive_anon 0 [ 694.162533][T30842] active_anon 12288 [ 694.162541][T30842] inactive_file 0 [ 694.162548][T30842] active_file 86016 [ 694.162554][T30842] unevictable 0 [ 694.162561][T30842] hierarchical_memory_limit 314572800 [ 694.162569][T30842] hierarchical_memsw_limit 9223372036854771712 [ 694.162577][T30842] total_cache 8192 [ 694.162583][T30842] total_rss 4096 [ 694.162590][T30842] total_shmem 0 [ 694.162599][T30842] total_mapped_file 0 [ 694.217599][T30842] total_dirty 0 [ 694.221088][T30842] total_writeback 0 [ 694.224879][T30842] total_workingset_refault_anon 2646 [ 694.230285][T30842] total_workingset_refault_file 5588 [ 694.235555][T30842] total_swap 716800 [ 694.240160][T30842] total_swapcached 12288 [ 694.242740][T30874] ip6t_srh: unknown srh match flags 4000 [ 694.244511][T30842] total_pgpgin 696556 [ 694.254100][T30842] total_pgpgout 696532 [ 694.254109][T30842] total_pgfault 729174 [ 694.254118][T30842] total_pgmajfault 676 [ 694.254126][T30842] total_inactive_anon 0 [ 694.271095][T30842] total_active_anon 12288 [ 694.275415][T30842] total_inactive_file 0 [ 694.279584][T30842] total_active_file 86016 [ 694.283882][T30842] total_unevictable 0 [ 694.287855][T30842] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.8813,pid=30841,uid=0 [ 694.303289][T30842] Memory cgroup out of memory: Killed process 30841 (syz.3.8813) total-vm:93968kB, anon-rss:1136kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 694.349231][T25316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.362453][T22987] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.419194][ T8911] kernel write not supported for file bpf-prog (pid: 8911 comm: kworker/0:13) [ 694.428784][T30883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8823'. [ 694.583600][T30895] FAULT_INJECTION: forcing a failure. [ 694.583600][T30895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.593741][T30893] xt_ecn: cannot match TCP bits for non-tcp packets [ 694.596704][T30895] CPU: 1 UID: 0 PID: 30895 Comm: syz.3.8828 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 694.596762][T30895] Tainted: [W]=WARN [ 694.596768][T30895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 694.596779][T30895] Call Trace: [ 694.596785][T30895] [ 694.596793][T30895] __dump_stack+0x1d/0x30 [ 694.596842][T30895] dump_stack_lvl+0x95/0xd0 [ 694.596864][T30895] dump_stack+0x15/0x1b [ 694.596890][T30895] should_fail_ex+0x265/0x280 [ 694.596919][T30895] should_fail+0xb/0x20 [ 694.596993][T30895] should_fail_usercopy+0x1a/0x20 [ 694.597018][T30895] _copy_from_iter+0xcf/0xe70 [ 694.597080][T30895] ? __alloc_skb+0x396/0x4b0 [ 694.597102][T30895] ? __alloc_skb+0x228/0x4b0 [ 694.597127][T30895] netlink_sendmsg+0x471/0x6b0 [ 694.597210][T30895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.597240][T30895] __sock_sendmsg+0x145/0x180 [ 694.597257][T30895] ____sys_sendmsg+0x31e/0x4a0 [ 694.597285][T30895] ___sys_sendmsg+0x17b/0x1d0 [ 694.597386][T30895] __x64_sys_sendmsg+0xd4/0x160 [ 694.597416][T30895] x64_sys_call+0x17ba/0x3000 [ 694.597440][T30895] do_syscall_64+0xca/0x2b0 [ 694.597577][T30895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.597599][T30895] RIP: 0033:0x7febdd59f749 [ 694.597642][T30895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.597660][T30895] RSP: 002b:00007febdc007038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.597679][T30895] RAX: ffffffffffffffda RBX: 00007febdd7f5fa0 RCX: 00007febdd59f749 [ 694.597692][T30895] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 694.597705][T30895] RBP: 00007febdc007090 R08: 0000000000000000 R09: 0000000000000000 [ 694.597718][T30895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.597731][T30895] R13: 00007febdd7f6038 R14: 00007febdd7f5fa0 R15: 00007fff424ba8b8 [ 694.597790][T30895] [ 694.618468][T30581] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.622373][T30889] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 694.730594][T30903] netlink: 'syz.6.8829': attribute type 1 has an invalid length. [ 694.789249][T30889] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 694.796204][T30903] netlink: 224 bytes leftover after parsing attributes in process `syz.6.8829'. [ 694.884801][T30904] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8827'. [ 694.927760][T30717] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 694.951176][T20272] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.972157][T30904] tipc: Failed to obtain node identity [ 694.978049][T30904] tipc: Enabling of bearer rejected, failed to enable media [ 694.997046][T30912] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8832'. [ 695.010554][T30904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30904 comm=syz.2.8827 [ 695.029998][T20272] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.064043][T30915] set_capacity_and_notify: 4 callbacks suppressed [ 695.064059][T30915] loop6: detected capacity change from 0 to 128 [ 695.099692][T20272] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.151546][T30910] lo speed is unknown, defaulting to 1000 [ 695.170955][T20272] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.202319][T30915] bio_check_eod: 39689 callbacks suppressed [ 695.202332][T30915] syz.6.8835: attempt to access beyond end of device [ 695.202332][T30915] loop6: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 695.206045][T30910] lo speed is unknown, defaulting to 1000 [ 695.216579][T30915] syz.6.8835: attempt to access beyond end of device [ 695.216579][T30915] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 695.222741][T30910] lo speed is unknown, defaulting to 1000 [ 695.234196][T30915] syz.6.8835: attempt to access beyond end of device [ 695.234196][T30915] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 695.284926][T20272] bridge_slave_1: left allmulticast mode [ 695.286729][T30915] syz.6.8835: attempt to access beyond end of device [ 695.286729][T30915] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 695.291260][T20272] bridge_slave_1: left promiscuous mode [ 695.309614][T20272] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.311677][T30915] syz.6.8835: attempt to access beyond end of device [ 695.311677][T30915] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 695.331541][T20272] bridge_slave_0: left allmulticast mode [ 695.332145][T30915] syz.6.8835: attempt to access beyond end of device [ 695.332145][T30915] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 695.337216][T20272] bridge_slave_0: left promiscuous mode [ 695.337378][T20272] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.356362][T30915] syz.6.8835: attempt to access beyond end of device [ 695.356362][T30915] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 695.380875][T30915] syz.6.8835: attempt to access beyond end of device [ 695.380875][T30915] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 695.394416][T30915] syz.6.8835: attempt to access beyond end of device [ 695.394416][T30915] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 695.423034][T30915] syz.6.8835: attempt to access beyond end of device [ 695.423034][T30915] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 695.478270][T30938] xt_ecn: cannot match TCP bits for non-tcp packets [ 695.490060][T20272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.501525][T30940] loop6: detected capacity change from 0 to 512 [ 695.508556][T20272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.518561][T20272] bond0 (unregistering): Released all slaves [ 695.528221][T30940] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 695.536340][T30940] EXT4-fs (loop6): orphan cleanup on readonly fs [ 695.547350][T30940] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.8842: Failed to acquire dquot type 1 [ 695.558558][T30943] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8841'. [ 695.567834][T30940] EXT4-fs (loop6): Remounting filesystem read-only [ 695.574376][T30940] EXT4-fs (loop6): 1 truncate cleaned up [ 695.580810][T30940] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 695.593926][T30940] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.624430][T30945] tipc: Failed to obtain node identity [ 695.629963][T30945] tipc: Enabling of bearer rejected, failed to enable media [ 695.649364][T30943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30943 comm=syz.2.8841 [ 695.666831][T20272] hsr_slave_0: left promiscuous mode [ 695.672892][T20272] hsr_slave_1: left promiscuous mode [ 695.702891][T20272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.710430][T20272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.719056][T20272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.726509][T20272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.743262][T20272] veth1_macvtap: left promiscuous mode [ 695.770068][T20272] veth0_macvtap: left promiscuous mode [ 695.775679][T20272] veth1_vlan: left promiscuous mode [ 695.781129][T20272] veth0_vlan: left promiscuous mode [ 695.788503][T30949] loop0: detected capacity change from 0 to 128 [ 696.087028][T30949] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 696.145453][T30949] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 696.189426][T20272] team0 (unregistering): Port device team_slave_1 removed [ 696.234907][T30956] netlink: 'syz.3.8844': attribute type 1 has an invalid length. [ 696.242711][T30956] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8844'. [ 696.267102][T20272] team0 (unregistering): Port device team_slave_0 removed [ 696.279886][T30717] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 696.418840][T30910] chnl_net:caif_netlink_parms(): no params data found [ 696.429261][T30959] xt_ecn: cannot match TCP bits for non-tcp packets [ 696.461003][T30968] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8845'. [ 696.483818][T30910] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.490906][T30910] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.511149][T30910] bridge_slave_0: entered allmulticast mode [ 696.522383][T30910] bridge_slave_0: entered promiscuous mode [ 696.538127][T30910] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.545203][T30910] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.551930][T30973] loop0: detected capacity change from 0 to 1024 [ 696.553300][T30910] bridge_slave_1: entered allmulticast mode [ 696.560076][T30973] EXT4-fs: Ignoring removed orlov option [ 696.565407][T30910] bridge_slave_1: entered promiscuous mode [ 696.577626][T30969] tipc: Failed to obtain node identity [ 696.583117][T30969] tipc: Enabling of bearer rejected, failed to enable media [ 696.593330][T30969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30969 comm=syz.2.8846 [ 696.610231][T30973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 696.623757][T30973] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.625471][T30910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.648580][T30910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.660963][T30978] loop6: detected capacity change from 0 to 128 [ 696.667819][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 696.667832][ T29] audit: type=1326 audit(1768262179.556:115525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30977 comm="syz.6.8850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f00f4f6e3aa code=0x7ffc0000 [ 696.700342][ T29] audit: type=1326 audit(1768262179.556:115526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30977 comm="syz.6.8850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f00f4f6e3aa code=0x7ffc0000 [ 696.723972][ T29] audit: type=1326 audit(1768262179.556:115527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30977 comm="syz.6.8850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f00f4f6de97 code=0x7ffc0000 [ 696.747610][ T29] audit: type=1326 audit(1768262179.556:115528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30977 comm="syz.6.8850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f00f4f70eea code=0x7ffc0000 [ 696.771274][ T29] audit: type=1400 audit(1768262179.556:115529): avc: denied { mounton } for pid=30977 comm="syz.6.8850" path="/330/file0" dev="tmpfs" ino=1829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 696.794132][ T29] audit: type=1400 audit(1768262179.566:115530): avc: denied { mount } for pid=30977 comm="syz.6.8850" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 696.816508][ T29] audit: type=1326 audit(1768262179.566:115531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30977 comm="syz.6.8850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00f4f6df90 code=0x7ffc0000 [ 696.840191][ T29] audit: type=1326 audit(1768262179.566:115532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30977 comm="syz.6.8850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f00f4f6e497 code=0x7ffc0000 [ 696.863753][ T29] audit: type=1326 audit(1768262179.566:115533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30977 comm="syz.6.8850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00f4f6df90 code=0x7ffc0000 [ 696.887587][ T29] audit: type=1326 audit(1768262179.566:115534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30977 comm="syz.6.8850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4f6f749 code=0x7ffc0000 [ 696.913521][T30910] team0: Port device team_slave_0 added [ 696.922365][T30910] team0: Port device team_slave_1 added [ 696.941879][T30910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.948974][T30910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.975027][T30910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.989613][T30910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.996617][T30910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.022643][T30910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.059422][T30910] hsr_slave_0: entered promiscuous mode [ 697.065616][T30910] hsr_slave_1: entered promiscuous mode [ 697.071658][T30910] debugfs: 'hsr0' already exists in 'hsr' [ 697.077422][T30910] Cannot create hsr debugfs directory [ 697.139423][T30910] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.158784][T30989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.167633][T30989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.189057][T30910] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.237707][T30910] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.372155][T30910] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.406102][T30994] ================================================================== [ 697.414189][T30994] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 697.423999][T30994] [ 697.426309][T30994] read-write to 0xffffffff86809a00 of 8 bytes by interrupt on cpu 0: [ 697.434364][T30994] tick_do_update_jiffies64+0x113/0x1c0 [ 697.439908][T30994] tick_nohz_handler+0x8d/0x3d0 [ 697.444750][T30994] __hrtimer_run_queues+0x20f/0x5a0 [ 697.449944][T30994] hrtimer_interrupt+0x21a/0x460 [ 697.454880][T30994] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 697.460785][T30994] sysvec_apic_timer_interrupt+0x6f/0x80 [ 697.466428][T30994] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 697.472408][T30994] kcsan_setup_watchpoint+0x406/0x420 [ 697.477786][T30994] do_mpage_readpage+0x1ef/0xe20 [ 697.482757][T30994] mpage_read_folio+0x93/0x100 [ 697.487512][T30994] fat_read_folio+0x1c/0x30 [ 697.492007][T30994] filemap_read_folio+0x2e/0x110 [ 697.496930][T30994] filemap_fault+0x595/0xb70 [ 697.501509][T30994] __do_fault+0xbc/0x200 [ 697.505743][T30994] handle_mm_fault+0xfab/0x2c60 [ 697.510584][T30994] __get_user_pages+0x1024/0x1ed0 [ 697.515600][T30994] __mm_populate+0x243/0x3a0 [ 697.520184][T30994] do_mlock+0x471/0x520 [ 697.524324][T30994] __x64_sys_mlock+0x36/0x50 [ 697.528897][T30994] x64_sys_call+0x1794/0x3000 [ 697.533565][T30994] do_syscall_64+0xca/0x2b0 [ 697.538059][T30994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.543938][T30994] [ 697.546246][T30994] read to 0xffffffff86809a00 of 8 bytes by task 30994 on cpu 1: [ 697.553860][T30994] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 697.560124][T30994] count_shadow_nodes+0x6a/0x230 [ 697.565051][T30994] do_shrink_slab+0x63/0x680 [ 697.569626][T30994] shrink_slab+0x4f5/0x840 [ 697.574029][T30994] shrink_node+0x6a9/0x2010 [ 697.578513][T30994] do_try_to_free_pages+0x3f6/0xcd0 [ 697.583701][T30994] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 697.589583][T30994] try_charge_memcg+0x383/0xa10 [ 697.594426][T30994] obj_cgroup_charge_pages+0xa6/0x150 [ 697.599789][T30994] __memcg_kmem_charge_page+0x9f/0x170 [ 697.605238][T30994] __alloc_frozen_pages_noprof+0x18f/0x360 [ 697.611032][T30994] alloc_pages_mpol+0xb3/0x260 [ 697.615783][T30994] alloc_pages_noprof+0x90/0x130 [ 697.620719][T30994] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 697.626600][T30994] __kvmalloc_node_noprof+0x492/0x6b0 [ 697.631964][T30994] ip_set_alloc+0x24/0x30 [ 697.636287][T30994] hash_netiface_create+0x282/0x740 [ 697.641486][T30994] ip_set_create+0x3cc/0x970 [ 697.646066][T30994] nfnetlink_rcv_msg+0x4c6/0x590 [ 697.650993][T30994] netlink_rcv_skb+0x123/0x220 [ 697.655746][T30994] nfnetlink_rcv+0x167/0x16c0 [ 697.660410][T30994] netlink_unicast+0x5c0/0x690 [ 697.665163][T30994] netlink_sendmsg+0x58b/0x6b0 [ 697.669917][T30994] __sock_sendmsg+0x145/0x180 [ 697.674579][T30994] ____sys_sendmsg+0x31e/0x4a0 [ 697.679330][T30994] ___sys_sendmsg+0x17b/0x1d0 [ 697.683995][T30994] __x64_sys_sendmsg+0xd4/0x160 [ 697.688833][T30994] x64_sys_call+0x17ba/0x3000 [ 697.693503][T30994] do_syscall_64+0xca/0x2b0 [ 697.697998][T30994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.703875][T30994] [ 697.706180][T30994] value changed: 0x0000000100009add -> 0x0000000100009ade [ 697.713267][T30994] [ 697.715575][T30994] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 697.721708][T30994] CPU: 1 UID: 0 PID: 30994 Comm: syz.2.8853 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 697.733067][T30994] Tainted: [W]=WARN [ 697.736850][T30994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 697.746890][T30994] ================================================================== [ 697.808038][T30910] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 697.869703][T30998] bond0: (slave syz_tun): Releasing backup interface [ 697.924784][T30977] bond0: (slave syz_tun): Releasing backup interface [ 698.227791][T20302] bridge_slave_1: left allmulticast mode [ 698.233460][T20302] bridge_slave_1: left promiscuous mode [ 698.239464][T20302] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.247022][T20302] bridge_slave_0: left allmulticast mode [ 698.252649][T20302] bridge_slave_0: left promiscuous mode [ 698.258258][T20302] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.308045][T20302] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 698.316701][T20302] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 698.328252][T20302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 698.337497][T20302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.346431][T20302] bond0 (unregistering): Released all slaves [ 698.354207][T20302] bond1 (unregistering): Released all slaves [ 698.362604][T20302] bond2 (unregistering): Released all slaves [ 698.397576][T20302] tipc: Disabling bearer [ 698.403008][T20302] tipc: Left network mode [ 698.425316][T20302] hsr_slave_0: left promiscuous mode [ 698.430810][T20302] hsr_slave_1: left promiscuous mode [ 698.436376][T20302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.443767][T20302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.472851][T20302] team0 (unregistering): Port device team_slave_1 removed [ 698.482490][T20302] team0 (unregistering): Port device team_slave_0 removed [ 698.841470][T20302] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.878585][T20302] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.928752][T20302] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.978682][T20302] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.041790][T20302] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.088880][T20302] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.148890][T20302] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.218249][T20302] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.649600][T20302] bridge_slave_1: left allmulticast mode [ 699.655233][T20302] bridge_slave_1: left promiscuous mode [ 699.660933][T20302] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.669026][T20302] bridge_slave_0: left allmulticast mode [ 699.674747][T20302] bridge_slave_0: left promiscuous mode [ 699.680359][T20302] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.688522][T20302] bridge_slave_1: left allmulticast mode [ 699.694179][T20302] bridge_slave_1: left promiscuous mode [ 699.699821][T20302] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.707444][T20302] bridge_slave_0: left allmulticast mode [ 699.713120][T20302] bridge_slave_0: left promiscuous mode [ 699.718812][T20302] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.727289][T20302] bridge_slave_1: left allmulticast mode [ 699.732970][T20302] bridge_slave_1: left promiscuous mode [ 699.738602][T20302] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.746131][T20302] bridge_slave_0: left allmulticast mode [ 699.751806][T20302] bridge_slave_0: left promiscuous mode [ 699.757447][T20302] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.765366][T20302] bridge_slave_1: left allmulticast mode [ 699.771056][T20302] bridge_slave_1: left promiscuous mode [ 699.776726][T20302] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.784290][T20302] bridge_slave_0: left allmulticast mode [ 699.789968][T20302] bridge_slave_0: left promiscuous mode [ 699.795655][T20302] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.887843][T20302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.897692][T20302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.907044][T20302] bond0 (unregistering): Released all slaves [ 699.967866][T20302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.977978][T20302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.988136][T20302] bond0 (unregistering): Released all slaves [ 700.048221][T20302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.057633][T20302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.066736][T20302] bond0 (unregistering): Released all slaves [ 700.117995][T20302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.127374][T20302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.136795][T20302] bond0 (unregistering): Released all slaves [ 700.144840][T20302] bond1 (unregistering): Released all slaves [ 700.152600][T20302] bond2 (unregistering): Released all slaves [ 700.160814][T20302] bond3 (unregistering): (slave veth3): Releasing active interface [ 700.170032][T20302] bond3 (unregistering): Released all slaves [ 700.230927][T20302] tipc: Disabling bearer [ 700.236243][T20302] tipc: Left network mode [ 700.296504][T20302] hsr_slave_0: left promiscuous mode [ 700.302203][T20302] hsr_slave_1: left promiscuous mode [ 700.307817][T20302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.315176][T20302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.325042][T20302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.332918][T20302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.342027][T20302] hsr_slave_0: left promiscuous mode [ 700.347640][T20302] hsr_slave_1: left promiscuous mode [ 700.353077][T20302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.360479][T20302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.367904][T20302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.375287][T20302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.384633][T20302] hsr_slave_0: left promiscuous mode [ 700.390307][T20302] hsr_slave_1: left promiscuous mode [ 700.395867][T20302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.403310][T20302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.412675][T20302] hsr_slave_0: left promiscuous mode [ 700.418348][T20302] hsr_slave_1: left promiscuous mode [ 700.423943][T20302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.431563][T20302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.444249][T20302] veth1_macvtap: left promiscuous mode [ 700.449753][T20302] veth0_macvtap: left promiscuous mode [ 700.455216][T20302] veth1_vlan: left promiscuous mode [ 700.460421][T20302] veth0_vlan: left promiscuous mode [ 700.466615][T20302] veth1_macvtap: left promiscuous mode [ 700.472134][T20302] veth0_macvtap: left promiscuous mode [ 700.477830][T20302] veth1_vlan: left promiscuous mode [ 700.483018][T20302] veth0_vlan: left promiscuous mode [ 700.569725][T20302] team0 (unregistering): Port device team_slave_1 removed [ 700.583202][T20302] team0 (unregistering): Port device team_slave_0 removed [ 700.633579][T20302] team0 (unregistering): Port device team_slave_1 removed [ 700.644313][T20302] team0 (unregistering): Port device team_slave_0 removed [ 700.693994][T20302] team0 (unregistering): Port device team_slave_1 removed [ 700.703083][T20302] team0 (unregistering): Port device team_slave_0 removed [ 700.755262][T20302] team0 (unregistering): Port device team_slave_1 removed [ 700.765232][T20302] team0 (unregistering): Port device team_slave_0 removed