last executing test programs: 1m59.641813989s ago: executing program 2 (id=483): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee9, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018f3ff00", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) futex(0xfffffffffffffffd, 0x6, 0x2, 0x0, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000035c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3183000000000000000019000000200001801400020076657468315f766c616e0000000000000800", @ANYRES32=r10, @ANYBLOB="d14cb2ddf69b79dfd0eb2ded6b93e9097cc2cec80d4ea8c5a595cdd2ffffadc7c40b931c63dc42b85784b8e00179930bf24e583355eff9c826ed08fd76505d998a0ad5e78b2644d5c441617f830eadef488d3fa6252e0c256b0b82c4ff27a73252d94acc5a7819cc167f97800ac6954b33aa517bf100ce516e9261723a75ef6ed77a59817d0e0f876979e105c30f9e599808d1c25513a56e7772d94c3e8c286c6d0a181098"], 0x34}}, 0x40010) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40041}, 0x20000000) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x61016, &(0x7f0000000180), 0x1, 0x5a8, &(0x7f0000000680)="$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") 1m59.451361547s ago: executing program 2 (id=484): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r0, 0x6b56000) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a6970"], 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x80000}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={{r5, r6/1000+10000}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x102, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1100, 0xc31, 0xfffffffc, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f0000000000)=r7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) 1m59.259474745s ago: executing program 2 (id=490): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000280)=@in6={0xa, 0x4e22, 0x6, @local, 0xffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)="52bc707e6390208807c9f33f4fc886d098aac22f38a0f6967c55c192f479f05bf4bf987afde2eb79cc43302c67a75a77ce327fd21b9ac2d222c9e1ac9a5ca73e47fb70c4f8adac8973b289367a0cc2134d2c2d882713421f9a40febe9b2bd51ed0dbb11ef89c62862ff42330e396d887b1da16b4dba97baf4d863f23c8017090db3b7be19b0e82f31cb783e725611a966f409be116187f9039af3a5c150ceeb9527429695744625c351818340b3c4171f13bc92d6d216a720078eaff32cc30f44db3a25a438220daba53407afd75dfe2b247a4af8bb8dc058f362f0b8a9cc77df721797cfe", 0xe5}], 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x228}, 0x8040) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000700)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x1, 0x3, 0x42, @dev={0xfe, 0x80, '\x00', 0x13}, @private1, 0x0, 0x700, 0x3, 0x7d4c}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff801}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m59.207196071s ago: executing program 2 (id=491): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000640)={0x2175793c, 0xffffffffffffffff, 'id1\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2}}, './file1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'erspan0\x00', r5, 0x8, 0x700, 0x3, 0x101, {{0x17, 0x4, 0x0, 0x8, 0x5c, 0x65, 0x0, 0x5, 0x2f, 0x0, @remote, @multicast2, {[@generic={0x7, 0x6, '[]iS'}, @timestamp_prespec={0x44, 0x14, 0xe8, 0x3, 0x7, [{@empty, 0x2}, {@local, 0x9}]}, @timestamp_addr={0x44, 0x2c, 0xc1, 0x1, 0xa, [{@rand_addr=0x64010101, 0x9}, {@broadcast, 0x1000}, {@multicast1, 0x8001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast1}]}]}}}}}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0x7fffffff, 0x0}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r8 = open_tree(r1, &(0x7f0000000280)='./file1\x00', 0x180800) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x12, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000008000000000000000404000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000004c207000900000018140000", @ANYRES32=r4, @ANYBLOB="0000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x4d, &(0x7f0000000800)=""/77, 0x41100, 0x20, '\x00', r5, @sk_reuseport=0x27, r6, 0x8, &(0x7f0000000880)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0xe, 0x4, 0x8}, 0x10, r7, r2, 0x4, &(0x7f0000000940)=[r2, r2, r2], &(0x7f0000000980)=[{0x3, 0x5, 0x6, 0x7}, {0x3, 0x3, 0x1, 0xa}, {0x5, 0x2, 0xe, 0x7}, {0x0, 0x3, 0x3, 0x5}], 0x10, 0x4}, 0x94) r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0, 0x100) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%pK \x00'}, 0x20) r11 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000c0000000000000000000009000000000000000000000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, @cgroup_skb=0x1, r1, 0x8, &(0x7f00000004c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0xd, 0xa4, 0x9}, 0x10, r7, 0xffffffffffffffff, 0x2, &(0x7f0000000800)=[0xffffffffffffffff, r9, r10, r11], &(0x7f0000000840)=[{0x5, 0x5, 0xf}, {0x5, 0x5, 0x0, 0x5}], 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x32) r12 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOC_STREAMS(r12, 0x8008551c, &(0x7f0000000a80)=ANY=[@ANYBLOB="010000000700000000a8915323fe7cc23a7c40f34521d2a8a65f6d2c832ee9ea9404a76fa62b79841a87b82b873ca6401a7341d81d0a007ee63b673a284be0c8456ecb4a956e8005364f7eb5b8fadfd143734ea113bc5e818fe9a3aacec54881a01413f5805b391f0c911c44c0606d3460bd7bac29bf9e1ee200000000000000002af23c4dfb9bed0d22202c357f807c837bee902bd3c92d7ba705fe64e08bccf095fecc7b35a5ca85e568508ff191bad13503d6088eead6170c556e321a2c4b35cc7c88af8a27"]) socket$inet_udp(0x2, 0x2, 0x0) 1m59.149532506s ago: executing program 2 (id=492): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) fcntl$setownex(r0, 0xf, &(0x7f0000000000)) r1 = syz_io_uring_setup(0x22a7, &(0x7f0000000040)={0x0, 0xe716, 0x400, 0x2, 0x3de}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000140)=[r0, r0], 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x144, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x144}, 0x1, 0x0, 0x0, 0x10}, 0x24048001) getsockname$llc(r2, &(0x7f0000000440), &(0x7f0000000480)=0x10) r4 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r4, &(0x7f00000004c0)=@r2t={{0x9, 0x1, 0x18, 0x94, 0x8fc}, 0x1000, 0x6, 0x101, 0x2}, 0x80, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) io_uring_enter(r0, 0x60e, 0xd524, 0xa, &(0x7f0000000580)={[0x6]}, 0x8) llistxattr(0x0, &(0x7f00000005c0)=""/186, 0xba) ioctl$TIOCNOTTY(r1, 0x5422) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r5, 0xffffffffffffffff}, 0x4) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000700)={0x6}, 0x4) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x30000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x94, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'wg1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'gretap0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x20008004) ioctl$KDMKTONE(r0, 0x4b30, 0xffffffff00000001) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f00000008c0)={0x6, 0x9, 0x6, 0xfffffffc, 0x1c000}) ioctl$INCFS_IOC_PERMIT_FILL(r5, 0x40046721, &(0x7f0000000900)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000940)={0x4e4dc81b01d9b46e}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000980)={0x0}, &(0x7f00000009c0)=0xc) write$P9_RGETLOCK(r5, &(0x7f0000000a00)={0x1f, 0x37, 0x2, {0x2, 0xead, 0x2, r7, 0x1, '\x00'}}, 0x1f) close(r4) getpeername$packet(r5, &(0x7f0000000a40)={0x11, 0x0, 0x0}, &(0x7f0000000a80)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000ac0)={'syztnl1\x00', r8, 0x0, 0x700, 0xe412, 0xd, {{0xc, 0x4, 0x1, 0x7, 0x30, 0x65, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010101, @empty, {[@ra={0x94, 0x4, 0x1}, @generic={0x83, 0x5, "ce6348"}, @timestamp={0x44, 0x10, 0xff, 0x0, 0xf, [0xff, 0x1000, 0xd]}]}}}}}) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b80), 0x224000, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r9, 0x5000940a, &(0x7f0000000bc0)={{r2}, "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"}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r5, 0x110, 0x3) 1m58.942997986s ago: executing program 2 (id=495): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000025c0)='fib6_table_lookup\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x0, 0x2, 0x0, 0x157, 0x0, 0xfff, 0x0, 0xfffffffc}, 0x0, 0x4, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000680)='#!?\xd9\xc1\a3\xec\xefx\x19\xc0I\xad\tX3\xd9-W\xe3t4\x9f\xe8e\xd7\xa1\x88\x82\xfeu\xab\xect_d\xb3\xe7\xdf&we`\xf3\xa2GO\xc0@\x98Z\x01\nZ\xd6\xd7Y\xf0\bE2\xff\"H\xa0\aj\xff N\xbe\x05\xb61iN\xc0\x84Z\x7fxmG\x9e\xa1W\xe2\xa7\xc8\xb0\xdfl\n8%\x8ce\x17\xc8\xda\xca>\xef\xf3\xe2\xf8z\xe3\x02\xdc}\xf9\x99\xb9\xf8\r\'m\xfd\x94q\xbf\xaeT0\xa6\xaa\xcd-\x847\xbc\x1e\xd2HQ\xaa\xf3Q\xe5r1\v/\x95\xf1?\xcf\x04V\x97\xbd`\xd6\xd2\x85\"\xa3\xd8\x181\x1d\b\xb0\xee\x97\x1b\x9a\xbb\xb9\xdd\x00\x00\x00\x00\xdb\xd5\xe8\xb6\xf0\xe2\xfb\xc4\xea\xf8\x0e\x1fo\x19Dx\xa8\xf79W\x19\xaf\x1d\xdd\f?\xe5\xc6kN') r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x742}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x880) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bdfaadbc077f9103fc000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r7, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) 1m58.907067619s ago: executing program 32 (id=495): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000025c0)='fib6_table_lookup\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x0, 0x2, 0x0, 0x157, 0x0, 0xfff, 0x0, 0xfffffffc}, 0x0, 0x4, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000680)='#!?\xd9\xc1\a3\xec\xefx\x19\xc0I\xad\tX3\xd9-W\xe3t4\x9f\xe8e\xd7\xa1\x88\x82\xfeu\xab\xect_d\xb3\xe7\xdf&we`\xf3\xa2GO\xc0@\x98Z\x01\nZ\xd6\xd7Y\xf0\bE2\xff\"H\xa0\aj\xff N\xbe\x05\xb61iN\xc0\x84Z\x7fxmG\x9e\xa1W\xe2\xa7\xc8\xb0\xdfl\n8%\x8ce\x17\xc8\xda\xca>\xef\xf3\xe2\xf8z\xe3\x02\xdc}\xf9\x99\xb9\xf8\r\'m\xfd\x94q\xbf\xaeT0\xa6\xaa\xcd-\x847\xbc\x1e\xd2HQ\xaa\xf3Q\xe5r1\v/\x95\xf1?\xcf\x04V\x97\xbd`\xd6\xd2\x85\"\xa3\xd8\x181\x1d\b\xb0\xee\x97\x1b\x9a\xbb\xb9\xdd\x00\x00\x00\x00\xdb\xd5\xe8\xb6\xf0\xe2\xfb\xc4\xea\xf8\x0e\x1fo\x19Dx\xa8\xf79W\x19\xaf\x1d\xdd\f?\xe5\xc6kN') r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x742}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x880) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bdfaadbc077f9103fc000008000300", @ANYRES32=r8], 0x2c}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r7, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) 1m22.989908911s ago: executing program 4 (id=870): timer_create(0x6, &(0x7f0000000200)={0x0, 0xc, 0x2, @thr={&(0x7f0000000d40)="f21908f8decc429f61051bd1b48d2df2bdc4049bda9b11f544d86174ede2afae3d3288cdeedaddcf81ed108d6de53691c3b6267b2cd940ab8e27772281792358e8fc696ab8661dd95b3c581493215bb03d6c9770a9d095f4a890f9633c4366f088a2fa4aaf1c87856c9ee8b0a6a004409735acac9bcbff1bd865dd90be21f4f5ec9f7e2c4d1279af0aac7b69daff5b42a633d16864cbf1a23a86040237572ab7d88482d452561beeae1b4b8d931cb240b58c0a96ea0c64ca6c08a8b7dc4247050636281e00e1d544ccefb551be0e3000a4102b8f4284aa82ea3076e22a", &(0x7f0000000e40)="4a187cdee168338e99215a6aebbb63eefced3f92b616fa23bd1ee988b6da83731c620a215707f4947e8165dcf08d54f4b93626d7c3fc8975b89c419f62e572f8a448a48e0108500c3214212da68e3daecf0e404bad78fecf188a455957ab64d1819d8bbfeec28028ac20c9fab5c3f6c78f01e52f7ea31d76804472f2ca88a1239917ecbc46d4932155da9d488545bf310d5f49d2ff24c63a49fd88d6119123d8ea3ca368d365d9e054001d4d26c89e1527e652b93d115d699fcd9d4f9dbaa5b3b55bfad75c4255be180a01c81daeacbe9454bdbb80ddde94c14e306e729b710585f97e26424b1d6e206fb402f2fc82d931a639da0e60d75dc69faedb8b9bedaeee505133f3213fe68862c783ccf9d5a9a9d10049d3d107e349892601de23ee3e1b53b2788e5ddf670ba52d4adc6b58c4089f428f594c676a9fb7810ba198252bdcc25d7a99975c80f9aa0256edb5de9fff17eadd091182cddd8a3335f768afb2902738cc4c67c39cf474dc9991f59c88ae8d087d8bc37f078426059b06c9a0e8e098f9c3fbc0437f7b9c16267ff87b5fe89db3c75757c9d7fab74f8b2b35f3fc64952d38acddf448275a8af5bc4822e68f11b8cf4113116808cb239fc64a20871190510a1f5beab9a5f7e23170f86be21f4ccba4a7f137fe4f116e3d0b839f35608f9f6cd708634b33aaffd60e76db093b31a61af14266f5d4fdff7324e6f26f78b0d287ed880fe209420888dae7dd94e2c0b8b6ffe5c4796c8d65fedbf7b1ad2e2ca652a0efc0b5fe9417b91d9163a4ca25ea9d85f2274c6fb45d098d23705ffb31bd42712f91335955093f1ad199ca3b0751a0fe441a46b1708d2caaf91b28b87bf6cb463c9f1bef37f41ef15b56ac9fd0b9efe2468a80bbddfc92731469b9eab9af5f847f57fe88ea02f5285abd5a1e076fbcc08436fb1bbd3b790bf2f01fa78c2bb4d0a764fcec1ce5f51968e4c20ba4e0dab1abad0cd26db3e1a02019a3841bd1a691c23cbd88d1c6d962bd11af88f6bfcfae3dd16bfe17e9acb9121c04fa0c0811783b138dd8ec5af383cbb5ac94aa619f919e42ad49bb811168324fc645de9a797fcb23bbf6f24b263bc2fb1955ca690f984af1aeafa791a543809a93efdc9715f854a3dd846e5582ac87b54601ebe726307f8382042f0289548f97e99d494c2de8a26148bb24b64f060ffda205350bcca3488d58d2083095db0880881b8d3b45c23e2aa3a978f3592680a3c5fab8c5c99c4d20e8a51539d342e09972ff5249484cc2ad9625e828d9fdccd972582c4808abebe9f7b60af6a38e4e869a1d7c8109541c0530a61e14282eea92f037916934c6527541861f51dd5ec91a74ea43702c417447a180ae0644d73da9c8318c985c6911c9c1e48e6dcca203a6f24781babb90f1bc4d07143e69a4357104a1add4606842130d442877852977c71941c1e20e7c85e66907d3b13d598a19ded7fdaedc8d90332b86199111715b4a0da9a6d5896b830397a691d8029eae62badfba803f063052f3eef2ac61054bbc16d5a158bf2e94cab62d030611003098d21a44633e704f983546bb98da35f87e7552d7bcf954b22a969ada910b7cb99d6348d3443a2a86b797300e77cf50d82dd2f1a00a65b85d031e7dbccf5664a6846498eaf0ce3a740e1d4a82f2b5fd6e2bd5a3166fba383c1f434cc04a11752818c2a26f1d804d6e63b7a0334bbf224a134a6b2d5caf71656e64797b3e4338b575ba44a4335373ccf4037f7d41795940f69381e0eb1cdbc10f52abe7839627605dc5fab73e7b3fc7edd80a438d495c95541890cd62a408cc3eff292a1e91ee0d3ad2be229c94b92a91b9d6bbb5525e732e9df9a8a43f9eca4ebcfd4cf3f3cf830bd204697684c63cee01af8f3e9214bab25cc7e8ccf97b19bd2bdf49e62f2cbbf851c13740e95e70411371ae146e4350f6deb1b5bee309930a8e2791e2d39d3011d440bce755434661da3e2c80d48b174c8d3fe0e93d8ece633c0686912456061e2ebed9c73be53cdf074e7f4623e6fb8f21ade417d9709cbcca4201d1f8c5fa10300aaee21203c594f14b7c552519f6b0334fddb4dfbe78120c30948c723fc60f0e0331f7f9fd924e137ab24e8023d227750d8dec7f16216219eba8563e4633b34fc0cae99608c5b8c65ca18b12e4adfb7a427bc0939745f793f61e6bbb34ee858caafa0228f77d0ec51f7b077c5a098124162f4fdd0801cb1268dd008d8f073b602992040e51688b324a6a1995f675765354be240676828af616edf9e2c785be530a9b49353b8e27015357cf0fa7f4d43912a445bc6f45da49e722eb6ef85c2ecedc5f914c743dbf91a8b8a3542fe83dbb7b164552d847de076b172e1e83eed22b48c020ef6de1c1522eb2e89770131df3d01699f5cfb0f20c0b549147547ecea9661123872809d10286dadc06f0446f6207c7a737c52d5c2fccdc88d2deb759f9079417df667610421ba863dd4a6c9801ae0e97b05700b0cbd04909b326a736bf5ffd5b27f4243fad9cde5d53ac710856662f8421d328080486a6b2003bfd6f9de95ffb0e01fbfd98c641dd8e054739f1ba07aa748d65e287405dbf4031cfc4c6c84a82c2a9fc044b90a95759ce869bbd4014aee0cf61ba361acd0040f6543a700b923a64cd635a9439a33755771c9e4f216c4051017a8d512c72e8bd1ce1c7925baf38fee601feb1059d754ae227f92876809f2f16c2f9bcdd9bac72d73bba4124f19a0c8ec7498d97a9aa42d9364b991414ba9b092a0da19c14e215526865de2b1000f76611c464bb20c2d4974a5d7f5f25f42c1b3297f99468ae7a370218b01fef1ceb7d27079a5b4db113e92a4499d9f0d1a6adcab216c9acccbae4689b56da76497cec3608fe4b176defafb6c9e3a476d7ccc3b0ef81af6dd6224dbda21304484287e768195381dcccccf7eb30bf7b9e3eb98614082d2d53b31d5415553c22b100a706dc795c3a8fdee3125945d153b5c998e40c16f0f3e6e79d8d81d65b872aabb7a5882717d8a5e0e5eef2ce7cebcb25d2a9c5f751b3a45f6b44fda94849239438cf103fadcd34ee43c79e06dec1ab8c40ffb214668e052a04511e8723ba7b8ef097a2f54327f731a2e84e8e0f0049f7108f18bd5f7b908c72c8978a55355e49f529302c61f86b23890926a2788370cd6f3c415bab87a68ebb31c61839def071696adbc340b137bdde6274bd94c66541f5335b2f73b2896b3402bb568c5afae03f886f1de0c8b1433cce015c6b6d746b192cdf431353dc5ec16e7d5f30f4c7feffd694b3755c8b74c666bd20a9daac7f08b54397e6300aaeaa8451e43853927da52f975624d59131fe89ed16044aba6258a8b7a84aa64343058b4819a4cfafdcbebd23bab2ce513a940e95d73c8b0c4c7fe0ae8dadbe8ba61be25d8fb8dce7d927cda75ebe92913365b37dee634ff497229db297800b8c7520138b64cf28446d363d04fea410e55ff88becdbc838695c5e5152d90f11273728f623be9aa23aadc574e9adf702b2e5048f66e6abc176b04b6fb78158d3e129406ad1b8fe27bb6fb4713bf26049fcf171e22aef8fb97e1f882c6398a1dc5daa95191cb6e2856171d0bd7ce9c61c5ccc446b4d556ba11495e9699510b9f5aac695a533e0877b6e6bd22bf043fe3316b1f50ccbfdbe55e9f41a316d8e48dd0b05acc97f6e3f99f798fd30bddef333e21e98d4c8eabe2925392b6fe1ad20d0a24c16662443f17a94364e8eb0b6f3611332f2bb552cbd1ba67c9f6faca56920a4748851b0a9dc85ce9334e7f9010e898a579d07131d0b561ba1603bd5d48b1146ae877a08ba1015509b9dfe170ed10fea708779585cb884f2dd524353f4f28bf882ec7a614863f2e42102e6786ab1b5f20c251ac59faa65c70c578a6b3b619c621e290138af30ce56ae7f5baf654f8dc224f0de71af7aa9b3fc6f6785a2816673004290694ea90a486eb72a22a7bf980d0092e3a82cb62c7d7100e97bdc6456a9cf94dcf5a28bc9eb09bf1a95f708251933d0bc47ab63f748dea814879ccaa5c2d1e2bc2404dcafc7525ff5f5ae3f7f9aea6721871334a4daedcb585f30917c9f1720542a5545b90964c19a8dc275d214df1a18c28fb165e6ad632dd2c409d0bfd5a16f1b85218519a55234232102f4956bdb46725a848904d648777fe032193834dbefec4b709dd4c0d0f792f9aa1d43443874910d04ca77a84454a662b51452effbd092fc2c6860b09a75fd06c343c68c9182519dd36f3f6301b07326283c5b0def83aa7d7c923fefd9fee929cef3cfc7d1a7ef9cff2465784c31f32f70db02e2377b4340d7be17ea39736529b267c56c8c2f6c32861367a6c00a0331b8e7d036f7b5a242cef1d943e6ea9772df173cad5efbc3a06401793679779beecbea4e599ea17546d21f66fd4fe407e8e5c69634b40dabb4be5acf507ec28d968a9d29300484d76a999515aaaa4842254dee49e4826da995f7594ef3ce57aa47b72098aa844ef8490b1fd1b9d95371d1f71f81b5e16c6cdadb0b7a33d7c0c26bff0dfa41355ab4b1f37b210206065672131437d009a4d9ab7596d7ff30b2a4b3ca4d6959ab5cb882889901c637f50a9ac3c94745ab50fd5018d3e5001f461b672668b74ede422b2d23a103734bfbb282b0b394f81502a0b5d49733a02bafd3743b14a25741da6100b14fc003776340c43e5a4c895b90d8fcc5c99b692d8c6857b5aaeab1e6ed77cf246a35698c3974b5e7aaf4f650bc554da896fd31cd5125f80e413666ae97aaf36ebbaff99228dceb7b8d0e3f381050f0ef861bd564d486884e59c7d9c41e5b54bf06c8867ba06a4c2e989dbc13acb08e96160716942524a77cf6bdddc07710355fe2630e0d644eb36cd0546967ccfa5c4154fd79cd60ef3b76baf1637106714989a35ed928cc6f02ea9af86262bc6ee955ce69ed5a6536e8efb32b572434fa1e647ffb9899bd751a85df2c84716dec6ae76f4664f40ab9146a839ee9b4c7d61fd63179383442681d5cbbd39295509dafb628784cebcadbe49be8e870e7014e1153a8570497bea97e917e59daccd3e866cb28f805571ec5f5d9914a475aee8d0564257a36df2b922b9b7b377c33378b4a3f64ce3619005f9df142b8e37afb39d1dfe885d72fb77bf3ecdd08070e9d33a917d434fb2b85574dc67d6f46bb7c5028ae06715449c9fe39f013c553083050e26826ad89917ed22233ffce9471b6ef7e7f7059ed012b9803beb9a31cd884177536d818dc85a952199dbb2af30adc12cd7ba7514c5dd448d5020deea6711dba2fa358f4dd9cb663f99f14cafce73926077e6b7914359c8b83d63897aec5cec9f178b272c9f043052c3b1e8ab1d26ab7f889b82920b865dbb133eb39805621a1b22a506550f9f7ad682b56fd09ed4902902bd82a7f52423deff9d2b9f115c1acc3a82aa788b63c7173cbfbd80436845570ffccef30fa62b889bf21d6f598583fa5d84a26997dfa92b99452ca16be5f65aeeb42d71932cb820f51863acee51ab10e681288b187032bb6088e344ae26f9de4f9d8d8ab5f6b4996a71307cbd7937816f24a709ee1b121b3e4dac4ac417fff754d9d8f3ac20534b9cd28f51f51c70398157da1273f2623a644f52052b383778630e6d2aa056294cea6acfb62035bcc0253967db621e45d962ecae6b2c5cc727a366cdf6f7e060291913dd1dea997c8bc1e86810d3a5944077a94165825d60329d4dbc1802d3ff672fd9087f17dcdc6f84c8732f681a8a0516b254fab86c76a2b5688298e1d68fa980223b95fc55b33575f"}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0x61, 0x0, 0x0, 0x6e}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') write$cgroup_subtree(r1, 0x0, 0x4c) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r2, @ANYBLOB="725bf64baf179c5118f9ee53ba50c88cf2b403b8c0d23f8c4635c8a652bc3a"], 0x48) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x2, [0x0, 0x0]}, &(0x7f0000000900)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000940)={r3, @in6={{0xa, 0x4e23, 0x0, @empty}}}, &(0x7f0000000c40)=0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x6, r4}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000005c0)={{0xa, 0xfffe, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0xfffc, 0x1, @loopback}, 0x0, {[0x0, 0x1, 0x72, 0x0, 0x0, 0xffffffff, 0x5, 0x4]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r5 = getpgid(0xffffffffffffffff) r6 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000780)='./file0\x00', 0x802, &(0x7f0000000d00)=ANY=[@ANYRESHEX=r5], 0x2, 0x240, &(0x7f0000000a00)="$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") rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000c80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x498}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getdents(r6, &(0x7f0000000100)=""/72, 0x48) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000200)='\x00', &(0x7f0000000740)='./file0\x00', 0xffffffffffffff9c) 1m22.785350511s ago: executing program 4 (id=874): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000000)='sockfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x100804, 0x0, 0xa, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x0, 0x121428, 0x7fff, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xe}) 1m22.675166211s ago: executing program 4 (id=877): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 1m22.212811955s ago: executing program 4 (id=884): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_clone3(&(0x7f0000000680)={0x20000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x26}, &(0x7f0000000580)=""/167, 0xa7, &(0x7f0000000280), &(0x7f0000000640)=[0xffffffffffffffff], 0x1}, 0x58) sched_setscheduler(r1, 0x5, &(0x7f0000000740)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r3 = open(&(0x7f0000000180)='./file1\x00', 0x185102, 0x2b) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="404f24ec2ef58c83add92842700d875444fe63f853830278d2c5955fc25d1374aed98b4226fa4c15fce7a45fb964249f533b1b3c000000fe251f6131067983cbdbf30000000000000000000000000000294ef567e474aed612a1c530106f0f1b3ba86990d70d3c66051a75b2cab9a76cf83df33a8f99178c375a24f2d6ab8c07f21f64bdea026723c7142787f58a24b4c0", 0x91}], 0x1, 0x0, 0x0, 0x11000000}, 0x20004040) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r4, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x1000000201001) 1m22.026976423s ago: executing program 4 (id=887): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x10}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0xa3d, &(0x7f0000000180)={0x0, 0x43ed, 0x0, 0x2000001, 0x8002ae}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x2040e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x4ac269ba, 0xaea}, 0x11aa0, 0x30, 0x10000, 0x0, 0x18bb, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000030801020000000744419800000000000500"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x4004) sendfile(r4, r3, 0x0, 0x100000002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xc4, &(0x7f0000000340)={@local, @remote, @void, {@x25={0x805, {0x2, 0x40, 0x23, "8e919929d038695fdb653521c94c0fe5f13a32d6d5bbd34605fc7c97d8235107b0533a956ec99ee919844117267fda43a74b43daf701837f7e8ebe8ae826db466a8801d35ac1ce945009c0a22b69e2de4a01648a05a4ca4e5c5fa38ea2a79e8956e58743c94931eab398139e1a477bfd22e2e906fa6556deeb09c0e0992584c96e5561d0e1fa76d3444a4ae6c85c700a2990b64a133fb7cc8a68813895afb566c9c4f7694a7fdfb025d1127348ebcb5817862c"}}}}, 0x0) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="a6") madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x587, &(0x7f00000045c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m21.144778077s ago: executing program 4 (id=903): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000180)='.\x00', 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xcd, "69c53ca3961736d4a7c6d8ea808eef9ea84ed5ec7710ba8e685dfa180f3ce9f9ca4c69d2a7a214ce7c8a8910fe85cd1d42141b8fa75772756921dd06cf960569c06c553421fd0bc5982d2acab9ea4366cce6436e9e0d64652a69445b99fc395bdd119221928072a65aac711c324abed3cb9c08badeab57fca05b18fb0b9b108e696b3d3a937e536d492f6ec174605340f9e485a06f9ca3bcb1aedee8b97537001a36601fb0f264c5afce6a632acee0e7559a7f8f9f57bb3508c2b7afe57fd4b22d41a76601981dd51d82fab7dd"}, &(0x7f0000000140)=0xd5) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={r3, 0xe282}, 0x8) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="0d0028bd7000fbdb", @ANYRES32=r8, @ANYBLOB="30002b8008000400ff7f0000080001"], 0x4c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00'}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, 0x0, 0x810) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000048002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) signalfd(r4, 0x0, 0x0) unshare(0x62040200) 1m21.074003474s ago: executing program 33 (id=903): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000180)='.\x00', 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xcd, "69c53ca3961736d4a7c6d8ea808eef9ea84ed5ec7710ba8e685dfa180f3ce9f9ca4c69d2a7a214ce7c8a8910fe85cd1d42141b8fa75772756921dd06cf960569c06c553421fd0bc5982d2acab9ea4366cce6436e9e0d64652a69445b99fc395bdd119221928072a65aac711c324abed3cb9c08badeab57fca05b18fb0b9b108e696b3d3a937e536d492f6ec174605340f9e485a06f9ca3bcb1aedee8b97537001a36601fb0f264c5afce6a632acee0e7559a7f8f9f57bb3508c2b7afe57fd4b22d41a76601981dd51d82fab7dd"}, &(0x7f0000000140)=0xd5) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={r3, 0xe282}, 0x8) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="0d0028bd7000fbdb", @ANYRES32=r8, @ANYBLOB="30002b8008000400ff7f0000080001"], 0x4c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00'}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, 0x0, 0x810) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000048002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) signalfd(r4, 0x0, 0x0) unshare(0x62040200) 39.367691729s ago: executing program 6 (id=1513): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom$inet6(r2, &(0x7f0000000040)=""/58, 0x3a, 0x40000001, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @loopback, 0x9}, 0x1c) r3 = fcntl$getown(r1, 0x9) ptrace$getregset(0x4204, r3, 0x204, &(0x7f0000000280)={&(0x7f0000000200)=""/50, 0x32}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000000)={0x32, 0xe7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x709f2000) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x16, 0x0) 39.297298065s ago: executing program 6 (id=1514): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 39.296785075s ago: executing program 6 (id=1515): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x19, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x200}}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x21, {0x4, 0xfffffffffffffffd}, 0x6}, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4, 0x0, 0x6}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x9a167000) 38.893701294s ago: executing program 6 (id=1516): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1709000000000000008001a8338e00000005000700000000000800090000000000060002000000000008000a000000000008001800ac1414aa"], 0x3c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r4, 0x0, 0xcfdc}, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r7, 0x10c, 0x9, &(0x7f0000000000)=0x1003, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r10, 0x0, 0x4}, 0x18) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1819800000e2c6f9ad19c4794b28bb073f7db018e154829c427c8ea3198412b70330c250170e2b3a00"/54], 0x18}, 0x1, 0x0, 0x0, 0x4008010}, 0x20008010) r11 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r11, &(0x7f00000000c0)=ANY=[], 0x56) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000005000000020000000b00000c0200000000005f61"], 0x0, 0x29}, 0x28) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$eJzs3E9vVFUbAPDn3k5LS/vS8ubNqxATmxjUaBwKJZiwAtdGTXThktpOSdPhj21NbMOi4F5dGOOCxPARTNzLxpWJC1wofgJiJIboBliMufOnjEyn1DLtgfL7JWfuOXNm7vM8c2HuucncBvDUGi8e8ogDEXE6ixhtPp9HxEC9Nxix2njd3dsXp4uWRa327h9ZZBFx5/bF6da+suZ2uDkYjIjrb2Tx30864y4ur8xPVauVheb48NLZC4cXl1demzs7daZypnLu2OTrxyaPT072sNabFz746rmf3nrx8tVPJ97+ct8PWZyMkeZcex29Mh7ja59Ju1JETPU6WCJ9zXra68xKCRMCAGBDedsa7v8xGn1xf/E2Gt//nDQ5AAAAoCdqfRE1AAAAYJfLXP8DAADALtf6HcCd2xenWy3tLxJ21q1TETHWqL91f3NjphSr9e1g9EfE3j+zaL+tNWu87ZGNF5G+/bFStNim+5A3snopIp5d7/hn9frH6ndxd9afR8RED+KPPzB+kuo/2YP4qesH4Ol07VTjRNZ5/svX1j+xzvmvtM65aytSn/9a67+7Heu/+/X3dVn/vbPJGAfvvXK921z7+u/9z36dKeIX20cq6l+4dSniYGm9+rO1+rMu9Z/eZIzh6ZtXus0V9Rf1ttpO11+7GnGovprrrL8l2+jvEx2enatWJhqP6+x/+fjG8duPf9GK+K1rgZ1QHP+9sbXjf2GTMcae+f1At7mH15//NpC9V+8NNJ/5eGppaeFIxED2ZufzRzfOpfWa1j6K+l9+YeP//+vVX3wnrDY/h+Jfz6XmthhffiDm8KGj32y9/u1V1D+zxeP/+SZjfP3dlQ+7zaWuHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnQx4RI5Hl5bV+npfLEcMR8b/Ym1fPLy69Onv+o3MzxVzEWPTns3PVykREjDbGWTE+Uu/fHx99YDwZEfsj4ovRofq4PH2+OpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANYMR8RIZHk5IvKI+Gs0z8vl1FkBAAAAPTeWOgEAAABg27n+BwAAgN2v4/q/9I/R4E7mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK60//lrN7KIWD0xVG+FgeZcf9LMgO2Wp04ASKYvdQJAMqW2fq1WqyVMBdhhrvGB7CHzg11n9vQ8FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeXy8duHYji4jVE0P1VhhozvUnzQzYbnnqBIBk+jaazHYuD2DnlVInACTjGh9oLPXv1Ro65we7vnPPdqYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGNmpN6yvBwReb2f5+VyxH8iYiz6s9m5amUiIvZFxC+j/XuK8ZHUSQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBzi8sr81PVamVBR0enh52heCzS2HIn9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApLC6vzE9Vq5WFxdSZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKktLq/MT1WrlYVt7KSuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdP4OAAD//1rfDrQ=") r12 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r12, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 38.786839004s ago: executing program 6 (id=1517): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x0, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) 38.560606736s ago: executing program 6 (id=1521): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async, rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060080"], 0x24}}, 0x10) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) (async) timer_delete(0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0}) (async, rerun: 32) r4 = getpgrp(0x0) (rerun: 32) syz_pidfd_open(r4, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async, rerun: 64) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1f071f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_config_ext={0x1, 0x9}, 0xa022, 0x4005, 0xb, 0x3, 0xfff, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x9, 0x0, 0xfd, 0x10000}, {0x5, 0x4, 0xd, 0xdc76}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) (async, rerun: 64) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000380)={[{@nobh}, {@debug}, {@inlinecrypt}, {@journal_checksum}, {@nodioread_nolock}]}, 0xbd, 0x7cb, &(0x7f0000000600)="$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") (rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) (rerun: 32) io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x6a0d, 0x3000, 0x1, 0x387}) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'local', '=static', @void}}}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 38.533574608s ago: executing program 34 (id=1521): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async, rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060080"], 0x24}}, 0x10) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) (async) timer_delete(0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0}) (async, rerun: 32) r4 = getpgrp(0x0) (rerun: 32) syz_pidfd_open(r4, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async, rerun: 64) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1f071f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_config_ext={0x1, 0x9}, 0xa022, 0x4005, 0xb, 0x3, 0xfff, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x9, 0x0, 0xfd, 0x10000}, {0x5, 0x4, 0xd, 0xdc76}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) (async, rerun: 64) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000380)={[{@nobh}, {@debug}, {@inlinecrypt}, {@journal_checksum}, {@nodioread_nolock}]}, 0xbd, 0x7cb, &(0x7f0000000600)="$eJzs3c9rG9kdAPDvyJZ/JaldKLTpyVBoDSFynbpJCz2k9FAKDQTacxMhKya1bAVLDrExxKEUeim0pYdCe8m5pemt1/64tv/FHpaE7K5j1sseFi0jj2w5lhw7a0mGfD4wmffmR977+s2MnvQeUgDvrOn0n1zE5Yj4XRIxmW1PIiLfTA1H3Nw7bnd7s5QuSTQaP/swaR6zs71ZirZzUheyzNci4j+/jriSSzeMHSq3tr6xVKxUyqtZfra+/GC2tr5x9f5ycbG8WF65Pjc/f+3Gd29cP7tYP/7/xsUXv//xt/5+89NfffXZb/+bxM24mO1rj+OsTMd09jfJp3/CQ3501oUNWDLoCvBW0ltzaO8uj8sxGUPNVBfj/awZANArjyOicWCkAQC8A5I4ZmfrQ7s+1gcA6LXW5wA725ul1jK4TyP67+UP94Ymd7Kxzd39+IezMbux5jjoxE5yaGQkiYipMyh/OiL+8s9f/C1dokfjkACdbD2JiLtT00ef/8mROQun9e3jdjZGm6vp1zZ7/kH//Cvt/3yvU/8vt9//iQ79n9EO9+7bePP9n3t+BsV0lfb/ftA2t223Lf7M1HiWu9Ts8+WTe/cr5fTZ9qWImIn8aJqfax7aeRbUzKvPXnUrv73/99EffvnXtPx0fXBE7vnw6OFzFor14heNu+Xlk4ivD3eKP9lv/6RL//f2Ccv4yfd/8+du+9L403hby9H4e6vxNOKbHdv/oC2TY+cnzjYvh9nWRdHBP97700S38g/af7S5TstvvRfoh7T9J46Pfyppn69ZO30Z/3s6+e9u+9qv/87xd77+R5KfN9Mj2bZHxXp9dS5iJPnp0e3XDs59lM8S2fFp/DPf6Hz/d7v+c9nc2Lv7ueMNv/jgyaU4MgV2P/6mrW7x91Ya/8Kp2v+YRCM757Vdz3aXhrqVf7L2n2+mZrItJ3n+vaGmrcSbGw8AAAAAAAAAAAAAAAAAAAAAAAAAzkAuIi5Gkivsp3O5QmHvN7y/EhO5SrVWv3KvurayEM3fyp6KfK71VZeTbd+HOpd9H34rf+21/HciiS9HxB9Hx5v5QqlaWRh08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQuXD49/8fp6tCYW/f+6ODrh0A0DNjg64AANB3Xv8B4N1zutf/8Z7VAwDon1O//28kvakIANA3Y5E/2YF3e10TAKBfjP8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY7dv3UqXxifbm6U0v/BwfW2p+vDqQrm2VFheKxVK1dUHhcVqdbFSLpSqy13/o629VaVafTAfK2uPZuvlWn22tr5xZ7m6tlK/c3+5uFi+U873LTIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLna+sZSsVIpr0ocmxg/H9U4N4nhOBfVOLNEY2jvfjgf9RmO1paRjaVibA3iPm1/SowP6OkEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcP59HgAA///sWBUA") (rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) (rerun: 32) io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x6a0d, 0x3000, 0x1, 0x387}) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'local', '=static', @void}}}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.415880838s ago: executing program 7 (id=2041): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x4, 0x273, &(0x7f0000000680)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018", @ANYRES32=r0, @ANYBLOB="000000008af8ff00000000bf00000000000007020000f8ffffffc203000008000000b70400000000000085000000c30000009500"/64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x4000) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) munlockall() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = eventfd2(0x0, 0x0) read$eventfd(r2, &(0x7f0000000040), 0x8) mq_notify(r0, &(0x7f0000000540)={0x0, 0x5, 0x0, @thr={&(0x7f0000000480)="9bc74e148e336ed4da3f201626971269292232f9c2dfa06a168f8c9d13bdbcfd7fc0101dd8b7e70c90c82d88aae8169f8a7f4bc885b2097fbcc8256dff68c8c5c4fbd1bb5f4d07875be872e692c178dd9b885975063558411ed5a47a7cb6c9f481c8ae6b7d1be748c3eb930b33a95f443baca754470410dad167acc2218e1d0eb073e2f7b6d804ba74664886c2213e8d68df3b1153", &(0x7f0000000400)="1a74a7eb17e77a5130cb27e879871cf0687fc4253a27c8933a3d07d62cccd73fc5e8acedabb29fb22bef1ec45dd150c46b2c3f5614b3148d77e3c6e8"}}) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_access\x00') fsopen(&(0x7f0000000040)='btrfs\x00', 0x1) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x80400) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000580), 0x121081, 0x0) bind$802154_raw(r4, &(0x7f00000005c0)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14) bind$unix(r3, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='kfree\x00', r7, 0x0, 0x898}, 0x18) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSBRK(r8, 0x5427) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000000), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000008600851000000200000085000000fa16b42d95000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) 3.516983704s ago: executing program 7 (id=2048): setuid(0xee00) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x93c9e418d46bacf1, 0xffffffffffffffff, 0x0) mincore(&(0x7f00005db000/0x2000)=nil, 0x2000, &(0x7f0000000280)=""/194) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000600)=0x14) unshare(0x62040200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x31) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) creat(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) close(r2) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x10017, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x300000d, 0x32, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0) 3.125659031s ago: executing program 7 (id=2062): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x39}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0xf) 3.125234471s ago: executing program 7 (id=2063): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffffffffffe6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r4, @ANYBLOB="56060900000000001c00128009000100626f6e7a5e"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYRES64=r6, @ANYRES32=r6, @ANYRES64=0x0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r7, 0x0, 0x20}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r10, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r8, 0x407, 0x401) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0xfe, 0x0, 0x1, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0xa041, 0xd) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x1b, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r11}, 0x18) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r13 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r13}, &(0x7f0000bbdffc)=0x0) timer_settime(r14, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(r12, &(0x7f0000000040)=0xfe8e, 0x12) 2.177323851s ago: executing program 1 (id=2075): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x20000000, 0xfffffffffffffffc, 0x1, 0x7}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6f, &(0x7f0000001d80)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6000318e00393a00fe880000005f7a547a00000000002001ff020000000000000000000000000001020190780000000060000006da343a00ff0100000000000000000000000000010000f40000000000000000000000000007c7ccc58ba8e640aa"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000001180)={r7, 0x5, 0x7ff, 0x101, 0x2, 0x3}, &(0x7f00000011c0)=0x14) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000)={r7, 0x7}, &(0x7f0000000080)=0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r8, 0x0, 0x9}, 0x18) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="20000000a2bda7ab9cee0328037b0000000084000000020000000a000400280000000b000002", @ANYRES32=r11], 0x20, 0x2400e044}, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x50) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x28490}, 0xc081) 2.099052249s ago: executing program 7 (id=2076): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)={0x14d500, 0x151, 0x6}, 0x18) 2.086118171s ago: executing program 7 (id=2077): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "f5c9"}]}], {0x14}}, 0x70}}, 0x0) io_setup(0x239f, &(0x7f0000000380)=0x0) r8 = eventfd2(0x5, 0x1) io_submit(r7, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r8, 0x0, 0x0, 0x800002, 0x0, 0x0, r8}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x9841, r8, 0x0, 0x0, 0x5, 0x0, 0x1, r8}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.345918851s ago: executing program 3 (id=2084): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x39}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0xf) 1.316295684s ago: executing program 3 (id=2085): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x78) r2 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) fsopen(&(0x7f00000000c0)='bpf\x00', 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000080000000000000e778fe662da5b5fdd861963ca02453fec86f09a20873c96fe8a2c01521185d0414f1755a5fec3c8eb097e3ed6bde0a4251ce64a6486ebd8538af52dadb625d4144451896", @ANYRES64=r1, @ANYRESOCT=r3, @ANYRES32=r2, @ANYRESDEC=r0, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000180)="02030e00d3fc02000000ab5d71b3edd7c9560385dcb188a8", 0x18, 0x2004c8a1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) msgget$private(0x0, 0x80) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000000180)=0x0) timer_settime(r9, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 1.207863984s ago: executing program 1 (id=2086): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x78) socket$inet_udplite(0x2, 0x2, 0x88) msgget$private(0x0, 0x80) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000180)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 552.690177ms ago: executing program 5 (id=2089): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="84200000000000001400128009000100766574680000000004000280080004"], 0x3c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x5cbba0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x11) 500.471652ms ago: executing program 5 (id=2091): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1709000000000000008001a8338e00000005000700000000000800090000000000060002000000000008000a000000000008001800ac1414aa"], 0x3c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r4, 0x0, 0xcfdc}, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r7, 0x10c, 0x9, &(0x7f0000000000)=0x1003, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r10, 0x0, 0x4}, 0x18) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1819800000e2c6f9ad19c4794b28bb073f7db018e154829c427c8ea3198412b70330c250170e2b3a00"/54], 0x18}, 0x1, 0x0, 0x0, 0x4008010}, 0x20008010) r11 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r11, &(0x7f00000000c0)=ANY=[], 0x56) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000005000000020000000b00000c0200000000005f61"], 0x0, 0x29}, 0x28) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r12 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r12, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 465.493535ms ago: executing program 0 (id=2092): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000010001000400004e21000200000000210000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd70000035000002000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000", @ANYRES32], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 454.321216ms ago: executing program 5 (id=2093): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = memfd_secret(0xbf05b74cf0a5173f) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r5) r6 = getgid() lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {0x1, 0x6}, [{0x2, 0x1, r4}, {0x2, 0x6, r4}, {0x2, 0x1, r4}, {0x2, 0x1, r4}, {0x2, 0x0, r3}, {0x2, 0x0, r3}, {0x2, 0x2, r3}], {0x4, 0x1}, [{0x8, 0x0, r6}, {0x8, 0x6, r5}, {0x8, 0x3, r5}], {0x10, 0x4}, {0x20, 0x6}}, 0x74, 0x4745d7f32fab0666) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r2, r5}}, './file0\x00'}) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x1, 0x5, 0x0, 'queue1\x00', 0x2cd}) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r11) r12 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x4c0000, 0x102) flock(r12, 0x5) r13 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) dup3(r13, r12, 0x0) 430.920029ms ago: executing program 0 (id=2094): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2004000, &(0x7f0000000040), 0xfe, 0x563, &(0x7f00000007c0)="$eJzs3c9rHFUcAPDvbHbbpK02BSnoQQI9WKndtIk/KnioR9FiQe91SaahZNMt2U1pYsH2oBcvUgQRC+If4N1j8R/wryhooUgJevASmWQ22Ta7m1/bZHU/H5j2vZnZefPmzXv5vp1dNoCBNZb9U4h4OSK+SSKOt2wrRr5xbG2/5Se3p7IliZWVT/5MIsnXNfdP8v+PNjPFiF+/jDhT2FxufXFptlKtpvN5frwxd2O8vrh09tpcZSadSa9PTE5eeGty4t133u5ZXV+//Pf3Hz/44MLXp5a/+/nRiXtJXIxj+bbWeuzBndbMWIzl16QUF5/Z8XwPCusnyUGfALsylPfzUmRjwPEYyns98P/3RUSsAANpJBL9HwZUMw5ozu035sHDBxiV7J/H769NgDbXv7j23kgMr86NjiwnT82MsvnuaA/Kz8r45Y/797Ilevc+BMCW7tyNiHPF4ubxL8nHv907t419ni3D+Af750EW/7zRLv4prMc/0Sb+Odqm7+7G1v2/8KgHxXSUxX/vtY1/1x9ajQ7luRciRkajlFy9Vk2zse3FiDgdpcNZvtvznAvLD1c6bWuN/7IlK78ZC+bn8ah4+OnXTFcalb3UudXjuxGvtI1/k/X2T9q0f3Y9Lm+zjJPp/Vc7bdu6/s/Xyk8Rr7Vt/40nWkn355Pjq/fDePOu2Oyvr07+1qn8g65/1v5Hutd/NGl9XlvfeRk/Dv+Tdtq22/v/UPLpavpQvu5WpdGYPx9xKPlo8/qJjdc28839s/qfPtV9/Gt3/49ExGfbrH+3mXQ/tP/0jtp/54mHH37+Q6fy8/qXomv7v7maOp2v2c74t90T3Mu1AwAAAAAAgH5TiIhjkRTK6+lCoVxe+3zHS3GkUK3VG2eu1hauT8fqd2VHo1RoPuk+vpZPmp9/GG3JTzyTn4yIExHx7dDIar48VatOH3TlAQAAAAAAAAAAAAAAAAAAoE8c7fD9/8zvQwd9dsBz5ye/YXBt2f978UtPQF/a7d//+R6fB7D/xP8wuPR/GFz6Pwwu/R8Gl/4Pg0v/h8Gl/wMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXb50KVtWlp/cnsry0zcXF2ZrN89Op/XZ8tzCVHmqNn+jPFOrzVTT8lRtbqvjVWu1G+cnYuHWeCOtN8bri0tX5moL1xtXrs1VZtIraWlfagUAAAAAAAAAAAAAAAAAAAD/LfXFpdlKtZrOS/RzYvg5HfnO3o9T7IfrI7HjRBLd9znokQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANvwbAAD//+f9MzI=") setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000040)={0x2b, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4e22, 0x4, 'none\x00', 0x25, 0x9, 0x3f}, 0x2c) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4, 0x2}, 0x10) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r7, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x4000000) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 389.649173ms ago: executing program 0 (id=2095): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x39}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0xf) 362.182835ms ago: executing program 0 (id=2096): mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, 0xffffffffffffffff, 0x308000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], &(0x7f0000000580)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async) sched_setaffinity(0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 301.400981ms ago: executing program 3 (id=2097): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lchown(0x0, 0x0, 0x0) 301.080251ms ago: executing program 5 (id=2098): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) (async) getpid() (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x4734}}, 0x10) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfffffff9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff7}, {0xa, 0x4e23, 0x1, @empty, 0x8}, r3, 0xe}}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r0, 0x0, 0x5}, 0x18) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r7}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) setpriority(0x0, 0x0, 0x200000000000000) ioperm(0x5, 0x8, 0x8000000000005) (async) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000), &(0x7f0000000300)) 203.60943ms ago: executing program 0 (id=2099): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) write$UHID_CREATE2(r0, 0x0, 0x119) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000280), 0x1, 0x7b9, &(0x7f00000007c0)="$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") r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 191.949712ms ago: executing program 3 (id=2100): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0x1, 0x7}, 0x402, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x1}, 0x18) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f0000000280)={0x2000}) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (async) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0x1, 0x7}, 0x402, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x1}, 0x18) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f0000000280)={0x2000}) (async) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) 164.442634ms ago: executing program 1 (id=2101): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="cc436a935af329e395f50301b9b797d0cae52b0a9fd1e56f99293c363aeef7cec3bc3e", @ANYRES64=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRES16=r1, @ANYBLOB="a5ca8dddfed95f8d17d8ac8bf8a816d967b06d5a947f10674cf1931f01f965e315d688fdf4602ae1ae7dd49d1b90752eeb2538b0c77588ee701d60da67f9d301c6cd857a2f87089390e76443657ce66d0c69a04b9a0861dacea01671b42e4fc7edc06d942384186d93b965cb27d47142236cd7976841fcbc375831137e16a2ef231f20245bb50175623db6a3ac215a303d89083eeefd11c864f153219e95fa2d895cc50e38f15dd8f003df3f580a6476bf2f743f6555743c7c0253ec601acbe210e246ec71855f389a9d8adea41569e9ab92b24cfb181de61a0a4e1f"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) (async) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a00000a8500000007000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) (async) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) ioctl$TIOCGICOUNT(r6, 0x545d, 0x0) (async) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000001480)=""/4096, &(0x7f0000000880)=0x1000) (async) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)="d194fe9645dac418aaa96a03373324944a157045b0ffa081b36e0eb5649ca926365da9cda3f29245fd6c1c9327b5875f69b01510b7dd73b7228c9e661bdd3b95edfea454a500f34a101ab2d22630ba3e0d9ea4e800ac8a18d86a45e906b95f45b954dbeaf7f12de996c0353d7d6cf5a8560f38309b6173d390fec9c1428f8aaa04f736b8ad8bfc49bd2068ee1f7bfd047a96e776d7b7ec9008728470da9a38dca403c5e34922df58a3d2bf94b21f42ab8e5c63bbfdeaccb681", 0xb9}, {&(0x7f00000002c0)="4ca1ba446253d67236000591c2436c1dc11b5708cf2dfebed1f4b025554827a03e6e4ede76b279854a3c1bb2c09582211051e85eb9f4a91721b3ffacfe26c1747ccbf8e018694b63bd565d55957cedf7fc8be894a3", 0x11}, {&(0x7f0000000900)="9bf3078233c4004e52aacb20b8c40f04872bf74d05434f61fd0538050f7fd0d63cd534bc87bcba8c91045a51ec46afee7045f54b64ad85477cf545eb02479224640c4ce5de301bab38094591c60a920413e25a08ed7586d55e35a5847d6a1b5172e5624b4971272e107e32c32ed13fc0392ef15a38d36446a8b0", 0x7a}, {&(0x7f0000000980)="4f913f1a885a9d5f2fd5963de769be720eb96c8e444aa5f5d39a59e11cbea4b33c6c06e00559378ab751d636a24361ccb2b718bc724d096d24f19daf7dde444ca042d384ff65f7e4e4e1", 0x4a}], 0x4, 0x0, 0x0, 0x101d0}}], 0x1, 0x9200000000004004) (async) recvmmsg$unix(r8, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000004c0)=""/172, 0xac}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000ac0)=""/166, 0xa6}], 0x1}}], 0x2, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000200)=0x7, 0x4) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000040008001240fffffffa11000300686173683a6e65742c6e657400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00011569703665727370616e0080000000000000000200300000001400060000000000000010000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) 97.38836ms ago: executing program 5 (id=2102): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000001000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 96.74023ms ago: executing program 1 (id=2103): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c000180090001007866726d001000001c0002800800014000000014050003000200000008000240000000060900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000200000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000100023ff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000010560100300012800b000100697036746e6c0000200002801400020000000000000000000000ffffac14142a0500090029000000080004"], 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="00000000112f0fed4e11b31e689be5cb2085", @ANYRES16=r5, @ANYBLOB="010300000000000000000100000005000100140000000c0099000200000004000000"], 0x30}}, 0x44) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021200000000000003b810000850000006d0000008d0000005000140000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket(0x2, 0xa, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r9 = accept4$inet(r8, 0x0, &(0x7f0000000000), 0x0) fcntl$setown(r9, 0x8, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r13}, 0x2c, {[{@access_uid}]}}) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000c00)=0x6, 0x5, 0x3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="0100000000000000000037000000", @ANYRES32=r11, @ANYBLOB="080026009015000008005700"], 0x2c}}, 0x80) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x5c, r10, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x451}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x17b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7b2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000001) close_range(r7, 0xffffffffffffffff, 0x0) 88.044682ms ago: executing program 3 (id=2104): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000010001000400004e21000200000000210000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd70000035000002000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000", @ANYRES32], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 78.173402ms ago: executing program 0 (id=2105): r0 = open(&(0x7f00000002c0)='./file0\x00', 0xc3, 0x16) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='rpcgss_bad_seqno\x00', r2}, 0x18) r4 = socket$kcm(0xa, 0x922000000003, 0x11) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, &(0x7f0000000000)=[{0x3ff, 0x85, 0x7, 0x7ffc0001}]}) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) r9 = pidfd_getfd(r8, r8, 0x0) setns(r9, 0x66020000) socket$inet6(0xa, 0x80002, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000008000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a1ffffff850000000600000095"], &(0x7f0000000c40)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x18) umount2(&(0x7f0000000040)='.\x00', 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, 0x0, 0x4044890) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001780)=""/4096, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x50) 15.306808ms ago: executing program 1 (id=2106): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2004000, &(0x7f0000000040), 0xfe, 0x563, &(0x7f00000007c0)="$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") setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000040)={0x2b, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4e22, 0x4, 'none\x00', 0x25, 0x9, 0x3f}, 0x2c) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4, 0x2}, 0x10) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r7, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x4000000) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 11.586429ms ago: executing program 5 (id=2107): bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff801}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 3.160129ms ago: executing program 1 (id=2108): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x78) socket$inet_udplite(0x2, 0x2, 0x88) msgget$private(0x0, 0x80) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x280) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f00000000c0)={0x3, 0x1, 0xfb3c, 0x5a}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000180)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 0s ago: executing program 3 (id=2109): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x121301, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000002ac0)={{0x1, 0x1, 0x53, 0xffffffffffffffff, {0x4}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x6, 0x0, 0x7ff, 0x0, 0x4001, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$P9_RREAD(r4, &(0x7f0000000040)={0x1009, 0x75, 0x1, {0xffe, "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"}}, 0x1009) sendmsg$NFT_BATCH(r4, &(0x7f00000017c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001780)={&(0x7f0000001500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8847}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x883e}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x892f}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x124}, 0x1, 0x0, 0x0, 0x48000}, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = openat$cgroup_ro(r4, &(0x7f0000001100)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000012c0)=ANY=[@ANYBLOB="eb0000000000000048590000000000000a00000000000000", @ANYRES32, @ANYBLOB="000000000400"/28, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r2, @ANYBLOB="000000000300"/28, @ANYRES32=r1, @ANYBLOB="000000000200"/28, @ANYRES32=r6, @ANYBLOB="000000000100"/28, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\f;\x00'/28, @ANYRES32=r4, @ANYBLOB="4577953c183a46f0aaeec9818f000000000002000000000200000000", @ANYRES32, @ANYBLOB="00000000d20400"/28, @ANYRES32=r0, @ANYBLOB="000000000100"/28]) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000001140)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) quotactl_fd$Q_GETQUOTA(r8, 0xffffffff80000702, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000001003b00000000000e00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r9}, 0x10) r10 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) pselect6(0x40, &(0x7f0000000100)={0xffffffffffffffff, 0x200, 0x3, 0xfffffffffffffffd, 0x0, 0x5, 0xfdfffffffffffffc, 0x4}, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4204, r10, 0x202, &(0x7f0000000100)={0x0}) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x24, 0x0, 0xb, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x24}}, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x4) kernel console output (not intermixed with test programs): [ T9888] loop0: detected capacity change from 0 to 164 [ 133.967213][ T9888] loop0: detected capacity change from 0 to 164 [ 134.071153][ T9888] loop0: detected capacity change from 0 to 164 [ 134.081886][ T9888] loop0: detected capacity change from 0 to 164 [ 134.242498][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 134.320762][ T9903] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.328730][ T9903] EXT4-fs: Mount option(s) incompatible with ext2 [ 134.335896][ T9898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.349120][ T9898] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.380838][ T9900] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1332'. [ 134.402910][ T9903] netlink: 308 bytes leftover after parsing attributes in process `+}[@'. [ 134.428984][ T9903] Falling back ldisc for ttyS3. [ 134.569523][ T9914] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 134.607173][ T9914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.642695][ T9927] FAULT_INJECTION: forcing a failure. [ 134.642695][ T9927] name failslab, interval 1, probability 0, space 0, times 0 [ 134.655648][ T9927] CPU: 1 UID: 0 PID: 9927 Comm: syz.3.1338 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 134.655723][ T9927] Tainted: [W]=WARN [ 134.655732][ T9927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 134.655745][ T9927] Call Trace: [ 134.655752][ T9927] [ 134.655761][ T9927] __dump_stack+0x1d/0x30 [ 134.655791][ T9927] dump_stack_lvl+0x95/0xd0 [ 134.655830][ T9927] dump_stack+0x15/0x1b [ 134.655854][ T9927] should_fail_ex+0x265/0x280 [ 134.655881][ T9927] should_failslab+0x8c/0xb0 [ 134.655909][ T9927] __kvmalloc_node_noprof+0x149/0x6b0 [ 134.655940][ T9927] ? seq_read_iter+0x143/0x950 [ 134.656047][ T9927] ? kstrtoull+0x111/0x140 [ 134.656071][ T9927] seq_read_iter+0x143/0x950 [ 134.656117][ T9927] ? kstrtouint_from_user+0x9f/0xf0 [ 134.656180][ T9927] ? 0xffffffff81000000 [ 134.656196][ T9927] ? avc_policy_seqno+0x15/0x30 [ 134.656221][ T9927] kernfs_fop_read_iter+0xc1/0x330 [ 134.656263][ T9927] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 134.656298][ T9927] vfs_read+0x64c/0x770 [ 134.656319][ T9927] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 134.656482][ T9927] ksys_read+0xda/0x1a0 [ 134.656506][ T9927] __x64_sys_read+0x40/0x50 [ 134.656525][ T9927] x64_sys_call+0x2889/0x3000 [ 134.656553][ T9927] do_syscall_64+0xca/0x2b0 [ 134.656591][ T9927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.656647][ T9927] RIP: 0033:0x7f35444af749 [ 134.656665][ T9927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.656687][ T9927] RSP: 002b:00007f3542f17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 134.656833][ T9927] RAX: ffffffffffffffda RBX: 00007f3544705fa0 RCX: 00007f35444af749 [ 134.656848][ T9927] RDX: 0000000000000ffd RSI: 00002000000022c0 RDI: 0000000000000003 [ 134.656863][ T9927] RBP: 00007f3542f17090 R08: 0000000000000000 R09: 0000000000000000 [ 134.656876][ T9927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.656890][ T9927] R13: 00007f3544706038 R14: 00007f3544705fa0 R15: 00007ffce52988c8 [ 134.656912][ T9927] [ 134.720379][ T9914] EXT4-fs error (device loop5): ext4_ext_precache:649: inode #2: comm syz.5.1334: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 134.862052][ T9932] netlink: 488 bytes leftover after parsing attributes in process `syz.0.1339'. [ 134.895290][ T9932] netlink: 488 bytes leftover after parsing attributes in process `syz.0.1339'. [ 134.962795][ T9914] EXT4-fs (loop5): Remounting filesystem read-only [ 135.023915][ T7096] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:19: bg 0: block 345: padding at end of block bitmap is not set [ 135.040308][ T7014] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.093943][ T7096] EXT4-fs (loop6): Remounting filesystem read-only [ 135.100697][ T61] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 135.230579][ T9944] EXT4-fs (loop5): orphan cleanup on readonly fs [ 135.244437][ T9944] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1344: bg 0: block 127: padding at end of block bitmap is not set [ 135.260160][ T9944] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 135.276393][ T9944] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.1344: corrupted inode contents [ 135.278735][ T8063] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.321132][ T9944] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 135.335257][ T9944] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.1344: corrupted inode contents [ 135.348378][ T9944] EXT4-fs error (device loop5): ext4_evict_inode:301: inode #15: comm syz.5.1344: mark_inode_dirty error [ 135.369272][ T9944] EXT4-fs (loop5): 1 orphan inode deleted [ 135.375872][ T9944] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 135.387299][ T9951] 9p: Bad value for 'rfdno' [ 135.394157][ T9944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.460111][ T9949] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1345'. [ 135.484200][ T9953] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.505380][ T9953] EXT4-fs: Mount option(s) incompatible with ext2 [ 135.535487][ T9953] netlink: 308 bytes leftover after parsing attributes in process `+}[@'. [ 135.610456][ T9953] Falling back ldisc for ttyS3. [ 135.641493][ T9965] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 135.688508][ T9965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.741118][ T9965] EXT4-fs error (device loop5): ext4_ext_precache:649: inode #2: comm syz.5.1352: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 135.786014][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 135.786031][ T29] audit: type=1326 audit(1766685916.849:8916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73dfd3f749 code=0x7ffc0000 [ 135.819374][ T9965] EXT4-fs (loop5): Remounting filesystem read-only [ 135.836356][ T9980] netlink: 'syz.0.1355': attribute type 39 has an invalid length. [ 135.863331][ T7014] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.863912][ T9985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1357'. [ 135.881853][ T29] audit: type=1326 audit(1766685916.889:8917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73dfd3f749 code=0x7ffc0000 [ 135.905631][ T29] audit: type=1326 audit(1766685916.889:8918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73dfd3f749 code=0x7ffc0000 [ 135.929243][ T29] audit: type=1326 audit(1766685916.889:8919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73dfd3f749 code=0x7ffc0000 [ 135.929632][ T9984] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.952936][ T29] audit: type=1326 audit(1766685916.889:8920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73dfd3f749 code=0x7ffc0000 [ 135.952967][ T29] audit: type=1326 audit(1766685916.889:8921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73dfd3f749 code=0x7ffc0000 [ 136.012394][ T29] audit: type=1326 audit(1766685916.889:8922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73dfd3f749 code=0x7ffc0000 [ 136.035849][ T29] audit: type=1326 audit(1766685916.889:8923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73dfd3f749 code=0x7ffc0000 [ 136.059372][ T29] audit: type=1326 audit(1766685916.889:8924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73dfd3f749 code=0x7ffc0000 [ 136.082908][ T29] audit: type=1326 audit(1766685916.889:8925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.0.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73dfd3f749 code=0x7ffc0000 [ 136.086509][ T9985] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 136.256589][T10007] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.281303][T10007] EXT4-fs: Mount option(s) incompatible with ext2 [ 136.310223][T10012] netlink: 'syz.1.1368': attribute type 3 has an invalid length. [ 136.318201][T10012] netlink: 'syz.1.1368': attribute type 1 has an invalid length. [ 136.367006][ T3484] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 136.374535][ T3484] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 136.382039][ T3484] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 136.389475][ T3484] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 136.396946][ T3484] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 136.404497][ T3484] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 136.412042][ T3484] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 136.419541][ T3484] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 136.425990][ T6354] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 136.426950][ T3484] hid-generic 0003:0004:0000.002A: unknown main item tag 0x0 [ 136.460820][ T3484] hid-generic 0003:0004:0000.002A: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 136.482114][ T6354] hid-generic 0000:0000:0000.002B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 136.522406][T10023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.625909][ T7559] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.691041][T10035] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 136.736503][T10035] EXT4-fs (loop6): 1 truncate cleaned up [ 136.754718][T10035] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.779797][T10045] vhci_hcd vhci_hcd.4: invalid port number 236 [ 136.811701][T10052] netlink: 'syz.1.1378': attribute type 10 has an invalid length. [ 136.820975][T10052] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.829436][T10052] bond0: (slave team0): Enslaving as an active interface with an up link [ 136.862900][T10058] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.870481][T10058] EXT4-fs: Mount option(s) incompatible with ext2 [ 136.870978][ T8063] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.004824][T10067] netlink: 'syz.0.1385': attribute type 21 has an invalid length. [ 137.034666][T10072] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 137.056073][T10072] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 137.112567][T10072] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1386: bg 0: block 248: padding at end of block bitmap is not set [ 137.164458][T10069] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 137.181983][T10069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.203727][T10072] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1386: Failed to acquire dquot type 1 [ 137.228932][T10062] EXT4-fs error (device loop1): ext4_ext_precache:649: inode #2: comm syz.1.1383: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 137.249565][T10072] EXT4-fs (loop3): 1 truncate cleaned up [ 137.261500][T10072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 137.285111][T10062] EXT4-fs (loop1): Remounting filesystem read-only [ 137.322183][ T7559] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 137.333379][T10082] EXT4-fs: Ignoring removed orlov option [ 137.347408][T10082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.368820][ T8332] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.473094][T10095] blktrace: Concurrent blktraces are not allowed on loop3 [ 137.502738][ T7014] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.655223][T10114] /dev/loop3: Can't open blockdev [ 137.682354][T10115] netlink: 'syz.5.1395': attribute type 13 has an invalid length. [ 137.862613][T10123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 138.035460][T10137] SELinux: syz.6.1404 (10137) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 138.255128][T10143] journal_path: Non-blockdev passed as './bus' [ 138.261462][T10143] EXT4-fs: error: could not find journal device path [ 138.327769][T10144] FAT-fs (loop1): Directory bread(block 199916) failed [ 138.335344][T10144] FAT-fs (loop1): Directory bread(block 199917) failed [ 138.342610][T10144] FAT-fs (loop1): Directory bread(block 199918) failed [ 138.349930][T10144] FAT-fs (loop1): Directory bread(block 199919) failed [ 138.357026][T10144] FAT-fs (loop1): Directory bread(block 199920) failed [ 138.364309][T10144] FAT-fs (loop1): Directory bread(block 199921) failed [ 138.371843][T10144] FAT-fs (loop1): Directory bread(block 199922) failed [ 138.379233][T10144] FAT-fs (loop1): Directory bread(block 199923) failed [ 138.745358][T10151] __nla_validate_parse: 9 callbacks suppressed [ 138.745416][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1407'. [ 139.088860][T10161] set_capacity_and_notify: 48 callbacks suppressed [ 139.088878][T10161] loop3: detected capacity change from 0 to 1024 [ 139.108973][T10161] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.139228][T10161] EXT4-fs: Mount option(s) incompatible with ext2 [ 139.142957][T10163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1412'. [ 139.155879][T10163] team0: Port device team_slave_1 removed [ 139.173041][T10161] netlink: 308 bytes leftover after parsing attributes in process `+}[@'. [ 139.292379][T10173] blktrace: Concurrent blktraces are not allowed on loop7 [ 139.476035][T10179] IPVS: Unknown mcast interface: hsr0 [ 139.738015][T10194] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1420'. [ 139.765150][T10198] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.772490][T10198] IPv6: NLM_F_CREATE should be set when creating new route [ 139.807206][T10198] random: crng reseeded on system resumption [ 140.000702][T10210] loop0: detected capacity change from 0 to 2048 [ 140.020512][T10210] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 140.029547][T10210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.042614][T10210] EXT4-fs error (device loop0): ext4_ext_precache:649: inode #2: comm syz.0.1424: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 140.060103][T10210] EXT4-fs (loop0): Remounting filesystem read-only [ 140.077190][ T7483] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.244464][T10221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1428'. [ 140.335361][T10223] program syz.3.1426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.427730][T10230] loop0: detected capacity change from 0 to 512 [ 140.451679][T10230] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 140.465639][T10230] EXT4-fs (loop0): 1 truncate cleaned up [ 140.472350][T10230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.491533][T10229] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 140.506995][ T7483] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.767203][T10237] 9p: Bad value for 'wfdno' [ 140.989462][T10248] loop3: detected capacity change from 0 to 1024 [ 140.996631][T10248] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.016689][T10248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.036023][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 141.036105][ T29] audit: type=1400 audit(1766685922.099:9092): avc: denied { getopt } for pid=10247 comm="syz.3.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.062195][ T29] audit: type=1400 audit(1766685922.099:9093): avc: denied { accept } for pid=10247 comm="syz.3.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.083937][ T7559] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.154566][T10259] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 141.269642][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1441'. [ 141.305808][ T29] audit: type=1326 audit(1766685922.369:9094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10265 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db32cf749 code=0x7ffc0000 [ 141.330345][ T29] audit: type=1326 audit(1766685922.369:9095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10265 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db32cf749 code=0x7ffc0000 [ 141.354286][ T29] audit: type=1326 audit(1766685922.369:9096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10265 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db32cf749 code=0x7ffc0000 [ 141.354996][T10266] loop1: detected capacity change from 0 to 256 [ 141.378230][ T29] audit: type=1326 audit(1766685922.369:9097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10265 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5db32cf749 code=0x7ffc0000 [ 141.408855][ T29] audit: type=1326 audit(1766685922.369:9098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10265 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db32cf749 code=0x7ffc0000 [ 141.421091][T10266] FAT-fs (loop1): Directory bread(block 64) failed [ 141.432837][ T29] audit: type=1326 audit(1766685922.369:9099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10265 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db32cf749 code=0x7ffc0000 [ 141.440219][T10266] FAT-fs (loop1): Directory bread(block 65) failed [ 141.463470][ T29] audit: type=1326 audit(1766685922.369:9100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10265 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db32cf749 code=0x7ffc0000 [ 141.463519][ T29] audit: type=1326 audit(1766685922.369:9101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10265 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db32cf749 code=0x7ffc0000 [ 141.471744][T10266] FAT-fs (loop1): Directory bread(block 66) failed [ 141.526801][T10266] FAT-fs (loop1): Directory bread(block 67) failed [ 141.533498][T10266] FAT-fs (loop1): Directory bread(block 68) failed [ 141.548807][T10266] FAT-fs (loop1): Directory bread(block 69) failed [ 141.555556][T10266] FAT-fs (loop1): Directory bread(block 70) failed [ 141.562706][T10266] FAT-fs (loop1): Directory bread(block 71) failed [ 141.569345][T10266] FAT-fs (loop1): Directory bread(block 72) failed [ 141.576149][T10266] FAT-fs (loop1): Directory bread(block 73) failed [ 141.598234][T10269] blktrace: Concurrent blktraces are not allowed on loop11 [ 141.764021][T10276] loop0: detected capacity change from 0 to 764 [ 141.800486][T10278] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.1447'. [ 141.811459][T10278] netlink: zone id is out of range [ 141.816949][T10278] netlink: zone id is out of range [ 141.822577][T10278] netlink: zone id is out of range [ 141.827984][T10278] netlink: zone id is out of range [ 141.833328][T10278] netlink: zone id is out of range [ 141.838806][T10278] netlink: zone id is out of range [ 141.844271][T10278] netlink: zone id is out of range [ 141.856915][T10279] bridge0: port 3(gretap0) entered blocking state [ 141.863451][T10279] bridge0: port 3(gretap0) entered disabled state [ 141.877245][T10278] netlink: set zone limit has 8 unknown bytes [ 141.880482][T10281] sctp: [Deprecated]: syz.0.1448 (pid 10281) Use of int in max_burst socket option. [ 141.880482][T10281] Use struct sctp_assoc_value instead [ 141.899266][T10279] gretap0: entered allmulticast mode [ 141.905280][T10279] gretap0: entered promiscuous mode [ 141.912027][T10278] gretap0: left allmulticast mode [ 141.919549][T10278] gretap0: left promiscuous mode [ 141.921731][T10281] random: crng reseeded on system resumption [ 141.924924][T10278] bridge0: port 3(gretap0) entered disabled state [ 141.968189][T10283] loop0: detected capacity change from 0 to 512 [ 141.975879][T10283] ext4: Unknown parameter 'uid' [ 142.048581][T10289] loop0: detected capacity change from 0 to 1024 [ 142.056647][T10289] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.065578][T10289] EXT4-fs: Mount option(s) incompatible with ext2 [ 142.075620][T10289] netlink: 308 bytes leftover after parsing attributes in process `+}[@'. [ 142.117294][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1452'. [ 142.198163][T10294] loop0: detected capacity change from 0 to 512 [ 142.214474][T10294] journal_path: Non-blockdev passed as './bus' [ 142.221155][T10294] EXT4-fs: error: could not find journal device path [ 142.237553][T10297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1454'. [ 142.281314][T10297] loop3: detected capacity change from 0 to 512 [ 142.288711][T10297] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 142.297541][T10297] EXT4-fs (loop3): invalid journal inode [ 142.303906][T10297] EXT4-fs (loop3): can't get journal size [ 142.310864][T10297] EXT4-fs (loop3): 1 truncate cleaned up [ 142.316951][T10297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.333281][T10297] IPVS: Error connecting to the multicast addr [ 142.355103][T10297] xt_CT: No such helper "pptp" [ 142.395657][ T7559] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.423474][T10305] syzkaller0: entered promiscuous mode [ 142.429225][T10305] syzkaller0: entered allmulticast mode [ 142.500067][T10310] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 142.509465][T10310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.523192][T10310] EXT4-fs error (device loop5): ext4_ext_precache:649: inode #2: comm syz.5.1458: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 142.540547][T10310] EXT4-fs (loop5): Remounting filesystem read-only [ 142.556955][ T7014] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.567647][T10307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.611177][ T7559] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.686315][T10326] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.700402][T10326] EXT4-fs: Mount option(s) incompatible with ext2 [ 142.829508][T10343] blktrace: Concurrent blktraces are not allowed on loop7 [ 142.924879][T10350] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 142.938570][T10350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.950534][T10356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10356 comm=syz.3.1474 [ 142.952405][T10350] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.022163][T10360] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.031093][T10360] EXT4-fs: Mount option(s) incompatible with ext2 [ 143.167266][T10372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.174760][T10372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.187077][T10372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.194786][T10372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.217153][T10375] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1480: error while reading EA inode 32 err=-116 [ 143.230297][T10375] EXT4-fs (loop1): Remounting filesystem read-only [ 143.237401][T10375] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 143.251839][T10375] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 143.354431][T10375] EXT4-fs (loop1): 1 orphan inode deleted [ 143.360988][T10375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.395053][T10375] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.905453][T10395] syzkaller0: entered allmulticast mode [ 143.992509][T10395] syzkaller0 (unregistering): left allmulticast mode [ 144.171126][T10404] set_capacity_and_notify: 7 callbacks suppressed [ 144.171143][T10404] loop0: detected capacity change from 0 to 128 [ 144.278216][T10410] loop0: detected capacity change from 0 to 1024 [ 144.289995][T10410] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 144.303087][ T3484] hid_parser_main: 9 callbacks suppressed [ 144.303139][ T3484] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 144.304473][T10410] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 144.329871][T10410] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 144.340818][T10410] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.1489: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 144.362148][T10410] EXT4-fs (loop0): no journal found [ 144.366023][ T3484] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 144.367400][T10410] EXT4-fs (loop0): can't get journal size [ 144.383884][T10414] loop3: detected capacity change from 0 to 2048 [ 144.410177][T10410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.422022][T10422] loop6: detected capacity change from 0 to 512 [ 144.444138][T10414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.459590][T10422] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.481141][ T8063] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.527373][ T7483] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.547233][T10439] __nla_validate_parse: 3 callbacks suppressed [ 144.547248][T10439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1496'. [ 144.580898][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1495'. [ 144.607002][ T41] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.607153][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1495'. [ 144.620705][ T41] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.633061][ T41] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.641798][ T41] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.696346][T10449] openvswitch: netlink: Missing key (keys=40, expected=80) [ 144.798684][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1502'. [ 144.808163][T10460] netlink: 'syz.6.1502': attribute type 12 has an invalid length. [ 144.824288][ T41] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.824307][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1502'. [ 144.824339][T10460] netlink: 'syz.6.1502': attribute type 12 has an invalid length. [ 144.854221][ T41] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.865542][ T41] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.874463][ T41] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.904060][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1502'. [ 144.913007][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1502'. [ 144.922044][T10460] netlink: 'syz.6.1502': attribute type 12 has an invalid length. [ 144.932040][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1502'. [ 144.941235][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1502'. [ 144.950596][T10460] netlink: 'syz.6.1502': attribute type 12 has an invalid length. [ 145.059292][T10476] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 145.059383][T10474] IPVS: stopping master sync thread 10476 ... [ 145.128018][ T7559] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.394301][T10496] loop3: detected capacity change from 0 to 512 [ 145.439192][T10496] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 145.462504][T10496] EXT4-fs (loop3): mount failed [ 145.752042][T10504] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1516'. [ 145.791335][T10504] loop6: detected capacity change from 0 to 4096 [ 145.801110][T10504] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.835854][ T8063] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 145.849671][ T8063] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 145.896121][T10511] loop0: detected capacity change from 0 to 512 [ 145.914830][T10511] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 145.929773][T10511] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 145.953526][ T6354] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 145.961817][ T6354] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 145.973654][T10517] loop5: detected capacity change from 0 to 2048 [ 146.064738][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.075249][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.111879][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.122371][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.124242][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 146.124256][ T29] audit: type=1400 audit(1766685927.199:9494): avc: denied { mounton } for pid=10523 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 146.215916][ T29] audit: type=1400 audit(1766685927.269:9495): avc: denied { create } for pid=10531 comm="syz.3.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 146.238393][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.248788][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.260264][ T29] audit: type=1400 audit(1766685927.279:9496): avc: denied { bind } for pid=10531 comm="syz.3.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 146.279826][ T29] audit: type=1400 audit(1766685927.279:9497): avc: denied { write } for pid=10531 comm="syz.3.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 146.374431][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.377148][T10541] loop1: detected capacity change from 0 to 1024 [ 146.385267][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.392300][T10541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.411002][T10541] EXT4-fs: Mount option(s) incompatible with ext2 [ 146.434605][T10541] Falling back ldisc for ttyS3. [ 146.471480][ T29] audit: type=1400 audit(1766685927.539:9498): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 146.529319][ T29] audit: type=1400 audit(1766685927.539:9499): avc: denied { search } for pid=3047 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.551524][ T29] audit: type=1400 audit(1766685927.539:9500): avc: denied { search } for pid=3047 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.575130][ T29] audit: type=1400 audit(1766685927.539:9501): avc: denied { search } for pid=3047 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.599212][ T29] audit: type=1400 audit(1766685927.539:9502): avc: denied { read } for pid=3047 comm="dhcpcd" name="n89" dev="tmpfs" ino=11769 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 146.622250][ T29] audit: type=1400 audit(1766685927.539:9503): avc: denied { open } for pid=3047 comm="dhcpcd" path="/run/udev/data/n89" dev="tmpfs" ino=11769 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 146.646206][ T12] bridge_slave_1: left allmulticast mode [ 146.652072][ T12] bridge_slave_1: left promiscuous mode [ 146.657957][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.695599][ T12] bridge_slave_0: left allmulticast mode [ 146.701606][ T12] bridge_slave_0: left promiscuous mode [ 146.707813][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.723690][T10549] loop0: detected capacity change from 0 to 512 [ 146.752943][T10549] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 146.809380][T10549] EXT4-fs error (device loop0): ext4_get_journal_inode:5849: comm syz.0.1527: inode #1792: comm syz.0.1527: iget: illegal inode # [ 146.855690][T10549] EXT4-fs (loop0): Remounting filesystem read-only [ 146.862447][T10549] EXT4-fs (loop0): no journal found [ 146.867886][T10549] EXT4-fs (loop0): can't get journal size [ 146.883971][T10549] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 146.916063][T10549] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 146.990856][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.004904][T10574] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ[^ ðìùr5_ןþQ¿Š–KiSšcèž(géÕÀõï'WÝ‚JáÜEµr+ð_N¼' [ 147.021452][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.053133][ T12] bond0 (unregistering): Released all slaves [ 147.072711][ T12] bond1 (unregistering): Released all slaves [ 147.098107][T10574] ªªªªªª: renamed from vlan0 (while UP) [ 147.143487][T10523] chnl_net:caif_netlink_parms(): no params data found [ 147.195685][ T12] hsr_slave_0: left promiscuous mode [ 147.206378][ T12] hsr_slave_1: left promiscuous mode [ 147.215903][ T12] veth1_macvtap: left promiscuous mode [ 147.236381][ T12] veth0_macvtap: left promiscuous mode [ 147.242340][ T12] veth1_vlan: left promiscuous mode [ 147.438056][T10594] netlink: 'syz.3.1537': attribute type 10 has an invalid length. [ 147.473797][T10523] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.480994][T10523] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.488634][T10523] bridge_slave_0: entered allmulticast mode [ 147.495539][T10523] bridge_slave_0: entered promiscuous mode [ 147.502949][T10523] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.510110][T10523] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.517850][T10523] bridge_slave_1: entered allmulticast mode [ 147.524720][T10523] bridge_slave_1: entered promiscuous mode [ 147.534309][T10594] batman_adv: batadv0: Adding interface: veth1_vlan [ 147.541047][T10594] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.574370][T10594] batman_adv: batadv0: Interface activated: veth1_vlan [ 147.609417][T10601] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 147.622867][T10523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.638377][T10523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.655984][T10601] EXT4-fs error (device loop1): ext4_ext_precache:649: inode #2: comm syz.1.1538: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 147.683926][ T3484] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 147.708409][ T3484] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 147.725718][T10601] EXT4-fs (loop1): Remounting filesystem read-only [ 147.795152][T10523] team0: Port device team_slave_0 added [ 147.810555][T10523] team0: Port device team_slave_1 added [ 148.013470][T10523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.020520][T10523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.046989][T10523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.173900][T10523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.181001][T10523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.207031][T10523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.252502][T10637] bridge: RTM_NEWNEIGH with invalid ether address [ 148.336552][T10644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.346063][T10523] hsr_slave_0: entered promiscuous mode [ 148.355271][T10523] hsr_slave_1: entered promiscuous mode [ 148.361321][T10644] EXT4-fs: Mount option(s) incompatible with ext2 [ 148.415210][T10644] Falling back ldisc for ttyS3. [ 148.618578][T10523] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 148.641720][T10667] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 148.651932][T10523] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 148.667632][T10674] blktrace: Concurrent blktraces are not allowed on loop1 [ 148.677184][T10667] EXT4-fs error (device loop3): ext4_ext_precache:649: inode #2: comm syz.3.1550: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 148.705737][T10523] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 148.717264][T10523] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 148.729322][T10667] EXT4-fs (loop3): Remounting filesystem read-only [ 148.743095][T10682] delete_channel: no stack [ 148.759809][T10686] /dev/loop1: Can't open blockdev [ 148.772245][T10523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.785841][T10523] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.796258][ T5571] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.803623][ T5571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.830630][ T7095] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.837949][ T7095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.861516][T10690] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 148.870926][T10690] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1555: invalid indirect mapped block 2683928664 (level 1) [ 148.882070][T10523] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.895360][T10523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.908015][T10690] EXT4-fs (loop3): Remounting filesystem read-only [ 148.916622][T10690] EXT4-fs (loop3): 1 truncate cleaned up [ 148.928543][T10694] Falling back ldisc for ttyS3. [ 149.004093][T10523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.078393][T10711] EXT4-fs: Ignoring removed orlov option [ 149.193685][T10523] veth0_vlan: entered promiscuous mode [ 149.201993][T10523] veth1_vlan: entered promiscuous mode [ 149.216248][T10523] veth0_macvtap: entered promiscuous mode [ 149.230032][T10523] veth1_macvtap: entered promiscuous mode [ 149.253081][T10523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.273796][T10523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.303582][ T2613] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.330823][ T2613] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.346023][ T2613] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.354974][ T2613] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.389565][T10745] Falling back ldisc for ttyS3. [ 149.445271][T10756] set_capacity_and_notify: 9 callbacks suppressed [ 149.445292][T10756] loop5: detected capacity change from 0 to 764 [ 149.476198][T10764] netlink: 'syz.0.1573': attribute type 30 has an invalid length. [ 149.550226][T10768] loop3: detected capacity change from 0 to 512 [ 149.570977][T10768] EXT4-fs warning (device loop3): ext4_multi_mount_protect:314: fsck is running on the filesystem [ 149.582088][T10768] EXT4-fs warning (device loop3): ext4_multi_mount_protect:314: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 149.584818][T10773] loop7: detected capacity change from 0 to 512 [ 149.670731][T10773] ext4: Unknown parameter 'func' [ 149.722535][T10768] __nla_validate_parse: 3 callbacks suppressed [ 149.722554][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1574'. [ 149.746982][T10768] team0 (unregistering): Port device team_slave_0 removed [ 149.762047][T10768] team0 (unregistering): Port device team_slave_1 removed [ 149.793822][T10786] loop7: detected capacity change from 0 to 1024 [ 149.811100][T10787] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1579'. [ 149.813475][T10786] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.832828][T10786] EXT4-fs: Mount option(s) incompatible with ext2 [ 149.867638][T10786] netlink: 308 bytes leftover after parsing attributes in process `+}[@'. [ 149.871088][T10797] loop1: detected capacity change from 0 to 764 [ 149.885730][T10797] rock: directory entry would overflow storage [ 149.892031][T10797] rock: sig=0x4f50, size=4, remaining=3 [ 149.897642][T10797] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 149.905584][T10797] Symlink component flag not implemented [ 149.911714][T10797] Symlink component flag not implemented (129) [ 149.919326][T10800] blktrace: Concurrent blktraces are not allowed on loop7 [ 149.927576][T10797] rock: directory entry would overflow storage [ 149.933846][T10797] rock: sig=0x4f50, size=4, remaining=3 [ 149.939686][T10797] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 149.960119][T10797] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.020588][T10797] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.081002][T10797] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.150400][T10797] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.207278][ T7095] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.215200][T10818] loop0: detected capacity change from 0 to 512 [ 150.223136][ T7095] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.232634][ T7095] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.242806][T10818] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 150.244353][ T5571] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.251439][T10818] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.281310][T10818] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1591: Allocating blocks 41-42 which overlap fs metadata [ 150.298827][T10818] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.1591: Allocating blocks 41-42 which overlap fs metadata [ 150.314913][T10818] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1591: Failed to acquire dquot type 1 [ 150.327513][T10818] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 150.343196][T10818] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.1591: corrupted inode contents [ 150.355997][T10818] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.1591: mark_inode_dirty error [ 150.368540][T10818] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.1591: corrupted inode contents [ 150.382917][T10818] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.1591: mark_inode_dirty error [ 150.396341][T10818] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.1591: corrupted inode contents [ 150.408781][T10818] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 150.417536][T10818] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.1591: corrupted inode contents [ 150.430645][T10818] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.1591: mark_inode_dirty error [ 150.442140][T10818] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 150.452772][T10818] EXT4-fs (loop0): 1 truncate cleaned up [ 150.464656][T10818] ext4: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 150.514730][T10829] loop0: detected capacity change from 0 to 1024 [ 150.521727][T10829] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.528745][T10829] EXT4-fs: Mount option(s) incompatible with ext2 [ 150.544521][T10829] netlink: 308 bytes leftover after parsing attributes in process `+}[@'. [ 150.670120][T10839] loop5: detected capacity change from 0 to 1024 [ 150.690284][T10839] ext4: Unknown parameter 'permit_directio' [ 150.891512][T10858] loop7: detected capacity change from 0 to 512 [ 150.900020][T10858] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 150.931512][T10858] EXT4-fs (loop7): 1 truncate cleaned up [ 150.960896][T10866] loop5: detected capacity change from 0 to 1024 [ 150.968152][T10866] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.970098][T10858] Invalid ELF header magic: != ELF [ 150.975657][T10867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.980176][T10866] EXT4-fs: Mount option(s) incompatible with ext2 [ 150.993335][T10867] EXT4-fs: Mount option(s) incompatible with ext2 [ 151.017393][T10866] Falling back ldisc for ttyS3. [ 151.024113][T10867] netlink: 308 bytes leftover after parsing attributes in process `+}[@'. [ 151.117260][T10878] blktrace: Concurrent blktraces are not allowed on loop3 [ 151.475095][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 151.475111][ T29] audit: type=1400 audit(1766685932.499:9781): avc: denied { create } for pid=10881 comm="syz.0.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 151.506914][ T29] audit: type=1400 audit(1766685932.536:9782): avc: denied { sys_admin } for pid=10881 comm="syz.0.1612" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 151.550054][ T29] audit: type=1326 audit(1766685932.574:9783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10884 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73dfd3f749 code=0x7ffc0000 [ 151.574293][ T29] audit: type=1326 audit(1766685932.574:9784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10884 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73dfd3f749 code=0x7ffc0000 [ 151.598248][ T29] audit: type=1326 audit(1766685932.574:9785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10884 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f73dfd3f749 code=0x7ffc0000 [ 151.619561][T10887] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 151.621813][ T29] audit: type=1326 audit(1766685932.574:9786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10884 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73dfd3f749 code=0x7ffc0000 [ 151.655306][ T29] audit: type=1326 audit(1766685932.574:9787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10884 comm="syz.0.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73dfd3f749 code=0x7ffc0000 [ 151.680632][T10887] EXT4-fs (loop0): 1 truncate cleaned up [ 151.691249][ T29] audit: type=1400 audit(1766685932.705:9788): avc: denied { setattr } for pid=10886 comm="syz.0.1614" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 151.714279][ T29] audit: type=1400 audit(1766685932.714:9789): avc: denied { write } for pid=10886 comm="syz.0.1614" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 151.747608][T10887] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 151.810232][T10892] program syz.3.1615 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.821164][T10892] 8021q: VLANs not supported on sit0 [ 151.937846][ T29] audit: type=1326 audit(1766685932.929:9790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.7.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a580f749 code=0x7ffc0000 [ 152.098867][T10912] sctp: [Deprecated]: syz.0.1622 (pid 10912) Use of int in max_burst socket option deprecated. [ 152.098867][T10912] Use struct sctp_assoc_value instead [ 152.203863][T10916] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1623'. [ 152.215591][T10916] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1623'. [ 152.235866][T10920] vfat: Unknown parameter 's_.name' [ 152.251333][T10916] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1623: invalid block [ 152.274613][T10916] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1623: invalid indirect mapped block 4294967295 (level 1) [ 152.311671][T10916] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1623: invalid indirect mapped block 4294967295 (level 1) [ 152.353661][T10916] EXT4-fs (loop1): 2 truncates cleaned up [ 152.368669][T10923] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 152.386557][T10923] EXT4-fs (loop7): orphan cleanup on readonly fs [ 152.407090][T10923] EXT4-fs error (device loop7): ext4_quota_enable:7173: comm syz.7.1626: Bad quota inum: 5, type: 1 [ 152.430643][T10923] EXT4-fs (loop7): Remounting filesystem read-only [ 152.437276][T10923] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=5). Please run e2fsck to fix. [ 152.507086][T10923] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 152.519836][T10928] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 152.720310][T10934] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 152.730482][T10934] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 152.838128][T10944] blktrace: Concurrent blktraces are not allowed on loop7 [ 153.518182][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1635'. [ 153.578579][T10959] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1636: bad orphan inode 134217728 [ 153.762059][T10966] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1636'. [ 153.772898][T10966] tipc: Started in network mode [ 153.777787][T10966] tipc: Node identity , cluster identity 4711 [ 153.783976][T10966] tipc: Failed to obtain node identity [ 153.789474][T10966] tipc: Enabling of bearer rejected, failed to enable media [ 153.809877][T10965] program syz.3.1638 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.820232][T10965] program syz.3.1638 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.915767][T10968] ext4 filesystem being mounted at /174/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.960366][T10970] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1640'. [ 153.987534][T10970] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.028278][T10970] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.116906][T10970] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.193792][T10970] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.246298][ T5571] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.257335][ T5571] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.267174][T10995] blktrace: Concurrent blktraces are not allowed on loop11 [ 154.269017][ T5571] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.285583][T10996] EXT4-fs (loop0): Online defrag not supported with bigalloc [ 154.300412][ T7095] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.336318][T10998] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.349661][T10998] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.1648: corrupted inode contents [ 154.364060][T10998] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.1648: mark_inode_dirty error [ 154.375942][T10998] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.1648: corrupted inode contents [ 154.476956][T11007] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 154.493873][T11008] EXT4-fs: Ignoring removed oldalloc option [ 154.507135][T11008] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 155.102309][T11031] set_capacity_and_notify: 17 callbacks suppressed [ 155.102327][T11031] loop7: detected capacity change from 0 to 764 [ 155.136888][T11033] loop0: detected capacity change from 0 to 1024 [ 155.144042][T11033] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.151446][T11033] EXT4-fs: Mount option(s) incompatible with ext2 [ 155.166264][T11035] loop5: detected capacity change from 0 to 1024 [ 155.173945][T11035] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.181553][T11035] EXT4-fs: Mount option(s) incompatible with ext2 [ 155.181982][T11033] Falling back ldisc for ttyS3. [ 155.226736][T11043] loop5: detected capacity change from 0 to 256 [ 155.234652][T11043] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.247490][T11045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62708 sclass=netlink_route_socket pid=11045 comm=syz.7.1665 [ 155.271624][T11045] xt_hashlimit: max too large, truncated to 1048576 [ 155.302278][T11052] netlink: 'syz.0.1667': attribute type 13 has an invalid length. [ 155.357825][T11052] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.365089][T11052] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.413558][T11063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11063 comm=syz.0.1667 [ 155.433507][T11052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.445606][T11052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.502239][ T4592] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.510779][ T4592] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.524416][ T4592] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.532953][ T4592] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.553054][ T4592] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.561554][ T4592] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.602876][ T4592] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.611387][ T4592] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.615648][T11070] loop5: detected capacity change from 0 to 764 [ 155.640177][T11073] blktrace: Concurrent blktraces are not allowed on loop1 [ 155.666689][T11072] loop7: detected capacity change from 0 to 2048 [ 155.710039][T10523] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 155.727411][T11083] loop5: detected capacity change from 0 to 1024 [ 155.734667][T11083] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.742953][T11083] EXT4-fs: Mount option(s) incompatible with ext2 [ 155.888126][T11097] __nla_validate_parse: 1 callbacks suppressed [ 155.888144][T11097] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1678'. [ 155.910715][T11097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.949492][T11100] loop7: detected capacity change from 0 to 256 [ 156.445008][T11108] loop3: detected capacity change from 0 to 764 [ 156.490393][T11113] loop0: detected capacity change from 0 to 512 [ 156.515824][T11119] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.523037][T11119] EXT4-fs: Mount option(s) incompatible with ext2 [ 156.566615][T11124] ext4: Unknown parameter 'smackfsroot' [ 156.584874][T11128] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 156.675717][T11131] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1693'. [ 156.691138][T11136] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1695'. [ 156.705196][T11136] bridge0: port 3(gretap0) entered blocking state [ 156.712170][T11136] bridge0: port 3(gretap0) entered disabled state [ 156.719009][T11136] gretap0: entered allmulticast mode [ 156.732957][T11136] gretap0: entered promiscuous mode [ 156.842938][T11151] blktrace: Concurrent blktraces are not allowed on loop11 [ 156.945140][T11156] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.952258][T11156] EXT4-fs: Mount option(s) incompatible with ext2 [ 156.979605][T11161] veth0: entered promiscuous mode [ 156.992243][T11160] veth0: left promiscuous mode [ 157.014071][T11163] netlink: 176 bytes leftover after parsing attributes in process `syz.7.1706'. [ 157.024704][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 157.024768][ T29] audit: type=1326 audit(1766685937.690:10059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11157 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db32cf749 code=0x7ffc0000 [ 157.073484][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1707'. [ 157.099089][ T29] audit: type=1326 audit(1766685937.709:10060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11157 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5db32cf749 code=0x7ffc0000 [ 157.122864][ T29] audit: type=1326 audit(1766685937.709:10061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11157 comm="syz.1.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db32cf749 code=0x7ffc0000 [ 158.041386][T11197] EXT4-fs mount: 38 callbacks suppressed [ 158.041404][T11197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.189830][T11194] xt_CT: No such helper "snmp" [ 158.445158][T11193] syz.5.1716 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 158.459571][T11193] CPU: 0 UID: 0 PID: 11193 Comm: syz.5.1716 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 158.459622][T11193] Tainted: [W]=WARN [ 158.459687][T11193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.459739][T11193] Call Trace: [ 158.459746][T11193] [ 158.459755][T11193] __dump_stack+0x1d/0x30 [ 158.459785][T11193] dump_stack_lvl+0x95/0xd0 [ 158.459845][T11193] dump_stack+0x15/0x1b [ 158.459869][T11193] dump_header+0x81/0x240 [ 158.459892][T11193] oom_kill_process+0x295/0x350 [ 158.459919][T11193] out_of_memory+0x97b/0xb80 [ 158.459947][T11193] try_charge_memcg+0x610/0xa10 [ 158.460027][T11193] obj_cgroup_charge_pages+0xa6/0x150 [ 158.460054][T11193] __memcg_kmem_charge_page+0x9f/0x170 [ 158.460081][T11193] __alloc_frozen_pages_noprof+0x18f/0x360 [ 158.460276][T11193] alloc_pages_mpol+0xb3/0x260 [ 158.460309][T11193] alloc_pages_noprof+0x90/0x130 [ 158.460341][T11193] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 158.460413][T11193] __kvmalloc_node_noprof+0x492/0x6b0 [ 158.460443][T11193] ? ip_set_alloc+0x24/0x30 [ 158.460472][T11193] ? ip_set_alloc+0x24/0x30 [ 158.460518][T11193] ? __kmalloc_cache_noprof+0x3e5/0x4c0 [ 158.460547][T11193] ip_set_alloc+0x24/0x30 [ 158.460579][T11193] hash_netiface_create+0x282/0x740 [ 158.460660][T11193] ? __pfx_hash_netiface_create+0x10/0x10 [ 158.460691][T11193] ip_set_create+0x3cc/0x970 [ 158.460722][T11193] ? __nla_parse+0x40/0x60 [ 158.460756][T11193] nfnetlink_rcv_msg+0x4c6/0x590 [ 158.460872][T11193] netlink_rcv_skb+0x123/0x220 [ 158.460901][T11193] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 158.460955][T11193] nfnetlink_rcv+0x167/0x16c0 [ 158.460985][T11193] ? chacha_permute+0x4ec/0x520 [ 158.461021][T11193] ? emit_mov_imm64+0x2ca/0x2e0 [ 158.461054][T11193] ? xas_load+0x413/0x430 [ 158.461149][T11193] ? xas_load+0x413/0x430 [ 158.461177][T11193] ? __rcu_read_unlock+0x4f/0x70 [ 158.461276][T11193] ? xa_load+0xb1/0xe0 [ 158.461310][T11193] ? should_fail_ex+0x30/0x280 [ 158.461332][T11193] ? selinux_nlmsg_lookup+0x99/0x890 [ 158.461435][T11193] ? __rcu_read_unlock+0x34/0x70 [ 158.461458][T11193] ? __netlink_lookup+0x266/0x2a0 [ 158.461498][T11193] netlink_unicast+0x5c0/0x690 [ 158.461534][T11193] netlink_sendmsg+0x58b/0x6b0 [ 158.461626][T11193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.461665][T11193] __sock_sendmsg+0x145/0x180 [ 158.461697][T11193] ____sys_sendmsg+0x31e/0x4a0 [ 158.461734][T11193] ___sys_sendmsg+0x17b/0x1d0 [ 158.461783][T11193] __x64_sys_sendmsg+0xd4/0x160 [ 158.461823][T11193] x64_sys_call+0x17ba/0x3000 [ 158.461874][T11193] do_syscall_64+0xca/0x2b0 [ 158.461904][T11193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.461925][T11193] RIP: 0033:0x7fd335e0f749 [ 158.461942][T11193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.461997][T11193] RSP: 002b:00007fd33486f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.462024][T11193] RAX: ffffffffffffffda RBX: 00007fd336065fa0 RCX: 00007fd335e0f749 [ 158.462040][T11193] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 158.462057][T11193] RBP: 00007fd335e93f91 R08: 0000000000000000 R09: 0000000000000000 [ 158.462073][T11193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.462087][T11193] R13: 00007fd336066038 R14: 00007fd336065fa0 R15: 00007ffc7a59a838 [ 158.462105][T11193] [ 158.794293][T11193] memory: usage 307200kB, limit 307200kB, failcnt 2926 [ 158.801373][T11193] memory+swap: usage 319232kB, limit 9007199254740988kB, failcnt 0 [ 158.806477][T11206] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1719'. [ 158.809482][T11193] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 158.809500][T11193] Memory cgroup stats for /syz5: [ 158.838374][T11193] cache 0 [ 158.846366][T11193] rss 0 [ 158.849154][T11193] shmem 0 [ 158.852095][T11193] mapped_file 0 [ 158.855566][T11193] dirty 0 [ 158.858562][T11193] writeback 0 [ 158.861922][T11193] workingset_refault_anon 48 [ 158.866685][T11193] workingset_refault_file 0 [ 158.871370][T11193] swap 12320768 [ 158.874846][T11193] swapcached 4096 [ 158.878474][T11193] pgpgin 106443 [ 158.881929][T11193] pgpgout 106440 [ 158.885642][T11193] pgfault 118880 [ 158.889313][T11193] pgmajfault 18 [ 158.892588][ T29] audit: type=1400 audit(1766685939.440:10062): avc: denied { mount } for pid=11209 comm="syz.0.1721" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 158.892778][T11193] inactive_anon 0 [ 158.892790][T11193] active_anon 4096 [ 158.892799][T11193] inactive_file 0 [ 158.892808][T11193] active_file 8192 [ 158.930239][T11193] unevictable 0 [ 158.933768][T11193] hierarchical_memory_limit 314572800 [ 158.934019][ T29] audit: type=1400 audit(1766685939.477:10063): avc: denied { mounton } for pid=11209 comm="syz.0.1721" path="/191/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 158.939156][T11193] hierarchical_memsw_limit 9223372036854771712 [ 158.939170][T11193] total_cache 0 [ 158.939178][T11193] total_rss 0 [ 158.939186][T11193] total_shmem 0 [ 158.939193][T11193] total_mapped_file 0 [ 158.939200][T11193] total_dirty 0 [ 158.939207][T11193] total_writeback 0 [ 158.961615][ T29] audit: type=1326 audit(1766685939.477:10064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73dfd3f749 code=0x7ffc0000 [ 158.967757][T11193] total_workingset_refault_anon 48 [ 158.971200][ T29] audit: type=1326 audit(1766685939.477:10065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73dfd3f749 code=0x7ffc0000 [ 158.974518][T11193] total_workingset_refault_file 0 [ 158.978016][ T29] audit: type=1326 audit(1766685939.477:10066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73dfd3f749 code=0x7ffc0000 [ 158.981944][T11193] total_swap 12320768 [ 158.985517][ T29] audit: type=1326 audit(1766685939.477:10067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73dfd3f749 code=0x7ffc0000 [ 158.989321][T11193] total_swapcached 4096 [ 158.989332][T11193] total_pgpgin 106443 [ 159.012941][ T29] audit: type=1326 audit(1766685939.477:10068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73dfd3f749 code=0x7ffc0000 [ 159.130312][T11193] total_pgpgout 106440 [ 159.134398][T11193] total_pgfault 118880 [ 159.138781][T11193] total_pgmajfault 18 [ 159.142780][T11193] total_inactive_anon 0 [ 159.146998][T11193] total_active_anon 4096 [ 159.151480][T11193] total_inactive_file 0 [ 159.155664][T11193] total_active_file 8192 [ 159.159932][T11193] total_unevictable 0 [ 159.163932][T11193] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1716,pid=11192,uid=0 [ 159.178750][T11193] Memory cgroup out of memory: Killed process 11192 (syz.5.1716) total-vm:96148kB, anon-rss:1136kB, file-rss:22332kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 159.197367][ T8332] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.349865][T11224] blktrace: Concurrent blktraces are not allowed on loop1 [ 159.397321][T11193] syz.5.1716 (11193) used greatest stack depth: 7272 bytes left [ 159.531611][T11233] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 159.542461][T11233] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.573805][T11233] EXT4-fs error (device loop7): ext4_ext_precache:649: inode #2: comm syz.7.1730: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 159.602183][T11233] EXT4-fs (loop7): Remounting filesystem read-only [ 159.619733][T10523] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.664203][T11238] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 159.676617][T11238] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.747581][T11243] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.751913][ T6741] hid-generic 0000:0000:0000.002F: unknown main item tag 0x7 [ 159.767431][ T6741] hid-generic 0000:0000:0000.002F: unknown main item tag 0x6 [ 159.774987][ T6741] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 159.782443][ T6741] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 159.789871][ T6741] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 159.797341][ T6741] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 159.804770][ T6741] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 159.812236][ T6741] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 159.819639][ T6741] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 159.827142][ T6741] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 159.835777][ T6741] hid-generic 0000:0000:0000.002F: hidraw0: HID v8.01 Device [syz0] on syz0 [ 159.985108][T11252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1735'. [ 159.994415][T11251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1735'. [ 160.337277][T11264] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 160.454867][T11269] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 160.467349][T11260] syz.0.1738 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 160.478470][T11260] CPU: 0 UID: 0 PID: 11260 Comm: syz.0.1738 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 160.478506][T11260] Tainted: [W]=WARN [ 160.478513][T11260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.478526][T11260] Call Trace: [ 160.478534][T11260] [ 160.478619][T11260] __dump_stack+0x1d/0x30 [ 160.478647][T11260] dump_stack_lvl+0x95/0xd0 [ 160.478670][T11260] dump_stack+0x15/0x1b [ 160.478688][T11260] dump_header+0x81/0x240 [ 160.478708][T11260] oom_kill_process+0x295/0x350 [ 160.478806][T11260] out_of_memory+0x97b/0xb80 [ 160.478833][T11260] try_charge_memcg+0x610/0xa10 [ 160.478859][T11260] charge_memcg+0x51/0xc0 [ 160.478928][T11260] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 160.478965][T11260] __read_swap_cache_async+0x17b/0x2d0 [ 160.479053][T11260] swap_cluster_readahead+0x262/0x3c0 [ 160.479086][T11260] swapin_readahead+0xde/0x820 [ 160.479154][T11260] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 160.479226][T11260] ? __rcu_read_unlock+0x34/0x70 [ 160.479384][T11260] ? __rcu_read_unlock+0x4f/0x70 [ 160.479461][T11260] ? swap_cache_get_folio+0x277/0x280 [ 160.479488][T11260] do_swap_page+0x2b4/0x21e0 [ 160.479545][T11260] ? __pfx_default_wake_function+0x10/0x10 [ 160.479631][T11260] handle_mm_fault+0x9d8/0x2c60 [ 160.479690][T11260] do_user_addr_fault+0x630/0x1080 [ 160.479721][T11260] exc_page_fault+0x62/0xa0 [ 160.479749][T11260] asm_exc_page_fault+0x26/0x30 [ 160.479768][T11260] RIP: 0033:0x7f73dfcfd12a [ 160.479834][T11260] Code: 48 85 ff 0f 84 0f 02 00 00 48 83 3d 1f f7 dc 00 1f 0f 87 31 01 00 00 b8 80 00 00 00 41 bd 02 00 00 00 bb 20 00 00 00 48 01 e8 <48> 8b 48 08 48 8d 70 f0 48 39 ce 0f 84 18 fe ff ff 48 8b 51 18 48 [ 160.479852][T11260] RSP: 002b:00007ffc2e358c40 EFLAGS: 00010202 [ 160.479869][T11260] RAX: 00007f73dff6ae40 RBX: 0000000000000120 RCX: 00007f73dfd3f807 [ 160.479882][T11260] RDX: 0000000000000001 RSI: 0000000000000110 RDI: 00007f73dff6acc0 [ 160.479894][T11260] RBP: 00007f73dff6acc0 R08: 00000000ffffffff R09: 0000000000000000 [ 160.479987][T11260] R10: 0000000000021000 R11: 0000000000000206 R12: 0000000000000110 [ 160.479999][T11260] R13: 0000000000000012 R14: 0000000000001000 R15: 0000000000000000 [ 160.480025][T11260] [ 160.480079][T11260] memory: usage 307200kB, limit 307200kB, failcnt 574 [ 160.600868][T11269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.601332][T11260] memory+swap: usage 95884kB, limit 9007199254740988kB, failcnt 0 [ 160.607388][T11269] EXT4-fs error (device loop5): ext4_ext_precache:649: inode #2: comm syz.5.1741: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 160.611652][T11260] kmem: usage 95488kB, limit 9007199254740988kB, failcnt 0 [ 160.611672][T11260] Memory cgroup stats for [ 160.616589][T11269] EXT4-fs (loop5): Remounting filesystem read-only [ 160.621070][T11260] /syz0: [ 160.768260][T11260] cache 524288 [ 160.774619][T11260] rss 4096 [ 160.777732][T11260] shmem 0 [ 160.780745][T11260] mapped_file 65536 [ 160.784603][T11260] dirty 0 [ 160.787543][T11260] writeback 0 [ 160.791529][T11260] workingset_refault_anon 13 [ 160.796285][T11260] workingset_refault_file 130 [ 160.801068][T11260] swap 327680 [ 160.803221][ T7014] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.804484][T11260] swapcached 8192 [ 160.817166][T11260] pgpgin 147975 [ 160.820621][T11260] pgpgout 147844 [ 160.824184][T11260] pgfault 181396 [ 160.827737][T11260] pgmajfault 12 [ 160.831245][T11260] inactive_anon 0 [ 160.834937][T11260] active_anon 8192 [ 160.838671][T11260] inactive_file 0 [ 160.838792][T11276] set_capacity_and_notify: 12 callbacks suppressed [ 160.838874][T11276] loop1: detected capacity change from 0 to 512 [ 160.842383][T11260] active_file 528384 [ 160.859333][T11260] unevictable 0 [ 160.862791][T11260] hierarchical_memory_limit 314572800 [ 160.868343][T11260] hierarchical_memsw_limit 9223372036854771712 [ 160.874577][T11260] total_cache 524288 [ 160.878506][T11260] total_rss 4096 [ 160.882040][T11260] total_shmem 0 [ 160.885625][T11260] total_mapped_file 65536 [ 160.890176][T11260] total_dirty 0 [ 160.893688][T11260] total_writeback 0 [ 160.894861][T11276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.897585][T11260] total_workingset_refault_anon 13 [ 160.897599][T11260] total_workingset_refault_file 130 [ 160.897608][T11260] total_swap 327680 [ 160.897676][T11260] total_swapcached 8192 [ 160.910215][T11276] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.915212][T11260] total_pgpgin 147975 [ 160.915225][T11260] total_pgpgout 147844 [ 160.947155][T11260] total_pgfault 181396 [ 160.951224][T11260] total_pgmajfault 12 [ 160.955306][T11260] total_inactive_anon 0 [ 160.959466][T11260] total_active_anon 8192 [ 160.963822][T11260] total_inactive_file 0 [ 160.968044][T11260] total_active_file 528384 [ 160.972459][T11260] total_unevictable 0 [ 160.976488][T11260] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1738,pid=11260,uid=0 [ 160.991319][T11260] Memory cgroup out of memory: Killed process 11260 (syz.0.1738) total-vm:94100kB, anon-rss:1264kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 161.046983][T10523] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.102147][T11283] loop0: detected capacity change from 0 to 1024 [ 161.132932][T11283] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.155766][T11283] EXT4-fs: Mount option(s) incompatible with ext2 [ 161.187364][T11291] loop5: detected capacity change from 0 to 1024 [ 161.200332][T11291] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.213908][T11291] EXT4-fs: Mount option(s) incompatible with ext2 [ 161.313141][T11283] Falling back ldisc for ttyS3. [ 161.435887][ T8332] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.487695][T11304] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 161.513105][T11309] netlink: 'syz.3.1754': attribute type 4 has an invalid length. [ 161.563981][T11304] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 161.615458][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1756'. [ 161.663228][T11316] netlink: 'syz.3.1756': attribute type 5 has an invalid length. [ 161.714025][T11323] loop0: detected capacity change from 0 to 1024 [ 161.716340][T11326] loop3: detected capacity change from 0 to 1024 [ 161.720850][T11323] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.727551][T11326] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.740968][T11326] EXT4-fs: Mount option(s) incompatible with ext2 [ 161.748087][T11323] EXT4-fs: Mount option(s) incompatible with ext2 [ 161.798446][T11323] Falling back ldisc for ttyS3. [ 161.827865][T11331] loop0: detected capacity change from 0 to 512 [ 161.835271][T11331] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.844886][T11331] EXT4-fs (loop0): orphan cleanup on readonly fs [ 161.852007][T11331] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1762: bg 0: block 248: padding at end of block bitmap is not set [ 161.866765][T11331] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1762: Failed to acquire dquot type 1 [ 161.879973][T11331] EXT4-fs (loop0): 1 truncate cleaned up [ 161.887401][T11331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.901711][T11331] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm gtp: deleted inode referenced: 12 [ 161.957551][ T7483] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.007074][T11336] loop0: detected capacity change from 0 to 764 [ 162.373661][T11358] loop0: detected capacity change from 0 to 1024 [ 162.396517][T11358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.413543][T11358] EXT4-fs: Mount option(s) incompatible with ext2 [ 162.428793][T11358] Falling back ldisc for ttyS3. [ 162.434990][T11360] loop1: detected capacity change from 0 to 128 [ 162.452615][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 162.452633][ T29] audit: type=1400 audit(1766685942.770:10145): avc: denied { execute_no_trans } for pid=11361 comm="syz.0.1774" path="/210/file0" dev="tmpfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 162.454249][T11362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11362 comm=syz.0.1774 [ 162.462633][T11360] EXT4-fs error (device loop1): __ext4_fill_super:5553: inode #2: comm syz.1.1773: iget: checksum invalid [ 162.505582][T11365] pimreg: entered allmulticast mode [ 162.511831][T11360] EXT4-fs (loop1): get root inode failed [ 162.513282][T11365] pimreg: left allmulticast mode [ 162.517571][T11360] EXT4-fs (loop1): mount failed [ 162.552715][T11369] loop0: detected capacity change from 0 to 764 [ 162.573630][T11370] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1775'. [ 162.581031][ T29] audit: type=1400 audit(1766685942.891:10146): avc: denied { create } for pid=11371 comm="syz.5.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 162.611659][ T29] audit: type=1400 audit(1766685942.919:10147): avc: denied { connect } for pid=11371 comm="syz.5.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 162.736332][ T29] audit: type=1400 audit(1766685943.031:10148): avc: denied { ioctl } for pid=11379 comm="syz.7.1780" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 162.775731][ T29] audit: type=1400 audit(1766685943.031:10149): avc: denied { validate_trans } for pid=11371 comm="syz.5.1777" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 162.787620][T11376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.796643][ T29] audit: type=1400 audit(1766685943.069:10150): avc: denied { bind } for pid=11383 comm="syz.0.1782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 162.905009][ T8332] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.964521][T11395] Falling back ldisc for ttyS3. [ 162.992028][T11382] wg2: entered promiscuous mode [ 163.028556][T11382] wg2: entered allmulticast mode [ 163.106485][ T29] audit: type=1400 audit(1766685943.387:10151): avc: denied { append } for pid=11403 comm="syz.0.1788" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 163.135804][ T2226] bridge_slave_1: left allmulticast mode [ 163.141688][ T2226] bridge_slave_1: left promiscuous mode [ 163.147478][ T2226] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.168627][ T2226] bridge_slave_0: left allmulticast mode [ 163.174482][ T2226] bridge_slave_0: left promiscuous mode [ 163.180250][ T2226] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.290923][ T2226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.301827][ T2226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.312485][ T2226] bond0 (unregistering): Released all slaves [ 163.323603][ T2226] bond1 (unregistering): Released all slaves [ 163.335065][T11407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1789'. [ 163.355690][T11418] ext4: Unknown parameter './file1' [ 163.362393][T11419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1793'. [ 163.399714][ T2226] hsr_slave_0: left promiscuous mode [ 163.405834][ T2226] hsr_slave_1: left promiscuous mode [ 163.412047][ T2226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.419482][ T2226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.427228][ T2226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.434974][ T2226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.446509][ T2226] veth1_macvtap: left promiscuous mode [ 163.452101][ T2226] veth0_macvtap: left promiscuous mode [ 163.457850][ T2226] veth1_vlan: left promiscuous mode [ 163.463089][ T2226] veth0_vlan: left promiscuous mode [ 163.528635][ T2226] team0 (unregistering): Port device team_slave_1 removed [ 163.538968][ T2226] team0 (unregistering): Port device team_slave_0 removed [ 163.810444][T11429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.834701][ T7483] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.887648][T11436] Falling back ldisc for ttyS3. [ 163.913456][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1799'. [ 163.913494][T11438] gretap0: left allmulticast mode [ 163.913511][T11438] gretap0: left promiscuous mode [ 163.913829][T11438] bridge0: port 3(gretap0) entered disabled state [ 163.923682][T11438] bridge_slave_1: left allmulticast mode [ 163.946023][T11438] bridge_slave_1: left promiscuous mode [ 163.946326][T11438] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.959765][T11438] bridge_slave_0: left allmulticast mode [ 163.959784][T11438] bridge_slave_0: left promiscuous mode [ 163.959971][T11438] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.038891][T11442] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.1801: inode has both inline data and extents flags [ 164.052483][T11442] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1801: couldn't read orphan inode 15 (err -117) [ 164.066018][T11442] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.080814][ T29] audit: type=1400 audit(1766685944.294:10152): avc: denied { create } for pid=11441 comm="syz.7.1801" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 164.104467][ T29] audit: type=1400 audit(1766685944.322:10153): avc: denied { read write } for pid=11441 comm="syz.7.1801" name="file0" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 164.127504][ T29] audit: type=1400 audit(1766685944.322:10154): avc: denied { open } for pid=11441 comm="syz.7.1801" path="/57/file0/file0" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 164.163917][T10523] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.256502][T11458] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 164.273546][T11458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.286587][T11458] EXT4-fs error (device loop1): ext4_ext_precache:649: inode #2: comm syz.1.1806: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 164.304318][T11458] EXT4-fs (loop1): Remounting filesystem read-only [ 164.329631][ T8332] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.368621][T11469] blktrace: Concurrent blktraces are not allowed on loop3 [ 164.380834][T11466] /dev/loop3: Can't open blockdev [ 164.472611][T11475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1813'. [ 164.831855][T11486] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.855166][T11486] ext4 filesystem being mounted at /146/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 164.934509][T11475] xt_TPROXY: Can be used only with -p tcp or -p udp [ 164.962740][T11495] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 164.971841][T11495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.995614][T11495] EXT4-fs error (device loop5): ext4_ext_precache:649: inode #2: comm syz.5.1819: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 165.033628][T11495] EXT4-fs (loop5): Remounting filesystem read-only [ 165.045254][ T8332] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.071279][ T7014] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.114588][T11503] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1821'. [ 165.134692][T11503] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 165.251203][T11512] blktrace: Concurrent blktraces are not allowed on loop3 [ 165.689082][T11532] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1831'. [ 165.689109][T11531] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1831'. [ 165.779457][T11537] Falling back ldisc for ttyS3. [ 166.734772][T11554] program syz.0.1837 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.824025][ T29] kauditd_printk_skb: 290 callbacks suppressed [ 167.824044][ T29] audit: type=1400 audit(1766685947.793:10445): avc: denied { read } for pid=11581 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 167.872133][ T29] audit: type=1400 audit(1766685947.830:10446): avc: denied { bind } for pid=11581 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 167.912177][T11591] __nla_validate_parse: 1 callbacks suppressed [ 167.912196][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1852'. [ 167.928739][T11593] set_capacity_and_notify: 11 callbacks suppressed [ 167.928756][T11593] loop7: detected capacity change from 0 to 1024 [ 167.960233][T11593] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.998848][T10523] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.196712][T11609] loop7: detected capacity change from 0 to 2048 [ 168.237185][T11609] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 168.356950][T11609] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1857'. [ 168.402880][ T29] audit: type=1326 audit(1766685948.335:10447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11605 comm="syz.7.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a580f749 code=0x7ffc0000 [ 168.483449][ T29] audit: type=1326 audit(1766685948.363:10448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11605 comm="syz.7.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a580f749 code=0x7ffc0000 [ 168.507344][ T29] audit: type=1326 audit(1766685948.363:10449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11605 comm="syz.7.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a580f749 code=0x7ffc0000 [ 168.531088][ T29] audit: type=1326 audit(1766685948.363:10450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11605 comm="syz.7.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a580f749 code=0x7ffc0000 [ 168.555051][ T29] audit: type=1326 audit(1766685948.363:10451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11605 comm="syz.7.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a580f749 code=0x7ffc0000 [ 168.578774][ T29] audit: type=1326 audit(1766685948.363:10452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11605 comm="syz.7.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a580f749 code=0x7ffc0000 [ 168.602587][ T29] audit: type=1326 audit(1766685948.363:10453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11605 comm="syz.7.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a580f749 code=0x7ffc0000 [ 168.626215][ T29] audit: type=1326 audit(1766685948.363:10454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11605 comm="syz.7.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f09a580f749 code=0x7ffc0000 [ 168.949683][T11609] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 168.964985][T11609] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 168.977802][T11609] EXT4-fs (loop7): This should not happen!! Data will be lost [ 168.977802][T11609] [ 168.987526][T11609] EXT4-fs (loop7): Total free blocks count 0 [ 168.993677][T11609] EXT4-fs (loop7): Free/Dirty block details [ 169.000231][T11609] EXT4-fs (loop7): free_blocks=2415919104 [ 169.006097][T11609] EXT4-fs (loop7): dirty_blocks=8192 [ 169.011412][T11609] EXT4-fs (loop7): Block reservation details [ 169.017465][T11609] EXT4-fs (loop7): i_reserved_data_blocks=512 [ 169.083050][ T7095] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 169.228888][T11628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.250006][T11628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.587005][T11646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1870'. [ 170.071931][T11664] loop7: detected capacity change from 0 to 512 [ 170.169387][T11664] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1874: bg 0: block 393: padding at end of block bitmap is not set [ 170.184141][T11664] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 170.193360][T11664] EXT4-fs (loop7): 2 truncates cleaned up [ 170.199588][T11664] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.294875][T11668] loop3: detected capacity change from 0 to 128 [ 171.067742][T11671] loop5: detected capacity change from 0 to 512 [ 171.094507][T11671] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.1877: iget: bad extra_isize 90 (inode size 256) [ 171.133238][T11671] EXT4-fs (loop5): Remounting filesystem read-only [ 171.146878][T11671] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 171.165329][T11671] EXT4-fs (loop5): 1 orphan inode deleted [ 171.191821][T11671] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.266235][ T7014] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.311635][T11676] loop3: detected capacity change from 0 to 1024 [ 171.339172][T11680] Falling back ldisc for ttyS3. [ 171.346286][T11676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.396479][ T7559] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.426763][T11685] Falling back ldisc for ttyS3. [ 171.491313][T11689] loop3: detected capacity change from 0 to 1024 [ 171.514411][T11689] EXT4-fs: Ignoring removed orlov option [ 171.536522][T11689] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 171.576233][T11689] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.1884: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 171.613767][T11689] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1884: couldn't read orphan inode 11 (err -117) [ 171.648444][T11689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.681692][T11689] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1884: Invalid block bitmap block 0 in block_group 0 [ 171.717892][T11689] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1884: Failed to acquire dquot type 0 [ 171.718706][T10523] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.754514][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1884'. [ 171.834808][T11700] delete_channel: no stack [ 171.839348][T11700] delete_channel: no stack [ 171.902767][T11689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.950341][T11707] loop0: detected capacity change from 0 to 512 [ 171.958074][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1892'. [ 172.025287][T11715] loop3: detected capacity change from 0 to 1024 [ 172.052082][T11715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.124750][ T7559] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.159317][T11722] Falling back ldisc for ttyS3. [ 172.189871][T11726] loop3: detected capacity change from 0 to 2048 [ 172.222795][T11726] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 172.240915][T11726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.259257][T11726] EXT4-fs error (device loop3): ext4_ext_precache:649: inode #2: comm syz.3.1896: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 172.276393][T11726] EXT4-fs (loop3): Remounting filesystem read-only [ 172.296107][T11732] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 172.314610][ T7559] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.328711][T11732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.341930][T11732] ext4 filesystem being mounted at /233/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.356426][T11743] netlink: 'syz.3.1901': attribute type 1 has an invalid length. [ 172.372272][T11743] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.386393][T11743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1901'. [ 172.398767][T11743] bond2 (unregistering): Released all slaves [ 172.415166][T11748] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 172.430392][T11748] EXT4-fs (loop7): mount failed [ 172.481052][ T7483] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.501771][T11760] Falling back ldisc for ttyS3. [ 172.555402][T11765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.597593][ T7483] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.619717][T11775] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 172.630806][T11775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.651526][T11775] EXT4-fs error (device loop1): ext4_ext_precache:649: inode #2: comm syz.1.1912: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 172.675610][T11775] EXT4-fs (loop1): Remounting filesystem read-only [ 172.707011][ T8332] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.770573][T11782] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1914'. [ 172.852313][T11788] xt_hashlimit: max too large, truncated to 1048576 [ 172.859672][T11788] xt_CT: You must specify a L4 protocol and not use inversions on it [ 172.871066][T11790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1915'. [ 172.882149][T11788] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 172.893942][T11788] SET target dimension over the limit! [ 172.917047][T11792] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1917: bad orphan inode 11862016 [ 172.928350][T11792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 172.941061][T11792] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.147851][ T7483] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 173.198216][T11802] Falling back ldisc for ttyS3. [ 173.272002][T11804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11804 comm=syz.0.1921 [ 173.284750][T11809] $Hÿ: renamed from .` [ 173.290249][T11809] $Hÿ: entered promiscuous mode [ 173.295323][T11809] bond_slave_0: entered promiscuous mode [ 173.301078][T11809] bond_slave_1: entered promiscuous mode [ 173.306861][T11809] dummy0: entered promiscuous mode [ 173.350892][T11818] set_capacity_and_notify: 7 callbacks suppressed [ 173.350984][T11818] loop5: detected capacity change from 0 to 1024 [ 173.379687][T11818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.411883][T11822] loop0: detected capacity change from 0 to 2048 [ 173.422086][ T7014] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.443004][T11822] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 173.454733][T11826] loop3: detected capacity change from 0 to 512 [ 173.461880][T11822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.475742][T11822] EXT4-fs error (device loop0): ext4_ext_precache:649: inode #2: comm syz.0.1925: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 173.486089][T11828] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1926'. [ 173.505016][T11822] EXT4-fs (loop0): Remounting filesystem read-only [ 173.512704][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 173.512718][ T29] audit: type=1400 audit(1766685953.115:10633): avc: denied { remount } for pid=11823 comm="syz.3.1927" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 173.541210][ T7483] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.583439][T11839] Falling back ldisc for ttyS3. [ 173.607573][T11845] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1933'. [ 173.710855][T11851] loop0: detected capacity change from 0 to 128 [ 173.721300][T11851] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.760059][T11851] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.873221][T11853] loop1: detected capacity change from 0 to 2048 [ 173.899698][ T29] audit: type=1400 audit(1766685953.480:10634): avc: denied { map } for pid=11846 comm="syz.3.1934" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 173.901389][T11849] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 173.931720][T11849] vhci_hcd vhci_hcd.2: invalid port number 96 [ 173.937831][T11849] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 173.956978][T11853] Alternate GPT is invalid, using primary GPT. [ 173.963583][T11853] loop1: p2 p3 p7 [ 174.056411][T11858] loop1: detected capacity change from 0 to 1024 [ 174.074968][T11858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.105172][ T8332] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.147646][T11862] loop1: detected capacity change from 0 to 128 [ 174.158643][T11862] pim6reg1: entered promiscuous mode [ 174.164015][T11862] pim6reg1: entered allmulticast mode [ 174.307154][T11864] SELinux: Context × is not valid (left unmapped). [ 174.345356][T11866] loop1: detected capacity change from 0 to 2048 [ 174.367014][T11866] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 174.381756][T11866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.399362][T11866] EXT4-fs error (device loop1): ext4_ext_precache:649: inode #2: comm syz.1.1939: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 174.419663][T11870] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1940'. [ 174.442402][T11866] EXT4-fs (loop1): Remounting filesystem read-only [ 174.465092][ T8332] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.523416][T11878] wg2: entered promiscuous mode [ 174.543887][T11878] netlink: 7635 bytes leftover after parsing attributes in process `syz.7.1945'. [ 174.558882][T11885] loop5: detected capacity change from 0 to 764 [ 174.579166][ T29] audit: type=1326 audit(1766685954.116:10635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.7.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a580f749 code=0x7ffc0000 [ 174.599421][T11893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1948'. [ 174.612393][T11888] loop1: detected capacity change from 0 to 1024 [ 174.621750][T11896] xt_l2tp: wrong L2TP version: 0 [ 174.632464][T11896] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1949'. [ 174.645589][ T29] audit: type=1326 audit(1766685954.135:10636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.7.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a580f749 code=0x7ffc0000 [ 174.669746][ T29] audit: type=1326 audit(1766685954.153:10637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.7.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a580f749 code=0x7ffc0000 [ 174.693825][ T29] audit: type=1326 audit(1766685954.163:10638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.7.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a580f749 code=0x7ffc0000 [ 174.717638][ T29] audit: type=1326 audit(1766685954.163:10639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.7.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a580f749 code=0x7ffc0000 [ 174.741643][ T29] audit: type=1326 audit(1766685954.163:10640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11875 comm="syz.7.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a580f749 code=0x7ffc0000 [ 174.765366][ T29] audit: type=1400 audit(1766685954.181:10641): avc: denied { setopt } for pid=11895 comm="syz.0.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 174.825830][T11888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.850575][ T8332] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.854749][T11903] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1951'. [ 174.872567][T11906] blktrace: Concurrent blktraces are not allowed on loop7 [ 174.994070][ T29] audit: type=1326 audit(1766685954.499:10642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.7.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a580f749 code=0x7ffc0000 [ 175.021237][T11911] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 175.036233][T11911] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.065101][T11911] EXT4-fs error (device loop5): ext4_ext_precache:649: inode #2: comm syz.5.1952: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 175.082357][T11911] EXT4-fs (loop5): Remounting filesystem read-only [ 175.106044][ T7014] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.984987][T11964] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 175.998576][T11964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.024896][T11964] EXT4-fs error (device loop1): ext4_ext_precache:649: inode #2: comm syz.1.1968: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 176.047797][T11964] EXT4-fs (loop1): Remounting filesystem read-only [ 176.080910][ T8332] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.329013][T11976] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1972'. [ 176.384419][T11976] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1972'. [ 176.460897][T11972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1970'. [ 176.481687][T11985] blktrace: Concurrent blktraces are not allowed on loop11 [ 176.729108][T11987] Falling back ldisc for ttyS3. [ 177.052880][T11970] siw: device registration error -23 [ 177.172448][T11994] netlink: 'syz.7.1978': attribute type 11 has an invalid length. [ 177.181734][T11994] bio_check_eod: 102 callbacks suppressed [ 177.181751][T11994] syz.7.1978: attempt to access beyond end of device [ 177.181751][T11994] loop7: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 177.202634][T11994] syz.7.1978: attempt to access beyond end of device [ 177.202634][T11994] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 177.234248][T11994] syz.7.1978: attempt to access beyond end of device [ 177.234248][T11994] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 177.268218][T11999] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 177.268872][T11999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.279929][T11994] syz.7.1978: attempt to access beyond end of device [ 177.279929][T11994] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 177.306481][T11994] syz.7.1978: attempt to access beyond end of device [ 177.306481][T11994] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 177.320580][T11994] syz.7.1978: attempt to access beyond end of device [ 177.320580][T11994] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 177.320758][ T8332] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.334040][T11994] syz.7.1978: attempt to access beyond end of device [ 177.334040][T11994] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 177.356635][T11994] syz.7.1978: attempt to access beyond end of device [ 177.356635][T11994] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 177.371187][T11994] syz.7.1978: attempt to access beyond end of device [ 177.371187][T11994] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 177.385449][T11994] syz.7.1978: attempt to access beyond end of device [ 177.385449][T11994] loop7: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 177.436520][T11994] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 177.514753][T12024] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 177.527982][T12024] openvswitch: netlink: Missing key (keys=40, expected=80) [ 177.723811][T12037] netlink: 'syz.0.1989': attribute type 3 has an invalid length. [ 177.731771][T12037] netlink: 'syz.0.1989': attribute type 1 has an invalid length. [ 177.810686][T12041] blktrace: Concurrent blktraces are not allowed on loop7 [ 177.919568][T12044] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 178.114071][T12055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 178.121371][T12055] EXT4-fs: Mount option(s) incompatible with ext2 [ 178.146165][T12055] Falling back ldisc for ttyS3. [ 178.188117][T12062] Falling back ldisc for ttyS3. [ 178.229891][T12065] blktrace: Concurrent blktraces are not allowed on loop3 [ 178.475389][T12074] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 178.503474][T12079] netlink: 'syz.5.2005': attribute type 3 has an invalid length. [ 178.511299][T12079] netlink: 'syz.5.2005': attribute type 1 has an invalid length. [ 178.755128][T12090] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 178.819457][T12089] ip6t_srh: unknown srh match flags 4000 [ 178.829066][T12103] Falling back ldisc for ttyS3. [ 179.103377][T12111] __nla_validate_parse: 6 callbacks suppressed [ 179.103396][T12111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2014'. [ 179.426080][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 179.426099][ T29] audit: type=1326 audit(1766685958.643:11039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd335e0f749 code=0x7ffc0000 [ 179.471498][ T29] audit: type=1326 audit(1766685958.681:11040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fd335e0f749 code=0x7ffc0000 [ 179.474551][T12124] blktrace: Concurrent blktraces are not allowed on loop3 [ 179.495168][ T29] audit: type=1326 audit(1766685958.681:11041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12119 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd335e0f749 code=0x7ffc0000 [ 179.513414][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2019'. [ 179.572024][T12127] netlink: 'syz.0.2022': attribute type 1 has an invalid length. [ 179.584452][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2019'. [ 179.619695][T12131] netlink: 17279 bytes leftover after parsing attributes in process `syz.5.2023'. [ 179.630579][T12131] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2023'. [ 179.646118][T12127] bond1: entered promiscuous mode [ 179.647391][T12135] Falling back ldisc for ttyS3. [ 179.651331][T12127] bond1: entered allmulticast mode [ 179.662203][T12127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.670486][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2019'. [ 179.706724][T12128] erspan1: entered allmulticast mode [ 179.714892][T12128] bond1: (slave erspan1): making interface the new active one [ 179.715304][T12140] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2026'. [ 179.722439][T12128] erspan1: entered promiscuous mode [ 179.723282][T12128] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 179.754123][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2019'. [ 179.781192][T12141] netlink: 9087 bytes leftover after parsing attributes in process `syz.5.2023'. [ 179.802273][ T29] audit: type=1400 audit(1766685958.999:11042): avc: denied { shutdown } for pid=12143 comm="syz.3.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 179.825375][T12144] netlink: 'syz.3.2027': attribute type 10 has an invalid length. [ 179.839951][T12144] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 179.869917][ T29] audit: type=1326 audit(1766685959.064:11043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12154 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35444af749 code=0x7ffc0000 [ 179.913054][T12157] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2029'. [ 179.915686][ T29] audit: type=1326 audit(1766685959.092:11044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12154 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f35444af749 code=0x7ffc0000 [ 179.945757][ T29] audit: type=1326 audit(1766685959.092:11045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12154 comm="syz.3.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35444af749 code=0x7ffc0000 [ 180.012754][T12163] set_capacity_and_notify: 10 callbacks suppressed [ 180.012773][T12163] loop3: detected capacity change from 0 to 164 [ 180.032780][T12163] /dev/loop3: Can't open blockdev [ 180.054358][T12171] Falling back ldisc for ttyS3. [ 180.094763][ T29] audit: type=1400 audit(1766685959.270:11046): avc: denied { unmount } for pid=12174 comm="syz.3.2038" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 180.119344][ T29] audit: type=1400 audit(1766685959.298:11047): avc: denied { read } for pid=12177 comm="syz.7.2039" name="file0" dev="tmpfs" ino=599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 180.172704][T12182] loop7: detected capacity change from 0 to 128 [ 180.181423][ T29] audit: type=1326 audit(1766685959.354:11048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12181 comm="syz.7.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a580f749 code=0x7ffc0000 [ 180.286078][ T3488] hid_parser_main: 20 callbacks suppressed [ 180.286093][ T3488] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 180.300273][ T3488] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 180.425190][T12196] blktrace: Concurrent blktraces are not allowed on loop3 [ 180.793328][T12198] loop0: detected capacity change from 0 to 4096 [ 181.019830][T12203] loop0: detected capacity change from 0 to 2048 [ 181.041561][T12203] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 181.151622][T12213] Falling back ldisc for ttyS3. [ 181.210152][T12219] netlink: 'syz.0.2051': attribute type 7 has an invalid length. [ 181.220843][T12216] loop3: detected capacity change from 0 to 128 [ 181.332402][T12229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.344176][T12229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.364742][T12229] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 181.388664][T12229] bond0 (unregistering): Released all slaves [ 181.437051][T12241] lo speed is unknown, defaulting to 1000 [ 181.449293][T12241] lo speed is unknown, defaulting to 1000 [ 181.457425][T12241] lo speed is unknown, defaulting to 1000 [ 181.480395][T12248] Falling back ldisc for ttyS3. [ 181.507407][T12250] netlink: 'syz.7.2063': attribute type 1 has an invalid length. [ 181.528511][T12241] infiniband syz1: set down [ 181.533139][T12241] infiniband syz1: added lo [ 181.537696][ T3484] lo speed is unknown, defaulting to 1000 [ 181.550461][T12241] RDS/IB: syz1: added [ 181.555400][T12241] smc: adding ib device syz1 with port count 1 [ 181.561891][T12241] smc: ib device syz1 port 1 has no pnetid [ 181.568093][ T3484] lo speed is unknown, defaulting to 1000 [ 181.573844][T12241] lo speed is unknown, defaulting to 1000 [ 181.586852][T12260] loop3: detected capacity change from 0 to 512 [ 181.593378][T12261] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 181.603339][T12260] EXT4-fs: inline encryption not supported [ 181.614553][T12241] lo speed is unknown, defaulting to 1000 [ 181.626528][T12260] netlink: zone id is out of range [ 181.631733][T12260] netlink: zone id is out of range [ 181.637132][T12260] netlink: zone id is out of range [ 181.642369][T12260] netlink: zone id is out of range [ 181.647717][T12260] netlink: zone id is out of range [ 181.652925][T12241] lo speed is unknown, defaulting to 1000 [ 181.653023][T12260] netlink: zone id is out of range [ 181.664634][T12260] netlink: zone id is out of range [ 181.670206][T12260] netlink: zone id is out of range [ 181.690871][T12241] lo speed is unknown, defaulting to 1000 [ 181.728960][T12241] lo speed is unknown, defaulting to 1000 [ 181.778555][T12271] blktrace: Concurrent blktraces are not allowed on loop7 [ 181.915470][T12273] FAULT_INJECTION: forcing a failure. [ 181.915470][T12273] name fail_futex, interval 1, probability 0, space 0, times 1 [ 181.925091][ T6807] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 181.928446][T12273] CPU: 0 UID: 0 PID: 12273 Comm: syz.5.2069 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 181.928479][T12273] Tainted: [W]=WARN [ 181.928486][T12273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.928499][T12273] Call Trace: [ 181.928584][T12273] [ 181.928593][T12273] __dump_stack+0x1d/0x30 [ 181.928620][T12273] dump_stack_lvl+0x95/0xd0 [ 181.928645][T12273] dump_stack+0x15/0x1b [ 181.928665][T12273] should_fail_ex+0x265/0x280 [ 181.928689][T12273] should_fail+0xb/0x20 [ 181.928709][T12273] should_fail_futex+0x49/0x50 [ 181.928733][T12273] futex_lock_pi_atomic+0xcb/0x860 [ 181.928998][T12273] ? _raw_spin_lock+0x52/0xa0 [ 181.929071][T12273] futex_lock_pi+0x17a/0x780 [ 181.929104][T12273] ? __pfx_futex_wake_mark+0x10/0x10 [ 181.929239][T12273] do_futex+0x21f/0x380 [ 181.929303][T12273] __se_sys_futex+0x2ed/0x360 [ 181.929329][T12273] ? mutex_unlock+0x4f/0x90 [ 181.929400][T12273] __x64_sys_futex+0x78/0x90 [ 181.929427][T12273] x64_sys_call+0x2bc2/0x3000 [ 181.929452][T12273] do_syscall_64+0xca/0x2b0 [ 181.929548][T12273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.929640][T12273] RIP: 0033:0x7fd335e0f749 [ 181.929657][T12273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.929675][T12273] RSP: 002b:00007fd33486f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 181.929696][T12273] RAX: ffffffffffffffda RBX: 00007fd336065fa0 RCX: 00007fd335e0f749 [ 181.929710][T12273] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 000020000000cffc [ 181.929735][T12273] RBP: 00007fd33486f090 R08: 0000000000000000 R09: 00000000fffffffc [ 181.929748][T12273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.929760][T12273] R13: 00007fd336066038 R14: 00007fd336065fa0 R15: 00007ffc7a59a838 [ 181.929805][T12273] [ 181.947809][T12280] loop0: detected capacity change from 0 to 2048 [ 181.965903][ T6807] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 182.353663][T12285] Falling back ldisc for ttyS3. [ 182.372645][T12287] loop1: detected capacity change from 0 to 512 [ 182.379554][T12287] EXT4-fs: dax option not supported [ 183.198169][T12313] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12313 comm=syz.3.2082 [ 183.212354][T12314] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12314 comm=syz.3.2082 [ 183.272549][T12320] Falling back ldisc for ttyS3. [ 183.548270][T12325] lo speed is unknown, defaulting to 1000 [ 184.040683][T12332] loop5: detected capacity change from 0 to 2048 [ 184.097043][T12337] loop0: detected capacity change from 0 to 2048 [ 184.109509][T12337] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 184.120968][T12337] EXT4-fs error (device loop0): ext4_ext_precache:649: inode #2: comm syz.0.2090: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 184.138172][T12337] EXT4-fs (loop0): Remounting filesystem read-only [ 184.243349][T12354] Falling back ldisc for ttyS3. [ 184.470374][T12374] IPVS: length: 4096 != 24 [ 184.582345][T12386] __nla_validate_parse: 13 callbacks suppressed [ 184.582382][T12386] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2104'. [ 184.623335][T12395] ================================================================== [ 184.631467][T12395] BUG: KCSAN: data-race in __percpu_counter_init_many / copy_mm [ 184.639128][T12395] [ 184.641551][T12395] write to 0xffff88810005a6c8 of 8 bytes by task 7559 on cpu 1: [ 184.649198][T12395] __percpu_counter_init_many+0x292/0x310 [ 184.654934][T12395] mm_init+0x506/0x650 [ 184.659073][T12395] copy_mm+0x101/0x370 [ 184.663149][T12395] copy_process+0xcbc/0x1ef0 [ 184.667741][T12395] kernel_clone+0x16c/0x5c0 [ 184.672248][T12395] __x64_sys_clone+0xe6/0x120 [ 184.676927][T12395] x64_sys_call+0x12d0/0x3000 [ 184.681613][T12395] do_syscall_64+0xca/0x2b0 [ 184.686241][T12395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.692138][T12395] [ 184.694463][T12395] read to 0xffff88810005a1c0 of 1664 bytes by task 12395 on cpu 0: [ 184.702438][T12395] copy_mm+0xe2/0x370 [ 184.706424][T12395] copy_process+0xcbc/0x1ef0 [ 184.711016][T12395] kernel_clone+0x16c/0x5c0 [ 184.715523][T12395] __x64_sys_clone+0xe6/0x120 [ 184.720207][T12395] x64_sys_call+0x12d0/0x3000 [ 184.724905][T12395] do_syscall_64+0xca/0x2b0 [ 184.729506][T12395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.735411][T12395] [ 184.737819][T12395] Reported by Kernel Concurrency Sanitizer on: [ 184.744094][T12395] CPU: 0 UID: 0 PID: 12395 Comm: syz.5.2107 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 184.755643][T12395] Tainted: [W]=WARN [ 184.759447][T12395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.769592][T12395] ================================================================== [ 184.796297][T12398] autofs4:pid:12398:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 184.797060][ T29] kauditd_printk_skb: 1119 callbacks suppressed [ 184.797075][ T29] audit: type=1326 audit(1766685963.676:12168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12397 comm="syz.3.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35444af749 code=0x7ffc0000 [ 184.836019][ T29] audit: type=1326 audit(1766685963.676:12169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12397 comm="syz.3.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35444af749 code=0x7ffc0000 [ 184.859643][ T29] audit: type=1326 audit(1766685963.676:12170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12397 comm="syz.3.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35444af749 code=0x7ffc0000 [ 184.883440][ T29] audit: type=1326 audit(1766685963.676:12171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12397 comm="syz.3.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f35444af749 code=0x7ffc0000 [ 184.907275][ T29] audit: type=1326 audit(1766685963.676:12172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12397 comm="syz.3.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35444af749 code=0x7ffc0000 [ 184.931065][ T29] audit: type=1326 audit(1766685963.676:12173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12397 comm="syz.3.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f35444af749 code=0x7ffc0000 [ 184.958007][ T29] audit: type=1326 audit(1766685963.685:12174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12397 comm="syz.3.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35444af749 code=0x7ffc0000 [ 184.958042][ T29] audit: type=1326 audit(1766685963.685:12175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12397 comm="syz.3.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35444af749 code=0x7ffc0000 [ 184.958072][ T29] audit: type=1326 audit(1766685963.685:12176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12397 comm="syz.3.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35444af749 code=0x7ffc0000 [ 184.958109][ T29] audit: type=1326 audit(1766685963.685:12177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12397 comm="syz.3.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35444af749 code=0x7ffc0000 [ 185.148092][ T998] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.191013][ T998] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.243169][ T998] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.318468][ T998] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.397531][ T998] bridge_slave_1: left allmulticast mode [ 185.403334][ T998] bridge_slave_1: left promiscuous mode [ 185.408989][ T998] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.417228][ T998] bridge_slave_0: left allmulticast mode [ 185.422888][ T998] bridge_slave_0: left promiscuous mode [ 185.428766][ T998] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.660233][ T998] bond1 (unregistering): Released all slaves [ 185.732235][ T998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.739710][ T998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.747865][ T998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.755416][ T998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.764484][ T998] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 185.771561][ T998] batman_adv: batadv0: Removing interface: veth1_vlan [ 185.782021][ T998] veth1_macvtap: left promiscuous mode [ 185.789407][ T998] veth0_macvtap: left promiscuous mode [ 185.795048][ T998] veth1_vlan: left promiscuous mode [ 185.801656][ T998] veth0_vlan: left promiscuous mode [ 186.174421][ T998] IPVS: stop unused estimator thread 0... [ 186.770210][ T3578] Bluetooth: hci0: Opcode 0x1003 failed: -110