last executing test programs: 3m54.306839084s ago: executing program 4 (id=482): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_BLKTRACESTART(r2, 0x1274, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='workqueue_activate_work\x00', r1}, 0x18) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}}) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) unshare(0x2040400) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x5, @none}, 0xe) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000010203000000000000000000020000031800"], 0x2c}, 0x1, 0x0, 0x0, 0x44842}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) 3m54.172807437s ago: executing program 4 (id=487): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x204c0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020206e2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000888500000073000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x6b, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000fc0)={0x1, &(0x7f0000001000)=[{0x200000000006, 0x0, 0x8, 0x7ffc1ffb}]}) shmctl$IPC_STAT(0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='afs_make_fs_calli\x00', r1}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) io_uring_setup(0x6ed5, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004}) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, 0x0, 0x0) r7 = socket(0x28, 0x6, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={&(0x7f0000000000)="47a703eda0c0953f7a45d44cca207ffd609b95ca538f7b6d4f92", &(0x7f0000000100)=""/243, &(0x7f0000000200)="942a9ee6cf1a7f73716615dd2c8547902a75ccf2fa6fb8a61007c3ee6a58254910bba7e4cf48fa7d71f1588973063515f834982c0f7d1e26150c9a2fc74b08d82b279470ed3ed267fa906e26c352844b6e68a8cf40233467398f02640b0261bd30dd2e6d4f23ff28e9a1f8b3f2750577d17b636abb395c71b04ecc67878a1ae0d06ea936ec305a7ef8", &(0x7f00000002c0)="8546cb6285fca48a91bf18990c7e18943519f3d58d1231231f9a7f6bc42f2a", 0x6, r8}, 0x38) accept4$unix(r6, 0x0, 0x0, 0x0) shutdown(r7, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r9, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 3m54.116310402s ago: executing program 4 (id=488): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x8004c8, &(0x7f0000002200), 0x65, 0x786, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x80, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "bc4a06", 0x4a, 0x2f, 0x0, @remote, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf3f030b7d27"}, {0x1}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) 3m53.835859316s ago: executing program 4 (id=494): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 3m53.538790683s ago: executing program 4 (id=496): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x18) r1 = getpid() prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0xa010100}}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800fffdff000000000000000000000000000000000000005599c126f8db9d3068987492afe26f60ccddb644fd82cb321bddadfb57252402b86eaa43f3c9033806da39b406d9"], 0x18}, 0x891) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) 3m53.360821029s ago: executing program 4 (id=501): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 3m53.360472719s ago: executing program 32 (id=501): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 3m51.259410465s ago: executing program 3 (id=527): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) 3m51.225756588s ago: executing program 3 (id=528): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x18) r1 = getpid() prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0xa010100}}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800fffdff000000000000000000000000000000000000005599c126f8db9d3068987492afe26f60ccddb644fd82cb321bddadfb57252402b86eaa43f3c9033806da39b406d9"], 0x18}, 0x891) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) 3m50.256386765s ago: executing program 3 (id=533): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 3m50.175416781s ago: executing program 3 (id=535): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000100)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/116, 0x74}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x8, 0x80, &(0x7f0000000a00)="33577b9f1b", 0x5, 0x1, 0x7fff, 0x7, 0x3, 0x3, 0x0}) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 3m49.720424342s ago: executing program 3 (id=541): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x500) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_clone(0x800211, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x4, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='westwood', 0x8) shutdown(r3, 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) connect$can_bcm(r0, &(0x7f00000004c0), 0x10) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x1d, 0x4e23, @multicast2}, 0x4, &(0x7f0000000380)=[{&(0x7f0000000040)="1c9ca1fb88a402aed73a4364a5593768ae", 0x11}, {&(0x7f00000015c0)="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", 0x19f}, {&(0x7f0000000180)="089ac0c1e955ef204d91740257a17cc3fac9babd1c46685d45f5690057fc1f304d66f7a02562a67b601fff40b9d4d33750784dd41e2370f96cd64db637f2f0e1c2a9cd22bb3c70c52b5a2d92e17cde2cc5e1faec8c97a930e58206ec3e54eeecc16511f9c8b6d9d4a9e00475554c53d6e15dead20608c4ad45337ef5a5f75716e97d28f6f07c5b7ce6136de3c3f71969a2ad2c77dd00"/160, 0xa4}, {&(0x7f0000000500)="ff52b31410d9bc32656fe6e33de3a8667b01f76b553c389d85235d3a29272e1b5e45da102d3619080bcccc57d12ac1740468589b29ba0da2c5d1258aca5a11b4a086949792fe4b212660a595f6ccfc815906a1ca3df268f38ff5ebef22fea176051bdca251679870b33901d8dd9a01d70231e231000137818f4f0800000014e6b4f30856d470dc0109e7b1de08061c2420c8271bdd4906ec67e1cef27ebdac482cf978477f21a5c0ccea64ece13d4595a5af818a17b4ace348ba3a9e496f461dd82c728ef31dbae6661542f3d7df72e3ed491f5aee7ea0822abcb2a3f641031323e0ed221eaa28500eb98838cc0884b5d379", 0xf2}, {&(0x7f00000009c0)="c83c", 0x2}], 0x5}, 0x20000090) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x9}, 0x18) r5 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xffdffffd, @dev={0xfe, 0x80, '\x00', 0x2}, 0x4}, 0xffffffffffffffff, {[0x9, 0x2, 0xfffffffe, 0xfffffcf9, 0x0, 0x40001, 0x2, 0x5]}}, 0x5c) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 3m49.560464547s ago: executing program 3 (id=543): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x204c0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020206e2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000888500000073000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x6b, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000fc0)={0x1, &(0x7f0000001000)=[{0x200000000006, 0x0, 0x8, 0x7ffc1ffb}]}) shmctl$IPC_STAT(0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='afs_make_fs_calli\x00', r1}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) io_uring_setup(0x6ed5, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004}) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, 0x0, 0x0) r7 = socket(0x28, 0x6, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={&(0x7f0000000000)="47a703eda0c0953f7a45d44cca207ffd609b95ca538f7b6d4f92", &(0x7f0000000100)=""/243, &(0x7f0000000200)="942a9ee6cf1a7f73716615dd2c8547902a75ccf2fa6fb8a61007c3ee6a58254910bba7e4cf48fa7d71f1588973063515f834982c0f7d1e26150c9a2fc74b08d82b279470ed3ed267fa906e26c352844b6e68a8cf40233467398f02640b0261bd30dd2e6d4f23ff28e9a1f8b3f2750577d17b636abb395c71b04ecc67878a1ae0d06ea936ec305a7ef8", &(0x7f00000002c0)="8546cb6285fca48a91bf18990c7e18943519f3d58d1231231f9a7f6bc42f2a", 0x6, r8}, 0x38) accept4$unix(r6, 0x0, 0x0, 0x0) shutdown(r7, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r9, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 3m49.560010636s ago: executing program 33 (id=543): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x204c0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020206e2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000888500000073000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x6b, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000fc0)={0x1, &(0x7f0000001000)=[{0x200000000006, 0x0, 0x8, 0x7ffc1ffb}]}) shmctl$IPC_STAT(0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='afs_make_fs_calli\x00', r1}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) io_uring_setup(0x6ed5, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004}) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, 0x0, 0x0) r7 = socket(0x28, 0x6, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={&(0x7f0000000000)="47a703eda0c0953f7a45d44cca207ffd609b95ca538f7b6d4f92", &(0x7f0000000100)=""/243, &(0x7f0000000200)="942a9ee6cf1a7f73716615dd2c8547902a75ccf2fa6fb8a61007c3ee6a58254910bba7e4cf48fa7d71f1588973063515f834982c0f7d1e26150c9a2fc74b08d82b279470ed3ed267fa906e26c352844b6e68a8cf40233467398f02640b0261bd30dd2e6d4f23ff28e9a1f8b3f2750577d17b636abb395c71b04ecc67878a1ae0d06ea936ec305a7ef8", &(0x7f00000002c0)="8546cb6285fca48a91bf18990c7e18943519f3d58d1231231f9a7f6bc42f2a", 0x6, r8}, 0x38) accept4$unix(r6, 0x0, 0x0, 0x0) shutdown(r7, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r9, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 2.332030529s ago: executing program 6 (id=3575): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000008, 0x80001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x1c, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='oom_score_adj_update\x00', 0xffffffffffffffff, 0x0, 0xd5d}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x6}, 0x18) open(&(0x7f0000000100)='./file1\x00', 0x109082, 0x1) read(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) 2.22459815s ago: executing program 6 (id=3578): socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(0xffffffffffffffff, &(0x7f0000000680)={0x2, 0x4e24, @loopback}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000700)='ext4_load_inode\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) iopl(0xc) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000b00)={[{@quota}, {@init_itable}]}, 0x1, 0x24e, &(0x7f0000000340)="$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") ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xfe37, 0x0) getresuid(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000680)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5d, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r2, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000440)={0x8, 0x9, 0x4, 0x9, 0x7, "efc64a26a83c8ffa332b3a5419e8ab2543c4ec"}) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000080)=@in6={0xa, 0x4e26, 0x0, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x7}, 0x80, 0x0}, 0x20000010) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xfac, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefce) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000940), 0x3) 1.493329362s ago: executing program 2 (id=3588): r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000680)="5825d03658d382c06a76cb60478a1117b1526424ee456ce9f4e0748b09a27deb2e5d9a3cb9d564a82181c3fb2311d733f06f38b1590000", 0x37, 0x9e1) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r4 = open(&(0x7f0000000180)='./file1\x00', 0x185102, 0x2b) sendfile(r3, r4, 0x0, 0x1000000201001) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xffff8001, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0xa, 0x4e21, 0xffffffff, @loopback, 0xbf}, 0x1c) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) 1.451588346s ago: executing program 2 (id=3589): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000008, 0x80001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x1c, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='oom_score_adj_update\x00', 0xffffffffffffffff, 0x0, 0xd5d}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x6}, 0x18) open(&(0x7f0000000100)='./file1\x00', 0x109082, 0x1) read(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) 1.297484132s ago: executing program 2 (id=3593): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1c0, 0x178, 0x178, 0x1c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}}, 0x12a, 0xc0, 0x128, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}, {0x1, 0x20, 0x2, 0x1}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x5, 0x2, 0x20, 'snmp\x00', 'syz0\x00', {0x101}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000d00)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x1, 0x2eb, &(0x7f0000000a00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) socket(0x10, 0xa, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) 1.233983668s ago: executing program 6 (id=3594): mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x14) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='kfree\x00', r0, 0x0, 0x2144}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0xffef, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x48051}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.174887344s ago: executing program 2 (id=3596): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='kmem_cache_free\x00', r1, 0x0, 0x7fff}, 0x18) syz_emit_ethernet(0xae, &(0x7f00000003c0)={@random="57dc3d04d3ee", @local, @void, {@ipv4={0x800, @icmp={{0x26, 0x4, 0x1, 0x2, 0xa0, 0x66, 0x0, 0xff, 0x1, 0x0, @local, @remote, {[@cipso={0x86, 0xd, 0x3, [{0x6, 0x7, "a2d2407424"}]}, @ssrr={0x89, 0x1f, 0x79, [@private=0xa010100, @empty, @empty, @remote, @initdev={0xac, 0x1e, 0x7, 0x0}, @loopback, @local]}, @lsrr={0x83, 0x23, 0xa1, [@rand_addr=0x64010102, @remote, @loopback, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x10}, @broadcast, @broadcast, @empty]}, @noop, @timestamp_addr={0x44, 0x34, 0xdc, 0x1, 0x8, [{@multicast1, 0x2003}, {@multicast1, 0x204}, {@broadcast, 0x5}, {@empty, 0x1}, {@empty, 0xf61}, {@multicast1, 0x80000000}]}]}}, @info_request={0xf, 0x0, 0x0, 0xffff, 0x6}}}}}, 0x0) 1.141918707s ago: executing program 6 (id=3597): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000280)=@hopopts={0x33}, 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x24, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r8, 0x0, 0x9}, 0x18) symlinkat(&(0x7f0000001b00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x4}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000005c40), 0x403f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000001040)='kfree\x00'}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000001000000850000000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) write$cgroup_int(r2, &(0x7f0000000040)=0xfe8e, 0x12) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e", 0xd}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 1.099405041s ago: executing program 2 (id=3598): r0 = msgget$private(0x0, 0x80) msgrcv(r0, 0x0, 0x0, 0x1, 0x2000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'syztnl2\x00', r3, 0x29, 0x9, 0xa3, 0xffffffff, 0x0, @mcast1, @mcast2, 0x8000, 0x20, 0x8}}) sendmmsg$inet(r2, &(0x7f0000001f40)=[{{&(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000ac0)="b73f9658b2be28ce1217a7c9ca6069b88223434864fcff0b78daed987967269547325a9f208265d80b73c67f6984f2dd30372f06fca315b063832e64b6189250dcb27d077d5f9a288d72a0bf58e8ba9f3dfab961e52d804183c28b0c7fbdb550c42fea62e3f97c39b83d7fa24d140287453bbaaa1cf263cea3e39ce342ce53112c0f1896e9806ea6b9350f163ef1dfac8b8d74121015c2be0d72582862c87cd105959fd81bca07d405d15cb8e7a061ca3f8fa8700c5c08e214eba5321f8f0510c0932f353b6d17920ae437bce07dd1dc6305f8420185c7a30687ebd15c0df94e550237fb", 0xe4}, {&(0x7f0000000300)="57a377", 0x3}, {&(0x7f0000000480)="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", 0xfe}, {&(0x7f0000000340)="34b3b5498771ced353fc05431f93b05fcb3b34ccdd217fedf7e4b8e916bae72ce2f7361e64eef30edb324f4429776ad8bd5a2336cb334155cf8d588f825724", 0x3f}, {0x0}], 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x108}}, {{&(0x7f0000000840)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000f40)="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", 0x1000}], 0x1, &(0x7f0000000980)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xdd5}}], 0x50}}], 0x2, 0x40010) r5 = socket(0x1e, 0x805, 0x0) connect$tipc(r5, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10) connect$tipc(r5, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x700, 0x7}) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}}}, 0x84) msgrcv(r0, 0x0, 0x0, 0x3, 0x2000) msgctl$IPC_RMID(r0, 0x0) 1.076060563s ago: executing program 5 (id=3600): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1c0, 0x178, 0x178, 0x1c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}}, 0x12a, 0xc0, 0x128, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}, {0x1, 0x20, 0x2, 0x1}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x5, 0x2, 0x20, 'snmp\x00', 'syz0\x00', {0x101}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a99985000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000d00)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x1, 0x2eb, &(0x7f0000000a00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r2 = socket(0x10, 0xa, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0x4, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x10, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xccdc8d3fc86325ee}]}}]}, 0x3c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) 1.022832049s ago: executing program 5 (id=3601): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/connector\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value=r0}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8921, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x20000000000001cb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) syz_emit_ethernet(0x5a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb81002500000d010000e0080300006f087a021e9343c819ec521a75c0c291052cda0df45d4bc63dcc22c9cf8672eed519240ced48cbec483b6d5de539fec33fdd70a1d7c5d211ea0d00000002e592"], &(0x7f0000000080)={0x1, 0x3, [0xaf7, 0x4ef, 0xfe2, 0xb39]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r3}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00'}, 0x10) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r5) 991.370262ms ago: executing program 5 (id=3602): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20028}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x880}, 0x44800) 872.905643ms ago: executing program 2 (id=3604): socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(0xffffffffffffffff, &(0x7f0000000680)={0x2, 0x4e24, @loopback}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000700)='ext4_load_inode\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) iopl(0xc) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000b00)={[{@quota}, {@init_itable}]}, 0x1, 0x24e, &(0x7f0000000340)="$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") ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xfe37, 0x0) getresuid(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000680)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5d, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r2, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000440)={0x8, 0x9, 0x4, 0x9, 0x7, "efc64a26a83c8ffa332b3a5419e8ab2543c4ec"}) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000080)=@in6={0xa, 0x4e26, 0x0, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x7}, 0x80, 0x0}, 0x20000010) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xfac, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefce) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000940), 0x3) 871.274834ms ago: executing program 6 (id=3605): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000008600850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) setresuid(0x0, 0xee00, 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) sync() 826.972108ms ago: executing program 5 (id=3607): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) socketpair(0x1, 0x20000000000001, 0x0, 0x0) mmap(&(0x7f0000188000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0xd6dac000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x11, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 780.629283ms ago: executing program 6 (id=3608): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='kmem_cache_free\x00', r1, 0x0, 0x7fff}, 0x18) syz_emit_ethernet(0xae, &(0x7f00000003c0)={@random="57dc3d04d3ee", @local, @void, {@ipv4={0x800, @icmp={{0x26, 0x4, 0x1, 0x2, 0xa0, 0x66, 0x0, 0xff, 0x1, 0x0, @local, @remote, {[@cipso={0x86, 0xd, 0x3, [{0x6, 0x7, "a2d2407424"}]}, @ssrr={0x89, 0x1f, 0x79, [@private=0xa010100, @empty, @empty, @remote, @initdev={0xac, 0x1e, 0x7, 0x0}, @loopback, @local]}, @lsrr={0x83, 0x23, 0xa1, [@rand_addr=0x64010102, @remote, @loopback, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x10}, @broadcast, @broadcast, @empty]}, @noop, @timestamp_addr={0x44, 0x34, 0xdc, 0x1, 0x8, [{@multicast1, 0x2003}, {@multicast1, 0x204}, {@broadcast, 0x5}, {@empty, 0x1}, {@empty, 0xf61}, {@multicast1, 0x80000000}]}]}}, @info_request={0xf, 0x0, 0x0, 0xffff, 0x6}}}}}, 0x0) 772.289813ms ago: executing program 1 (id=3609): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r0, 0xfffffffffffffc4c, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0xf1, &(0x7f0000000180)=[{}], 0xfffffffffffffd64, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) 721.605708ms ago: executing program 1 (id=3611): socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(0xffffffffffffffff, &(0x7f0000000680)={0x2, 0x4e24, @loopback}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000700)='ext4_load_inode\x00', r0}, 0x18) iopl(0xc) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000b00)={[{@quota}, {@init_itable}]}, 0x1, 0x24e, &(0x7f0000000340)="$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") rt_sigprocmask(0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xfe37, 0x0) getresuid(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='sched_switch\x00'}, 0x18) write(0xffffffffffffffff, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00c8702cc583177e7c953d2b6c6e43b73645f2acb80cc28520c3cd61e54370886d9caa3a1ec165ec59309153922716cb0f95f435e2af"], 0xf5, 0x2f0, &(0x7f0000000f80)="$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") 544.167006ms ago: executing program 1 (id=3612): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0, 0xa, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000240)="e1", 0x1}], 0x1}, 0x4000004) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 417.489769ms ago: executing program 1 (id=3613): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000008600850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) setresuid(0x0, 0xee00, 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) sync() 363.355434ms ago: executing program 1 (id=3616): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000280)=@hopopts={0x33}, 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x24, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r8, 0x0, 0x9}, 0x18) symlinkat(&(0x7f0000001b00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x4}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000005c40), 0x403f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000001040)='kfree\x00'}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000001000000850000000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) write$cgroup_int(r2, &(0x7f0000000040)=0xfe8e, 0x12) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e", 0xd}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 272.498463ms ago: executing program 0 (id=3617): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000008, 0x80001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x1c, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='oom_score_adj_update\x00', 0xffffffffffffffff, 0x0, 0xd5d}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x6}, 0x18) open(&(0x7f0000000100)='./file1\x00', 0x109082, 0x1) read(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) 241.503676ms ago: executing program 0 (id=3618): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@private1}, &(0x7f00000002c0)=0x14) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0) 240.425066ms ago: executing program 1 (id=3619): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@private1, 0x0}, &(0x7f00000002c0)=0x14) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) r4 = syz_clone(0x0, &(0x7f0000000600)="ab529ea1a4580fba010d9fbe7f8a3b244ef5089d1905746b285c56e395cf9a77a1647f380033b1caaa9c573d252b8ac78e10998a9278edf6aa840267bb4f99267f99a2a810", 0x45, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000180)="cec6d137957a377428ba32d16b32a285783f7de3b790a49351065bd70d62d0cc68df2f191f1cf3be13f94c1fcdaab5b3a86b1328b732c9031982f092b321b6e864b0fba339dd410b4bab072a8f6aa6b298e72abda89bddc6bafa738fa29374001a10c05125eb8f82e3f02f2886c186f84a0f7a4b5b81162306") prlimit64(r4, 0xe, 0x0, &(0x7f0000000300)) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="330000000000980b537b8c00003e418fd58cc222f1bc8240579e68534b104f6f7d22f7d067bb42bf48baf6cb3aca06000000000000"], 0x8) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_getaddrlabel={0x50, 0x4a, 0x200, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x1, 0x0, r2, 0xacd1}, [@IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x50}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r2], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x7}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r10, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x20040017) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0xf) close(r10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r11 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000010000000000004000085000000b20000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) connect$inet6(r5, &(0x7f0000000240)={0xa, 0xffff, 0x1, @dev={0xfe, 0x80, '\x00', 0x32}, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0x5000) 192.451101ms ago: executing program 0 (id=3620): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='kmem_cache_free\x00', r1, 0x0, 0x7fff}, 0x18) syz_emit_ethernet(0xae, &(0x7f00000003c0)={@random="57dc3d04d3ee", @local, @void, {@ipv4={0x800, @icmp={{0x26, 0x4, 0x1, 0x2, 0xa0, 0x66, 0x0, 0xff, 0x1, 0x0, @local, @remote, {[@cipso={0x86, 0xd, 0x3, [{0x6, 0x7, "a2d2407424"}]}, @ssrr={0x89, 0x1f, 0x79, [@private=0xa010100, @empty, @empty, @remote, @initdev={0xac, 0x1e, 0x7, 0x0}, @loopback, @local]}, @lsrr={0x83, 0x23, 0xa1, [@rand_addr=0x64010102, @remote, @loopback, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x10}, @broadcast, @broadcast, @empty]}, @noop, @timestamp_addr={0x44, 0x34, 0xdc, 0x1, 0x8, [{@multicast1, 0x2003}, {@multicast1, 0x204}, {@broadcast, 0x5}, {@empty, 0x1}, {@empty, 0xf61}, {@multicast1, 0x80000000}]}]}}, @info_request={0xf, 0x0, 0x0, 0xffff, 0x6}}}}}, 0x0) 158.630544ms ago: executing program 5 (id=3621): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1c0, 0x178, 0x178, 0x1c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}}, 0x12a, 0x98, 0x100, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}, {0x1, 0x20, 0x2, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x5, 0x2, 0x20, 'snmp\x00', 'syz0\x00', {0x101}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000d00)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x1, 0x2eb, &(0x7f0000000a00)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r2 = socket(0x10, 0xa, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0x4, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x10, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xccdc8d3fc86325ee}]}}]}, 0x3c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) 133.265767ms ago: executing program 0 (id=3622): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000008600850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) setresuid(0x0, 0xee00, 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) sync() 43.901516ms ago: executing program 5 (id=3623): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@bridge_setlink={0x38, 0x13, 0xa2f, 0x70bd26, 0x0, {0x7, 0x0, 0x68, r1, 0xc968, 0x30245}, [@IFLA_LINKINFO={0x18, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}]}, 0x38}}, 0x10) 475.3µs ago: executing program 0 (id=3624): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x94) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff86, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x97a3}, 0x18) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 32) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x15) (rerun: 32) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f00000000c0), 0x10, 0x0}, 0x0) (async) r5 = syz_open_dev$sg(&(0x7f0000000400), 0xe2, 0x44300) ioctl$SG_GET_VERSION_NUM(r5, 0x2282, &(0x7f0000000580)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r6 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async, rerun: 32) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x11) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c57c30155b31c408918aa6bdeaca79b6666ee52c03c6ed08c6a9d745c53e4cd5bf6d6c02caf7f0cd0c1bf1cd3287516168610cc96d760d34c6a5de89ff2a348591da44662e630097f733f44d741626eca0bf0f436ecf07f26529ef7671d4f50cfc2cb700e88b686faba046b368da3824b2429f77ec41db96932e3e91f1cf46cb008d2826ba99fdcf26d0a86cf5f2c35399a94e6eb5cc13b450296e92a9396d78b7dfcc0b128304012937593d1071852ee8ce0f023b6d34097191faa27a4f7f2c2207029393d208866b50834c6252ea9268267a4eb7d8f6aaf4a1e3749261b116ed65b5b2a590f06e8b3438b14f1fdaad8adb6553ae31a4851ac5938364b8cadea1065abaa0243942505f4f8328dc36bd3deafebfe2bf1da203892487206f354f8e625164fdbe149de8d8c5944ba7951089c3447ccd222b3fb04d8226f684887cefbab"]) write$P9_RVERSION(r9, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.L'}, 0x41) (async) setsockopt$XDP_TX_RING(r6, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) (async, rerun: 64) creat(&(0x7f00000000c0)='./bus\x00', 0x182) (rerun: 64) socket$inet6(0xa, 0x3, 0x5) 0s ago: executing program 0 (id=3625): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000008600850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) setresuid(0x0, 0xee00, 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) sync() kernel console output (not intermixed with test programs): ort of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.564511][T11803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.610139][T11803] hsr_slave_0: entered promiscuous mode [ 239.616729][T11803] hsr_slave_1: entered promiscuous mode [ 239.623266][T11803] debugfs: 'hsr0' already exists in 'hsr' [ 239.629192][T11803] Cannot create hsr debugfs directory [ 239.836273][ T29] kauditd_printk_skb: 664 callbacks suppressed [ 239.836293][ T29] audit: type=1400 audit(1766155941.488:21782): avc: denied { create } for pid=11914 comm="syz.2.2836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 239.885227][ T29] audit: type=1400 audit(1766155941.535:21783): avc: denied { setopt } for pid=11914 comm="syz.2.2836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 239.909169][ T29] audit: type=1400 audit(1766155941.563:21784): avc: denied { create } for pid=11914 comm="syz.2.2836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 239.929465][ T29] audit: type=1400 audit(1766155941.563:21785): avc: denied { ioctl } for pid=11914 comm="syz.2.2836" path="socket:[33939]" dev="sockfs" ino=33939 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 239.955486][T11916] netlink: 'syz.2.2836': attribute type 21 has an invalid length. [ 239.963667][ T3524] tipc: Node number set to 2886997007 [ 239.969440][T11916] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2836'. [ 239.985924][T11916] set_capacity_and_notify: 7 callbacks suppressed [ 239.985944][T11916] loop2: detected capacity change from 0 to 128 [ 240.003085][T11803] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 240.007394][T11916] msdos: Unknown parameter '' [ 240.031160][ T29] audit: type=1400 audit(1766155941.676:21786): avc: denied { create } for pid=11914 comm="syz.2.2836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 240.056109][T11803] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 240.063258][ T29] audit: type=1400 audit(1766155941.676:21787): avc: denied { write } for pid=11914 comm="syz.2.2836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 240.087520][T11803] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 240.103149][T11803] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 240.168371][T11803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.186017][T11803] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.219444][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.226577][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.254902][T11803] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.265439][T11803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.276481][ T29] audit: type=1400 audit(1766155941.881:21788): avc: denied { mounton } for pid=11948 comm="syz.6.2839" path="/461/file0" dev="tmpfs" ino=2515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 240.304248][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.311489][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.376136][ T29] audit: type=1400 audit(1766155942.003:21789): avc: denied { setopt } for pid=11957 comm="syz.1.2840" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 240.399850][T11958] netlink: 'syz.1.2840': attribute type 10 has an invalid length. [ 240.434383][T11958] loop1: detected capacity change from 0 to 1024 [ 240.451685][T11966] openvswitch: netlink: Missing key (keys=40, expected=80) [ 240.461925][T11803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.469818][ T29] audit: type=1400 audit(1766155942.078:21790): avc: denied { mounton } for pid=11957 comm="syz.1.2840" path="/557/file0" dev="tmpfs" ino=3012 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 240.504803][T11958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11958 comm=syz.1.2840 [ 240.540008][ T29] audit: type=1400 audit(1766155942.125:21791): avc: denied { remount } for pid=11957 comm="syz.1.2840" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 240.576939][T11966] IPVS: Error connecting to the multicast addr [ 240.636924][T11803] veth0_vlan: entered promiscuous mode [ 240.647202][T11984] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 240.673635][T11803] veth1_vlan: entered promiscuous mode [ 240.717791][T11803] veth0_macvtap: entered promiscuous mode [ 240.725409][T11988] loop6: detected capacity change from 0 to 128 [ 240.738905][T11803] veth1_macvtap: entered promiscuous mode [ 240.747414][T11988] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 240.763165][T11803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.776426][T11990] loop1: detected capacity change from 0 to 4096 [ 240.788328][T11803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.796626][T11990] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.813804][T11988] loop6: detected capacity change from 0 to 128 [ 240.826537][ T886] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.835652][T11988] FAT-fs (loop6): bogus number of reserved sectors [ 240.842210][T11988] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 240.851558][T11988] FAT-fs (loop6): Can't find a valid FAT filesystem [ 240.860481][ T886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.886072][T11990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.907169][ T886] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.930759][ T886] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.961193][T11996] openvswitch: netlink: EtherType 0 is less than min 600 [ 240.969505][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.067280][T12001] random: crng reseeded on system resumption [ 241.070009][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 241.074255][ T3758] Bluetooth: hci0: command 0x1003 tx timeout [ 241.094509][T12001] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 241.117315][T12005] random: crng reseeded on system resumption [ 241.126440][T12007] xt_CT: You must specify a L4 protocol and not use inversions on it [ 241.143964][T12009] openvswitch: netlink: Missing key (keys=40, expected=80) [ 241.152929][T12007] loop5: detected capacity change from 0 to 128 [ 241.160907][T12002] bridge_slave_0: left allmulticast mode [ 241.166869][T12002] bridge_slave_0: left promiscuous mode [ 241.172750][T12002] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.187809][T12002] bridge_slave_1: left allmulticast mode [ 241.193693][T12002] bridge_slave_1: left promiscuous mode [ 241.199741][T12002] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.210340][T12002] bond0: (slave bond_slave_0): Releasing backup interface [ 241.227505][T12002] bond0: (slave bond_slave_1): Releasing backup interface [ 241.242915][T12002] team0: Port device team_slave_0 removed [ 241.251727][T12002] team0: Port device team_slave_1 removed [ 241.263030][T12002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.270470][T12002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.279220][T12002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.286694][T12002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.295806][T12002] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 241.314865][T12014] IPVS: Unknown mcast interface: hsr0 [ 241.370542][T12022] random: crng reseeded on system resumption [ 241.385273][T12022] __nla_validate_parse: 5 callbacks suppressed [ 241.385292][T12022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2856'. [ 241.400969][T12022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2856'. [ 241.414990][T12022] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 241.477786][T12031] openvswitch: netlink: EtherType 0 is less than min 600 [ 241.488204][T12027] random: crng reseeded on system resumption [ 241.504084][T12027] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2858'. [ 241.513144][T12027] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2858'. [ 241.515450][T12035] random: crng reseeded on system resumption [ 241.532535][T12027] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 241.541667][T12035] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2862'. [ 241.551236][T12035] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2862'. [ 241.562432][T12035] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 241.584514][T12038] xt_CT: You must specify a L4 protocol and not use inversions on it [ 241.639413][T12042] netlink: 'syz.1.2865': attribute type 10 has an invalid length. [ 241.648019][T12042] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2865'. [ 241.664368][T12042] loop1: detected capacity change from 0 to 1024 [ 241.677171][T12042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12042 comm=syz.1.2865 [ 241.696895][T12044] openvswitch: netlink: Missing key (keys=40, expected=80) [ 241.710744][T12046] loop1: detected capacity change from 0 to 128 [ 241.719786][T12046] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 241.759644][T12044] IPVS: Unknown mcast interface: hsr0 [ 241.860881][T12053] loop6: detected capacity change from 0 to 4096 [ 241.862142][T12053] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.880892][T12053] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.899464][ T5276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.070367][T12085] openvswitch: netlink: EtherType 0 is less than min 600 [ 243.088088][T12087] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 243.428514][T12091] loop2: detected capacity change from 0 to 4096 [ 243.460050][T12091] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.578626][T12091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.712486][ T3333] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.924574][T12112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.979250][T12117] netlink: 'syz.5.2884': attribute type 10 has an invalid length. [ 243.987366][T12117] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2884'. [ 244.017928][T12117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12117 comm=syz.5.2884 [ 244.030830][T12119] openvswitch: netlink: EtherType 0 is less than min 600 [ 244.060836][T12122] random: crng reseeded on system resumption [ 244.074562][T12122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2893'. [ 244.083692][T12122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2893'. [ 244.110909][T12122] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 244.173753][T12135] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2895: error while reading EA inode 32 err=-116 [ 244.190614][T12135] EXT4-fs (loop5): Remounting filesystem read-only [ 244.201780][T12135] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 244.212086][T12135] EXT4-fs (loop5): 1 orphan inode deleted [ 244.218558][T12135] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.234307][T12135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.482204][T12153] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.824984][T12160] openvswitch: netlink: Missing key (keys=40, expected=80) [ 244.930648][T12160] IPVS: Error connecting to the multicast addr [ 245.016503][T12169] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 245.027577][T12171] FAULT_INJECTION: forcing a failure. [ 245.027577][T12171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.040723][T12171] CPU: 1 UID: 0 PID: 12171 Comm: syz.5.2911 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 245.040814][T12171] Tainted: [W]=WARN [ 245.040823][T12171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 245.040836][T12171] Call Trace: [ 245.040843][T12171] [ 245.040852][T12171] __dump_stack+0x1d/0x30 [ 245.040877][T12171] dump_stack_lvl+0xe8/0x140 [ 245.040935][T12171] dump_stack+0x15/0x1b [ 245.040973][T12171] should_fail_ex+0x265/0x280 [ 245.041046][T12171] should_fail+0xb/0x20 [ 245.041069][T12171] should_fail_usercopy+0x1a/0x20 [ 245.041107][T12171] _copy_from_user+0x1c/0xb0 [ 245.041180][T12171] ___sys_sendmsg+0xc1/0x1d0 [ 245.041218][T12171] __x64_sys_sendmsg+0xd4/0x160 [ 245.041249][T12171] x64_sys_call+0x17ba/0x3000 [ 245.041296][T12171] do_syscall_64+0xd8/0x2c0 [ 245.041381][T12171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.041408][T12171] RIP: 0033:0x7fa15599f749 [ 245.041463][T12171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.041485][T12171] RSP: 002b:00007fa154407038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.041508][T12171] RAX: ffffffffffffffda RBX: 00007fa155bf5fa0 RCX: 00007fa15599f749 [ 245.041524][T12171] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000005 [ 245.041605][T12171] RBP: 00007fa154407090 R08: 0000000000000000 R09: 0000000000000000 [ 245.041620][T12171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.041634][T12171] R13: 00007fa155bf6038 R14: 00007fa155bf5fa0 R15: 00007ffc5aba3938 [ 245.041719][T12171] [ 245.273681][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 245.273702][ T29] audit: type=1400 audit(1766155946.531:22123): avc: denied { create } for pid=12172 comm="syz.6.2912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 245.285175][T12171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12171 comm=syz.5.2911 [ 245.299514][ T29] audit: type=1400 audit(1766155946.531:22124): avc: denied { getopt } for pid=12172 comm="syz.6.2912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 245.346624][ T29] audit: type=1400 audit(1766155946.653:22125): avc: denied { map } for pid=12176 comm="syz.6.2915" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33648 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 245.403915][T12185] tmpfs: Unknown parameter '' [ 245.423980][ T29] audit: type=1400 audit(1766155946.653:22126): avc: denied { read write } for pid=12176 comm="syz.6.2915" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33648 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 245.444346][T12187] openvswitch: netlink: Missing key (keys=40, expected=80) [ 245.449272][ T29] audit: type=1326 audit(1766155946.653:22127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12181 comm="syz.2.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277d96f749 code=0x7ffc0000 [ 245.480045][ T29] audit: type=1326 audit(1766155946.653:22128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12181 comm="syz.2.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277d96f749 code=0x7ffc0000 [ 245.503933][ T29] audit: type=1326 audit(1766155946.653:22129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12181 comm="syz.2.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f277d96f749 code=0x7ffc0000 [ 245.527793][ T29] audit: type=1326 audit(1766155946.653:22130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12181 comm="syz.2.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277d96f749 code=0x7ffc0000 [ 245.551750][ T29] audit: type=1326 audit(1766155946.653:22131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12181 comm="syz.2.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f277d96f749 code=0x7ffc0000 [ 245.559119][T12190] IPVS: Unknown mcast interface: hsr0 [ 245.575952][ T29] audit: type=1326 audit(1766155946.681:22132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12176 comm="syz.6.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a566df749 code=0x7ffc0000 [ 245.729376][T12203] openvswitch: netlink: Missing key (keys=40, expected=80) [ 245.820333][T12203] IPVS: Error connecting to the multicast addr [ 245.934834][T12221] netlink: 'syz.0.2926': attribute type 10 has an invalid length. [ 246.067336][T12226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12226 comm=syz.0.2926 [ 246.632539][T12234] SELinux: syz.2.2929 (12234) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 246.856353][T12245] set_capacity_and_notify: 4 callbacks suppressed [ 246.856372][T12245] loop5: detected capacity change from 0 to 512 [ 246.905287][T12245] EXT4-fs (loop5): 1 truncate cleaned up [ 246.918669][T12245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.970498][T12245] FAULT_INJECTION: forcing a failure. [ 246.970498][T12245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.984018][T12245] CPU: 1 UID: 0 PID: 12245 Comm: syz.5.2933 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 246.984056][T12245] Tainted: [W]=WARN [ 246.984063][T12245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.984077][T12245] Call Trace: [ 246.984085][T12245] [ 246.984093][T12245] __dump_stack+0x1d/0x30 [ 246.984162][T12245] dump_stack_lvl+0xe8/0x140 [ 246.984183][T12245] dump_stack+0x15/0x1b [ 246.984203][T12245] should_fail_ex+0x265/0x280 [ 246.984229][T12245] should_fail+0xb/0x20 [ 246.984317][T12245] should_fail_usercopy+0x1a/0x20 [ 246.984347][T12245] copy_folio_from_iter_atomic+0x26a/0x1150 [ 246.984403][T12245] generic_perform_write+0x2c2/0x490 [ 246.984439][T12245] ext4_buffered_write_iter+0x1ee/0x3c0 [ 246.984474][T12245] ext4_file_write_iter+0x387/0xf60 [ 246.984505][T12245] ? kstrtouint+0x76/0xc0 [ 246.984525][T12245] ? kstrtouint_from_user+0x9f/0xf0 [ 246.984553][T12245] ? avc_policy_seqno+0x15/0x30 [ 246.984642][T12245] ? selinux_file_permission+0x1e2/0x320 [ 246.984682][T12245] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 246.984720][T12245] vfs_write+0x52a/0x960 [ 246.984784][T12245] ksys_write+0xda/0x1a0 [ 246.984805][T12245] __x64_sys_write+0x40/0x50 [ 246.984825][T12245] x64_sys_call+0x2847/0x3000 [ 246.984988][T12245] do_syscall_64+0xd8/0x2c0 [ 246.985099][T12245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.985173][T12245] RIP: 0033:0x7fa15599f749 [ 246.985192][T12245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.985211][T12245] RSP: 002b:00007fa154407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 246.985231][T12245] RAX: ffffffffffffffda RBX: 00007fa155bf5fa0 RCX: 00007fa15599f749 [ 246.985268][T12245] RDX: 00000000000005b0 RSI: 0000200000000240 RDI: 0000000000000004 [ 246.985281][T12245] RBP: 00007fa154407090 R08: 0000000000000000 R09: 0000000000000000 [ 246.985359][T12245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.985374][T12245] R13: 00007fa155bf6038 R14: 00007fa155bf5fa0 R15: 00007ffc5aba3938 [ 246.985393][T12245] [ 247.215954][T12245] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2933: bg 0: block 465: padding at end of block bitmap is not set [ 247.301778][T12245] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 247.314387][T12245] EXT4-fs (loop5): This should not happen!! Data will be lost [ 247.314387][T12245] [ 247.324240][T12245] EXT4-fs (loop5): Total free blocks count 0 [ 247.330421][T12245] EXT4-fs (loop5): Free/Dirty block details [ 247.336370][T12245] EXT4-fs (loop5): free_blocks=0 [ 247.341443][T12245] EXT4-fs (loop5): dirty_blocks=2 [ 247.346685][T12245] EXT4-fs (loop5): Block reservation details [ 247.352729][T12245] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 247.369835][ T5054] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.395803][T12255] __nla_validate_parse: 2 callbacks suppressed [ 247.395896][T12255] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2937'. [ 247.411315][T12255] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2937'. [ 247.441805][T12256] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2937'. [ 247.450893][T12256] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2937'. [ 247.572723][T12287] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.831368][T12293] random: crng reseeded on system resumption [ 248.206570][T12299] loop5: detected capacity change from 0 to 4096 [ 248.215024][T12299] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.227964][T12303] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 248.240044][T12299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.310183][T12307] loop1: detected capacity change from 0 to 764 [ 248.318488][T12307] rock: directory entry would overflow storage [ 248.318573][ T5054] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.324715][T12307] rock: sig=0x4654, size=5, remaining=4 [ 248.378219][T12307] FAULT_INJECTION: forcing a failure. [ 248.378219][T12307] name failslab, interval 1, probability 0, space 0, times 0 [ 248.391099][T12307] CPU: 1 UID: 0 PID: 12307 Comm: syz.1.2950 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 248.391132][T12307] Tainted: [W]=WARN [ 248.391139][T12307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 248.391151][T12307] Call Trace: [ 248.391209][T12307] [ 248.391217][T12307] __dump_stack+0x1d/0x30 [ 248.391246][T12307] dump_stack_lvl+0xe8/0x140 [ 248.391274][T12307] dump_stack+0x15/0x1b [ 248.391298][T12307] should_fail_ex+0x265/0x280 [ 248.391372][T12307] should_failslab+0x8c/0xb0 [ 248.391479][T12307] kmem_cache_alloc_noprof+0x69/0x4b0 [ 248.391508][T12307] ? audit_log_start+0x342/0x720 [ 248.391534][T12307] audit_log_start+0x342/0x720 [ 248.391566][T12307] ? kstrtouint+0x76/0xc0 [ 248.391589][T12307] audit_seccomp+0x48/0x100 [ 248.391638][T12307] ? __seccomp_filter+0x832/0x1260 [ 248.391672][T12307] __seccomp_filter+0x843/0x1260 [ 248.391757][T12307] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 248.391793][T12307] ? vfs_write+0x7e8/0x960 [ 248.391813][T12307] ? __cond_resched+0x4e/0x90 [ 248.391884][T12307] __secure_computing+0x82/0x150 [ 248.391917][T12307] syscall_trace_enter+0xcf/0x1e0 [ 248.391945][T12307] do_syscall_64+0xb2/0x2c0 [ 248.391980][T12307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.392073][T12307] RIP: 0033:0x7f8d0e5ef749 [ 248.392089][T12307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.392111][T12307] RSP: 002b:00007f8d0d057038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 248.392205][T12307] RAX: ffffffffffffffda RBX: 00007f8d0e845fa0 RCX: 00007f8d0e5ef749 [ 248.392219][T12307] RDX: 0000000000000001 RSI: 0000200000000a40 RDI: 000000000000000a [ 248.392235][T12307] RBP: 00007f8d0d057090 R08: 0000000000000000 R09: 0000000000000000 [ 248.392250][T12307] R10: 0000000004004040 R11: 0000000000000246 R12: 0000000000000001 [ 248.392281][T12307] R13: 00007f8d0e846038 R14: 00007f8d0e845fa0 R15: 00007ffe4bb40148 [ 248.392299][T12307] [ 248.612935][T12310] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.707873][T12322] binfmt_misc: register: failed to install interpreter file ./file0 [ 248.719845][ T1009] Bluetooth: hci0: Frame reassembly failed (-84) [ 248.720783][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2957'. [ 248.805332][T12324] random: crng reseeded on system resumption [ 248.817619][T12324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2958'. [ 248.827035][T12324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2958'. [ 248.852596][T12324] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 248.900911][T12332] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.916184][T12332] loop1: detected capacity change from 0 to 128 [ 248.982556][T12337] netlink: 'syz.5.2964': attribute type 21 has an invalid length. [ 248.990933][T12337] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2964'. [ 249.000192][T12337] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2964'. [ 249.008635][T12339] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.017456][T12337] loop5: detected capacity change from 0 to 128 [ 249.018925][T12339] loop6: detected capacity change from 0 to 128 [ 249.028668][T12337] msdos: Unknown parameter '' [ 249.135945][T12349] random: crng reseeded on system resumption [ 249.306580][T12362] loop6: detected capacity change from 0 to 512 [ 249.313668][T12362] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 249.326059][T12362] EXT4-fs (loop6): 1 truncate cleaned up [ 249.332891][T12362] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.445915][ T5276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.484224][T12368] loop6: detected capacity change from 0 to 128 [ 249.493035][T12368] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 249.533663][T12370] netlink: 'syz.6.2976': attribute type 21 has an invalid length. [ 249.541806][T12370] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2976'. [ 249.551875][T12370] loop6: detected capacity change from 0 to 128 [ 249.558839][T12370] msdos: Unknown parameter '' [ 249.603519][T12375] loop6: detected capacity change from 0 to 128 [ 250.230244][T12393] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 250.345400][T12395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.345489][T12395] ext4 filesystem being mounted at /590/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.357614][ T1040] IPVS: starting estimator thread 0... [ 250.403838][T12401] FAULT_INJECTION: forcing a failure. [ 250.403838][T12401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.403871][T12401] CPU: 0 UID: 0 PID: 12401 Comm: syz.1.2985 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 250.403977][T12401] Tainted: [W]=WARN [ 250.403984][T12401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.403996][T12401] Call Trace: [ 250.404004][T12401] [ 250.404013][T12401] __dump_stack+0x1d/0x30 [ 250.404085][T12401] dump_stack_lvl+0xe8/0x140 [ 250.404135][T12401] dump_stack+0x15/0x1b [ 250.404157][T12401] should_fail_ex+0x265/0x280 [ 250.404184][T12401] should_fail+0xb/0x20 [ 250.404212][T12401] should_fail_usercopy+0x1a/0x20 [ 250.404238][T12401] _copy_from_user+0x1c/0xb0 [ 250.404292][T12401] do_handle_open+0x3da/0x710 [ 250.404333][T12401] __x64_sys_open_by_handle_at+0x44/0x50 [ 250.404430][T12401] x64_sys_call+0x2b6a/0x3000 [ 250.404458][T12401] do_syscall_64+0xd8/0x2c0 [ 250.404530][T12401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.404586][T12401] RIP: 0033:0x7f8d0e5ef749 [ 250.404604][T12401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.404625][T12401] RSP: 002b:00007f8d0d036038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 250.404648][T12401] RAX: ffffffffffffffda RBX: 00007f8d0e846090 RCX: 00007f8d0e5ef749 [ 250.404664][T12401] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007 [ 250.404814][T12401] RBP: 00007f8d0d036090 R08: 0000000000000000 R09: 0000000000000000 [ 250.404828][T12401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.404841][T12401] R13: 00007f8d0e846128 R14: 00007f8d0e846090 R15: 00007ffe4bb40148 [ 250.404861][T12401] [ 250.477355][T12399] IPVS: using max 2592 ests per chain, 129600 per kthread [ 250.772127][ T29] kauditd_printk_skb: 432 callbacks suppressed [ 250.772144][ T29] audit: type=1400 audit(1766155951.723:22563): avc: denied { append } for pid=12408 comm="syz.6.2989" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 250.773208][T12409] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 250.857815][T12413] netlink: 'syz.6.2991': attribute type 10 has an invalid length. [ 250.858020][ T29] audit: type=1400 audit(1766155951.798:22564): avc: denied { setopt } for pid=12412 comm="syz.6.2991" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 250.869995][ T29] audit: type=1400 audit(1766155951.817:22565): avc: denied { mounton } for pid=12412 comm="syz.6.2991" path="/503/file0" dev="tmpfs" ino=2739 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 250.912388][T12413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12413 comm=syz.6.2991 [ 250.918880][ T3758] Bluetooth: hci0: command 0x1003 tx timeout [ 250.926310][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 250.932019][ T29] audit: type=1400 audit(1766155951.854:22566): avc: denied { remount } for pid=12412 comm="syz.6.2991" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 251.049631][T12416] random: crng reseeded on system resumption [ 251.123417][ T29] audit: type=1326 audit(1766155952.050:22567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz.0.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2adcf749 code=0x7ffc0000 [ 251.123893][ T29] audit: type=1326 audit(1766155952.050:22568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz.0.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fdc2adcf749 code=0x7ffc0000 [ 251.170865][ T29] audit: type=1326 audit(1766155952.079:22569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz.0.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2adcf749 code=0x7ffc0000 [ 251.170934][ T29] audit: type=1326 audit(1766155952.079:22570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz.0.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2adcf749 code=0x7ffc0000 [ 251.261335][ T29] audit: type=1400 audit(1766155952.181:22571): avc: denied { mount } for pid=12427 comm="syz.0.2998" name="/" dev="configfs" ino=1218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 251.298727][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.323433][ T29] audit: type=1400 audit(1766155952.210:22572): avc: denied { create } for pid=12427 comm="syz.0.2998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 251.385055][T12434] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.534011][T12454] netlink: 'syz.2.3009': attribute type 1 has an invalid length. [ 252.551127][T12454] 8021q: adding VLAN 0 to HW filter on device bond3 [ 252.605279][T12463] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 252.684668][T12471] random: crng reseeded on system resumption [ 252.696951][T12471] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 252.701004][T12473] set_capacity_and_notify: 4 callbacks suppressed [ 252.701045][T12473] loop5: detected capacity change from 0 to 128 [ 252.754104][T12479] random: crng reseeded on system resumption [ 252.794946][T12484] loop5: detected capacity change from 0 to 128 [ 252.808253][T12475] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 252.826522][T12484] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 252.898738][T12489] loop2: detected capacity change from 0 to 128 [ 252.912271][T12489] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 253.054877][T12499] __nla_validate_parse: 6 callbacks suppressed [ 253.054915][T12499] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3029'. [ 253.090372][T12499] syz.5.3029: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 253.104981][T12499] CPU: 1 UID: 0 PID: 12499 Comm: syz.5.3029 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 253.105016][T12499] Tainted: [W]=WARN [ 253.105024][T12499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 253.105083][T12499] Call Trace: [ 253.105090][T12499] [ 253.105097][T12499] __dump_stack+0x1d/0x30 [ 253.105122][T12499] dump_stack_lvl+0xe8/0x140 [ 253.105147][T12499] dump_stack+0x15/0x1b [ 253.105173][T12499] warn_alloc+0x12b/0x1a0 [ 253.105261][T12499] ? _raw_spin_lock_irqsave+0x75/0xd0 [ 253.105296][T12499] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 253.105335][T12499] __vmalloc_node_range_noprof+0xa0/0x1310 [ 253.105388][T12499] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 253.105413][T12499] ? trace_save_cmdline+0x1e9/0x240 [ 253.105524][T12499] ? finish_task_switch+0x7a/0x2a0 [ 253.105586][T12499] ? should_fail_ex+0x30/0x280 [ 253.105614][T12499] ? should_failslab+0x8c/0xb0 [ 253.105644][T12499] vmalloc_user_noprof+0x7d/0xb0 [ 253.105678][T12499] ? xskq_create+0x80/0xe0 [ 253.105765][T12499] xskq_create+0x80/0xe0 [ 253.105783][T12499] xsk_init_queue+0x95/0xf0 [ 253.105813][T12499] xsk_setsockopt+0x3f5/0x640 [ 253.105866][T12499] ? __pfx_xsk_setsockopt+0x10/0x10 [ 253.105905][T12499] __sys_setsockopt+0x184/0x200 [ 253.105942][T12499] __x64_sys_setsockopt+0x64/0x80 [ 253.106020][T12499] x64_sys_call+0x21d5/0x3000 [ 253.106048][T12499] do_syscall_64+0xd8/0x2c0 [ 253.106091][T12499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.106118][T12499] RIP: 0033:0x7fa15599f749 [ 253.106135][T12499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.106200][T12499] RSP: 002b:00007fa154407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 253.106223][T12499] RAX: ffffffffffffffda RBX: 00007fa155bf5fa0 RCX: 00007fa15599f749 [ 253.106235][T12499] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 253.106251][T12499] RBP: 00007fa155a23f91 R08: 0000000000000004 R09: 0000000000000000 [ 253.106267][T12499] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.106283][T12499] R13: 00007fa155bf6038 R14: 00007fa155bf5fa0 R15: 00007ffc5aba3938 [ 253.106344][T12499] [ 253.327991][T12499] Mem-Info: [ 253.331133][T12499] active_anon:13070 inactive_anon:0 isolated_anon:0 [ 253.331133][T12499] active_file:27681 inactive_file:2819 isolated_file:0 [ 253.331133][T12499] unevictable:0 dirty:14 writeback:0 [ 253.331133][T12499] slab_reclaimable:3542 slab_unreclaimable:143840 [ 253.331133][T12499] mapped:32901 shmem:3593 pagetables:1612 [ 253.331133][T12499] sec_pagetables:0 bounce:0 [ 253.331133][T12499] kernel_misc_reclaimable:0 [ 253.331133][T12499] free:1676725 free_pcp:33793 free_cma:0 [ 253.376557][T12499] Node 0 active_anon:52280kB inactive_anon:0kB active_file:110724kB inactive_file:11276kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131604kB dirty:56kB writeback:0kB shmem:14372kB kernel_stack:4528kB pagetables:6448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 253.404260][T12499] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 253.434416][T12499] lowmem_reserve[]: 0 2880 7859 7859 [ 253.439817][T12499] Node 0 DMA32 free:2945968kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949496kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 253.471162][T12499] lowmem_reserve[]: 0 0 4978 4978 [ 253.476305][T12499] Node 0 Normal free:3745572kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52280kB inactive_anon:0kB active_file:110724kB inactive_file:11276kB unevictable:0kB writepending:172kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:131640kB local_pcp:39284kB free_cma:0kB [ 253.509716][T12499] lowmem_reserve[]: 0 0 0 0 [ 253.514284][T12499] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 253.527198][T12499] Node 0 DMA32: 6*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945968kB [ 253.543481][T12499] Node 0 Normal: 1691*4kB (UME) 923*8kB (UME) 319*16kB (UME) 206*32kB (UME) 176*64kB (UME) 48*128kB (UM) 8*256kB (UME) 9*512kB (UM) 7*1024kB (UME) 5*2048kB (UM) 898*4096kB (UM) = 3745524kB [ 253.562507][T12499] Node 0 hugepages_total=6 hugepages_free=5 hugepages_surp=2 hugepages_size=2048kB [ 253.571821][T12499] 34096 total pagecache pages [ 253.576525][T12499] 11 pages in swap cache [ 253.580782][T12499] Free swap = 124640kB [ 253.585036][T12499] Total swap = 124996kB [ 253.589320][T12499] 2097051 pages RAM [ 253.593160][T12499] 0 pages HighMem/MovableOnly [ 253.597861][T12499] 81277 pages reserved [ 253.846686][T12512] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.858843][T12512] loop1: detected capacity change from 0 to 128 [ 254.153898][T12527] tmpfs: Unknown parameter '' [ 254.241662][T12541] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.261456][T12541] loop5: detected capacity change from 0 to 128 [ 254.381095][T12554] loop6: detected capacity change from 0 to 128 [ 254.469221][T12556] loop5: detected capacity change from 0 to 1024 [ 254.489181][T12556] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 254.521468][T12556] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 254.526439][T12274] bond0 (unregistering): Released all slaves [ 254.530694][T12556] EXT4-fs (loop5): orphan cleanup on readonly fs [ 254.542877][T12556] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.3050: Freeing blocks not in datazone - block = 0, count = 4096 [ 254.551586][T12274] bond1 (unregistering): Released all slaves [ 254.561806][T12562] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 254.572446][T12556] EXT4-fs (loop5): 1 orphan inode deleted [ 254.572762][T12274] bond2 (unregistering): Released all slaves [ 254.578794][T12556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.594967][T12274] bond3 (unregistering): Released all slaves [ 254.623638][ T5054] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.781474][T12274] hsr_slave_0: left promiscuous mode [ 254.789613][T12274] hsr_slave_1: left promiscuous mode [ 254.853339][T12589] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 254.904103][T12525] chnl_net:caif_netlink_parms(): no params data found [ 254.993073][T12525] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.000290][T12525] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.016712][T12525] bridge_slave_0: entered allmulticast mode [ 255.020061][T12591] loop5: detected capacity change from 0 to 512 [ 255.032415][T12525] bridge_slave_0: entered promiscuous mode [ 255.079204][T12525] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.086543][T12525] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.127104][T12525] bridge_slave_1: entered allmulticast mode [ 255.137869][T12525] bridge_slave_1: entered promiscuous mode [ 255.164072][T12591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.198093][T12591] ext4 filesystem being mounted at /477/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 255.263283][T12525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.273684][T12525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.318187][T12525] team0: Port device team_slave_0 added [ 255.344808][T12274] IPVS: stop unused estimator thread 0... [ 255.398361][T12525] team0: Port device team_slave_1 added [ 255.422533][T12591] netlink: 204 bytes leftover after parsing attributes in process `syz.5.3057'. [ 255.495269][T12525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.502347][T12525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.528778][T12525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.637527][T12628] loop1: detected capacity change from 0 to 2048 [ 255.740910][ T5054] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.758004][T12628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 255.804613][T12525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.811789][T12525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.838281][T12525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.879573][T12525] hsr_slave_0: entered promiscuous mode [ 255.885843][T12525] hsr_slave_1: entered promiscuous mode [ 255.901386][T12628] netlink: 'syz.1.3063': attribute type 3 has an invalid length. [ 255.930330][T12525] debugfs: 'hsr0' already exists in 'hsr' [ 255.936576][T12525] Cannot create hsr debugfs directory [ 256.078522][T12630] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 256.104072][T12653] FAULT_INJECTION: forcing a failure. [ 256.104072][T12653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.117310][T12653] CPU: 1 UID: 0 PID: 12653 Comm: syz.6.3065 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 256.117345][T12653] Tainted: [W]=WARN [ 256.117351][T12653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 256.117370][T12653] Call Trace: [ 256.117378][T12653] [ 256.117388][T12653] __dump_stack+0x1d/0x30 [ 256.117419][T12653] dump_stack_lvl+0xe8/0x140 [ 256.117464][T12653] dump_stack+0x15/0x1b [ 256.117521][T12653] should_fail_ex+0x265/0x280 [ 256.117632][T12653] should_fail+0xb/0x20 [ 256.117658][T12653] should_fail_usercopy+0x1a/0x20 [ 256.117689][T12653] _copy_from_iter+0xcf/0xe70 [ 256.117716][T12653] ? __alloc_skb+0x3bb/0x4d0 [ 256.117792][T12653] ? __alloc_skb+0x24d/0x4d0 [ 256.117867][T12653] netlink_sendmsg+0x471/0x6b0 [ 256.117904][T12653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.118037][T12653] __sock_sendmsg+0x145/0x180 [ 256.118063][T12653] ____sys_sendmsg+0x31e/0x4a0 [ 256.118097][T12653] ___sys_sendmsg+0x17b/0x1d0 [ 256.118144][T12653] __x64_sys_sendmsg+0xd4/0x160 [ 256.118251][T12653] x64_sys_call+0x17ba/0x3000 [ 256.118282][T12653] do_syscall_64+0xd8/0x2c0 [ 256.118374][T12653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.118401][T12653] RIP: 0033:0x7f1a566df749 [ 256.118421][T12653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.118443][T12653] RSP: 002b:00007f1a55147038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.118518][T12653] RAX: ffffffffffffffda RBX: 00007f1a56935fa0 RCX: 00007f1a566df749 [ 256.118534][T12653] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 256.118549][T12653] RBP: 00007f1a55147090 R08: 0000000000000000 R09: 0000000000000000 [ 256.118613][T12653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.118629][T12653] R13: 00007f1a56936038 R14: 00007f1a56935fa0 R15: 00007fff86654378 [ 256.118648][T12653] [ 256.130721][T12630] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 586 with error 28 [ 256.131496][ T29] kauditd_printk_skb: 353 callbacks suppressed [ 256.131518][ T29] audit: type=1326 audit(1766155956.728:22926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12627 comm="syz.1.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8d0e5e65e7 code=0x7ffc0000 [ 256.135247][T12630] EXT4-fs (loop1): This should not happen!! Data will be lost [ 256.135247][T12630] [ 256.145327][ T29] audit: type=1326 audit(1766155956.728:22927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12627 comm="syz.1.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d0e58b829 code=0x7ffc0000 [ 256.148620][T12630] EXT4-fs (loop1): Total free blocks count 0 [ 256.151569][ T29] audit: type=1326 audit(1766155956.728:22928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12627 comm="syz.1.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0e5ef749 code=0x7ffc0000 [ 256.155902][T12630] EXT4-fs (loop1): Free/Dirty block details [ 256.216853][ T29] audit: type=1326 audit(1766155956.812:22929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12627 comm="syz.1.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8d0e5e65e7 code=0x7ffc0000 [ 256.217196][T12630] EXT4-fs (loop1): free_blocks=2415919104 [ 256.222144][ T29] audit: type=1326 audit(1766155956.812:22930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12627 comm="syz.1.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d0e58b829 code=0x7ffc0000 [ 256.226841][T12630] EXT4-fs (loop1): dirty_blocks=592 [ 256.226861][T12630] EXT4-fs (loop1): Block reservation details [ 256.231350][ T29] audit: type=1326 audit(1766155956.812:22931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12627 comm="syz.1.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0e5ef749 code=0x7ffc0000 [ 256.237260][T12630] EXT4-fs (loop1): i_reserved_data_blocks=37 [ 256.280349][ T29] audit: type=1326 audit(1766155956.850:22932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12627 comm="syz.1.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8d0e5e65e7 code=0x7ffc0000 [ 256.324571][ T1009] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 256.325933][ T29] audit: type=1326 audit(1766155956.850:22933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12627 comm="syz.1.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d0e58b829 code=0x7ffc0000 [ 256.581190][ T29] audit: type=1326 audit(1766155956.850:22934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12627 comm="syz.1.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0e5ef749 code=0x7ffc0000 [ 256.605609][ T29] audit: type=1326 audit(1766155956.868:22935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12627 comm="syz.1.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8d0e5e65e7 code=0x7ffc0000 [ 257.126763][T12525] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 257.174169][T12677] loop5: detected capacity change from 0 to 128 [ 257.194722][T12670] netlink: 'syz.1.3071': attribute type 21 has an invalid length. [ 257.228918][T12525] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 257.328509][T12673] msdos: Unknown parameter '' [ 257.364494][T12525] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 257.498921][T12670] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3071'. [ 257.508199][T12670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3071'. [ 257.560305][T12686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=12686 comm=syz.5.3073 [ 257.573085][T12686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=12686 comm=syz.5.3073 [ 257.585994][T12686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=12686 comm=syz.5.3073 [ 257.601583][T12525] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 257.678967][T12525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.704782][T12525] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.718287][T12700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3076'. [ 257.736860][T12264] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.744069][T12264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.768396][T12264] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.775504][T12264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.808106][T12525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.819131][T12704] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 257.869203][T12704] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.912927][T12525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.921399][T12704] ext4 filesystem being mounted at /522/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 258.042411][ T5276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.085645][T12525] veth0_vlan: entered promiscuous mode [ 258.102818][T12525] veth1_vlan: entered promiscuous mode [ 258.131807][T12525] veth0_macvtap: entered promiscuous mode [ 258.139831][T12525] veth1_macvtap: entered promiscuous mode [ 258.154636][T12525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.166858][T12525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.180204][T12264] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.202956][T12264] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.219954][T12264] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.230198][T12264] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.267703][T12754] set_capacity_and_notify: 2 callbacks suppressed [ 258.267723][T12754] loop2: detected capacity change from 0 to 128 [ 258.284248][T12754] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 258.319226][T12754] loop2: detected capacity change from 0 to 128 [ 258.330489][T12754] FAT-fs (loop2): bogus number of reserved sectors [ 258.337167][T12754] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 258.346671][T12754] FAT-fs (loop2): Can't find a valid FAT filesystem [ 277.732703][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 277.732720][ T29] audit: type=1326 audit(1766155976.945:23132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12766 comm="syz.0.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2adcf749 code=0x7ffc0000 [ 277.772249][ T29] audit: type=1326 audit(1766155976.973:23133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12766 comm="syz.0.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fdc2adcf749 code=0x7ffc0000 [ 277.796344][ T29] audit: type=1326 audit(1766155976.973:23134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12766 comm="syz.0.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2adcf749 code=0x7ffc0000 [ 277.810397][T12776] xt_CT: You must specify a L4 protocol and not use inversions on it [ 277.820111][ T29] audit: type=1400 audit(1766155977.001:23135): avc: denied { create } for pid=12773 comm="syz.2.3080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 277.848060][ T29] audit: type=1400 audit(1766155977.001:23136): avc: denied { setopt } for pid=12773 comm="syz.2.3080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 277.855240][T12774] loop2: detected capacity change from 0 to 2048 [ 277.868114][ T29] audit: type=1400 audit(1766155977.001:23137): avc: denied { write } for pid=12773 comm="syz.2.3080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 277.875334][T12777] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 277.914238][ T29] audit: type=1400 audit(1766155977.113:23138): avc: denied { mounton } for pid=12778 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 277.961089][T12774] EXT4-fs (loop2): failed to initialize system zone (-117) [ 277.968638][T12774] EXT4-fs (loop2): mount failed [ 277.980608][ T29] audit: type=1326 audit(1766155977.179:23139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12775 comm="syz.0.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2adcf749 code=0x7ffc0000 [ 278.004521][ T29] audit: type=1326 audit(1766155977.179:23140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12775 comm="syz.0.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2adcf749 code=0x7ffc0000 [ 278.028322][ T29] audit: type=1326 audit(1766155977.179:23141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12775 comm="syz.0.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdc2adcf749 code=0x7ffc0000 [ 278.174689][T12796] netlink: 'syz.5.3086': attribute type 10 has an invalid length. [ 278.182669][T12796] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3086'. [ 278.207392][T12796] loop5: detected capacity change from 0 to 1024 [ 278.224290][T12796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=768 sclass=netlink_route_socket pid=12796 comm=syz.5.3086 [ 278.271081][T12802] openvswitch: netlink: Missing key (keys=40, expected=80) [ 278.327116][T12802] IPVS: Unknown mcast interface: hsr0 [ 278.436421][T12813] loop5: detected capacity change from 0 to 128 [ 278.447509][T12270] bond0 (unregistering): Released all slaves [ 278.486755][T12778] chnl_net:caif_netlink_parms(): no params data found [ 278.528590][T12817] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3090'. [ 278.617861][T12832] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 278.656303][T12834] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3092'. [ 278.745129][T12843] random: crng reseeded on system resumption [ 278.778240][T12845] loop2: detected capacity change from 0 to 128 [ 278.787472][T12845] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 278.798337][T12778] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.805698][T12778] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.815378][T12778] bridge_slave_0: entered allmulticast mode [ 278.833625][T12778] bridge_slave_0: entered promiscuous mode [ 278.840521][T12846] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 278.858990][T12843] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3094'. [ 278.868072][T12843] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3094'. [ 278.889682][T12778] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.896939][T12778] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.904942][T12778] bridge_slave_1: entered allmulticast mode [ 278.931855][T12778] bridge_slave_1: entered promiscuous mode [ 278.964510][T12852] openvswitch: netlink: Missing key (keys=40, expected=80) [ 279.021062][T12778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.031901][T12858] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 279.042437][T12852] IPVS: stopping master sync thread 12858 ... [ 279.060280][T12778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.141025][T12870] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3103'. [ 279.154096][T12270] IPVS: stop unused estimator thread 0... [ 279.164196][T12778] team0: Port device team_slave_0 added [ 279.183221][T12778] team0: Port device team_slave_1 added [ 279.226113][T12778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.233202][T12778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.259324][T12778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.273684][T12778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.280722][T12778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.306679][T12778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.353684][T12778] hsr_slave_0: entered promiscuous mode [ 279.358858][T12889] tmpfs: Unknown parameter '' [ 279.360214][T12778] hsr_slave_1: entered promiscuous mode [ 279.370201][T12778] debugfs: 'hsr0' already exists in 'hsr' [ 279.375953][T12778] Cannot create hsr debugfs directory [ 279.398849][T12892] tmpfs: Unknown parameter '' [ 280.127444][T12924] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3113'. [ 280.137047][T12907] 9p: Could not find request transport: r [ 280.208307][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3115'. [ 280.249277][T12946] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 280.301553][T12778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 280.311017][T12950] tmpfs: Unknown parameter '' [ 280.315223][T12778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 280.331335][T12778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 280.391450][T12778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 280.408809][T12953] tmpfs: Unknown parameter '' [ 280.443398][T12778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.443806][T12965] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 280.456607][T12778] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.469382][T12267] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.476575][T12267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.500939][T12778] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 280.511514][T12778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.546447][T12267] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.553612][T12267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.563094][T12970] loop6: detected capacity change from 0 to 128 [ 280.615647][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3124'. [ 280.645373][T12987] random: crng reseeded on system resumption [ 280.682737][T12991] xt_CT: You must specify a L4 protocol and not use inversions on it [ 280.712023][T12991] loop6: detected capacity change from 0 to 128 [ 280.721491][T12997] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 280.759701][T12987] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3125'. [ 280.792420][T13003] tmpfs: Unknown parameter '' [ 280.799848][T12778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.999831][T13038] random: crng reseeded on system resumption [ 281.024765][T12778] veth0_vlan: entered promiscuous mode [ 281.047195][T13044] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.063746][T12778] veth1_vlan: entered promiscuous mode [ 281.072097][T13044] loop6: detected capacity change from 0 to 128 [ 281.123091][T12778] veth0_macvtap: entered promiscuous mode [ 281.130619][T12778] veth1_macvtap: entered promiscuous mode [ 281.148954][T12778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.179669][T12778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.242102][T12267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.264358][T12267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.294252][T12267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.313242][T12267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.387321][T13066] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.453319][T13070] loop5: detected capacity change from 0 to 4096 [ 281.465210][T13070] EXT4-fs: Ignoring removed nomblk_io_submit option [ 281.478382][T13070] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.524815][ T5054] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.698334][T13099] random: crng reseeded on system resumption [ 281.711174][T13099] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 281.973954][T13112] loop2: detected capacity change from 0 to 4096 [ 281.987345][T13112] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.023075][T13112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.068878][T12525] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.112004][T13121] random: crng reseeded on system resumption [ 282.134287][T13121] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 282.217771][T13127] loop2: detected capacity change from 0 to 4096 [ 282.226324][T13127] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.239382][T13127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.252129][T13136] wg2: entered promiscuous mode [ 282.257310][T13136] wg2: entered allmulticast mode [ 282.279980][T12525] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.386329][T13149] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.416746][T13149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.417677][T13158] FAULT_INJECTION: forcing a failure. [ 282.417677][T13158] name failslab, interval 1, probability 0, space 0, times 0 [ 282.441995][T13158] CPU: 1 UID: 0 PID: 13158 Comm: syz.2.3172 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 282.442033][T13158] Tainted: [W]=WARN [ 282.442041][T13158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 282.442055][T13158] Call Trace: [ 282.442064][T13158] [ 282.442073][T13158] __dump_stack+0x1d/0x30 [ 282.442140][T13158] dump_stack_lvl+0xe8/0x140 [ 282.442179][T13158] dump_stack+0x15/0x1b [ 282.442209][T13158] should_fail_ex+0x265/0x280 [ 282.442237][T13158] should_failslab+0x8c/0xb0 [ 282.442264][T13158] __kmalloc_cache_noprof+0x65/0x4c0 [ 282.442324][T13158] ? nd_alloc_stack+0x50/0xa0 [ 282.442352][T13158] nd_alloc_stack+0x50/0xa0 [ 282.442381][T13158] pick_link+0x82f/0x8d0 [ 282.442412][T13158] step_into_slowpath+0x351/0x480 [ 282.442459][T13158] link_path_walk+0x974/0xe30 [ 282.442485][T13158] path_lookupat+0x8c/0x500 [ 282.442514][T13158] ? path_openat+0x1d88/0x23b0 [ 282.442563][T13158] filename_lookup+0x147/0x340 [ 282.442603][T13158] ? __pfx_shmem_put_link+0x10/0x10 [ 282.442616][T13158] ? __pfx_shmem_put_link+0x10/0x10 [ 282.442688][T13158] filename_getxattr+0x54/0x180 [ 282.442708][T13158] __x64_sys_getxattr+0x112/0x140 [ 282.442778][T13158] x64_sys_call+0x27d9/0x3000 [ 282.442795][T13158] do_syscall_64+0xd8/0x2c0 [ 282.442818][T13158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.442834][T13158] RIP: 0033:0x7f90e878f749 [ 282.442846][T13158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.442865][T13158] RSP: 002b:00007f90e71ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 282.442880][T13158] RAX: ffffffffffffffda RBX: 00007f90e89e5fa0 RCX: 00007f90e878f749 [ 282.442889][T13158] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000003040 [ 282.442898][T13158] RBP: 00007f90e71ef090 R08: 0000000000000000 R09: 0000000000000000 [ 282.442965][T13158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.442974][T13158] R13: 00007f90e89e6038 R14: 00007f90e89e5fa0 R15: 00007ffdce60a928 [ 282.442986][T13158] [ 282.722230][T13160] random: crng reseeded on system resumption [ 282.736295][T13160] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 282.747420][T12778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.789169][T13173] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 282.822101][T13175] random: crng reseeded on system resumption [ 282.881189][T13183] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 282.912165][T13183] FAT-fs (loop2): bogus number of reserved sectors [ 282.918934][T13183] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 282.928375][T13183] FAT-fs (loop2): Can't find a valid FAT filesystem [ 283.209208][T13190] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.221910][T13190] ext4 filesystem being mounted at /527/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.015581][ T5054] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.235346][T13198] set_capacity_and_notify: 4 callbacks suppressed [ 284.235364][T13198] loop5: detected capacity change from 0 to 512 [ 284.263318][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 284.263410][ T29] audit: type=1326 audit(1766155983.054:23491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15599f749 code=0x7ffc0000 [ 284.590106][T13204] loop5: detected capacity change from 0 to 4096 [ 284.602570][T13208] netlink: 'syz.2.3190': attribute type 10 has an invalid length. [ 284.610471][T13208] __nla_validate_parse: 17 callbacks suppressed [ 284.610490][T13208] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3190'. [ 284.650117][T13204] EXT4-fs: Ignoring removed nomblk_io_submit option [ 284.708565][T13204] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.736448][ T29] audit: type=1326 audit(1766155983.100:23492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa15599f749 code=0x7ffc0000 [ 284.760260][ T29] audit: type=1326 audit(1766155983.100:23493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15599f749 code=0x7ffc0000 [ 284.784507][ T29] audit: type=1326 audit(1766155983.100:23494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15599f749 code=0x7ffc0000 [ 284.808785][ T29] audit: type=1326 audit(1766155983.100:23495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa15599f749 code=0x7ffc0000 [ 284.832523][ T29] audit: type=1326 audit(1766155983.100:23496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15599f749 code=0x7ffc0000 [ 284.856293][ T29] audit: type=1326 audit(1766155983.100:23497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15599f749 code=0x7ffc0000 [ 284.880104][ T29] audit: type=1326 audit(1766155983.100:23498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa15599f749 code=0x7ffc0000 [ 284.903992][ T29] audit: type=1326 audit(1766155983.100:23499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15599f749 code=0x7ffc0000 [ 284.928158][ T29] audit: type=1326 audit(1766155983.100:23500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15599f749 code=0x7ffc0000 [ 284.939079][T13213] loop2: detected capacity change from 0 to 1024 [ 284.977688][ T5054] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.990950][T13219] loop1: detected capacity change from 0 to 128 [ 285.021141][T13219] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 285.051874][T13219] loop1: detected capacity change from 0 to 128 [ 285.062554][T13219] FAT-fs (loop1): bogus number of reserved sectors [ 285.069159][T13219] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 285.078733][T13219] FAT-fs (loop1): Can't find a valid FAT filesystem [ 285.132556][T13227] 9p: Bad value for 'wfdno' [ 285.154835][T13231] random: crng reseeded on system resumption [ 285.166848][T13232] netlink: 'syz.1.3200': attribute type 10 has an invalid length. [ 285.178899][T13232] team0: Port device dummy0 added [ 285.188908][T13232] netlink: 'syz.1.3200': attribute type 10 has an invalid length. [ 285.200485][T13232] team0: Port device dummy0 removed [ 285.203564][T13234] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 285.208381][T13232] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 285.212260][T13234] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 285.228674][T13234] vhci_hcd vhci_hcd.0: Device attached [ 285.239729][T13235] vhci_hcd: connection closed [ 285.239943][T12267] vhci_hcd vhci_hcd.0: stop threads [ 285.249893][T12267] vhci_hcd vhci_hcd.0: release socket [ 285.255280][T12267] vhci_hcd vhci_hcd.0: disconnect device [ 285.826657][T13248] 9p: Bad value for 'wfdno' [ 285.875616][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3206'. [ 285.884717][T13250] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3206'. [ 285.896997][T13250] geneve2: entered promiscuous mode [ 285.902452][T13250] geneve2: entered allmulticast mode [ 286.070388][T13260] loop2: detected capacity change from 0 to 128 [ 286.115118][T13260] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 286.285323][T13264] loop1: detected capacity change from 0 to 128 [ 286.314582][T13261] program syz.5.3208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.328773][T13258] loop2: detected capacity change from 0 to 128 [ 286.381093][T13258] FAT-fs (loop2): bogus number of reserved sectors [ 286.387700][T13258] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 286.397253][T13258] FAT-fs (loop2): Can't find a valid FAT filesystem [ 286.497036][T13262] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 286.550620][T13268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=13268 comm=syz.1.3212 [ 286.563549][T13268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=13268 comm=syz.1.3212 [ 286.576436][T13268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=13268 comm=syz.1.3212 [ 286.588664][T13261] loop5: detected capacity change from 0 to 512 [ 286.686927][T13274] loop1: detected capacity change from 0 to 4096 [ 286.695955][T13274] EXT4-fs: Ignoring removed nomblk_io_submit option [ 286.802665][T13274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.922049][T13286] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 287.000417][T13289] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in; [ 287.000417][T13289] program syz.2.3220 not setting count and/or reply_len properly [ 287.039081][T12778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.586039][T13300] bridge_slave_0: left allmulticast mode [ 287.591857][T13300] bridge_slave_0: left promiscuous mode [ 287.597606][T13300] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.622327][T13300] bridge_slave_1: left allmulticast mode [ 287.628042][T13300] bridge_slave_1: left promiscuous mode [ 287.633862][T13300] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.644276][T13300] bond0: (slave bond_slave_0): Releasing backup interface [ 287.654848][T13300] bond0: (slave bond_slave_1): Releasing backup interface [ 287.670614][T13300] team0: Port device team_slave_0 removed [ 287.686244][T13300] team0: Port device team_slave_1 removed [ 287.703113][T13300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.710624][T13300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.728999][T13300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.729075][T13311] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 287.736443][T13300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.782406][T13300] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 287.820133][T13306] bond0: (slave dummy0): Releasing backup interface [ 287.842816][T13306] bridge_slave_0: left allmulticast mode [ 287.848556][T13306] bridge_slave_0: left promiscuous mode [ 287.854257][T13306] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.887157][T13306] bridge_slave_1: left allmulticast mode [ 287.892892][T13306] bridge_slave_1: left promiscuous mode [ 287.894626][T13314] EXT4-fs: inline encryption not supported [ 287.898819][T13306] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.927424][T13318] xt_CT: You must specify a L4 protocol and not use inversions on it [ 287.956449][T13306] bond0: (slave bond_slave_0): Releasing backup interface [ 287.970421][T13306] bond0: (slave bond_slave_1): Releasing backup interface [ 287.983979][T13314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.997633][T13306] team0: Port device team_slave_0 removed [ 288.011913][T13306] team0: Port device team_slave_1 removed [ 288.027312][T13306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.034808][T13306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.056603][T13322] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 288.071541][T13306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.078984][T13306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.121051][T13306] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 288.184419][T12525] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.334796][T13342] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3240'. [ 288.388850][T13340] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 288.446852][T13349] xt_CT: You must specify a L4 protocol and not use inversions on it [ 288.506768][T13352] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 288.532662][T13352] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3244: Invalid block bitmap block 0 in block_group 0 [ 288.550072][T13352] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.3244: Failed to acquire dquot type 0 [ 288.562703][T13352] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.3244: Freeing blocks not in datazone - block = 0, count = 4096 [ 288.576377][T13352] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.3244: Invalid inode bitmap blk 0 in block_group 0 [ 288.589210][ T1009] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 0 [ 288.601456][T13352] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 288.610239][T13352] EXT4-fs (loop1): 1 orphan inode deleted [ 288.616828][T13352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.622576][T13359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 288.641315][T13359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.641330][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3244'. [ 288.662846][T13352] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3244'. [ 288.682411][T13352] bridge1: entered promiscuous mode [ 288.687836][T13352] bridge1: entered allmulticast mode [ 288.694277][T12525] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.733726][T13352] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3244: Invalid block bitmap block 25769803776 in block_group 0 [ 288.762663][T12778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.798977][T13371] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 288.874869][T13380] xt_CT: You must specify a L4 protocol and not use inversions on it [ 288.918262][T13384] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 288.927740][T13381] IPVS: stopping master sync thread 13384 ... [ 289.052089][T13397] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 289.148278][T13407] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3268'. [ 289.157476][T13407] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3268'. [ 289.183782][T13407] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3268'. [ 289.192848][T13407] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3268'. [ 289.259780][T13420] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 289.275616][T13411] IPVS: stopping master sync thread 13420 ... [ 289.314283][T13427] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 289.465987][T13451] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.635274][T13471] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 289.639424][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 289.639443][ T29] audit: type=1326 audit(1766155988.087:23894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.1.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b074f749 code=0x7ffc0000 [ 289.677205][ T29] audit: type=1326 audit(1766155988.124:23895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.1.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9b074f749 code=0x7ffc0000 [ 289.701466][ T29] audit: type=1326 audit(1766155988.124:23896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.1.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b074f749 code=0x7ffc0000 [ 289.725075][ T29] audit: type=1326 audit(1766155988.124:23897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.1.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd9b074f749 code=0x7ffc0000 [ 289.748859][ T29] audit: type=1326 audit(1766155988.124:23898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.1.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b074f749 code=0x7ffc0000 [ 289.773092][ T29] audit: type=1326 audit(1766155988.124:23899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.1.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd9b074f749 code=0x7ffc0000 [ 289.796803][ T29] audit: type=1326 audit(1766155988.124:23900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.1.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b074f749 code=0x7ffc0000 [ 289.820430][ T29] audit: type=1326 audit(1766155988.124:23901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.1.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b074f749 code=0x7ffc0000 [ 289.896587][ T29] audit: type=1326 audit(1766155988.124:23902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13464 comm="syz.2.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90e878f749 code=0x7ffc0000 [ 289.920338][ T29] audit: type=1326 audit(1766155988.124:23903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13464 comm="syz.2.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f90e878f749 code=0x7ffc0000 [ 290.150232][T13497] __nla_validate_parse: 9 callbacks suppressed [ 290.150251][T13497] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3303'. [ 290.165519][T13497] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3303'. [ 290.190417][T13479] set_capacity_and_notify: 9 callbacks suppressed [ 290.190438][T13479] loop6: detected capacity change from 0 to 1024 [ 290.209929][T13479] EXT4-fs: Ignoring removed bh option [ 290.234089][T13479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.235077][T13497] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3303'. [ 290.256233][T13497] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3303'. [ 290.289440][T13497] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3303'. [ 290.298792][T13497] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3303'. [ 290.334060][T13509] loop1: detected capacity change from 0 to 128 [ 290.350677][T13509] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 290.395038][T13509] loop1: detected capacity change from 0 to 128 [ 290.416524][T13509] FAT-fs (loop1): bogus number of reserved sectors [ 290.423134][T13509] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 290.432534][T13509] FAT-fs (loop1): Can't find a valid FAT filesystem [ 290.464985][T13515] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3308'. [ 290.675962][T13530] loop2: detected capacity change from 0 to 4096 [ 290.714605][T13530] EXT4-fs: Ignoring removed nomblk_io_submit option [ 290.732482][T13530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.794470][T12525] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.825388][T13541] xt_CT: You must specify a L4 protocol and not use inversions on it [ 290.836453][T13541] loop2: detected capacity change from 0 to 128 [ 290.889753][ T5276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.007342][T13546] FAULT_INJECTION: forcing a failure. [ 291.007342][T13546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.020650][T13546] CPU: 0 UID: 0 PID: 13546 Comm: syz.5.3320 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 291.020707][T13546] Tainted: [W]=WARN [ 291.020716][T13546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 291.020770][T13546] Call Trace: [ 291.020777][T13546] [ 291.020785][T13546] __dump_stack+0x1d/0x30 [ 291.020889][T13546] dump_stack_lvl+0xe8/0x140 [ 291.020914][T13546] dump_stack+0x15/0x1b [ 291.020938][T13546] should_fail_ex+0x265/0x280 [ 291.020968][T13546] should_fail+0xb/0x20 [ 291.021009][T13546] should_fail_usercopy+0x1a/0x20 [ 291.021033][T13546] _copy_to_user+0x20/0xa0 [ 291.021062][T13546] simple_read_from_buffer+0xb5/0x130 [ 291.021090][T13546] proc_fail_nth_read+0x10e/0x150 [ 291.021182][T13546] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 291.021212][T13546] vfs_read+0x1a8/0x770 [ 291.021232][T13546] ? __rcu_read_unlock+0x4f/0x70 [ 291.021257][T13546] ? __fget_files+0x184/0x1c0 [ 291.021285][T13546] ? mutex_lock+0x58/0x90 [ 291.021347][T13546] ksys_read+0xda/0x1a0 [ 291.021366][T13546] __x64_sys_read+0x40/0x50 [ 291.021395][T13546] x64_sys_call+0x2889/0x3000 [ 291.021419][T13546] do_syscall_64+0xd8/0x2c0 [ 291.021490][T13546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.021512][T13546] RIP: 0033:0x7fa15599e15c [ 291.021529][T13546] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 291.021553][T13546] RSP: 002b:00007fa1543c5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 291.021578][T13546] RAX: ffffffffffffffda RBX: 00007fa155bf6180 RCX: 00007fa15599e15c [ 291.021605][T13546] RDX: 000000000000000f RSI: 00007fa1543c50a0 RDI: 0000000000000005 [ 291.021620][T13546] RBP: 00007fa1543c5090 R08: 0000000000000000 R09: 0000000000000000 [ 291.021634][T13546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.021646][T13546] R13: 00007fa155bf6218 R14: 00007fa155bf6180 R15: 00007ffc5aba3938 [ 291.021665][T13546] [ 291.249091][T13553] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 291.293364][T13560] xt_CT: You must specify a L4 protocol and not use inversions on it [ 291.304468][T13560] loop6: detected capacity change from 0 to 128 [ 291.442039][T13564] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 291.517897][T13566] loop1: detected capacity change from 0 to 4096 [ 291.557108][T13566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 291.629489][T13566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.761355][T12778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.383957][T13585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=13585 comm=syz.6.3335 [ 292.396874][T13585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=13585 comm=syz.6.3335 [ 292.409712][T13585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=13585 comm=syz.6.3335 [ 292.462130][T13587] loop2: detected capacity change from 0 to 4096 [ 292.487811][T13587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.542544][T13592] netlink: 'syz.5.3337': attribute type 1 has an invalid length. [ 292.550472][T13592] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3337'. [ 292.641794][T13599] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 292.652550][T13587] SELinux: failed to load policy [ 292.689945][T13587] program syz.2.3336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.711660][T12525] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.853551][T13608] random: crng reseeded on system resumption [ 292.886225][T13608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3344'. [ 292.895652][T13608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3344'. [ 292.919407][T13608] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 292.976258][T13614] netlink: 'syz.2.3347': attribute type 10 has an invalid length. [ 292.985408][T13609] ip6gretap1: entered allmulticast mode [ 293.068612][T13614] loop2: detected capacity change from 0 to 1024 [ 293.119528][T13614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=768 sclass=netlink_route_socket pid=13614 comm=syz.2.3347 [ 293.151813][T13625] loop2: detected capacity change from 0 to 128 [ 293.162468][T13625] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 294.241008][T13649] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 294.281593][T13653] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 294.294326][T13652] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 294.349015][T13649] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3359: Invalid block bitmap block 0 in block_group 0 [ 294.417296][T13649] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.3359: Failed to acquire dquot type 0 [ 294.485057][T13649] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.3359: Freeing blocks not in datazone - block = 0, count = 4096 [ 294.485316][T13649] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3359: Invalid inode bitmap blk 0 in block_group 0 [ 294.485559][T13649] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 294.485660][T13649] EXT4-fs (loop2): 1 orphan inode deleted [ 294.486275][T13649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.515813][T12275] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:29: Failed to release dquot type 0 [ 294.674547][T12525] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.759982][T13669] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 294.834837][T13673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=13673 comm=syz.1.3366 [ 294.834868][T13673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=13673 comm=syz.1.3366 [ 294.834891][T13673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=13673 comm=syz.1.3366 [ 294.881769][T13672] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.980693][T13683] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.989718][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 294.989836][ T29] audit: type=1400 audit(1766155993.092:24312): avc: denied { mount } for pid=13682 comm="syz.1.3370" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 295.003291][ T29] audit: type=1326 audit(1766155993.101:24313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13682 comm="syz.1.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b074f749 code=0x7ffc0000 [ 295.003618][ T29] audit: type=1326 audit(1766155993.101:24314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13682 comm="syz.1.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd9b074f749 code=0x7ffc0000 [ 295.003776][ T29] audit: type=1326 audit(1766155993.101:24315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13682 comm="syz.1.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b074f749 code=0x7ffc0000 [ 295.003883][ T29] audit: type=1326 audit(1766155993.101:24316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13682 comm="syz.1.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fd9b074f749 code=0x7ffc0000 [ 295.005019][ T29] audit: type=1326 audit(1766155993.101:24317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13682 comm="syz.1.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b074f749 code=0x7ffc0000 [ 295.037469][ T5276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.039639][ T29] audit: type=1400 audit(1766155993.129:24318): avc: denied { unmount } for pid=12778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 295.251935][ T29] audit: type=1400 audit(1766155993.335:24319): avc: denied { read write } for pid=13691 comm="syz.6.3374" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 295.251978][ T29] audit: type=1400 audit(1766155993.335:24320): avc: denied { ioctl open } for pid=13691 comm="syz.6.3374" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 295.251987][T13692] random: crng reseeded on system resumption [ 295.258762][T13692] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 295.259293][ T29] audit: type=1400 audit(1766155993.344:24321): avc: denied { append } for pid=13691 comm="syz.6.3374" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 295.858790][T13707] set_capacity_and_notify: 5 callbacks suppressed [ 295.858810][T13707] loop5: detected capacity change from 0 to 128 [ 295.883589][T13709] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 295.940008][T13711] netlink: 'syz.2.3382': attribute type 10 has an invalid length. [ 295.947906][T13711] __nla_validate_parse: 5 callbacks suppressed [ 295.947923][T13711] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3382'. [ 295.974700][T13707] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 296.005202][T13711] loop2: detected capacity change from 0 to 1024 [ 296.017380][T13711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13711 comm=syz.2.3382 [ 296.092896][T13717] random: crng reseeded on system resumption [ 296.122735][T13717] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3386'. [ 296.131891][T13717] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3386'. [ 296.146072][T13717] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 296.178659][T13725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3389'. [ 296.187991][T13725] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 296.200299][T13725] loop5: detected capacity change from 0 to 128 [ 296.310194][T13730] loop1: detected capacity change from 0 to 128 [ 296.525459][T13745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=13745 comm=syz.1.3398 [ 296.538434][T13745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=13745 comm=syz.1.3398 [ 296.748593][T13762] loop5: detected capacity change from 0 to 128 [ 296.823024][T13769] netlink: 'syz.5.3407': attribute type 10 has an invalid length. [ 296.831029][T13769] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3407'. [ 296.844287][T13769] loop5: detected capacity change from 0 to 1024 [ 296.905098][T13775] netlink: 19 bytes leftover after parsing attributes in process `syz.5.3410'. [ 296.970653][T13782] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 297.100105][T13799] netlink: 'syz.0.3420': attribute type 10 has an invalid length. [ 297.108051][T13799] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3420'. [ 297.389822][T13827] random: crng reseeded on system resumption [ 297.400671][T13827] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3434'. [ 297.409993][T13827] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3434'. [ 297.422456][T13827] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 297.648960][T13857] random: crng reseeded on system resumption [ 297.660310][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3449'. [ 297.673910][T13857] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 297.695719][T13859] xt_connbytes: Forcing CT accounting to be enabled [ 297.810421][T13870] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 298.015365][T13884] random: crng reseeded on system resumption [ 298.031730][T13883] loop5: detected capacity change from 0 to 2048 [ 298.058915][T13883] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.132674][ T5054] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.174539][T13890] 9pnet_fd: Insufficient options for proto=fd [ 298.859566][T13905] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 298.876473][T13907] loop1: detected capacity change from 0 to 128 [ 298.887068][T13907] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 298.950894][T13911] loop1: detected capacity change from 0 to 128 [ 298.999728][T13914] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.026411][T13914] loop2: detected capacity change from 0 to 128 [ 299.196378][T13934] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 299.232906][T13936] netlink: 'syz.1.3481': attribute type 1 has an invalid length. [ 299.384083][T13949] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.430989][T13954] random: crng reseeded on system resumption [ 299.442347][T13954] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 299.443315][T13956] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.534202][T13947] lo speed is unknown, defaulting to 1000 [ 299.600304][T13947] lo speed is unknown, defaulting to 1000 [ 299.605350][T13973] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.614889][T13972] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 299.637178][T13972] FAT-fs (loop1): bogus number of reserved sectors [ 299.643737][T13972] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 299.653150][T13972] FAT-fs (loop1): Can't find a valid FAT filesystem [ 299.666106][T13967] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 299.675302][T13947] lo speed is unknown, defaulting to 1000 [ 299.708257][T13947] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 299.720889][T13981] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.731576][T13967] FAT-fs (loop5): bogus number of reserved sectors [ 299.738315][T13967] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 299.747810][T13967] FAT-fs (loop5): Can't find a valid FAT filesystem [ 299.796537][T13947] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 299.808495][T13985] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 299.891259][T13996] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.957686][T13947] lo speed is unknown, defaulting to 1000 [ 300.007625][T14004] EXT4-fs: Ignoring removed nomblk_io_submit option [ 300.021191][T13947] lo speed is unknown, defaulting to 1000 [ 300.038329][T13947] lo speed is unknown, defaulting to 1000 [ 300.051270][T14004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.121198][T13947] lo speed is unknown, defaulting to 1000 [ 300.127540][T13947] lo speed is unknown, defaulting to 1000 [ 300.134121][T13947] lo speed is unknown, defaulting to 1000 [ 300.140664][T13947] lo speed is unknown, defaulting to 1000 [ 300.205804][T14014] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 300.224032][ T5054] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.340159][T14011] lo speed is unknown, defaulting to 1000 [ 300.346598][ T29] kauditd_printk_skb: 727 callbacks suppressed [ 300.346616][ T29] audit: type=1400 audit(1766155998.087:25047): avc: denied { unmount } for pid=5054 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 300.372892][ T29] audit: type=1326 audit(1766155998.106:25048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13982 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90e87c2005 code=0x7ffc0000 [ 300.421511][ T29] audit: type=1326 audit(1766155998.106:25049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13982 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90e87c2005 code=0x7ffc0000 [ 300.445484][ T29] audit: type=1326 audit(1766155998.106:25050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13982 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90e87c2005 code=0x7ffc0000 [ 300.469489][ T29] audit: type=1400 audit(1766155998.106:25051): avc: denied { setopt } for pid=14020 comm="syz.6.3516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 300.489201][ T29] audit: type=1326 audit(1766155998.106:25052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13982 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90e87c2005 code=0x7ffc0000 [ 300.513428][ T29] audit: type=1326 audit(1766155998.106:25053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13982 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90e87c2005 code=0x7ffc0000 [ 300.537366][ T29] audit: type=1326 audit(1766155998.106:25054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13982 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90e87c2005 code=0x7ffc0000 [ 300.561563][ T29] audit: type=1326 audit(1766155998.115:25055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13982 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90e87c2005 code=0x7ffc0000 [ 300.585194][ T29] audit: type=1326 audit(1766155998.115:25056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13982 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90e87c2005 code=0x7ffc0000 [ 300.971950][T14036] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 301.105732][T14046] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 301.315510][T14062] set_capacity_and_notify: 7 callbacks suppressed [ 301.315531][T14062] loop6: detected capacity change from 0 to 512 [ 301.343603][T14062] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 301.355944][T14062] EXT4-fs (loop6): 1 truncate cleaned up [ 301.362972][T14062] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.379472][T14061] tipc: Started in network mode [ 301.379650][T14064] loop1: detected capacity change from 0 to 4096 [ 301.384461][T14061] tipc: Node identity , cluster identity 4711 [ 301.396001][T14064] EXT4-fs: Ignoring removed nomblk_io_submit option [ 301.397160][T14061] tipc: Failed to obtain node identity [ 301.397174][T14061] tipc: Enabling of bearer rejected, failed to enable media [ 301.397537][T14062] netlink: 'syz.6.3532': attribute type 1 has an invalid length. [ 301.416226][T14061] netlink: 'syz.6.3532': attribute type 1 has an invalid length. [ 301.435484][T14064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.461851][T14061] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 301.471155][T14061] bond1: (slave batadv1): making interface the new active one [ 301.479388][T12778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.489856][T14061] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 301.498819][T14061] __nla_validate_parse: 9 callbacks suppressed [ 301.498837][T14061] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3532'. [ 301.515766][T14061] bond1 (unregistering): (slave batadv1): Releasing active interface [ 301.524980][T14061] bond1 (unregistering): Released all slaves [ 301.627587][ T5276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.631765][T14073] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 301.712748][T14077] loop6: detected capacity change from 0 to 1024 [ 301.728657][T14077] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 301.739464][T14081] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 301.774298][T14083] SELinux: Context system_u:object_r:adjtime_t:s0 is not valid (left unmapped). [ 301.795587][T14077] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3537: Invalid block bitmap block 0 in block_group 0 [ 301.823159][T14086] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 301.837060][T14083] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 301.849496][T14083] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 301.863642][T14077] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.3537: Failed to acquire dquot type 0 [ 301.887677][T14077] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.3537: Freeing blocks not in datazone - block = 0, count = 4096 [ 301.913788][T14083] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 301.926829][T14077] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.3537: Invalid inode bitmap blk 0 in block_group 0 [ 301.940045][T14077] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 301.949025][T12275] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:29: Failed to release dquot type 0 [ 301.961669][T14077] EXT4-fs (loop6): 1 orphan inode deleted [ 301.968290][T14077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.021229][ T5276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.217986][T14099] xt_CT: You must specify a L4 protocol and not use inversions on it [ 302.232499][T14098] loop6: detected capacity change from 0 to 1024 [ 302.253164][T14098] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 302.265300][T14099] loop1: detected capacity change from 0 to 128 [ 302.758361][T14104] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 302.856065][T14098] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3544: Invalid block bitmap block 0 in block_group 0 [ 303.214262][T14110] loop1: detected capacity change from 0 to 2048 [ 303.227511][T14098] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.3544: Failed to acquire dquot type 0 [ 303.276698][T14098] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.3544: Freeing blocks not in datazone - block = 0, count = 4096 [ 303.293181][T14116] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 303.348018][T14110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.368293][T14098] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.3544: Invalid inode bitmap blk 0 in block_group 0 [ 303.386665][T14121] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 303.397253][ T2282] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:15: Failed to release dquot type 0 [ 303.412990][T14112] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 303.448263][T14098] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 303.480593][T14098] EXT4-fs (loop6): 1 orphan inode deleted [ 303.500803][T14124] random: crng reseeded on system resumption [ 303.510839][T14124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3554'. [ 303.520055][T14124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3554'. [ 303.530218][T14098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.558627][T14124] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 303.623833][T14127] FAULT_INJECTION: forcing a failure. [ 303.623833][T14127] name failslab, interval 1, probability 0, space 0, times 0 [ 303.636629][T14127] CPU: 0 UID: 0 PID: 14127 Comm: syz.1.3548 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 303.636675][T14127] Tainted: [W]=WARN [ 303.636682][T14127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 303.636697][T14127] Call Trace: [ 303.636706][T14127] [ 303.636750][T14127] __dump_stack+0x1d/0x30 [ 303.636779][T14127] dump_stack_lvl+0xe8/0x140 [ 303.636803][T14127] dump_stack+0x15/0x1b [ 303.636888][T14127] should_fail_ex+0x265/0x280 [ 303.636914][T14127] should_failslab+0x8c/0xb0 [ 303.636943][T14127] __kmalloc_noprof+0xb9/0x5a0 [ 303.636972][T14127] ? ext4_find_extent+0x16b/0x7a0 [ 303.637080][T14127] ext4_find_extent+0x16b/0x7a0 [ 303.637111][T14127] ext4_ext_map_blocks+0x11f/0x38a0 [ 303.637147][T14127] ? bstr_printf+0x644/0x6a0 [ 303.637184][T14127] ? invalidate_inode_pages2_range+0x397/0x3d0 [ 303.637261][T14127] ? strnchr+0x1e/0x40 [ 303.637285][T14127] ext4_map_query_blocks+0xa2/0x4c0 [ 303.637322][T14127] ext4_map_blocks+0x368/0xd20 [ 303.637431][T14127] ? bdev_getblk+0x35b/0x3f0 [ 303.637462][T14127] ? __ext4_journal_start_sb+0x131/0x300 [ 303.637501][T14127] ext4_iomap_begin+0x89b/0xe40 [ 303.637575][T14127] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 303.637605][T14127] iomap_iter+0x388/0x790 [ 303.637628][T14127] __iomap_dio_rw+0x78a/0x1290 [ 303.637713][T14127] iomap_dio_rw+0x40/0x90 [ 303.637737][T14127] ext4_file_write_iter+0xb3a/0xf60 [ 303.637778][T14127] do_iter_readv_writev+0x4a1/0x540 [ 303.637821][T14127] vfs_writev+0x2df/0x8b0 [ 303.637877][T14127] __se_sys_pwritev2+0xfc/0x1c0 [ 303.637908][T14127] __x64_sys_pwritev2+0x67/0x80 [ 303.637932][T14127] x64_sys_call+0x2c9e/0x3000 [ 303.637957][T14127] do_syscall_64+0xd8/0x2c0 [ 303.638067][T14127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.638122][T14127] RIP: 0033:0x7fd9b074f749 [ 303.638139][T14127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.638157][T14127] RSP: 002b:00007fd9af16d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 303.638180][T14127] RAX: ffffffffffffffda RBX: 00007fd9b09a6180 RCX: 00007fd9b074f749 [ 303.638196][T14127] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000009 [ 303.638267][T14127] RBP: 00007fd9af16d090 R08: 0000000000000000 R09: 0000000000000003 [ 303.638280][T14127] R10: 0000000000009c00 R11: 0000000000000246 R12: 0000000000000001 [ 303.638294][T14127] R13: 00007fd9b09a6218 R14: 00007fd9b09a6180 R15: 00007fffcd3c43f8 [ 303.638317][T14127] [ 303.916348][ T5276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.142009][T12778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.213356][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3562'. [ 304.314770][T14153] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 304.453074][T14160] loop5: detected capacity change from 0 to 1024 [ 304.453668][ T3791] hid (null): unknown global tag 0xe [ 304.464900][ T3791] hid (null): unknown global tag 0xe [ 304.470310][ T3791] hid (null): invalid report_count 1428814397 [ 304.477122][T14160] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 304.485448][ T3791] hid-generic A80E:00B9:0800.0001: unknown global tag 0xe [ 304.493351][T14160] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3567: Invalid block bitmap block 0 in block_group 0 [ 304.494752][ T3791] hid-generic A80E:00B9:0800.0001: item 0 4 1 14 parsing failed [ 304.516274][T14160] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.3567: Failed to acquire dquot type 0 [ 304.522695][ T3791] hid-generic A80E:00B9:0800.0001: probe with driver hid-generic failed with error -22 [ 304.534151][T14160] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.3567: Freeing blocks not in datazone - block = 0, count = 4096 [ 304.560975][T14160] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.3567: Invalid inode bitmap blk 0 in block_group 0 [ 304.574273][T14160] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 304.577425][T12275] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:29: Failed to release dquot type 0 [ 304.595246][T14160] EXT4-fs (loop5): 1 orphan inode deleted [ 304.602430][T14160] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.651831][ T5054] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.722594][T14170] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 304.802642][T14172] xt_CT: You must specify a L4 protocol and not use inversions on it [ 304.870944][T14172] loop1: detected capacity change from 0 to 128 [ 305.113317][T14175] netlink: 19 bytes leftover after parsing attributes in process `syz.5.3573'. [ 305.278938][T14180] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 305.326566][T14186] loop6: detected capacity change from 0 to 128 [ 305.340750][T14186] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 305.432453][T14188] random: crng reseeded on system resumption [ 305.442436][T14188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3579'. [ 305.442473][T14188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3579'. [ 305.443272][T14188] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 305.522653][T14191] loop5: detected capacity change from 0 to 2048 [ 305.544410][T14191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.731747][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 305.731775][ T29] audit: type=1400 audit(1766156003.139:25476): avc: denied { unmount } for pid=5054 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 305.732495][ T5054] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.783369][ T29] audit: type=1400 audit(1766156003.195:25477): avc: denied { open } for pid=14200 comm="syz.2.3583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 305.802992][ T29] audit: type=1400 audit(1766156003.195:25478): avc: denied { kernel } for pid=14200 comm="syz.2.3583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 305.826988][T14201] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 305.880066][ T29] audit: type=1400 audit(1766156003.233:25479): avc: denied { append } for pid=14200 comm="syz.2.3583" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 305.887981][ T29] audit: type=1400 audit(1766156003.279:25480): avc: denied { write } for pid=14204 comm="syz.2.3586" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 305.961383][T14207] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 305.961559][T14207] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.964906][ T29] audit: type=1400 audit(1766156003.364:25481): avc: denied { add_name } for pid=14206 comm="syz.5.3584" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 305.964997][ T29] audit: type=1400 audit(1766156003.364:25482): avc: denied { create } for pid=14206 comm="syz.5.3584" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 305.977953][ T29] audit: type=1400 audit(1766156003.373:25483): avc: denied { read write open } for pid=14206 comm="syz.5.3584" path="/587/file1/file1" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 305.979113][ T29] audit: type=1400 audit(1766156003.373:25484): avc: denied { setattr } for pid=14206 comm="syz.5.3584" path="/587/file1/file1" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 306.027554][ T29] audit: type=1400 audit(1766156003.410:25485): avc: denied { ioctl } for pid=14206 comm="syz.5.3584" path="/587/file1/file1" dev="loop5" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 306.065632][T14210] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 306.065796][T14210] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.091029][T12525] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 306.116472][ T5054] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 306.226515][T14221] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 306.286912][T14226] xt_CT: You must specify a L4 protocol and not use inversions on it [ 306.299840][T14220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3591'. [ 306.323383][T14228] netlink: 19 bytes leftover after parsing attributes in process `syz.6.3594'. [ 306.409281][T14223] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 306.472635][T14239] xt_CT: You must specify a L4 protocol and not use inversions on it [ 306.512662][T14233] random: crng reseeded on system resumption [ 306.541584][T14233] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3597'. [ 306.578564][T14248] selinux_netlink_send: 6 callbacks suppressed [ 306.578583][T14248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=14248 comm=syz.5.3602 [ 306.590539][T14249] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 306.597582][T14248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=14248 comm=syz.5.3602 [ 306.608433][T14250] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 306.620234][T14248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=14248 comm=syz.5.3602 [ 306.670979][T14252] set_capacity_and_notify: 4 callbacks suppressed [ 306.670998][T14252] loop2: detected capacity change from 0 to 128 [ 306.705945][T14252] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 306.895581][T14268] loop1: detected capacity change from 0 to 128 [ 306.896900][T14268] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 306.955533][T14267] loop1: detected capacity change from 0 to 128 [ 306.956266][T14267] FAT-fs (loop1): bogus number of reserved sectors [ 306.956293][T14267] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 306.956312][T14267] FAT-fs (loop1): Can't find a valid FAT filesystem [ 307.224236][ T1009] bond0 (unregistering): Released all slaves [ 307.254526][T14286] random: crng reseeded on system resumption [ 307.259762][T14286] __nla_validate_parse: 1 callbacks suppressed [ 307.259781][T14286] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3616'. [ 307.259869][T14286] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3616'. [ 307.260567][T14286] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 307.339851][ T1009] hsr_slave_0: left promiscuous mode [ 307.340119][ T1009] hsr_slave_1: left promiscuous mode [ 307.365776][T14297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3619'. [ 307.434945][T12274] smc: removing ib device syz! [ 307.444087][T14306] loop5: detected capacity change from 0 to 128 [ 307.500820][ T5054] ================================================================== [ 307.500858][ T5054] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 307.500898][ T5054] [ 307.500905][ T5054] read-write to 0xffff888237c27550 of 8 bytes by task 3311 on cpu 0: [ 307.500923][ T5054] find_get_block_common+0x4f3/0x950 [ 307.500947][ T5054] bdev_getblk+0x4d/0x3f0 [ 307.500975][ T5054] __ext4_get_inode_loc+0x303/0x930 [ 307.500994][ T5054] ext4_reserve_inode_write+0xd7/0x250 [ 307.501017][ T5054] __ext4_mark_inode_dirty+0x8c/0x3f0 [ 307.501050][ T5054] ext4_dirty_inode+0x92/0xc0 [ 307.501074][ T5054] __mark_inode_dirty+0x162/0x750 [ 307.501104][ T5054] file_update_time_flags+0x2e5/0x310 [ 307.501138][ T5054] file_update_time+0x17/0x20 [ 307.501168][ T5054] ext4_page_mkwrite+0x18c/0xb90 [ 307.501191][ T5054] do_wp_page+0xa77/0x2510 [ 307.501222][ T5054] handle_mm_fault+0x7b0/0x2c60 [ 307.501254][ T5054] do_user_addr_fault+0x630/0x1080 [ 307.501284][ T5054] exc_page_fault+0x62/0xa0 [ 307.501311][ T5054] asm_exc_page_fault+0x26/0x30 [ 307.501330][ T5054] [ 307.501335][ T5054] read to 0xffff888237c27550 of 8 bytes by task 5054 on cpu 1: [ 307.501351][ T5054] has_bh_in_lru+0x35/0x1f0 [ 307.501385][ T5054] smp_call_function_many_cond+0x2a9/0xc60 [ 307.501412][ T5054] on_each_cpu_cond_mask+0x3c/0x80 [ 307.501436][ T5054] invalidate_bh_lrus+0x2a/0x30 [ 307.501463][ T5054] blkdev_flush_mapping+0x9a/0x1a0 [ 307.501490][ T5054] bdev_release+0x2bf/0x3d0 [ 307.501515][ T5054] blkdev_release+0x15/0x20 [ 307.501542][ T5054] __fput+0x29b/0x650 [ 307.501572][ T5054] ____fput+0x1c/0x30 [ 307.501601][ T5054] task_work_run+0x131/0x1a0 [ 307.501621][ T5054] exit_to_user_mode_loop+0x1fe/0x740 [ 307.501642][ T5054] do_syscall_64+0x1ef/0x2c0 [ 307.501671][ T5054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.501691][ T5054] [ 307.501696][ T5054] value changed: 0xffff888107e63888 -> 0xffff8881007cc618 [ 307.501709][ T5054] [ 307.501714][ T5054] Reported by Kernel Concurrency Sanitizer on: [ 307.501731][ T5054] CPU: 1 UID: 0 PID: 5054 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 307.501766][ T5054] Tainted: [W]=WARN [ 307.501774][ T5054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 307.501787][ T5054] ================================================================== [ 307.557811][ T3791] lo speed is unknown, defaulting to 1000 [ 307.557837][ T3791] infiniband syz0: ib_query_port failed (-19) [ 307.557878][T14297] ip6_vti0 speed is unknown, defaulting to 1000 [ 307.558803][T14297] ip6_vti0 speed is unknown, defaulting to 1000 [ 307.558997][T14297] ip6_vti0 speed is unknown, defaulting to 1000 [ 307.847363][T14297] infiniband syz2: set active [ 308.003917][T14297] infiniband syz2: added ip6_vti0 [ 308.009019][ T3791] ip6_vti0 speed is unknown, defaulting to 1000 [ 308.040991][T14297] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 308.042251][T14297] infiniband syz2: Couldn't open port 1 [ 308.061526][T14297] RDS/IB: syz2: added [ 308.065656][T14297] smc: adding ib device syz2 with port count 1 [ 308.075342][T14297] smc: ib device syz2 port 1 has no pnetid [ 308.076544][ T1009] IPVS: stop unused estimator thread 0... [ 308.087168][ T3396] ip6_vti0 speed is unknown, defaulting to 1000 [ 308.094308][T14297] ip6_vti0 speed is unknown, defaulting to 1000 [ 308.132478][T14297] ip6_vti0 speed is unknown, defaulting to 1000 [ 308.170999][T14297] ip6_vti0 speed is unknown, defaulting to 1000 [ 308.212557][T14297] ip6_vti0 speed is unknown, defaulting to 1000 [ 308.563612][ T1009] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.607709][ T1009] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.660614][ T1009] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.708552][ T1009] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.830352][ T1009] bond0 (unregistering): Released all slaves [ 308.858120][ T1009] bond0 (unregistering): Released all slaves [ 308.886794][ T1009] tipc: Disabling bearer [ 308.891981][ T1009] tipc: Left network mode [ 308.940801][ T1009] hsr_slave_0: left promiscuous mode [ 308.948042][ T1009] hsr_slave_1: left promiscuous mode [ 308.956725][ T1009] veth1_macvtap: left promiscuous mode [ 308.964449][ T1009] veth0_macvtap: left promiscuous mode [ 308.970313][ T1009] veth1_vlan: left promiscuous mode [ 308.975711][ T1009] veth0_vlan: left promiscuous mode [ 309.539501][T12267] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.590550][T12267] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.644721][T12267] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.707934][T12267] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.780440][T12267] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.815860][T12267] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.879716][T12267] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.943977][T12267] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.102717][T12276] smc: removing ib device syz2 [ 310.198760][T12267] bond0 (unregistering): Released all slaves [ 310.326791][T12267] bond0 (unregistering): Released all slaves [ 310.334738][ T3524] ip6_vti0 speed is unknown, defaulting to 1000 [ 310.341032][ T3524] syz2: Port: 1 Link DOWN [ 310.404939][T12267] hsr_slave_0: left promiscuous mode [ 310.411506][T12267] hsr_slave_1: left promiscuous mode [ 310.419166][T12267] hsr_slave_0: left promiscuous mode [ 310.425193][T12267] hsr_slave_1: left promiscuous mode [ 310.435104][T12267] veth1_macvtap: left promiscuous mode [ 310.440699][T12267] veth0_macvtap: left promiscuous mode [ 310.446912][T12267] veth1_vlan: left promiscuous mode [ 310.452210][T12267] veth0_vlan: left promiscuous mode [ 310.458255][T12267] veth1_macvtap: left promiscuous mode [ 310.463935][T12267] veth0_macvtap: left promiscuous mode [ 310.469900][T12267] veth1_vlan: left promiscuous mode [ 310.475539][T12267] veth0_vlan: left promiscuous mode