last executing test programs: 5m30.887268423s ago: executing program 1 (id=89): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(r0) 5m30.792004932s ago: executing program 1 (id=94): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000580)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000200)="8000000011", 0x5}, {&(0x7f00000004c0)}], 0x3) 5m30.741171706s ago: executing program 1 (id=96): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="afa1180100181100"/20, @ANYRES32, @ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r0}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0xc, 0xc340) 5m30.69768446s ago: executing program 1 (id=98): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0xa, 0x8006, 0x802c3, 0x9, 0x40004}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000000)=0x1003, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x4}, 0x18) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1819800000e2c6f9ad19c4794b28bb073f7db018e154829c427c8ea3198412b70330c250170e2b3a00"/54], 0x18}, 0x1, 0x0, 0x0, 0x4008010}, 0x20008010) r6 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r6, &(0x7f00000000c0)=ANY=[], 0x56) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000005000000020000000b00000c0200000000005f61"], 0x0, 0x29}, 0x28) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$eJzs3E9vVFUbAPDn3k5LS/vS8ubNqxATmxjUaBwKJZiwAtdGTXThktpOSdPhj21NbMOi4F5dGOOCxPARTNzLxpWJC1wofgJiJIboBliMufOnjEyn1DLtgfL7JWfuOXNm7vM8c2HuucncBvDUGi8e8ogDEXE6ixhtPp9HxEC9Nxix2njd3dsXp4uWRa327h9ZZBFx5/bF6da+suZ2uDkYjIjrb2Tx30864y4ur8xPVauVheb48NLZC4cXl1demzs7daZypnLu2OTrxyaPT072sNabFz746rmf3nrx8tVPJ97+ct8PWZyMkeZcex29Mh7ja59Ju1JETPU6WCJ9zXra68xKCRMCAGBDedsa7v8xGn1xf/E2Gt//nDQ5AAAAoCdqfRE1AAAAYJfLXP8DAADALtf6HcCd2xenWy3tLxJ21q1TETHWqL91f3NjphSr9e1g9EfE3j+zaL+tNWu87ZGNF5G+/bFStNim+5A3snopIp5d7/hn9frH6ndxd9afR8RED+KPPzB+kuo/2YP4qesH4Ol07VTjRNZ5/svX1j+xzvmvtM65aytSn/9a67+7Heu/+/X3dVn/vbPJGAfvvXK921z7+u/9z36dKeIX20cq6l+4dSniYGm9+rO1+rMu9Z/eZIzh6ZtXus0V9Rf1ttpO11+7GnGovprrrL8l2+jvEx2enatWJhqP6+x/+fjG8duPf9GK+K1rgZ1QHP+9sbXjf2GTMcae+f1At7mH15//NpC9V+8NNJ/5eGppaeFIxED2ZufzRzfOpfWa1j6K+l9+YeP//+vVX3wnrDY/h+Jfz6XmthhffiDm8KGj32y9/u1V1D+zxeP/+SZjfP3dlQ+7zaWuHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnQx4RI5Hl5bV+npfLEcMR8b/Ym1fPLy69Onv+o3MzxVzEWPTns3PVykREjDbGWTE+Uu/fHx99YDwZEfsj4ovRofq4PH2+OpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANYMR8RIZHk5IvKI+Gs0z8vl1FkBAAAAPTeWOgEAAABg27n+BwAAgN2v4/q/9I/R4E7mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK60//lrN7KIWD0xVG+FgeZcf9LMgO2Wp04ASKYvdQJAMqW2fq1WqyVMBdhhrvGB7CHzg11n9vQ8FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeXy8duHYji4jVE0P1VhhozvUnzQzYbnnqBIBk+jaazHYuD2DnlVInACTjGh9oLPXv1Ro65we7vnPPdqYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGNmpN6yvBwReb2f5+VyxH8iYiz6s9m5amUiIvZFxC+j/XuK8ZHUSQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBzi8sr81PVamVBR0enh52heCzS2HIn9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApLC6vzE9Vq5WFxdSZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKktLq/MT1WrlYVt7KSuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdP4OAAD//1rfDrQ=") r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r7, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) r8 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRES8=r7], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r10, 0x0, 0xfffffffffffffffe}, 0x18) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000ac0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, &(0x7f0000001ac0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 5m30.0471968s ago: executing program 1 (id=105): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) close(r0) 5m29.808598632s ago: executing program 1 (id=115): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) socket$kcm(0x29, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020400) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) setns(r3, 0x24020000) 5m29.766358126s ago: executing program 32 (id=115): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb261a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4d8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c952197b0a508c0e16fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d6"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) socket$kcm(0x29, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020400) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) setns(r3, 0x24020000) 5m22.037635597s ago: executing program 2 (id=259): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = memfd_secret(0x80000) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x104, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1006, 0x0, 0xfffffffc, 0x0, 0xed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18) fcntl$setlease(r0, 0x400, 0x0) close(r0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r4, 0xc0a85322, &(0x7f0000000040)) r5 = syz_io_uring_setup(0x2be5, &(0x7f0000000100)={0x0, 0x1002ad7, 0x4000, 0x2, 0xf}, &(0x7f0000000180), &(0x7f0000000340)) unshare(0x80) r6 = gettid() kcmp$KCMP_EPOLL_TFD(r6, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000018c0)={r4, r5, 0x7fff}) sched_setaffinity(0x0, 0x8, &(0x7f0000002980)=0xffffffff) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x6, 0x4) unshare(0x8010000) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000002a80)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)=ANY=[@ANYBLOB="140000000806010400000000000001000300000a"], 0x14}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) r9 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r9) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c232000, 0x3, 0x2}) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5m21.991638301s ago: executing program 2 (id=261): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r0) 5m21.845688144s ago: executing program 2 (id=264): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x28, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xe4, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa17c092a1b40f68ced0000f8ffffffb7020000040000e6b703000000000000850000007200000095ab4dd8b3759b8aadad31608ca4f7e761fd03b1d4cecbd8e6eceec60199913325c7b01d57e5ba4744e41801f4655972d20e2b22ac0ef2d3fbb02599f5131c9541bfcedcabe4ac76a258dae40e4dfa93f01c1838620cea2b68478eb63bbbfcba07f2c7e898a76239023e3032a4"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="180019000000000000000000eaffffff17110000", @ANYRES64=r0, @ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000800)='mm_shrink_slab_end\x00', r2, 0x0, 0x2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000400000008000000ad"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000240000005000000", @ANYRES32=r5], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='finish_task_reaping\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x40, 0xff, 0x0, 0xa9}]}) 5m21.764819962s ago: executing program 2 (id=265): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450015b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af5800bf2649a50f2da843efa8698dfa873451852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe095f004a0372d73c3c8f9d1e7c543808a81c147ec857ed0e6623903e7881dcac7d04a3312d5d13cd3f4395"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="fde7991800000000000000080000000000000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r6, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000004c0)="1a", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) socket(0x10, 0x803, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000130001002dbd7000fcdbdf2500000000", @ANYRES32=r9, @ANYBLOB="00000800250002000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) 5m20.956089136s ago: executing program 2 (id=278): unshare(0x2000400) syz_io_uring_setup(0x24be, &(0x7f00000002c0)={0x0, 0x9e64, 0x10100, 0x2000000, 0x132}, &(0x7f0000000100), &(0x7f0000000200)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = getpgrp(0x0) tkill(r5, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x5}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7012000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x200088c4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfa, 0x3, 0x2, 0x5c, @local, @empty, 0x7800, 0x40, 0x4, 0x4}}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) waitid(0x0, r8, 0x0, 0x8, 0xfffffffffffffffd) socket$kcm(0x29, 0x0, 0x0) 5m20.686333541s ago: executing program 2 (id=287): socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) 5m20.683212532s ago: executing program 33 (id=287): socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) 4m56.104739353s ago: executing program 4 (id=862): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r3], 0x4c}}, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001980)=""/4089, 0x1000}], 0x3, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0xffffff1a}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x20000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) r5 = open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x84042, 0x0) r6 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r6, &(0x7f0000fc4fbe)=""/80, 0x50) ioctl$FICLONE(r6, 0x40049409, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ptrace(0x10, r7) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r7, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r7, 0x80000001, 0x4) unlinkat(r6, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') 4m55.274669719s ago: executing program 4 (id=886): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}}, r3, 0x9}}, 0x48) 4m55.025802182s ago: executing program 4 (id=891): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="020aed02070000000000", @ANYRES16], 0x38}}, 0x0) 4m55.009455794s ago: executing program 34 (id=891): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="020aed02070000000000", @ANYRES16], 0x38}}, 0x0) 58.649519713s ago: executing program 7 (id=5737): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@empty, @rand_addr, 0x0}, &(0x7f0000000300)=0xc) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x402600}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004000}, 0x20000080) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000bc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r4, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x1}, 0x18) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0x2, 0x6, 0x7fff, 0x401, 0x3, "06926109040c9fa942e0f729a84fc937040fac"}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7"], 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000001980)={{}, {0x0, 0x989680}}, 0x0) eventfd(0x2) io_submit(0x0, 0x1, &(0x7f0000000c00)=[0x0]) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg1\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r0, 0x20, &(0x7f0000000700)={&(0x7f0000000540)=""/195, 0xc3, 0x0, &(0x7f0000000640)=""/131, 0x83}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x13, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000240)='syzkaller\x00', 0x225c, 0xb1, &(0x7f0000000400)=""/177, 0x40f00, 0x1, '\x00', r6, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x2, 0x0, 0xfffffffc, 0x346}, 0x10, r7, r0, 0x4, &(0x7f0000000780)=[r0], &(0x7f00000007c0)=[{0x4, 0x1, 0x8, 0xa}, {0x1, 0x3, 0x5, 0x3}, {0x3, 0x4, 0xc, 0x6}, {0x0, 0x3, 0x10, 0x3}], 0x10, 0xe}, 0x94) ftruncate(r0, 0x3) timerfd_gettime(r0, &(0x7f00000001c0)) 58.343711902s ago: executing program 7 (id=5740): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 58.166300788s ago: executing program 7 (id=5743): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchownat(r3, &(0x7f0000000080)='.\x00', 0x0, r1, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) 58.138082761s ago: executing program 7 (id=5744): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000580)={[{@noquota}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@sysvgroups}, {@data_err_ignore}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setgid(0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x3}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file1', [{0x20, 'dioread_nolock'}], 0xa, "e3a77c28807b0bc8501485413cf630cdc1433a13d1dbe5b929e2bfc5b80c72617e2d48112c5e778ca19a371289a05a1a01a30bfd3fc2577beb4f272f43021fd73893c4754c172aacd6f1bd69c9e9bcc051c0292e4c4819dd165243580078420af4f3bf269cf1497b59b036a46f0ef4f46657c6e71d3ed3220e591d3dd67b1ce5073428a92be2b95eb9b0602d3241cd714800000000000000"}, 0xb2) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xffed) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240), 0x0, 0x9c00, 0x3, 0x3) r3 = memfd_secret(0x80000) r4 = openat(r3, &(0x7f0000000680)='./file0\x00', 0x2000, 0x91) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffc, 0x6, 0x1}) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r6) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000d80)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x3b8, 0x16, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xd0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_HOOK={0x128, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'syz_tun\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3737}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x15c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELSET={0x3f4, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_DESC={0x278, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_DESC_CONCAT={0xbc, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x52c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa71}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3401657d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f0}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_DESC_CONCAT={0x1a8, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x757a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x55}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff11f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x806}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1974}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbd4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x71005a1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x86}, @NFTA_SET_FIELD_LEN={0x8}]}]}]}, @NFTA_SET_DESC={0x168, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x164, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbfc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x865}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x830}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_settime(r5, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r5, 0x1, &(0x7f0000000a00), &(0x7f0000000a40)) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffe, 0xe4c, 0xf2}) 57.798540141s ago: executing program 7 (id=5750): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r2, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x72, 0x20000}, 0x20) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r4, &(0x7f0000000280)=[{&(0x7f0000000000)="a6", 0x1}], 0x1, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0xffff, 0x0) sendmmsg$unix(r7, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="b7", 0x1}], 0x1, 0x0, 0x0, 0x20000080}}], 0x1, 0x0) bind$inet(r0, 0x0, 0x0) io_uring_setup(0x7d7e, &(0x7f0000000b00)) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000380)='rxrpc\x00', 0x0, &(0x7f00000003c0)="01000000020000a9584109b35ae059630b008145f94cd9776ef916feffa2df81249d", 0x22, 0xffffffffffffffff) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 57.552142394s ago: executing program 7 (id=5754): capset(&(0x7f00000004c0)={0x19980330}, &(0x7f0000000040)={0x200000, 0x0, 0x0, 0x6, 0x6, 0x1}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ppoll(&(0x7f0000003840), 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x100, 0x30120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x4000, 0x7f, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchownat(r5, &(0x7f0000000080)='.\x00', 0x0, r3, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) socket$unix(0x1, 0x1, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x1, 'queue1\x00', 0x200000}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r7, &(0x7f0000000000)=[{0x8, 0x0, 0x8, 0xfd, @time={0xfffffff0, 0x3ff}, {}, {}, @result}], 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x5}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 57.537920876s ago: executing program 35 (id=5754): capset(&(0x7f00000004c0)={0x19980330}, &(0x7f0000000040)={0x200000, 0x0, 0x0, 0x6, 0x6, 0x1}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ppoll(&(0x7f0000003840), 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x100, 0x30120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x4000, 0x7f, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchownat(r5, &(0x7f0000000080)='.\x00', 0x0, r3, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) socket$unix(0x1, 0x1, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x1, 'queue1\x00', 0x200000}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r7, &(0x7f0000000000)=[{0x8, 0x0, 0x8, 0xfd, @time={0xfffffff0, 0x3ff}, {}, {}, @result}], 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x5}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 3.127872302s ago: executing program 3 (id=6552): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) lsm_set_self_attr(0x67, 0x0, 0x0, 0x0) 3.053802209s ago: executing program 3 (id=6553): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_read_part_table(0x628, &(0x7f0000000000)="$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") r0 = socket$inet_icmp(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0xa, 0x5, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x7, 0x7ff, 0x1be, 0x6e222, 0xffffffffffffffff, 0x40000007, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x5, @value=r5}, 0x50) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, 0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 2.39531159s ago: executing program 0 (id=6562): shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x8000, 0x10, 0x7, 0x7fffffff, {{0x48, 0x4, 0x1, 0x4, 0x120, 0x64, 0x0, 0x9, 0x29, 0x0, @remote, @remote, {[@lsrr={0x83, 0xf, 0x89, [@multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x32}]}, @timestamp_addr={0x44, 0x44, 0x4b, 0x1, 0x6, [{@local, 0x6}, {@loopback, 0x5}, {@multicast1, 0x101}, {@broadcast}, {@multicast1, 0x7}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x4}, {@loopback, 0xfffffffc}, {@multicast2, 0x10}]}, @timestamp_prespec={0x44, 0x4c, 0x4e, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x9}, {@rand_addr=0x64010102, 0xfffffffc}, {@loopback, 0x400}, {@loopback, 0x2}, {@private=0xa010101, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@multicast2, 0x2fb}, {@multicast1, 0x400}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @cipso={0x86, 0x5e, 0x1, [{0x2, 0xb, "4de6846354122d5ae4"}, {0x7, 0xa, "68e657843f9fd2c5"}, {0x7, 0xe, "3546f14f78cd76b9616c2a91"}, {0x6, 0x2}, {0x2, 0xd, "5787561710e538a899c464"}, {0x6, 0xd, "0add2fb74d32d5878592ff"}, {0x1, 0x8, "5dffd9aeb603"}, {0x5, 0xd, "ae390b33bf944c380ee72e"}, {0x6, 0x4, "61b3"}]}, @generic={0x89, 0xe, "2710a5d569d431ff6e9cb1a0"}, @end]}}}}}) sendmsg$sock(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000001c0)="b19655c88edd3a6e4231de3870e30f504d2e170f383ed07bd1a84fbd16d26d30ba60c44c94f25251312a3a1db7890462fb4b1d91f6fe051a11ba4b811b87bfb7b734a4bbad8f2d8d9ed66c76ac9fa46451df24af50d99ef250057148515243b614f9073b787c5ce4d30c9c1af352da1235fe56941741e0b09d5c2f0eed239521c5f7491110b6fef6d410b387f9fb0a7597c5eca1909f9de3e30ca56eef64dc34694b5ab450778887e45a32c3d6bc4fa99b6ab1876ce846e948ad74335eafd651b233fbee1fc7c2c378b36dd87edb9e049b", 0xd1}, {&(0x7f00000002c0)="14e718e9cf53fee51a51cac5ff314cc3a96d9f8416c706999c7c582e7a4105767475b442b80e57c14a8cdfae8e8674a8f9b5a4e9861402a24c558271996a5fad40330be41be091548d28fd5cf7e21120c1368c818b1428ba4370ec8b380dadb686fc705b04284de57b112c74a8ba3ff5c6ac23aaddd92b6fff5dacc93b8f312ca7a9738c68d3ba47893a542d240c46eecdca09d2edeadcd5186099", 0x9b}, {&(0x7f0000000380)="9e74d2a2cf4320285867f19814311aceacd5d12cd20d4a47ac944005dfd8cf52ad918c2e08d7c26743530a321c575b1c2940b4befa823285b3a329fc40451ac0d09a53223da23344442b3156ae133dd0b1a2d6e4b5bda3aa1a9ec4953f1fe372d4ae530bdcfdb7f050548924f032aa0a3ab7f29c3e2ff9b58ca77fdfb50585b748d23a9b787cb3ce15396e2302ea2d2ed51c9d5f255f5de878a1b16ac64334e2a642fec0a21352e314dc51035919aff339dddb8fe245ef4fa025a0c537e48bc3ce269a195f9ee33eb745865236ad763834bd", 0xd2}, {&(0x7f0000000480)="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", 0x1000}], 0x4, &(0x7f00000014c0)}, 0x2004008c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001540)={{{@in, @in6=@empty}}, {{@in=@initdev}, 0x0, @in=@private}}, &(0x7f0000001640)=0xe8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001680)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x1, 0x0, 0x6, 0x8000000000000001, 0x3, 0x6, 0x5, 0x264, 0x40, 0x1ca, 0x9, 0xd, 0x38, 0x4, 0x0, 0x6, 0xad00}, [{0x5, 0x2, 0x100000001, 0x3, 0x3, 0x3, 0x151, 0x3}, {0x2, 0xf3f6, 0x11f, 0x498d, 0x8, 0x80000000, 0x2, 0x5}, {0x6, 0xd, 0x7, 0x3, 0x8, 0x9, 0x0, 0x81}, {0x6474e551, 0xc7, 0x4, 0x0, 0xff, 0x1, 0x7, 0x80000000}], "ece486d457a5a98c30a6f333e26819346363efd40b2d0a61d55c4ad99063d10ebcb9163c502e881703c1b70b3e054f4ed57e04e645c29dc86d955b5d983d6d10d3457bedd703b8e7c7836527415e753437efa12c8e63d983bad548f13187f5d802d1fbb62f84daa8defcba2efee0f9ef3d01d19acd03d090270b053e0475ec0d3170246b336fb0ff4b8553c3faad009b721726d9a2dfff5b06b62335ae8c8fbee958ceddbda98614ba4ce34b013641fc2a17ca91c46b3f92bbacab247dd65c5b1911714a0e70725d9a5f0223bc29a287af14e4", ['\x00']}, 0x2f3) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000001980)={0x4, 0xa, 0x2, 0xa4, 0x0, [@private1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @remote]}, 0x58) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001a00)=0xf9, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001a40)={'wg2\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001a80)={0x0}, &(0x7f0000001ac0)=0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001b00)={{0x1, 0x1, 0x18, r2, {0x10000, 0x7}}, './file0\x00'}) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000001b40)={0x6a7d368b, {0x14, 0x7, 0x8, 0xe365}}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001b80)=r5, 0x4) syz_usb_disconnect(0xffffffffffffffff) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000001bc0)) ustat(0xfffffffffffffff7, &(0x7f0000001cc0)) close_range(r5, r0, 0x0) r6 = accept$inet6(r0, &(0x7f0000001d00)={0xa, 0x0, 0x0, @local}, &(0x7f0000001d40)=0x1c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001d80)={'wg0\x00'}) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000001dc0)={0xec, 0x9, 0x1, 0xfc, 0x3, 0x2, 0x6, 0xfa, 0x1, 0x5, 0x6, 0x4, 0x9, 0xc}, 0xe) r7 = syz_usb_connect(0x0, 0x682, &(0x7f0000001e00)={{0x12, 0x1, 0x101, 0x7d, 0xf5, 0xfe, 0x40, 0x238b, 0x8b4b, 0xe38, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x670, 0x2, 0x2, 0x5, 0x80, 0x7, [{{0x9, 0x4, 0x40, 0x0, 0x9, 0x2, 0x2, 0xff, 0xf0, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "95a5"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x40b0, 0x14, 0x8}, {0x6, 0x24, 0x1a, 0x9cfb, 0x10}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x3}]}], [{{0x9, 0x5, 0xd, 0x2, 0x200, 0x6, 0x8, 0xf, [@generic={0x100, 0x21, "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"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x30, 0x88, 0x8, [@generic={0xbb, 0x10, "87d9612d869c44ae23f690845a68f2384c380b072725c3d80c87726277652382d2b2945aea1bf07e5dc03c8beb0d9453d524723c2948e84418e19af0b98a46b4a65e7cafd2d4b1cada490e09e1591cd95e85dd126f5fac09d025a64b55eb468d387f54a91ddc699affa0b87c4cfd6496e56bc810656e08d9807128caf3671fc930b23cd3cecd5ce702b99c8d33426ce481e148555bb22d4e7348c2cea2aefa6b13808824142230e1dfb06932c7e47568502bf7d3ff853f496f"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x0, 0x10, 0x3, [@generic={0x1a, 0xb, "898a109c72263f2bfc52d74e8d8c6864f935f820815a6249"}]}}, {{0x9, 0x5, 0x8e, 0x10, 0x20, 0xf6, 0x8, 0x0, [@generic={0x98, 0x0, "03bd7af9c0f84d0354fd222d9937467d00277b37fb40e4046150cce2eba26ee6ba172abaaf3eb576036df2012b04c62c671284b4b8cc40043b5f39e3e8efb3736686d69e998b1c26d65881a95520323e76f84fe35b934b1136ccf1303f9464bf5eb14930952bd3a17b695c87f584ae9fcba7af815ead4afd3b806e198846e018c4492191ba401c910b0cae779d8c363c496b6df231fd"}, @generic={0xf6, 0x9, "50706754b19cc6d592dece5a96fae8785007cd12996c791f00155c98d854540a26afd368be2db59252cc1c3393c10a98ac1ed6907864aa8848b0dfbda1121655b20b11decc43b2a1055b6de4dbc335e18d928855f4526da8cf8c48551bb208f480e5f8464a9537d067aa92a918cab277a2ad952c2c32e1182c11a6dbd24fbce485b8faaefa8f7fc50b38c322dd5a0a152c3f98839f031bdcc452bab291e892af5e2e1f9f5fbdc0c0f366c7146bc0564b671897e8598933f476381654b642e5e10b40d2c9cd745698bc93fa7be5d2ca304dee061357a7ac44fda7534544a696ff6508bba506355f701ca9a9455093c0d49ccb5f51"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x4, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x3}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x8, 0x6, 0x6, [@generic={0xe1, 0x5, "933ee1a45c7e87cef0282d138b175704cdf4ee7af5625c38181941d21dab3bdc939cfa6b084971068012766d6a9a7e0bf694b871d562cdb981e037a5321671d7a6b5ae87952a0bd5d61d806d74e06f2f6da8d3838a5b32656968acf064586580dd97392cd81733663f8910afb8e99ac7f7e0d6c518bf71aa4ef76b9b693b9b6ad611e2198181f7ca3539824f792c5e0c674d00c9b43a9d1de4c65dd0753917080530cd06e662bb0115454770aa5c2bcd1a4059be019f755809e32939837348035236f01a2c028b33527d50616f6258502cf0c3ac6c06539a6741d784758841"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x22, 0x5}]}}, {{0x9, 0x5, 0xd, 0x3, 0x200, 0x2, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3}]}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x3, 0x7, 0x5, [@generic={0xb2, 0x21, "b69f4a452be2d2f2eaedd6d2eaa7d5a7a37bbc5a3c18a439ce930e41750d967f6a035366c11d130be930970343c431ad939ea508883e33ffe458ba62dd7f8ec0726140c22168e5a278af8ba534e8e3abb576b3a72dda1f088b4b6d79fd197ef5053c6d75a37f85ea8cdfebabbf230fa23aa28808bf35427aa32a19fa641945299a4d154c14a2b4c27647bec0800d5f8d548e640e3dd3513a4ed11c4258926345a875fb8445866904c39bc29f6bb69bdc"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xfffc}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x9, 0x8, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2}]}}]}}, {{0x9, 0x4, 0x73, 0x40, 0x2, 0xeb, 0x35, 0xb6, 0x0, [@uac_as={[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x9, 0x8, 0x6, "e1e9"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xd5, 0x1, 0xb, 0x9, "ec"}, @as_header={0x7, 0x24, 0x1, 0x10, 0x40, 0x4}]}], [{{0x9, 0x5, 0x1, 0x0, 0x10, 0x5, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd, 0x6}]}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x5, 0x8, 0x8, [@generic={0x8a, 0x11, "14721d8adbcccb7c788bc7666f1b8e6ad3ac7ee8307d07691176015932d89eb15824bec9fab10715d1b3ba97b827101fe6a8ef690921fbc10b4df946f3a89e8b57d35bb7d0a763fcf050f973168a12b2121e43d3f2b66e3e49ee74cfbc0ebcef543f3fe176289684bd6027744cb65c1fd65fae2b2ef8486cc8b85d64009cec3e2c37a5f79636d983"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xffff}]}}]}}]}}]}}, &(0x7f0000002580)={0xa, &(0x7f00000024c0)={0xa, 0x6, 0x310, 0x6a, 0x9, 0xa, 0x8, 0x9}, 0x15, &(0x7f0000002500)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x845, 0xf00, 0x0, [0x0]}]}, 0x1, [{0x4, &(0x7f0000002540)=@lang_id={0x4, 0x3, 0xc0a}}]}) syz_usb_ep_read(r7, 0x4, 0x51, &(0x7f00000025c0)=""/81) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000002640), &(0x7f0000002680)=0x4) sendmsg$nl_netfilter(r5, &(0x7f0000003d00)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003cc0)={&(0x7f0000002700)={0x15b4, 0x10, 0x8, 0x201, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x3}, [@nested={0xc, 0x112, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @fd=r1}]}, @nested={0x137, 0x36, 0x0, 0x1, [@nested={0x4, 0xa9}, @generic="a5b26824b2e8146d800bb0294ec8611d7000f852a58e4c7d78575abb67d13f535187cfb7f28ef6f773eb659ef004a96f647f6010ca38255b534ce8433053957078743162963bd76da66b524dc5993841cefe8cc16118fc3a3f5d934729c3ca65235ced60c8210117e48e1e645776a578edc03acf31d87ec7ea2ba8fb333831f10d823371a16039ee61682f6799fbd053bf741200a30e73f5bb9b4e4faac31bf2ba74c2", @typed={0x8, 0x8c, 0x0, 0x0, @u32=0x3}, @typed={0x4, 0xa3}, @nested={0x4, 0x12e}, @typed={0x14, 0xbb, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="ad84d8cd748fd4ec233f38231215aa990181fbb3b1b315dddc3163bf5aee50950cdfc0cfea6139045d9d390f9ad1851d1fb1e9995b07af0abc6f2550b314263f185b90878a0b04b7ad8f506a0dc8f9b1bfb4220d958ba647ce36d9ea13fc23ae64d0e3b135bc2fa0"]}, @typed={0x8, 0x25, 0x0, 0x0, @str='-.+\x00'}, @nested={0x2d7, 0x114, 0x0, 0x1, [@nested={0x4, 0xcf}, @nested={0x4, 0x144}, @nested={0x4, 0x11a}, @nested={0x4, 0x82}, @generic="26847453a325e8e55eb7067270c504437b34468649d1f4889a6d1856f168cee06307dca79f049808f9bbae64e14740dc5b2102b6f550b7557bc1b475bbdc09ed0c1787cfac261bc7d26482663d504001f823a5579be3152230eaf105d1e5edaade29dfdc8a8da8910149ebc6be3cd980751746ece11026e4a9fac3b4fa61aa3ccf1dbce6e5418d86f0592751bb8776327f9f97a236e3b076b491f1a382c5089f245eab95537953408c377119431ae193debf25d75548d77b9434cb5471dc709e4c5d455602689cb1a53d9dc405b530f3871567f1f4331b10e93f8bcdc86a5d5d0af9b3057b4328a895fed69e91a33d8aeabdbb7c96c7", @generic="8e712ac11a8fb398fa01c4c9db51b343bc27e3965ff0f36279d139ecdb67b7e4eb79678a6c0044a00e7c704a133718e487cee177f27fb26f826b341e447c85c9338bdf3c600e2a08041c36ee2641c5d7ae3356d6f5cb6b563b7f", @typed={0xa1, 0xfc, 0x0, 0x0, @binary="4673501bb7d6cf96f30d0b97d64ed5f437ea1ed243b0cefb71377810a473e3dfd920306fa396f86079a2275a9ee18a7da48874ab14c11742120f355ce27c6d835be4590be46888432921c68fa60440c23674552e54fb4ef43deb87f71f4c445339ad756c6227974b7e960559cf79aaaee72eca74221a864a00454ccec22555443a298d300c8eab97734a8f8575f9aec817c1adb73bf84bb52b897de55f"}, @typed={0x8, 0xf2, 0x0, 0x0, @pid=r4}, @generic="a60adb553005a4a3378cc5adf00c2597476f1f9f3d3eb88045a1226637908a7b278df1d7cefb148906801faae629bd80139cac20e99b7a631729f5cd89230abbda22ebf2efca8e2246b462d9924256d5ec7af4c130e4cdbc220f3f703daf49ff7365b7b2dcd0df89226a4ba989aad618bf5180ce05e28f158126f811ba15ef5e04648ceda20473349ac6dc937bc4794c869de4749129b37f3d20069972352ef2ac7d50e269a113ffe3d7e5fd97e004a9c3d1a0c15c9a258f869346d1920e339166040c49c76ace"]}, @generic="725201d445f4a5f4dbdd5f71e182423d8916cd558d151d0d73ac15270a7c84832745cc98c6f3b8d69ad60f2701772c5943e3bd7d3cf93a737a332e1959877363c919df7dd7fd636a98f699d6529daeec7bd9ed01a5cd2998f14334c46d49b8640e2f1b1e6418dc958a77ab5048467a3957537f9aa24f441aea60443f68dc3989b007a01acb164e6bc1037bfeae6b46c40ba9e142ecbe94cfad5417d0592724f80c91c1f1f21826344805fdce9eef15dd148a1278cd7b89d321187e3bc3ebd0c0ed6cc553cfcfe22921253eb014a11878e0eaeefecc9982bb0579ce3714f09c", @generic="c6c8fa52441a54bfe54293a5e16fce58154e36b4809b7ccb95331c8ca74b34358e30488e89ee50df7929cd19eb1defa8afe351b37800d935e843d96ac66b5e4f", @generic="ced75481c9db69225870c26eae3cece40b46f1830f42714f98c2abf0493c8df7e6a722a244a75034dfd274a916e8a1a22d419e932527a564fe3522370b5f62fb5495415a9efa6fbdb8ffe3ee8b147bf87b8dda4f69a2a6e96ebf", @generic="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"]}, 0x15b4}, 0x1, 0x0, 0x0, 0x40}, 0x10044000) setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000003d40)=0x2, 0x4) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000003e80)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x18002080}, 0xc, &(0x7f0000003e40)={&(0x7f0000003e00)={0x28, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4804}, 0x80) 2.341152995s ago: executing program 8 (id=6564): lsm_get_self_attr(0x65, &(0x7f0000000100)={0x0, 0x0, 0xd5, 0xb5, ""/181}, &(0x7f0000000200)=0xd5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x148100, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67152944, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x8) dup(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TIOCMIWAIT(r1, 0x545c, 0x200000003000000) timer_create(0x0, &(0x7f0000000580)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}, @TCA_TBF_PARMS={0x28, 0x1, {{0x80, 0x1, 0x5, 0x6, 0x6, 0x1}, {0x0, 0x0, 0x21, 0x9, 0x400, 0xea}, 0x8, 0x8, 0x14de}}]}}]}, 0x78}}, 0x4000080) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, &(0x7f0000000800)="410309fc1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2.208647777s ago: executing program 3 (id=6568): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x77bc, 0x80, 0x3, 0x285}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) read$qrtrtun(r2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x2b}, 0x94) io_uring_enter(r4, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x32, &(0x7f0000000100)={0x1e, 0x7, 0xffff9553}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 1.647739778s ago: executing program 0 (id=6570): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00008bc6000200", 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x7ff) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$netlink(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000}, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) migrate_pages(0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x400700) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000880)) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800000004000000b47c00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="00000000020000000000000000000000000000000000000000000000b2d98a24a488a628d4e1643160d6bceaf89d74c1f6d3ccea190ff627c9dc0327cde99377eeac3fad885371231f1ec790f4a8ff500830dc98a71f4a999647cca9db5e589c0962c7d1c0a705d6dd3598f05c35e8760dd26e01ee6bbbc0579efb91cb124c7fac01c914dbc8c7b1916ad1e3ecf7ff4be4da97acfaa122952ebef652747a38fef2198e6cf6b8ea728fd79dd8ee817fa908f8be6e97fff52cb07ab2b827fcbe62e9ee3e744ff2965353a334126290d8904e37f4757ea6"], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = semget$private(0x0, 0x6, 0x3b1) semtimedop(r3, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semop(r3, &(0x7f00000000c0)=[{}, {}], 0x2) (fail_nth: 6) semctl$IPC_RMID(r3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 1.567433886s ago: executing program 0 (id=6572): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x4a, &(0x7f0000000040), 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000fa0ca122bdd63ecf679467df91c09e8a722e34d7e484893f07be57c45fecf40ffa560200130011186809fc071200000f0023ff3f2100000017705f0d872b2eb9a95e624656faf047145bc79e0b9971bcbe", 0x54}], 0x1) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x62d01) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r3]) 1.557785807s ago: executing program 0 (id=6573): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x4a, &(0x7f0000000040), 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x401}, 0x11) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r5 = io_uring_setup(0xad5, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, 0x1000}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000fa0ca122bdd63ecf679467df91c09e8a722e34d7e484893f07be57c45fecf40ffa560200130011186809fc071200000f0023ff3f2100000017705f0d872b2eb9a95e624656faf047145bc79e0b9971bcbe", 0x54}], 0x1) r6 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x62d01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r6]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000a40)={0x0, 0x0}) r8 = syz_open_procfs$userns(r7, &(0x7f0000000180)) fcntl$lock(r8, 0x25, &(0x7f00000002c0)={0x2, 0x4, 0x100, 0x0, r7}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) close(r5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) bind$inet6(r0, &(0x7f0000000480)={0xa, 0xfffe, 0x0, @private1, 0x1}, 0x1c) 1.354264585s ago: executing program 8 (id=6576): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500"], 0x38}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x2}, 0x18) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000000)={0xf97cff8c, 0x8}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(0xffffffffffffffff, &(0x7f0000000200)={@val={0x0, 0x6005}, @void, @x25={0x3, 0x44, 0xf3, "3a32026dc7e6d4c30461629484abbdea70c7f5f802f08acaba8d202ffe0465a42bc85262bf820f760b05df1e217ccf6256eb98a1d31b59134ba11892d10bde437c4fec30bafb512a9616288968294714995240240972625d01b6dea8724939194bc1499073fb1de2ae9fbc854720671060873758d2c7b2c3e5cdd5aef2fd3861ec86f244ac9a71a34b0514158475ceef40a6d0b2e048b5a933c67743f09d4e4f92c1cd24d5a90a96295a44e363d817f71ff92688acfd953d6730c3e1"}}, 0xc3) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd2d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r10, 0x402c542c, &(0x7f00000000c0)={0xf40, 0x0, 0xdffbfffd, 0xa76b, 0x50, '\f\x00', 0x4, 0x200}) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000080)=0x8) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x28, 0x40, 0xf7, 0xfffff020}, {0x6, 0x6, 0x0, 0x57e}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 1.275865833s ago: executing program 0 (id=6578): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r4, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002980)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xe}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d2}, 0x0) 1.113560738s ago: executing program 3 (id=6579): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x4a, &(0x7f0000000040), 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000fa0ca122bdd63ecf679467df91c09e8a722e34d7e484893f07be57c45fecf40ffa560200130011186809fc071200000f0023ff3f2100000017705f0d872b2eb9a95e624656faf047145bc79e0b9971bcbe", 0x54}], 0x1) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x62d01) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r3]) 1.065229522s ago: executing program 8 (id=6581): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 1.023691766s ago: executing program 3 (id=6583): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x4a, &(0x7f0000000040), 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000fa0ca122bdd63ecf679467df91c09e8a722e34d7e484893f07be57c45fecf40ffa560200130011186809fc071200000f0023ff3f2100000017705f0d872b2eb9a95e624656faf047145bc79e0b9971bcbe", 0x54}], 0x1) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x62d01) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r3]) 962.353282ms ago: executing program 0 (id=6586): lsm_get_self_attr(0x65, &(0x7f0000000100)={0x0, 0x0, 0xd5, 0xb5, ""/181}, &(0x7f0000000200)=0xd5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x148100, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67152944, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x8) dup(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TIOCMIWAIT(r1, 0x545c, 0x200000003000000) timer_create(0x0, &(0x7f0000000580)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000009b09000050000491bb241d3a5e02c181a28bbd298600eadef90fd27281b69b3c87804148a4f7fc1be2279822291558b9f626969a2e29fe45b2a510f2e5ebce9803eeef8c8da8ee051cbec3e3f3b6"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}, @TCA_TBF_PARMS={0x28, 0x1, {{0x80, 0x1, 0x5, 0x6, 0x6, 0x1}, {0x0, 0x0, 0x21, 0x9, 0x400, 0xea}, 0x8, 0x8, 0x14de}}]}}]}, 0x78}}, 0x4000080) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 960.674232ms ago: executing program 8 (id=6587): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000ac0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000024c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x1c, r3, 0x739, 0x2070bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004010}, 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) 940.891534ms ago: executing program 3 (id=6588): getpgrp(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x1b0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r7, 0x111, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r4], 0x4c}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x238}}, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x18) 887.220719ms ago: executing program 8 (id=6590): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 655.46093ms ago: executing program 5 (id=6592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 594.943355ms ago: executing program 8 (id=6593): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000000)=0x1) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) 547.615579ms ago: executing program 5 (id=6594): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@debug}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 519.500062ms ago: executing program 6 (id=6595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="78000000000801010000000000000000070000000900010073797a31000000001c0004800800014000000002080002400000070f08000140200000000600024089140000050003"], 0x78}, 0x1, 0x0, 0x0, 0x10000840}, 0x0) r1 = gettid() kcmp(0x0, r1, 0x4, r0, r0) 477.215226ms ago: executing program 6 (id=6596): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 470.439917ms ago: executing program 6 (id=6597): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x3f00, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 417.043812ms ago: executing program 6 (id=6598): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (fail_nth: 7) 202.211881ms ago: executing program 6 (id=6599): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e00003b000b05d25a802e8c6394f90324fc601000050008000900053582c104003e37000c0180fc0b1d00f80b", 0x33fe0}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x1ff}, 0x100006, 0x2, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)) 149.902336ms ago: executing program 5 (id=6600): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000ac0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000024c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x1c, r3, 0x739, 0x2070bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004010}, 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) 32.734047ms ago: executing program 5 (id=6601): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2e, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000180), &(0x7f00000002c0), 0x8, 0x4f, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_all\x00', 0x275a, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x418da846}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000480)={{0xac, 0x7}, {0x8, 0xcc}, 0x1, 0x7, 0x7}) perf_event_open(&(0x7f00000001c0)={0x1, 0xe, 0xfd, 0x0, 0xd, 0x0, 0x0, 0x1, 0x703c2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800c5, 0xfffffffffffffffd}, 0x0, 0x5, 0x0, 0x5, 0x0, 0xffff0000, 0x0, 0x0, 0x1ff, 0x0, 0x3}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 30.958867ms ago: executing program 6 (id=6602): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f0000000500)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x84440, 0x180) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x80b4}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008f9ff0008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001600)={&(0x7f0000001500)='ata_eh_link_autopsy_qc\x00', r5}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='objagg_obj_put\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001a40)=ANY=[@ANYBLOB="c8f6d4f1237f134fcdd730", @ANYRES16=0x0, @ANYBLOB="020725bd7000fcdbdf25140000000500190000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000014c0)='./file1\x00', 0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r7}, 0x18) 254.01µs ago: executing program 5 (id=6603): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 5 (id=6604): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r0, &(0x7f0000000000)="a315ae94498b512190c0ac61a030b4d1027ffc77fde5b005", &(0x7f0000000040)=""/42}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x8, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRES16=r1, @ANYRESDEC=r1, @ANYRESHEX=r0, @ANYBLOB="6b3274d39b", @ANYRESDEC=r1, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f00000004c0), 0x10) kernel console output (not intermixed with test programs): cess `syz.0.6106'. [ 333.794081][T22735] EXT4-fs: Ignoring removed nomblk_io_submit option [ 334.025098][T22774] netlink: 'syz.5.6113': attribute type 1 has an invalid length. [ 334.033027][T22774] netlink: 668 bytes leftover after parsing attributes in process `syz.5.6113'. [ 334.128170][T22775] iso9660: Unknown parameter 'nor' [ 334.543518][T22791] EXT4-fs: Ignoring removed nobh option [ 334.549414][T22791] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 334.582374][T22791] EXT4-fs (loop5): 1 truncate cleaned up [ 334.698904][T22735] syz.6.6109 (22735) used greatest stack depth: 7256 bytes left [ 334.711034][T22809] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6121'. [ 335.029945][T22825] FAULT_INJECTION: forcing a failure. [ 335.029945][T22825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.043101][T22825] CPU: 0 UID: 0 PID: 22825 Comm: syz.6.6125 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 335.043233][T22825] Tainted: [W]=WARN [ 335.043240][T22825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 335.043253][T22825] Call Trace: [ 335.043259][T22825] [ 335.043267][T22825] __dump_stack+0x1d/0x30 [ 335.043293][T22825] dump_stack_lvl+0x95/0xd0 [ 335.043367][T22825] dump_stack+0x15/0x1b [ 335.043430][T22825] should_fail_ex+0x265/0x280 [ 335.043490][T22825] should_fail+0xb/0x20 [ 335.043510][T22825] should_fail_usercopy+0x1a/0x20 [ 335.043536][T22825] _copy_to_user+0x20/0xa0 [ 335.043616][T22825] simple_read_from_buffer+0xb5/0x130 [ 335.043639][T22825] proc_fail_nth_read+0x10e/0x150 [ 335.043718][T22825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 335.043747][T22825] vfs_read+0x1a8/0x770 [ 335.043811][T22825] ? __rcu_read_unlock+0x4f/0x70 [ 335.043832][T22825] ? __fget_files+0x184/0x1c0 [ 335.043862][T22825] ? mutex_lock+0x58/0x90 [ 335.043891][T22825] ksys_read+0xda/0x1a0 [ 335.043911][T22825] __x64_sys_read+0x40/0x50 [ 335.044007][T22825] x64_sys_call+0x2889/0x3000 [ 335.044033][T22825] do_syscall_64+0xca/0x2b0 [ 335.044142][T22825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.044166][T22825] RIP: 0033:0x7f4b3acce15c [ 335.044181][T22825] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 335.044201][T22825] RSP: 002b:00007f4b3970e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 335.044228][T22825] RAX: ffffffffffffffda RBX: 00007f4b3af26090 RCX: 00007f4b3acce15c [ 335.044242][T22825] RDX: 000000000000000f RSI: 00007f4b3970e0a0 RDI: 0000000000000009 [ 335.044255][T22825] RBP: 00007f4b3970e090 R08: 0000000000000000 R09: 0000000000000000 [ 335.044268][T22825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.044303][T22825] R13: 00007f4b3af26128 R14: 00007f4b3af26090 R15: 00007ffc64f0fb48 [ 335.044323][T22825] [ 335.285740][T22830] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 335.301085][T22830] ext4 filesystem being mounted at /596/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 335.326326][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 335.326342][ T29] audit: type=1326 audit(1766980115.752:34862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22828 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3accf749 code=0x7ffc0000 [ 335.356092][ T29] audit: type=1400 audit(1766980115.752:34863): avc: denied { create } for pid=22837 comm="syz.0.6130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 335.375962][ T29] audit: type=1400 audit(1766980115.762:34864): avc: denied { watch watch_reads } for pid=22837 comm="syz.0.6130" path="/17" dev="tmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 335.394894][T22830] set_capacity_and_notify: 14 callbacks suppressed [ 335.394910][T22830] loop6: detected capacity change from 0 to 512 [ 335.398991][ T29] audit: type=1326 audit(1766980115.772:34865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22828 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f4b3accf749 code=0x7ffc0000 [ 335.434682][ T29] audit: type=1326 audit(1766980115.772:34866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22828 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3accf749 code=0x7ffc0000 [ 335.457816][ T29] audit: type=1326 audit(1766980115.772:34867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22828 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4b3accf749 code=0x7ffc0000 [ 335.481224][ T29] audit: type=1326 audit(1766980115.772:34868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22828 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4b3accf783 code=0x7ffc0000 [ 335.504127][ T29] audit: type=1326 audit(1766980115.772:34869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22828 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4b3acce1ff code=0x7ffc0000 [ 335.527195][ T29] audit: type=1326 audit(1766980115.772:34870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22828 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4b3accf7d7 code=0x7ffc0000 [ 335.550464][ T29] audit: type=1326 audit(1766980115.822:34871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22828 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b3accdf90 code=0x7ffc0000 [ 335.645196][T22864] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 335.692483][T22879] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6139'. [ 335.732667][ T7314] Bluetooth: hci0: Frame reassembly failed (-84) [ 335.739020][ T7314] Bluetooth: hci0: Frame reassembly failed (-84) [ 335.758179][T22891] loop8: detected capacity change from 0 to 512 [ 335.803433][T22891] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.977712][ T4115] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.010955][ T4115] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.083212][ T4115] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.113449][T22957] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 336.155518][ T4115] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.173029][T22957] loop3: detected capacity change from 0 to 128 [ 336.203822][T22908] chnl_net:caif_netlink_parms(): no params data found [ 336.238207][T23065] bio_check_eod: 102 callbacks suppressed [ 336.238222][T23065] syz.3.6149: attempt to access beyond end of device [ 336.238222][T23065] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 336.260288][ T4115] gretap0: left allmulticast mode [ 336.265325][ T4115] gretap0: left promiscuous mode [ 336.271113][ T4115] bridge0: port 1(gretap0) entered disabled state [ 336.280430][T23065] syz.3.6149: attempt to access beyond end of device [ 336.280430][T23065] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 336.299308][T23065] syz.3.6149: attempt to access beyond end of device [ 336.299308][T23065] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 336.312852][T23065] syz.3.6149: attempt to access beyond end of device [ 336.312852][T23065] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 336.326448][T23065] syz.3.6149: attempt to access beyond end of device [ 336.326448][T23065] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 336.340327][T23065] syz.3.6149: attempt to access beyond end of device [ 336.340327][T23065] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 336.354165][T23065] syz.3.6149: attempt to access beyond end of device [ 336.354165][T23065] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 336.376590][T23065] syz.3.6149: attempt to access beyond end of device [ 336.376590][T23065] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 336.390549][T23065] syz.3.6149: attempt to access beyond end of device [ 336.390549][T23065] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 336.404954][T23065] syz.3.6149: attempt to access beyond end of device [ 336.404954][T23065] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 336.538997][T23080] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6154'. [ 336.548606][T23080] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6154'. [ 336.608366][T23083] netlink: 176 bytes leftover after parsing attributes in process `syz.8.6155'. [ 336.991360][ T4115] bond0 (unregistering): Released all slaves [ 337.075882][T23092] can0: slcan on ttyS3. [ 337.085123][ T4115] tipc: Disabling bearer [ 337.090109][ T4115] tipc: Left network mode [ 337.137747][T23126] netlink: 'syz.0.6160': attribute type 4 has an invalid length. [ 337.138852][T22908] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.152608][T22908] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.160544][T22908] bridge_slave_0: entered allmulticast mode [ 337.167074][T22908] bridge_slave_0: entered promiscuous mode [ 337.177077][T23126] netlink: 'syz.0.6160': attribute type 4 has an invalid length. [ 337.184875][ T4115] hsr_slave_0: left promiscuous mode [ 337.193091][ T4115] hsr_slave_1: left promiscuous mode [ 337.226021][T23151] netlink: 'syz.8.6162': attribute type 11 has an invalid length. [ 337.247673][T22908] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.255029][T22908] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.262264][T22908] bridge_slave_1: entered allmulticast mode [ 337.268708][T22908] bridge_slave_1: entered promiscuous mode [ 337.277772][T23150] xt_hashlimit: max too large, truncated to 1048576 [ 337.317921][T22908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.343323][T22908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.368610][T23183] batman_adv: batadv0: Adding interface: dummy0 [ 337.374912][T23183] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.400773][T23183] batman_adv: batadv0: Interface activated: dummy0 [ 337.418236][T23183] batadv0: mtu less than device minimum [ 337.424462][T23183] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 337.435070][T23197] loop8: detected capacity change from 0 to 512 [ 337.435429][T23183] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 337.444512][T23197] EXT4-fs: Ignoring removed nomblk_io_submit option [ 337.452227][T23183] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 337.458587][T23197] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 337.469037][T23183] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 337.489237][T23183] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 337.499943][T23197] EXT4-fs (loop8): 1 truncate cleaned up [ 337.500432][T23183] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 337.516579][T23183] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 337.527506][T23183] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 337.538577][T23183] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 337.559246][T23075] can0 (unregistered): slcan off ttyS3. [ 337.633290][T23216] loop0: detected capacity change from 0 to 2048 [ 337.647786][T23218] loop3: detected capacity change from 0 to 2048 [ 337.650414][T22908] team0: Port device team_slave_0 added [ 337.660786][T22908] team0: Port device team_slave_1 added [ 337.676932][T23218] Alternate GPT is invalid, using primary GPT. [ 337.683199][T23218] loop3: p2 p3 p7 [ 337.688194][T22908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.695169][T22908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.721137][T22908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.732746][T22908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.739731][T22908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.765691][T22908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.789684][ T3865] Bluetooth: hci0: command 0x1003 tx timeout [ 337.796395][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 337.815127][T22908] hsr_slave_0: entered promiscuous mode [ 337.821593][T22908] hsr_slave_1: entered promiscuous mode [ 337.827483][T22908] debugfs: 'hsr0' already exists in 'hsr' [ 337.833306][T22908] Cannot create hsr debugfs directory [ 337.899952][T23330] loop5: detected capacity change from 0 to 128 [ 338.142106][T22908] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 338.192586][T22908] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 338.223702][T22908] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 338.275658][T23419] loop8: detected capacity change from 0 to 164 [ 338.289673][T23419] iso9660: Unknown parameter 'nor' [ 338.309198][T22908] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 338.335798][T23433] loop3: detected capacity change from 0 to 1024 [ 338.445763][T23478] netlink: 'syz.3.6181': attribute type 13 has an invalid length. [ 338.453648][T23478] __nla_validate_parse: 4 callbacks suppressed [ 338.453665][T23478] netlink: 212 bytes leftover after parsing attributes in process `syz.3.6181'. [ 338.488969][T23487] loop0: detected capacity change from 0 to 512 [ 338.498233][T23487] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.6183: inode has both inline data and extents flags [ 338.499861][T22908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.538999][T23487] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.6183: couldn't read orphan inode 15 (err -117) [ 338.565544][T22908] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.583883][T23487] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.6183: inode has both inline data and extents flags [ 338.610003][ T7319] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.617152][ T7319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.656170][ T7319] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.663258][ T7319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.680243][T23503] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.6183: inode has both inline data and extents flags [ 338.680878][T22908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.728067][T23487] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.6183: inode has both inline data and extents flags [ 338.775498][T22908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.853432][T23487] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 338.940074][T23531] FAULT_INJECTION: forcing a failure. [ 338.940074][T23531] name failslab, interval 1, probability 0, space 0, times 0 [ 338.952805][T23531] CPU: 1 UID: 0 PID: 23531 Comm: syz.3.6190 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 338.952840][T23531] Tainted: [W]=WARN [ 338.952849][T23531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 338.952865][T23531] Call Trace: [ 338.952873][T23531] [ 338.952883][T23531] __dump_stack+0x1d/0x30 [ 338.952979][T23531] dump_stack_lvl+0x95/0xd0 [ 338.953007][T23531] dump_stack+0x15/0x1b [ 338.953032][T23531] should_fail_ex+0x265/0x280 [ 338.953061][T23531] should_failslab+0x8c/0xb0 [ 338.953214][T23531] kmem_cache_alloc_noprof+0x69/0x4b0 [ 338.953237][T23531] ? security_file_alloc+0x32/0x100 [ 338.953266][T23531] security_file_alloc+0x32/0x100 [ 338.953293][T23531] init_file+0x5c/0x1c0 [ 338.953396][T23531] alloc_empty_file+0x8b/0x200 [ 338.953473][T23531] path_openat+0x63/0x23b0 [ 338.953508][T23531] ? _parse_integer_limit+0x170/0x190 [ 338.953608][T23531] ? _parse_integer+0x27/0x40 [ 338.953630][T23531] ? kstrtoull+0x111/0x140 [ 338.953654][T23531] ? kstrtouint+0x76/0xc0 [ 338.953680][T23531] do_filp_open+0x109/0x230 [ 338.953801][T23531] do_sys_openat2+0xa6/0x150 [ 338.953833][T23531] __x64_sys_openat+0xf2/0x120 [ 338.953871][T23531] x64_sys_call+0x2b07/0x3000 [ 338.953906][T23531] do_syscall_64+0xca/0x2b0 [ 338.953944][T23531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.954073][T23531] RIP: 0033:0x7fec3f04f749 [ 338.954158][T23531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.954180][T23531] RSP: 002b:00007fec3da75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 338.954203][T23531] RAX: ffffffffffffffda RBX: 00007fec3f2a6180 RCX: 00007fec3f04f749 [ 338.954357][T23531] RDX: 000000000000403f RSI: 0000200000005c40 RDI: ffffffffffffff9c [ 338.954395][T23531] RBP: 00007fec3da75090 R08: 0000000000000000 R09: 0000000000000000 [ 338.954411][T23531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.954427][T23531] R13: 00007fec3f2a6218 R14: 00007fec3f2a6180 R15: 00007ffe360fd428 [ 338.954449][T23531] [ 339.264414][T23542] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 339.282207][T23542] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 339.311929][T22908] veth0_vlan: entered promiscuous mode [ 339.333510][T22908] veth1_vlan: entered promiscuous mode [ 339.354903][T22908] veth0_macvtap: entered promiscuous mode [ 339.365825][T22908] veth1_macvtap: entered promiscuous mode [ 339.372619][T23561] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 339.385746][T22908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.395099][T23561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.421028][T23561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.434817][T22908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.444778][ T4117] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.455718][ T4117] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.466257][ T4117] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.490668][ T4117] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.516119][T23580] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6142'. [ 339.525686][T23580] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6142'. [ 339.569496][T23582] netlink: 140 bytes leftover after parsing attributes in process `syz.6.6197'. [ 339.622894][T23587] EXT4-fs: Ignoring removed nobh option [ 339.628918][T23587] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 339.669018][T23598] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6200'. [ 339.681457][T23587] EXT4-fs (loop0): 1 truncate cleaned up [ 339.688170][T23587] EXT4-fs mount: 40 callbacks suppressed [ 339.688182][T23587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.860777][T23607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.883577][T20291] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 339.898325][T20291] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 339.910650][T20291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.947039][T23605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.956311][T23605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.100651][T23631] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 340.108738][T23631] EXT4-fs (loop8): orphan cleanup on readonly fs [ 340.116990][T23631] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.6204: corrupted inode contents [ 340.129283][T23631] EXT4-fs (loop8): Remounting filesystem read-only [ 340.135937][T23631] EXT4-fs (loop8): 1 truncate cleaned up [ 340.141726][ T52] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 340.152432][ T52] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 340.163013][ T52] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 340.173554][T23631] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 340.267941][T20136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.370420][ T29] kauditd_printk_skb: 467 callbacks suppressed [ 340.370487][ T29] audit: type=1326 audit(1766980120.802:35331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23648 comm="syz.8.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5165fdf749 code=0x7ffc0000 [ 340.406724][T23656] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 340.413583][ T29] audit: type=1326 audit(1766980120.832:35332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23648 comm="syz.8.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5165fdf783 code=0x7ffc0000 [ 340.440597][ T29] audit: type=1326 audit(1766980120.832:35333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23648 comm="syz.8.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5165fdf807 code=0x7ffc0000 [ 340.464131][ T29] audit: type=1326 audit(1766980120.832:35334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23648 comm="syz.8.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5165f96bdd code=0x7ffc0000 [ 340.487643][ T29] audit: type=1326 audit(1766980120.832:35335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23648 comm="syz.8.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f5166013e89 code=0x7ffc0000 [ 340.511259][ T29] audit: type=1326 audit(1766980120.832:35336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23648 comm="syz.8.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5165f96c47 code=0x7ffc0000 [ 340.534774][ T29] audit: type=1326 audit(1766980120.832:35337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23648 comm="syz.8.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5165fdf749 code=0x7ffc0000 [ 340.556170][T23660] netlink: 140 bytes leftover after parsing attributes in process `syz.5.6209'. [ 340.558412][ T29] audit: type=1326 audit(1766980120.832:35338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23648 comm="syz.8.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5165fdf749 code=0x7ffc0000 [ 340.590855][ T29] audit: type=1326 audit(1766980120.832:35339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23648 comm="syz.8.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f5165f96357 code=0x7ffc0000 [ 340.614412][ T29] audit: type=1326 audit(1766980120.832:35340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23648 comm="syz.8.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5165f963b6 code=0x7ffc0000 [ 340.681055][T21863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.743030][T23677] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6213'. [ 340.759069][T23677] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6213'. [ 340.830416][T23697] set_capacity_and_notify: 10 callbacks suppressed [ 340.830494][T23697] loop3: detected capacity change from 0 to 2048 [ 340.929175][T23675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.938087][T23675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.966729][T23708] loop6: detected capacity change from 0 to 512 [ 340.984125][T23708] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 341.012906][T23708] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.027411][T23708] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 341.038330][T23708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.070503][T23708] loop6: detected capacity change from 0 to 512 [ 341.248690][T23732] loop5: detected capacity change from 0 to 2048 [ 341.272571][T23734] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6221'. [ 341.316711][T23737] program syz.6.6222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 341.702019][T23762] loop6: detected capacity change from 0 to 512 [ 341.725464][T23762] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 341.760360][T23765] loop3: detected capacity change from 0 to 512 [ 341.773625][T23762] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.775510][T23765] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 341.795816][T23762] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 341.811540][T23762] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.824175][T23754] program syz.0.6225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 341.835273][T23765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.865042][T23765] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 341.879559][T23762] loop6: detected capacity change from 0 to 512 [ 341.925294][T23765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.031833][T23765] loop3: detected capacity change from 0 to 512 [ 342.058069][T23789] loop0: detected capacity change from 0 to 128 [ 342.160784][T23810] loop5: detected capacity change from 0 to 2048 [ 342.182413][T23817] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 342.220395][T23817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.249275][T23817] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 342.274436][T23817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.296804][T23815] program syz.3.6240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.339291][T23838] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 342.350916][T23838] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 342.358941][T23838] System zones: 1-12 [ 342.363974][T23838] EXT4-fs (loop0): 1 truncate cleaned up [ 342.370079][T23838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.383116][T23819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.392208][T23819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.412351][T21863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.944847][T23926] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 342.953660][T23926] C: renamed from team_slave_0 (while UP) [ 342.966252][T23926] netlink: 'syz.8.6251': attribute type 13 has an invalid length. [ 342.997648][T23933] FAULT_INJECTION: forcing a failure. [ 342.997648][T23933] name failslab, interval 1, probability 0, space 0, times 0 [ 343.010341][T23933] CPU: 1 UID: 0 PID: 23933 Comm: syz.3.6252 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 343.010448][T23933] Tainted: [W]=WARN [ 343.010456][T23933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 343.010470][T23933] Call Trace: [ 343.010478][T23933] [ 343.010487][T23933] __dump_stack+0x1d/0x30 [ 343.010516][T23933] dump_stack_lvl+0x95/0xd0 [ 343.010614][T23933] dump_stack+0x15/0x1b [ 343.010639][T23933] should_fail_ex+0x265/0x280 [ 343.010669][T23933] should_failslab+0x8c/0xb0 [ 343.010740][T23933] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 343.010770][T23933] ? security_set_bools+0x85/0x340 [ 343.010842][T23933] kmemdup_noprof+0x2b/0x70 [ 343.010861][T23933] security_set_bools+0x85/0x340 [ 343.010902][T23933] sel_commit_bools_write+0x1ea/0x270 [ 343.010961][T23933] vfs_writev+0x406/0x8b0 [ 343.010987][T23933] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 343.011018][T23933] do_writev+0xe7/0x210 [ 343.011111][T23933] __x64_sys_writev+0x45/0x50 [ 343.011138][T23933] x64_sys_call+0x1ba5/0x3000 [ 343.011226][T23933] do_syscall_64+0xca/0x2b0 [ 343.011267][T23933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.011293][T23933] RIP: 0033:0x7fec3f04f749 [ 343.011318][T23933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.011341][T23933] RSP: 002b:00007fec3dab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 343.011421][T23933] RAX: ffffffffffffffda RBX: 00007fec3f2a5fa0 RCX: 00007fec3f04f749 [ 343.011437][T23933] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000006 [ 343.011453][T23933] RBP: 00007fec3dab7090 R08: 0000000000000000 R09: 0000000000000000 [ 343.011468][T23933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.011558][T23933] R13: 00007fec3f2a6038 R14: 00007fec3f2a5fa0 R15: 00007ffe360fd428 [ 343.011579][T23933] [ 343.212960][T23935] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 343.241827][T23935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.255290][T23935] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 343.269819][T23935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.359571][T23961] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 343.414497][T23971] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 343.428832][T23961] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.434376][T23971] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 343.452682][T23978] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 343.461583][T23961] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 343.470927][T23976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.472920][T23961] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.497192][T23978] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.509895][T23978] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 343.522298][T23978] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.532365][T23976] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.6261: No space for directory leaf checksum. Please run e2fsck -D. [ 343.547738][T23976] EXT4-fs error (device loop5): ext4_readdir:224: inode #2: comm syz.5.6261: path (unknown): directory fails checksum at offset 0 [ 343.581719][T23976] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.6261: No space for directory leaf checksum. Please run e2fsck -D. [ 343.597095][T23976] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.6261: checksumming directory block 0 [ 343.659035][T24002] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 343.670838][T24002] C: renamed from team_slave_0 (while UP) [ 343.699435][T24002] __nla_validate_parse: 7 callbacks suppressed [ 343.699473][T24002] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6264'. [ 343.717816][T20800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.721477][T24002] netlink: 'syz.6.6264': attribute type 13 has an invalid length. [ 343.735169][T24002] netlink: 212 bytes leftover after parsing attributes in process `syz.6.6264'. [ 343.756047][ T8174] IPVS: starting estimator thread 0... [ 343.837271][T24025] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6267'. [ 343.839808][T24025] netlink: 'syz.5.6267': attribute type 13 has an invalid length. [ 343.854297][T24025] netlink: 212 bytes leftover after parsing attributes in process `syz.5.6267'. [ 343.863413][T24020] IPVS: using max 2208 ests per chain, 110400 per kthread [ 343.906056][T24027] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.6268: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 343.906208][T24027] EXT4-fs error (device loop6): ext4_quota_enable:7180: comm syz.6.6268: Bad quota inode: 3, type: 0 [ 343.906314][T24027] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 343.906426][T24027] EXT4-fs (loop6): mount failed [ 344.039217][T24038] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 344.071596][T22908] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 344.135393][T24058] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 344.135645][T24052] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 344.139650][T24052] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 344.162921][T24052] System zones: 1-12 [ 344.163499][T24052] EXT4-fs (loop6): 1 truncate cleaned up [ 344.164053][T24052] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.170839][T24058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.208442][T24058] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 344.209684][T24058] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.231634][T22908] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.441549][T24081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.454658][T21863] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 344.454881][T21863] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 344.471606][T24075] program syz.3.6274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.472090][T21863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.473485][T24070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.523837][T24070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.595892][T24101] EXT4-fs: Mount option(s) incompatible with ext3 [ 344.627081][T24103] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 344.641866][T24103] C: renamed from team_slave_0 (while UP) [ 344.650370][T24103] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6279'. [ 344.662031][T24103] netlink: 'syz.3.6279': attribute type 13 has an invalid length. [ 344.670390][T24103] netlink: 212 bytes leftover after parsing attributes in process `syz.3.6279'. [ 344.694608][T24114] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6280'. [ 344.766713][T24154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6284'. [ 344.776182][T24154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6284'. [ 344.829045][T24165] EXT4-fs: Ignoring removed nomblk_io_submit option [ 344.843704][T24165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.932699][T24185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.970282][T20800] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 345.015937][T20800] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 345.025509][T24191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.048838][T20800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.049579][T24191] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.108811][T24197] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.126031][T24197] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.189072][T24191] EXT4-fs: Cannot change journaled quota options when quota turned on [ 345.217805][T21863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.228141][T24197] FAULT_INJECTION: forcing a failure. [ 345.228141][T24197] name failslab, interval 1, probability 0, space 0, times 0 [ 345.241212][T24197] CPU: 1 UID: 0 PID: 24197 Comm: syz.6.6289 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 345.241323][T24197] Tainted: [W]=WARN [ 345.241331][T24197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 345.241346][T24197] Call Trace: [ 345.241353][T24197] [ 345.241362][T24197] __dump_stack+0x1d/0x30 [ 345.241393][T24197] dump_stack_lvl+0x95/0xd0 [ 345.241423][T24197] dump_stack+0x15/0x1b [ 345.241449][T24197] should_fail_ex+0x265/0x280 [ 345.241477][T24197] should_failslab+0x8c/0xb0 [ 345.241505][T24197] __kmalloc_noprof+0xb9/0x5a0 [ 345.241531][T24197] ? ext4_find_extent+0x16b/0x7a0 [ 345.241643][T24197] ext4_find_extent+0x16b/0x7a0 [ 345.241672][T24197] ? __rmqueue_pcplist+0x9c2/0xb90 [ 345.241704][T24197] ext4_ext_map_blocks+0x11f/0x38a0 [ 345.241773][T24197] ? css_rstat_updated+0xbb/0x280 [ 345.241836][T24197] ? __account_obj_stock+0x211/0x350 [ 345.241893][T24197] ? refill_obj_stock+0x254/0x2e0 [ 345.241933][T24197] ? __memcg_slab_post_alloc_hook+0x44b/0x530 [ 345.241973][T24197] ext4_map_query_blocks+0xa2/0x4c0 [ 345.242089][T24197] ext4_da_get_block_prep+0x25e/0xbd0 [ 345.242122][T24197] ? alloc_buffer_head+0x1c3/0x1f0 [ 345.242203][T24197] ext4_block_write_begin+0x650/0xcf0 [ 345.242300][T24197] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 345.242340][T24197] ext4_da_write_begin+0x477/0x6b0 [ 345.242383][T24197] generic_perform_write+0x184/0x490 [ 345.242423][T24197] ext4_buffered_write_iter+0x1ee/0x3c0 [ 345.242482][T24197] ? ext4_file_write_iter+0xfe/0xf60 [ 345.242524][T24197] ext4_file_write_iter+0x387/0xf60 [ 345.242635][T24197] ? kstrtouint+0x76/0xc0 [ 345.242660][T24197] ? kstrtouint_from_user+0x9f/0xf0 [ 345.242687][T24197] ? avc_policy_seqno+0x15/0x30 [ 345.242710][T24197] ? selinux_file_permission+0x1e2/0x320 [ 345.242814][T24197] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 345.242854][T24197] vfs_write+0x52a/0x960 [ 345.242886][T24197] ksys_write+0xda/0x1a0 [ 345.242906][T24197] __x64_sys_write+0x40/0x50 [ 345.243006][T24197] x64_sys_call+0x2847/0x3000 [ 345.243032][T24197] do_syscall_64+0xca/0x2b0 [ 345.243069][T24197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.243095][T24197] RIP: 0033:0x7f8cda3df749 [ 345.243113][T24197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.243173][T24197] RSP: 002b:00007f8cd8e3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 345.243196][T24197] RAX: ffffffffffffffda RBX: 00007f8cda635fa0 RCX: 00007f8cda3df749 [ 345.243212][T24197] RDX: 0000000000001006 RSI: 0000200000001a40 RDI: 0000000000000004 [ 345.243227][T24197] RBP: 00007f8cd8e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 345.243243][T24197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.243258][T24197] R13: 00007f8cda636038 R14: 00007f8cda635fa0 R15: 00007ffe2714b618 [ 345.243279][T24197] [ 345.608906][T22908] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.653104][T24224] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6292'. [ 345.666721][ T29] kauditd_printk_skb: 1175 callbacks suppressed [ 345.666736][ T29] audit: type=1400 audit(1766980126.092:36516): avc: denied { append } for pid=24225 comm="syz.6.6291" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 345.678332][T24165] syz.3.6285 (24165) used greatest stack depth: 6968 bytes left [ 345.708703][T24226] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 345.755262][T20291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.794892][ T29] audit: type=1400 audit(1766980126.222:36517): avc: denied { execute } for pid=24225 comm="syz.6.6291" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=73631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 345.832241][T24249] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 345.855553][ T29] audit: type=1400 audit(1766980126.282:36518): avc: denied { create } for pid=24260 comm="syz.5.6297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 345.896303][T24276] syzkaller0: entered allmulticast mode [ 345.905752][T24276] syzkaller0: entered promiscuous mode [ 345.911862][T24249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.917099][ T29] audit: type=1400 audit(1766980126.312:36519): avc: denied { name_bind } for pid=24275 comm="syz.0.6298" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 345.945081][T24249] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 345.945612][ T29] audit: type=1400 audit(1766980126.312:36520): avc: denied { node_bind } for pid=24275 comm="syz.0.6298" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 345.976193][ T29] audit: type=1400 audit(1766980126.312:36521): avc: denied { ioctl } for pid=24275 comm="syz.0.6298" path="socket:[73677]" dev="sockfs" ino=73677 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 346.002410][T24276] syzkaller0 (unregistering): left allmulticast mode [ 346.009199][T24276] syzkaller0 (unregistering): left promiscuous mode [ 346.022602][ T29] audit: type=1326 audit(1766980126.452:36522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24248 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3f04f749 code=0x7ffc0000 [ 346.067027][ T29] audit: type=1326 audit(1766980126.452:36523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24248 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fec3f04f749 code=0x7ffc0000 [ 346.090168][ T29] audit: type=1326 audit(1766980126.452:36524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24248 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3f04f749 code=0x7ffc0000 [ 346.113490][ T29] audit: type=1326 audit(1766980126.452:36525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24248 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fec3f04f749 code=0x7ffc0000 [ 346.137998][T20291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.205809][T24316] set_capacity_and_notify: 29 callbacks suppressed [ 346.205827][T24316] loop0: detected capacity change from 0 to 512 [ 346.230244][T24318] loop5: detected capacity change from 0 to 2048 [ 346.240767][T24316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.253336][T24316] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.320496][T24316] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 346.335700][T24316] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 346.347983][T24316] EXT4-fs (loop0): This should not happen!! Data will be lost [ 346.347983][T24316] [ 346.357620][T24316] EXT4-fs (loop0): Total free blocks count 0 [ 346.363621][T24316] EXT4-fs (loop0): Free/Dirty block details [ 346.369508][T24316] EXT4-fs (loop0): free_blocks=65280 [ 346.374781][T24316] EXT4-fs (loop0): dirty_blocks=2 [ 346.379882][T24316] EXT4-fs (loop0): Block reservation details [ 346.385847][T24316] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 346.416748][T21863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.470536][T24338] loop0: detected capacity change from 0 to 2048 [ 346.908177][T24371] loop3: detected capacity change from 0 to 164 [ 346.939915][T24371] net_ratelimit: 33 callbacks suppressed [ 346.940160][T24371] netlink: zone id is out of range [ 346.951349][T24371] netlink: zone id is out of range [ 346.957110][T24371] netlink: zone id is out of range [ 346.962610][T24371] netlink: zone id is out of range [ 346.967895][T24371] netlink: zone id is out of range [ 346.974014][T24371] netlink: zone id is out of range [ 346.979344][T24371] netlink: zone id is out of range [ 346.984726][T24371] netlink: zone id is out of range [ 346.989337][T24373] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 346.990156][T24371] netlink: zone id is out of range [ 347.003104][T24371] netlink: zone id is out of range [ 347.086913][T24379] netlink: 'syz.5.6310': attribute type 13 has an invalid length. [ 347.104475][T24383] loop3: detected capacity change from 0 to 2048 [ 347.122084][T24383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.144594][T20291] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 347.167001][T20291] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 347.179367][T20291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.283708][T24417] FAULT_INJECTION: forcing a failure. [ 347.283708][T24417] name failslab, interval 1, probability 0, space 0, times 0 [ 347.296402][T24417] CPU: 0 UID: 0 PID: 24417 Comm: syz.5.6315 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 347.296435][T24417] Tainted: [W]=WARN [ 347.296443][T24417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 347.296459][T24417] Call Trace: [ 347.296467][T24417] [ 347.296496][T24417] __dump_stack+0x1d/0x30 [ 347.296598][T24417] dump_stack_lvl+0x95/0xd0 [ 347.296625][T24417] dump_stack+0x15/0x1b [ 347.296650][T24417] should_fail_ex+0x265/0x280 [ 347.296708][T24417] should_failslab+0x8c/0xb0 [ 347.296732][T24417] __kmalloc_cache_noprof+0x65/0x4c0 [ 347.296761][T24417] ? tcp_sendmsg_fastopen+0x172/0x520 [ 347.296852][T24417] tcp_sendmsg_fastopen+0x172/0x520 [ 347.296941][T24417] tcp_sendmsg_locked+0x26e1/0x2c00 [ 347.296969][T24417] ? fixup_exception+0x742/0xcf0 [ 347.297005][T24417] ? __rcu_read_unlock+0x4f/0x70 [ 347.297027][T24417] ? spurious_kernel_fault+0xf7/0x490 [ 347.297111][T24417] ? __rcu_read_unlock+0x4f/0x70 [ 347.297205][T24417] ? avc_has_perm_noaudit+0xab/0x130 [ 347.297276][T24417] ? avc_has_perm+0xf7/0x180 [ 347.297295][T24417] ? _raw_spin_lock_bh+0x56/0xb0 [ 347.297391][T24417] ? _raw_spin_unlock_bh+0x36/0x40 [ 347.297416][T24417] ? __pfx_tcp_sendmsg+0x10/0x10 [ 347.297447][T24417] tcp_sendmsg+0x2f/0x50 [ 347.297478][T24417] inet_sendmsg+0x76/0xd0 [ 347.297625][T24417] __sock_sendmsg+0x102/0x180 [ 347.297733][T24417] __sys_sendto+0x268/0x330 [ 347.297766][T24417] __x64_sys_sendto+0x76/0x90 [ 347.297791][T24417] x64_sys_call+0x29a7/0x3000 [ 347.297831][T24417] do_syscall_64+0xca/0x2b0 [ 347.297883][T24417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.297906][T24417] RIP: 0033:0x7f4181dcf749 [ 347.297921][T24417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.297942][T24417] RSP: 002b:00007f418082f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 347.297965][T24417] RAX: ffffffffffffffda RBX: 00007f4182025fa0 RCX: 00007f4181dcf749 [ 347.298050][T24417] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 347.298065][T24417] RBP: 00007f418082f090 R08: 0000200000000100 R09: 0000000000000010 [ 347.298078][T24417] R10: 0000000020008005 R11: 0000000000000246 R12: 0000000000000001 [ 347.298093][T24417] R13: 00007f4182026038 R14: 00007f4182025fa0 R15: 00007ffef084d748 [ 347.298116][T24417] [ 347.622442][T24439] loop5: detected capacity change from 0 to 2048 [ 347.751186][T24442] loop8: detected capacity change from 0 to 2048 [ 347.770713][T24442] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.794518][T20136] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 347.809227][T20136] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 347.822671][T20136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.992535][T24489] loop8: detected capacity change from 0 to 2048 [ 348.220302][T24516] FAULT_INJECTION: forcing a failure. [ 348.220302][T24516] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 348.233601][T24516] CPU: 1 UID: 0 PID: 24516 Comm: syz.6.6327 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 348.233698][T24516] Tainted: [W]=WARN [ 348.233706][T24516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 348.233719][T24516] Call Trace: [ 348.233725][T24516] [ 348.233733][T24516] __dump_stack+0x1d/0x30 [ 348.233775][T24516] dump_stack_lvl+0x95/0xd0 [ 348.233802][T24516] dump_stack+0x15/0x1b [ 348.233827][T24516] should_fail_ex+0x265/0x280 [ 348.233855][T24516] should_fail_alloc_page+0xf2/0x100 [ 348.233956][T24516] __alloc_frozen_pages_noprof+0x109/0x360 [ 348.233995][T24516] alloc_pages_mpol+0xb3/0x260 [ 348.234032][T24516] alloc_pages_noprof+0x90/0x130 [ 348.234144][T24516] pte_alloc_one+0x1e/0xd0 [ 348.234178][T24516] handle_mm_fault+0x1316/0x2c60 [ 348.234232][T24516] ? mt_find+0x21b/0x330 [ 348.234256][T24516] do_user_addr_fault+0x3fe/0x1080 [ 348.234285][T24516] ? kstrtouint+0x76/0xc0 [ 348.234356][T24516] exc_page_fault+0x62/0xa0 [ 348.234390][T24516] asm_exc_page_fault+0x26/0x30 [ 348.234464][T24516] RIP: 0010:__get_user_4+0x14/0x20 [ 348.234495][T24516] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 348.234515][T24516] RSP: 0018:ffffc90001c53e08 EFLAGS: 00050287 [ 348.234532][T24516] RAX: 00007f8cd8dfb000 RBX: ffff88810486b180 RCX: ffffffff81a09ed7 [ 348.234545][T24516] RDX: 00007ffffffff000 RSI: 0000000000000000 RDI: ffff88810486b690 [ 348.234634][T24516] RBP: ffffc90001c53f48 R08: 000188810486b697 R09: 0000000000000000 [ 348.234647][T24516] R10: ffffc90001c53e58 R11: 0001c90001c53e58 R12: ffff88810b1721c0 [ 348.234663][T24516] R13: 0000000000000000 R14: 00007f8cd8dfb000 R15: 0000000000000001 [ 348.234683][T24516] ? lookup_ioctx+0x27/0x1e0 [ 348.234720][T24516] lookup_ioctx+0x36/0x1e0 [ 348.234752][T24516] __se_sys_io_submit+0x57/0x280 [ 348.234787][T24516] __x64_sys_io_submit+0x43/0x50 [ 348.234823][T24516] x64_sys_call+0x2e40/0x3000 [ 348.234850][T24516] do_syscall_64+0xca/0x2b0 [ 348.234889][T24516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.234963][T24516] RIP: 0033:0x7f8cda3df749 [ 348.234981][T24516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.235038][T24516] RSP: 002b:00007f8cd8e3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 348.235056][T24516] RAX: ffffffffffffffda RBX: 00007f8cda635fa0 RCX: 00007f8cda3df749 [ 348.235071][T24516] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007f8cd8dfb000 [ 348.235086][T24516] RBP: 00007f8cd8e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 348.235101][T24516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.235117][T24516] R13: 00007f8cda636038 R14: 00007f8cda635fa0 R15: 00007ffe2714b618 [ 348.235147][T24516] [ 348.644324][T24531] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 348.743934][T24539] batman_adv: batadv0: Adding interface: dummy0 [ 348.744111][T24537] loop3: detected capacity change from 0 to 1024 [ 348.750265][T24539] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.782867][T24537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 348.789874][T24539] batman_adv: batadv0: Interface activated: dummy0 [ 348.811835][T24537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.833742][T24553] loop0: detected capacity change from 0 to 512 [ 348.851871][T24553] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 348.862144][T24553] macvtap0: refused to change device tx_queue_len [ 349.177334][T24591] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 349.212515][T24591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.225183][T24591] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 349.236860][T24591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.393633][T24537] syz.3.6334 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 349.407905][T24537] CPU: 0 UID: 0 PID: 24537 Comm: syz.3.6334 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 349.407939][T24537] Tainted: [W]=WARN [ 349.407946][T24537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 349.408026][T24537] Call Trace: [ 349.408033][T24537] [ 349.408043][T24537] __dump_stack+0x1d/0x30 [ 349.408072][T24537] dump_stack_lvl+0x95/0xd0 [ 349.408094][T24537] dump_stack+0x15/0x1b [ 349.408119][T24537] dump_header+0x81/0x240 [ 349.408145][T24537] oom_kill_process+0x295/0x350 [ 349.408233][T24537] out_of_memory+0x97b/0xb80 [ 349.408263][T24537] try_charge_memcg+0x610/0xa10 [ 349.408290][T24537] obj_cgroup_charge_pages+0xa6/0x150 [ 349.408329][T24537] __memcg_kmem_charge_page+0x9f/0x170 [ 349.408381][T24537] __alloc_frozen_pages_noprof+0x18f/0x360 [ 349.408432][T24537] alloc_pages_mpol+0xb3/0x260 [ 349.408525][T24537] alloc_pages_noprof+0x90/0x130 [ 349.408585][T24537] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 349.408630][T24537] __kvmalloc_node_noprof+0x492/0x6b0 [ 349.408665][T24537] ? ip_set_alloc+0x24/0x30 [ 349.408767][T24537] ? ip_set_alloc+0x24/0x30 [ 349.408802][T24537] ip_set_alloc+0x24/0x30 [ 349.408901][T24537] hash_netiface_create+0x282/0x740 [ 349.408943][T24537] ? __pfx_hash_netiface_create+0x10/0x10 [ 349.408985][T24537] ip_set_create+0x3cc/0x970 [ 349.409080][T24537] ? __nla_parse+0x40/0x60 [ 349.409110][T24537] nfnetlink_rcv_msg+0x4c6/0x590 [ 349.409203][T24537] netlink_rcv_skb+0x123/0x220 [ 349.409237][T24537] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 349.409357][T24537] nfnetlink_rcv+0x167/0x16c0 [ 349.409456][T24537] ? __memcg_slab_free_hook+0x135/0x230 [ 349.409493][T24537] ? kmem_cache_free+0xe3/0x3a0 [ 349.409519][T24537] ? __dev_queue_xmit+0x1a91/0x1ec0 [ 349.409603][T24537] ? __kfree_skb+0x109/0x150 [ 349.409630][T24537] ? sk_skb_reason_drop+0xbd/0x270 [ 349.409738][T24537] ? __dev_queue_xmit+0x138d/0x1ec0 [ 349.409767][T24537] ? __dev_queue_xmit+0x148/0x1ec0 [ 349.409800][T24537] ? ref_tracker_free+0x37d/0x3e0 [ 349.409832][T24537] ? __netlink_deliver_tap+0x4fc/0x500 [ 349.409968][T24537] netlink_unicast+0x5c0/0x690 [ 349.410006][T24537] netlink_sendmsg+0x58b/0x6b0 [ 349.410043][T24537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.410106][T24537] __sock_sendmsg+0x145/0x180 [ 349.410202][T24537] ____sys_sendmsg+0x31e/0x4a0 [ 349.410248][T24537] ___sys_sendmsg+0x17b/0x1d0 [ 349.410290][T24537] __x64_sys_sendmsg+0xd4/0x160 [ 349.410369][T24537] x64_sys_call+0x17ba/0x3000 [ 349.410398][T24537] do_syscall_64+0xca/0x2b0 [ 349.410527][T24537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.410555][T24537] RIP: 0033:0x7fec3f04f749 [ 349.410639][T24537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.410658][T24537] RSP: 002b:00007fec3dab7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.410678][T24537] RAX: ffffffffffffffda RBX: 00007fec3f2a5fa0 RCX: 00007fec3f04f749 [ 349.410693][T24537] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000c [ 349.410706][T24537] RBP: 00007fec3f0d3f91 R08: 0000000000000000 R09: 0000000000000000 [ 349.410719][T24537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.410731][T24537] R13: 00007fec3f2a6038 R14: 00007fec3f2a5fa0 R15: 00007ffe360fd428 [ 349.410815][T24537] [ 349.733414][T24537] memory: usage 307200kB, limit 307200kB, failcnt 437 [ 349.740198][T24537] memory+swap: usage 307900kB, limit 9007199254740988kB, failcnt 0 [ 349.748140][T24537] kmem: usage 307048kB, limit 9007199254740988kB, failcnt 0 [ 349.755427][T24537] Memory cgroup stats for /syz3: [ 349.756125][T24537] cache 8192 [ 349.764274][T24537] rss 0 [ 349.767022][T24537] shmem 0 [ 349.770040][T24537] mapped_file 0 [ 349.773491][T24537] dirty 0 [ 349.776421][T24537] writeback 0 [ 349.779783][T24537] workingset_refault_anon 122 [ 349.784443][T24537] workingset_refault_file 800 [ 349.789185][T24537] swap 716800 [ 349.792454][T24537] swapcached 24576 [ 349.796214][T24537] pgpgin 398299 [ 349.799659][T24537] pgpgout 398261 [ 349.803180][T24537] pgfault 505888 [ 349.806704][T24537] pgmajfault 73 [ 349.810154][T24537] inactive_anon 24576 [ 349.814121][T24537] active_anon 0 [ 349.817559][T24537] inactive_file 126976 [ 349.821633][T24537] active_file 4096 [ 349.825433][T24537] unevictable 0 [ 349.827543][T24612] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 349.828881][T24537] hierarchical_memory_limit 314572800 [ 349.844057][T24537] hierarchical_memsw_limit 9223372036854771712 [ 349.850251][T24537] total_cache 8192 [ 349.853857][T24612] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 349.853954][T24537] total_rss 0 [ 349.865163][T24537] total_shmem 0 [ 349.865436][T24614] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 349.868606][T24537] total_mapped_file 0 [ 349.868615][T24537] total_dirty 0 [ 349.868676][T24537] total_writeback 0 [ 349.888358][T24537] total_workingset_refault_anon 122 [ 349.893541][T24537] total_workingset_refault_file 800 [ 349.898711][T24537] total_swap 716800 [ 349.902517][T24537] total_swapcached 24576 [ 349.906752][T24537] total_pgpgin 398299 [ 349.910744][T24537] total_pgpgout 398261 [ 349.914880][T24537] total_pgfault 505888 [ 349.917975][T24612] System zones: [ 349.918925][T24537] total_pgmajfault 73 [ 349.918928][T24612] 1-12 [ 349.922472][T24537] total_inactive_anon 24576 [ 349.926953][T24612] EXT4-fs (loop5): 1 truncate cleaned up [ 349.929133][T24537] total_active_anon 0 [ 349.929144][T24537] total_inactive_file 126976 [ 349.929152][T24537] total_active_file 4096 [ 349.929160][T24537] total_unevictable 0 [ 349.929170][T24537] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset= [ 349.934134][T24612] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.939330][T24537] /,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6334,pid=24536,uid=0 [ 349.939392][T24537] Memory cgroup out of memory: Killed process 24536 (syz.3.6334) total-vm:93968kB, anon-rss:1140kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 350.013890][T24623] vlan2: entered allmulticast mode [ 350.019047][T24623] dummy0: entered allmulticast mode [ 350.022999][T24614] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.038236][T20800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.053503][T24614] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 350.065012][T24614] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.108192][T20291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.113349][T24640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24640 comm=syz.6.6350 [ 350.153749][T24646] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 350.265979][T24646] EXT4-fs (loop8): 1 truncate cleaned up [ 350.274326][T24646] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.344317][T24640] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 350.370936][T24684] can0: slcan on ttyS3. [ 350.393555][T24640] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.442002][T24640] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 350.579589][T24690] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 350.624486][T24693] syzkaller0: entered allmulticast mode [ 350.643172][T24690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.660241][T24693] syzkaller0: entered promiscuous mode [ 350.713898][T24690] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 350.724535][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 350.724547][ T29] audit: type=1400 audit(1766980131.152:36863): avc: denied { mounton } for pid=24645 comm="syz.8.6353" path="/114/bus/file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 350.766643][T24693] syzkaller0 (unregistering): left allmulticast mode [ 350.773402][T24693] syzkaller0 (unregistering): left promiscuous mode [ 350.799773][T24690] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.826173][T20136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.864629][ T29] audit: type=1326 audit(1766980131.272:36864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24683 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184072f749 code=0x7ffc0000 [ 350.887822][ T29] audit: type=1326 audit(1766980131.272:36865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24683 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f184072f749 code=0x7ffc0000 [ 350.910933][ T29] audit: type=1326 audit(1766980131.272:36866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24683 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184072f749 code=0x7ffc0000 [ 350.912215][T24714] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 350.934067][ T29] audit: type=1326 audit(1766980131.272:36867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24683 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f184072f749 code=0x7ffc0000 [ 350.950085][T24714] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 350.966924][ T29] audit: type=1326 audit(1766980131.272:36868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24683 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f184072f783 code=0x7ffc0000 [ 350.974838][T24714] System zones: 1-12 [ 350.998211][ T29] audit: type=1326 audit(1766980131.272:36869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24683 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f184072e1ff code=0x7ffc0000 [ 351.024690][ T29] audit: type=1326 audit(1766980131.272:36870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24683 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f184072f7d7 code=0x7ffc0000 [ 351.047614][ T29] audit: type=1326 audit(1766980131.272:36871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24683 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f184072df90 code=0x7ffc0000 [ 351.049487][T24714] EXT4-fs (loop0): 1 truncate cleaned up [ 351.070677][ T29] audit: type=1326 audit(1766980131.272:36872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24683 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f184072f34b code=0x7ffc0000 [ 351.101551][T24714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.162252][T21863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.162694][T22908] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.219405][T24648] can0 (unregistered): slcan off ttyS3. [ 351.280242][T24757] program syz.5.6362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 351.342994][T24764] set_capacity_and_notify: 12 callbacks suppressed [ 351.343011][T24764] loop5: detected capacity change from 0 to 512 [ 351.356943][T24764] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 351.384260][T24764] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 351.431286][T24764] loop5: detected capacity change from 0 to 512 [ 351.473645][T24801] netlink: 'syz.5.6368': attribute type 1 has an invalid length. [ 351.481444][T24801] __nla_validate_parse: 6 callbacks suppressed [ 351.481458][T24801] netlink: 668 bytes leftover after parsing attributes in process `syz.5.6368'. [ 351.545291][T24806] loop0: detected capacity change from 0 to 512 [ 351.552336][T24803] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 351.561540][T24806] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 351.580744][T24803] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 351.597810][T24806] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 351.616837][T24806] System zones: 1-12 [ 351.621487][T24806] EXT4-fs (loop0): 1 truncate cleaned up [ 351.761856][T24823] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6372'. [ 351.808628][T24831] program syz.8.6374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.036546][T24859] net_ratelimit: 151 callbacks suppressed [ 352.036560][T24859] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:00fc with DS=0x6 [ 352.073453][T24861] loop0: detected capacity change from 0 to 512 [ 352.097180][T24861] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 352.108959][T24867] loop6: detected capacity change from 0 to 512 [ 352.116142][T24867] EXT4-fs: Ignoring removed nobh option [ 352.128277][T24865] netlink: 'syz.8.6381': attribute type 9 has an invalid length. [ 352.137031][T24861] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 352.139330][T24867] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 352.174438][T24861] loop0: detected capacity change from 0 to 512 [ 352.182357][T24867] EXT4-fs (loop6): 1 truncate cleaned up [ 352.212784][T24877] loop8: detected capacity change from 0 to 2048 [ 352.517203][T24952] loop5: detected capacity change from 0 to 2048 [ 352.545839][T24955] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:00fc with DS=0x6 [ 352.554976][T24952] loop5: p3 < > p4 < > [ 352.559180][T24952] loop5: partition table partially beyond EOD, truncated [ 352.566516][T24952] loop5: p3 start 4284289 is beyond EOD, truncated [ 352.592312][T24961] FAULT_INJECTION: forcing a failure. [ 352.592312][T24961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.605417][T24961] CPU: 0 UID: 0 PID: 24961 Comm: syz.0.6393 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 352.605501][T24961] Tainted: [W]=WARN [ 352.605508][T24961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 352.605544][T24961] Call Trace: [ 352.605564][T24961] [ 352.605573][T24961] __dump_stack+0x1d/0x30 [ 352.605609][T24961] dump_stack_lvl+0x95/0xd0 [ 352.605684][T24961] dump_stack+0x15/0x1b [ 352.605709][T24961] should_fail_ex+0x265/0x280 [ 352.605736][T24961] should_fail+0xb/0x20 [ 352.605756][T24961] should_fail_usercopy+0x1a/0x20 [ 352.605791][T24961] _copy_from_iter+0xcf/0xe70 [ 352.605818][T24961] ? __alloc_skb+0x396/0x4b0 [ 352.605857][T24961] ? __alloc_skb+0x228/0x4b0 [ 352.605889][T24961] netlink_sendmsg+0x471/0x6b0 [ 352.605931][T24961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.605969][T24961] __sock_sendmsg+0x145/0x180 [ 352.606026][T24961] ____sys_sendmsg+0x31e/0x4a0 [ 352.606069][T24961] ___sys_sendmsg+0x17b/0x1d0 [ 352.606114][T24961] __x64_sys_sendmsg+0xd4/0x160 [ 352.606153][T24961] x64_sys_call+0x17ba/0x3000 [ 352.606211][T24961] do_syscall_64+0xca/0x2b0 [ 352.606248][T24961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.606321][T24961] RIP: 0033:0x7f184072f749 [ 352.606396][T24961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.606419][T24961] RSP: 002b:00007f183f18f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.606443][T24961] RAX: ffffffffffffffda RBX: 00007f1840985fa0 RCX: 00007f184072f749 [ 352.606521][T24961] RDX: 0000000000040000 RSI: 0000200000000100 RDI: 0000000000000005 [ 352.606537][T24961] RBP: 00007f183f18f090 R08: 0000000000000000 R09: 0000000000000000 [ 352.606556][T24961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.606568][T24961] R13: 00007f1840986038 R14: 00007f1840985fa0 R15: 00007ffeb4f861e8 [ 352.606587][T24961] [ 352.836793][T24971] netlink: 'syz.5.6396': attribute type 12 has an invalid length. [ 352.844714][T24971] netlink: 'syz.5.6396': attribute type 29 has an invalid length. [ 352.852570][T24971] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6396'. [ 352.861821][T24971] netlink: 51 bytes leftover after parsing attributes in process `syz.5.6396'. [ 352.880598][T24971] loop5: detected capacity change from 0 to 1024 [ 352.892337][T24971] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.6396' sets config #0 [ 352.902264][T24971] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.6396' sets config #1 [ 352.906356][T24977] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 352.972866][T24983] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6398'. [ 352.989335][T24985] loop5: detected capacity change from 0 to 128 [ 353.090709][T24999] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:00fc with DS=0x6 [ 353.090833][T24998] FAULT_INJECTION: forcing a failure. [ 353.090833][T24998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.112861][T24998] CPU: 0 UID: 0 PID: 24998 Comm: syz.8.6402 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 353.112898][T24998] Tainted: [W]=WARN [ 353.112966][T24998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 353.112982][T24998] Call Trace: [ 353.112989][T24998] [ 353.112999][T24998] __dump_stack+0x1d/0x30 [ 353.113029][T24998] dump_stack_lvl+0x95/0xd0 [ 353.113093][T24998] dump_stack+0x15/0x1b [ 353.113113][T24998] should_fail_ex+0x265/0x280 [ 353.113141][T24998] should_fail+0xb/0x20 [ 353.113166][T24998] should_fail_usercopy+0x1a/0x20 [ 353.113198][T24998] _copy_to_user+0x20/0xa0 [ 353.113293][T24998] simple_read_from_buffer+0xb5/0x130 [ 353.113321][T24998] proc_fail_nth_read+0x10e/0x150 [ 353.113358][T24998] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 353.113460][T24998] vfs_read+0x1a8/0x770 [ 353.113482][T24998] ? __rcu_read_unlock+0x4f/0x70 [ 353.113507][T24998] ? __fget_files+0x184/0x1c0 [ 353.113545][T24998] ? mutex_lock+0x58/0x90 [ 353.113578][T24998] ksys_read+0xda/0x1a0 [ 353.113682][T24998] __x64_sys_read+0x40/0x50 [ 353.113724][T24998] x64_sys_call+0x2889/0x3000 [ 353.113756][T24998] do_syscall_64+0xca/0x2b0 [ 353.113799][T24998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.113827][T24998] RIP: 0033:0x7f5165fde15c [ 353.113920][T24998] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 353.113984][T24998] RSP: 002b:00007f5164a47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 353.114008][T24998] RAX: ffffffffffffffda RBX: 00007f5166235fa0 RCX: 00007f5165fde15c [ 353.114025][T24998] RDX: 000000000000000f RSI: 00007f5164a470a0 RDI: 0000000000000009 [ 353.114041][T24998] RBP: 00007f5164a47090 R08: 0000000000000000 R09: 0000000000000000 [ 353.114057][T24998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.114073][T24998] R13: 00007f5166236038 R14: 00007f5166235fa0 R15: 00007ffde0e403b8 [ 353.114095][T24998] [ 353.463775][T25021] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 353.501658][T25022] EXT4-fs: Ignoring removed nobh option [ 353.508032][T25022] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 353.522427][T25022] EXT4-fs (loop3): 1 truncate cleaned up [ 353.697435][T25051] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6411'. [ 353.783512][T25056] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6413'. [ 353.867748][T25061] netlink: 'syz.0.6415': attribute type 1 has an invalid length. [ 353.883679][T25061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 353.892182][T25061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6415'. [ 353.904055][T25061] bond1 (unregistering): Released all slaves [ 354.067168][T25133] program syz.5.6416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.253128][T25140] can0: slcan on ttyS3. [ 354.276862][T25145] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 354.300132][T25145] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 354.310014][T25145] Symlink component flag not implemented [ 354.315955][T25145] Symlink component flag not implemented (7) [ 354.904595][T25210] --map-set only usable from mangle table [ 354.979244][T25134] can0 (unregistered): slcan off ttyS3. [ 355.173162][T25231] EXT4-fs: Ignoring removed nomblk_io_submit option [ 355.194318][T25240] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 355.234377][T25245] netlink: 'syz.0.6432': attribute type 1 has an invalid length. [ 355.321998][T25255] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 355.512247][T25263] FAULT_INJECTION: forcing a failure. [ 355.512247][T25263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.525441][T25263] CPU: 0 UID: 0 PID: 25263 Comm: syz.3.6437 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 355.525474][T25263] Tainted: [W]=WARN [ 355.525481][T25263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 355.525499][T25263] Call Trace: [ 355.525507][T25263] [ 355.525516][T25263] __dump_stack+0x1d/0x30 [ 355.525545][T25263] dump_stack_lvl+0x95/0xd0 [ 355.525573][T25263] dump_stack+0x15/0x1b [ 355.525598][T25263] should_fail_ex+0x265/0x280 [ 355.525636][T25263] should_fail+0xb/0x20 [ 355.525660][T25263] should_fail_usercopy+0x1a/0x20 [ 355.525686][T25263] _copy_from_user+0x1c/0xb0 [ 355.525801][T25263] ___sys_sendmsg+0xc1/0x1d0 [ 355.525850][T25263] __x64_sys_sendmsg+0xd4/0x160 [ 355.525891][T25263] x64_sys_call+0x17ba/0x3000 [ 355.525973][T25263] do_syscall_64+0xca/0x2b0 [ 355.526015][T25263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.526042][T25263] RIP: 0033:0x7fec3f04f749 [ 355.526061][T25263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.526093][T25263] RSP: 002b:00007fec3dab7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.526113][T25263] RAX: ffffffffffffffda RBX: 00007fec3f2a5fa0 RCX: 00007fec3f04f749 [ 355.526129][T25263] RDX: 0000000000008000 RSI: 0000200000001c00 RDI: 0000000000000004 [ 355.526185][T25263] RBP: 00007fec3dab7090 R08: 0000000000000000 R09: 0000000000000000 [ 355.526200][T25263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.526213][T25263] R13: 00007fec3f2a6038 R14: 00007fec3f2a5fa0 R15: 00007ffe360fd428 [ 355.526232][T25263] [ 355.729510][ T29] kauditd_printk_skb: 1014 callbacks suppressed [ 355.729525][ T29] audit: type=1400 audit(1766980136.162:37887): avc: denied { bind } for pid=25260 comm="syz.5.6436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 355.766268][T25269] netlink: 'syz.8.6439': attribute type 12 has an invalid length. [ 355.782518][ T29] audit: type=1400 audit(1766980136.202:37888): avc: denied { write } for pid=25268 comm="syz.8.6439" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 355.803063][ T29] audit: type=1400 audit(1766980136.202:37889): avc: denied { create } for pid=25268 comm="syz.8.6439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 355.822808][ T29] audit: type=1400 audit(1766980136.202:37890): avc: denied { write } for pid=25268 comm="syz.8.6439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 356.117212][T25286] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 356.129144][T25274] program syz.3.6440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.177106][T25286] EXT4-fs (loop6): 1 truncate cleaned up [ 356.196434][ T29] audit: type=1400 audit(1766980136.622:37891): avc: denied { setattr } for pid=25285 comm="syz.6.6442" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 356.269741][ T29] audit: type=1400 audit(1766980136.622:37892): avc: denied { unlink } for pid=25285 comm="syz.6.6442" name="file2" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 356.330147][T25309] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 356.447970][T25317] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 356.553889][T25319] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 356.579216][ T29] audit: type=1326 audit(1766980137.002:37893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25324 comm="syz.3.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3f04f749 code=0x7ffc0000 [ 356.602814][ T29] audit: type=1326 audit(1766980137.002:37894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25324 comm="syz.3.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec3f04f749 code=0x7ffc0000 [ 356.626428][ T29] audit: type=1326 audit(1766980137.002:37895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25324 comm="syz.3.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3f04f749 code=0x7ffc0000 [ 356.650029][ T29] audit: type=1326 audit(1766980137.002:37896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25324 comm="syz.3.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec3f04df90 code=0x7ffc0000 [ 356.704299][T25323] set_capacity_and_notify: 6 callbacks suppressed [ 356.704316][T25323] loop6: detected capacity change from 0 to 2048 [ 356.717357][T25326] loop8: detected capacity change from 0 to 764 [ 356.740281][T25326] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 356.760362][T25319] Symlink component flag not implemented [ 356.766200][T25319] Symlink component flag not implemented (7) [ 356.812079][T25339] FAULT_INJECTION: forcing a failure. [ 356.812079][T25339] name failslab, interval 1, probability 0, space 0, times 0 [ 356.824779][T25339] CPU: 1 UID: 0 PID: 25339 Comm: syz.5.6454 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 356.824811][T25339] Tainted: [W]=WARN [ 356.824818][T25339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 356.824832][T25339] Call Trace: [ 356.824839][T25339] [ 356.824894][T25339] __dump_stack+0x1d/0x30 [ 356.824919][T25339] dump_stack_lvl+0x95/0xd0 [ 356.824946][T25339] dump_stack+0x15/0x1b [ 356.824972][T25339] should_fail_ex+0x265/0x280 [ 356.824998][T25339] should_failslab+0x8c/0xb0 [ 356.825026][T25339] kmem_cache_alloc_noprof+0x69/0x4b0 [ 356.825051][T25339] ? copy_sighand+0x52/0x1b0 [ 356.825136][T25339] copy_sighand+0x52/0x1b0 [ 356.825178][T25339] copy_process+0xc67/0x1ef0 [ 356.825203][T25339] kernel_clone+0x16c/0x5c0 [ 356.825224][T25339] ? vfs_write+0x7e8/0x960 [ 356.825272][T25339] __x64_sys_clone+0xe6/0x120 [ 356.825351][T25339] x64_sys_call+0x12d0/0x3000 [ 356.825386][T25339] do_syscall_64+0xca/0x2b0 [ 356.825458][T25339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.825485][T25339] RIP: 0033:0x7f4181dcf749 [ 356.825502][T25339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.825524][T25339] RSP: 002b:00007f418082efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 356.825547][T25339] RAX: ffffffffffffffda RBX: 00007f4182025fa0 RCX: 00007f4181dcf749 [ 356.825563][T25339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000400 [ 356.825605][T25339] RBP: 00007f418082f090 R08: 0000000000000000 R09: 0000000000000000 [ 356.825620][T25339] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 356.825632][T25339] R13: 00007f4182026038 R14: 00007f4182025fa0 R15: 00007ffef084d748 [ 356.825683][T25339] [ 357.008251][T25342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.039237][T25342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.184771][T25373] program syz.5.6456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.288669][T25376] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 357.381763][T25381] loop0: detected capacity change from 0 to 1024 [ 357.397033][T25381] EXT4-fs: Ignoring removed nomblk_io_submit option [ 357.405033][T25383] __nla_validate_parse: 5 callbacks suppressed [ 357.405067][T25383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6460'. [ 357.423501][T25383] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6460'. [ 357.435832][T25388] program syz.6.6461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.521135][T25398] FAULT_INJECTION: forcing a failure. [ 357.521135][T25398] name failslab, interval 1, probability 0, space 0, times 0 [ 357.533885][T25398] CPU: 1 UID: 0 PID: 25398 Comm: syz.6.6463 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 357.533924][T25398] Tainted: [W]=WARN [ 357.533932][T25398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 357.533948][T25398] Call Trace: [ 357.533956][T25398] [ 357.533964][T25398] __dump_stack+0x1d/0x30 [ 357.534053][T25398] dump_stack_lvl+0x95/0xd0 [ 357.534079][T25398] dump_stack+0x15/0x1b [ 357.534180][T25398] should_fail_ex+0x265/0x280 [ 357.534258][T25398] ? __pfx_cgroup_show_path+0x10/0x10 [ 357.534292][T25398] should_failslab+0x8c/0xb0 [ 357.534348][T25398] __kmalloc_cache_noprof+0x65/0x4c0 [ 357.534374][T25398] ? cgroup_show_path+0x6a/0x2b0 [ 357.534406][T25398] ? __pfx_cgroup_show_path+0x10/0x10 [ 357.534440][T25398] cgroup_show_path+0x6a/0x2b0 [ 357.534537][T25398] ? kernfs_sop_show_path+0xa4/0xf0 [ 357.534561][T25398] ? __pfx_cgroup_show_path+0x10/0x10 [ 357.534695][T25398] kernfs_sop_show_path+0xb6/0xf0 [ 357.534719][T25398] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 357.534742][T25398] show_path+0x5a/0x80 [ 357.534765][T25398] show_mountinfo+0xd8/0x600 [ 357.534799][T25398] m_show+0x3e/0x50 [ 357.534832][T25398] traverse+0x149/0x3a0 [ 357.534865][T25398] seq_lseek+0xb5/0x170 [ 357.534969][T25398] __x64_sys_lseek+0xe8/0x160 [ 357.535003][T25398] x64_sys_call+0x285d/0x3000 [ 357.535045][T25398] do_syscall_64+0xca/0x2b0 [ 357.535080][T25398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.535102][T25398] RIP: 0033:0x7f8cda3df749 [ 357.535117][T25398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.535331][T25398] RSP: 002b:00007f8cd8e3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 357.535350][T25398] RAX: ffffffffffffffda RBX: 00007f8cda635fa0 RCX: 00007f8cda3df749 [ 357.535364][T25398] RDX: 0000000000000000 RSI: 000000000000fffd RDI: 0000000000000003 [ 357.535377][T25398] RBP: 00007f8cd8e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 357.535390][T25398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.535403][T25398] R13: 00007f8cda636038 R14: 00007f8cda635fa0 R15: 00007ffe2714b618 [ 357.535461][T25398] [ 357.804974][T25410] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 357.922238][T25416] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6471'. [ 357.953647][T25418] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6472'. [ 357.973589][T25418] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6472'. [ 357.991859][T25416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25416 comm=syz.8.6471 [ 358.015967][T25416] syz_tun: refused to change device tx_queue_len [ 358.086303][T25433] program syz.8.6473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 358.246462][T25438] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6475'. [ 358.336359][T25449] can0: slcan on ttyS3. [ 358.356351][T25407] program syz.3.6467 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 358.624215][T25454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6476'. [ 358.916294][T25464] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 358.941579][T25470] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6482'. [ 358.980512][T25478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.009315][T25478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.019639][T25434] can0 (unregistered): slcan off ttyS3. [ 359.089006][T25503] FAULT_INJECTION: forcing a failure. [ 359.089006][T25503] name failslab, interval 1, probability 0, space 0, times 0 [ 359.098759][T25510] loop8: detected capacity change from 0 to 2048 [ 359.101679][T25503] CPU: 1 UID: 0 PID: 25503 Comm: syz.5.6484 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 359.101715][T25503] Tainted: [W]=WARN [ 359.101723][T25503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 359.101758][T25503] Call Trace: [ 359.101765][T25503] [ 359.101774][T25503] __dump_stack+0x1d/0x30 [ 359.101801][T25503] dump_stack_lvl+0x95/0xd0 [ 359.101826][T25503] dump_stack+0x15/0x1b [ 359.101850][T25503] should_fail_ex+0x265/0x280 [ 359.101879][T25503] should_failslab+0x8c/0xb0 [ 359.102031][T25503] __kmalloc_cache_node_noprof+0x6a/0x4d0 [ 359.102138][T25503] ? page_pool_create_percpu+0x4d/0x640 [ 359.102244][T25503] page_pool_create_percpu+0x4d/0x640 [ 359.102297][T25503] page_pool_create+0x1a/0x30 [ 359.102323][T25503] bpf_test_run_xdp_live+0x133/0x11d0 [ 359.102363][T25503] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 359.102398][T25503] ? __static_call_update+0x343/0x380 [ 359.102438][T25503] ? __SCT__tp_func_azx_runtime_resume+0x8/0x8 [ 359.102468][T25503] ? mutex_unlock+0x4f/0x90 [ 359.102549][T25503] ? 0xffffffffa0206a00 [ 359.102564][T25503] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 359.102602][T25503] ? 0xffffffffa0206a00 [ 359.102689][T25503] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 359.102733][T25503] bpf_prog_test_run_xdp+0x525/0x970 [ 359.102769][T25503] ? __rcu_read_unlock+0x4f/0x70 [ 359.102840][T25503] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 359.102990][T25503] bpf_prog_test_run+0x204/0x340 [ 359.103025][T25503] __sys_bpf+0x4c0/0x7c0 [ 359.103054][T25503] __x64_sys_bpf+0x41/0x50 [ 359.103091][T25503] x64_sys_call+0x28e1/0x3000 [ 359.103120][T25503] do_syscall_64+0xca/0x2b0 [ 359.103179][T25503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.103271][T25503] RIP: 0033:0x7f4181dcf749 [ 359.103288][T25503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.103381][T25503] RSP: 002b:00007f418082f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 359.103403][T25503] RAX: ffffffffffffffda RBX: 00007f4182025fa0 RCX: 00007f4181dcf749 [ 359.103418][T25503] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 359.103432][T25503] RBP: 00007f418082f090 R08: 0000000000000000 R09: 0000000000000000 [ 359.103461][T25503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.103475][T25503] R13: 00007f4182026038 R14: 00007f4182025fa0 R15: 00007ffef084d748 [ 359.103495][T25503] [ 359.133191][T25506] program syz.6.6485 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.181942][T25514] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6486'. [ 359.504581][T25513] can0: slcan on ttyS3. [ 359.622105][T25528] loop6: detected capacity change from 0 to 512 [ 359.630947][T25528] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 359.642838][T25528] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 359.646523][T25535] netlink: 'syz.3.6490': attribute type 3 has an invalid length. [ 359.650863][T25528] System zones: 1-12 [ 359.662449][T25512] can0 (unregistered): slcan off ttyS3. [ 359.715205][T25528] EXT4-fs (loop6): 1 truncate cleaned up [ 359.747751][T25547] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6493'. [ 359.792288][T25553] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 359.861927][T25557] netlink: 'syz.5.6497': attribute type 16 has an invalid length. [ 359.869896][T25557] netlink: 'syz.5.6497': attribute type 17 has an invalid length. [ 359.993536][T25557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 360.118813][T25569] loop8: detected capacity change from 0 to 512 [ 360.130039][T25569] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 360.146544][T25569] EXT4-fs (loop8): orphan cleanup on readonly fs [ 360.153588][T25569] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.6500: Allocating blocks 41-42 which overlap fs metadata [ 360.167763][T25569] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.6500: Allocating blocks 41-42 which overlap fs metadata [ 360.181721][T25569] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.6500: Failed to acquire dquot type 1 [ 360.196116][T25569] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 360.206145][T25561] program syz.3.6498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 360.210527][T25569] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.6500: corrupted inode contents [ 360.231779][T25569] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #12: comm syz.8.6500: mark_inode_dirty error [ 360.243279][T25569] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.6500: corrupted inode contents [ 360.255625][T25569] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #12: comm syz.8.6500: mark_inode_dirty error [ 360.267399][T25569] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.6500: corrupted inode contents [ 360.279788][T25569] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 360.288468][T25569] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.6500: corrupted inode contents [ 360.300648][T25569] EXT4-fs error (device loop8): ext4_truncate:4635: inode #12: comm syz.8.6500: mark_inode_dirty error [ 360.312234][T25569] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 360.321376][T25569] EXT4-fs (loop8): 1 truncate cleaned up [ 360.456466][T25585] loop5: detected capacity change from 0 to 512 [ 360.463576][T25585] EXT4-fs: Ignoring removed nobh option [ 360.470098][T25585] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 360.508769][T25610] loop3: detected capacity change from 0 to 2048 [ 360.522687][T25585] EXT4-fs (loop5): 1 truncate cleaned up [ 360.586502][T25613] loop0: detected capacity change from 0 to 512 [ 360.594458][T25613] EXT4-fs: Ignoring removed nobh option [ 360.607692][T25613] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 360.642263][T25613] EXT4-fs (loop0): 1 truncate cleaned up [ 360.906562][T25630] netlink: 'syz.6.6507': attribute type 1 has an invalid length. [ 361.104215][T25633] can0: slcan on ttyS3. [ 361.452937][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 361.452953][ T29] audit: type=1400 audit(1766980141.882:38187): avc: denied { write } for pid=25653 comm="syz.3.6511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 361.482474][T25652] loop6: detected capacity change from 0 to 2048 [ 361.494141][ T29] audit: type=1400 audit(1766980141.912:38188): avc: denied { create } for pid=25653 comm="syz.3.6511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 361.513726][ T29] audit: type=1400 audit(1766980141.912:38189): avc: denied { setopt } for pid=25653 comm="syz.3.6511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 361.534337][ T29] audit: type=1400 audit(1766980141.932:38190): avc: denied { create } for pid=25653 comm="syz.3.6511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 361.554181][ T29] audit: type=1400 audit(1766980141.962:38191): avc: denied { ioctl } for pid=25653 comm="syz.3.6511" path="socket:[76252]" dev="sockfs" ino=76252 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 361.579320][ T29] audit: type=1400 audit(1766980141.962:38192): avc: denied { bind } for pid=25653 comm="syz.3.6511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 361.630302][T25658] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 361.639527][T25648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.656394][T25648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.712187][T25658] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 361.753865][ T29] audit: type=1326 audit(1766980142.182:38193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25657 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3f04f749 code=0x7ffc0000 [ 361.777298][T25658] set_capacity_and_notify: 1 callbacks suppressed [ 361.777312][T25658] loop3: detected capacity change from 0 to 512 [ 361.780076][ T29] audit: type=1326 audit(1766980142.182:38194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25657 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3f04f749 code=0x7ffc0000 [ 361.813046][ T29] audit: type=1326 audit(1766980142.182:38195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25657 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fec3f04f749 code=0x7ffc0000 [ 361.836139][ T29] audit: type=1326 audit(1766980142.182:38196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25657 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3f04f749 code=0x7ffc0000 [ 361.959135][T25627] can0 (unregistered): slcan off ttyS3. [ 362.063758][T25681] can0: slcan on ttyS3. [ 362.158938][T25690] macvtap0: refused to change device tx_queue_len [ 362.194267][T25690] loop8: detected capacity change from 0 to 512 [ 362.222767][T25690] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 362.263557][T25695] FAULT_INJECTION: forcing a failure. [ 362.263557][T25695] name failslab, interval 1, probability 0, space 0, times 0 [ 362.276270][T25695] CPU: 1 UID: 0 PID: 25695 Comm: syz.3.6517 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 362.276358][T25695] Tainted: [W]=WARN [ 362.276365][T25695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 362.276378][T25695] Call Trace: [ 362.276386][T25695] [ 362.276395][T25695] __dump_stack+0x1d/0x30 [ 362.276486][T25695] dump_stack_lvl+0x95/0xd0 [ 362.276512][T25695] dump_stack+0x15/0x1b [ 362.276533][T25695] should_fail_ex+0x265/0x280 [ 362.276557][T25695] should_failslab+0x8c/0xb0 [ 362.276600][T25695] kmem_cache_alloc_noprof+0x69/0x4b0 [ 362.276624][T25695] ? skb_clone+0x151/0x1f0 [ 362.276696][T25695] skb_clone+0x151/0x1f0 [ 362.276731][T25695] ip_mc_output+0x10d/0x340 [ 362.276762][T25695] ? __pfx_dst_output+0x10/0x10 [ 362.276964][T25695] ip_send_skb+0x151/0x160 [ 362.276994][T25695] udp_send_skb+0x6e3/0xa40 [ 362.277023][T25695] udp_sendmsg+0x1050/0x13c0 [ 362.277055][T25695] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 362.277125][T25695] ? __pfx_udp_sendmsg+0x10/0x10 [ 362.277156][T25695] inet_sendmsg+0xac/0xd0 [ 362.277255][T25695] __sock_sendmsg+0x102/0x180 [ 362.277275][T25695] ____sys_sendmsg+0x345/0x4a0 [ 362.277307][T25695] ___sys_sendmsg+0x17b/0x1d0 [ 362.277348][T25695] __sys_sendmmsg+0x178/0x300 [ 362.277420][T25695] __x64_sys_sendmmsg+0x57/0x70 [ 362.277452][T25695] x64_sys_call+0x1e28/0x3000 [ 362.277506][T25695] do_syscall_64+0xca/0x2b0 [ 362.277548][T25695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.277575][T25695] RIP: 0033:0x7fec3f04f749 [ 362.277608][T25695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.277626][T25695] RSP: 002b:00007fec3dab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 362.277646][T25695] RAX: ffffffffffffffda RBX: 00007fec3f2a5fa0 RCX: 00007fec3f04f749 [ 362.277659][T25695] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 362.277711][T25695] RBP: 00007fec3dab7090 R08: 0000000000000000 R09: 0000000000000000 [ 362.277726][T25695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.277739][T25695] R13: 00007fec3f2a6038 R14: 00007fec3f2a5fa0 R15: 00007ffe360fd428 [ 362.277757][T25695] [ 362.504840][T25690] EXT4-fs (loop8): 1 truncate cleaned up [ 362.585345][T25709] loop6: detected capacity change from 0 to 512 [ 362.594624][T25659] can0 (unregistered): slcan off ttyS3. [ 362.601520][T25709] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 362.650233][T25709] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 362.661013][T25707] hub 9-0:1.0: USB hub found [ 362.665685][T25707] hub 9-0:1.0: 8 ports detected [ 362.674323][T25714] loop3: detected capacity change from 0 to 512 [ 362.680416][T25709] System zones: 1-12 [ 362.686964][T25709] EXT4-fs (loop6): 1 truncate cleaned up [ 362.722237][T25714] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 362.732933][T25720] loop0: detected capacity change from 0 to 2048 [ 362.774937][T25714] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 362.782772][T25733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 362.826296][T25726] __nla_validate_parse: 4 callbacks suppressed [ 362.826311][T25726] netlink: 152 bytes leftover after parsing attributes in process `syz.8.6525'. [ 362.848747][T25736] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:00fc with DS=0x6 [ 362.861628][T25714] loop3: detected capacity change from 0 to 512 [ 362.944084][T25757] loop5: detected capacity change from 0 to 2048 [ 362.970662][T25760] 9p: Bad value for 'wfdno' [ 363.024367][T25733] loop6: detected capacity change from 0 to 32768 [ 363.107102][T25733] loop6: p1 p2 p3 < p5 p6 > [ 363.113936][T25733] loop6: p2 size 16775168 extends beyond EOD, truncated [ 363.122143][T25733] loop6: p5 start 4294970168 is beyond EOD, truncated [ 363.174981][T25793] netlink: 'syz.3.6534': attribute type 1 has an invalid length. [ 363.182793][T25793] netlink: 668 bytes leftover after parsing attributes in process `syz.3.6534'. [ 363.249187][T25774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.265430][T25802] loop6: detected capacity change from 0 to 512 [ 363.268067][T25774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.279607][T25802] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 363.291399][T25802] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 363.300549][T25802] System zones: 1-12 [ 363.305060][T25802] EXT4-fs (loop6): 1 truncate cleaned up [ 363.346047][T25810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.354821][T25810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.530865][T25821] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:00fc with DS=0x6 [ 363.553086][T25823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6539'. [ 363.562273][T25823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6539'. [ 363.564621][T25810] loop6: detected capacity change from 0 to 256 [ 363.715768][T25815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.724284][T25815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.798486][T25842] EXT4-fs: Ignoring removed nomblk_io_submit option [ 363.829763][T25834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.846806][T25834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.035077][T25857] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 364.059851][T25857] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 364.075534][T25857] System zones: 1-12 [ 364.080070][T25857] EXT4-fs (loop8): 1 truncate cleaned up [ 364.123229][T25861] program syz.6.6547 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 364.165361][T25867] batman_adv: batadv0: Adding interface: dummy0 [ 364.171712][T25867] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.204209][T25869] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6550'. [ 364.213791][T25869] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6550'. [ 364.241308][T25867] batman_adv: batadv0: Interface activated: dummy0 [ 364.245755][T25842] syz.5.6543 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 364.251675][T25867] batadv0: mtu less than device minimum [ 364.261970][T25842] CPU: 0 UID: 0 PID: 25842 Comm: syz.5.6543 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 364.262059][T25842] Tainted: [W]=WARN [ 364.262067][T25842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 364.262082][T25842] Call Trace: [ 364.262090][T25842] [ 364.262097][T25842] __dump_stack+0x1d/0x30 [ 364.262125][T25842] dump_stack_lvl+0x95/0xd0 [ 364.262217][T25842] dump_stack+0x15/0x1b [ 364.262241][T25842] dump_header+0x81/0x240 [ 364.262266][T25842] oom_kill_process+0x295/0x350 [ 364.262294][T25842] out_of_memory+0x97b/0xb80 [ 364.262353][T25842] try_charge_memcg+0x610/0xa10 [ 364.262383][T25842] obj_cgroup_charge_pages+0xa6/0x150 [ 364.262417][T25842] __memcg_kmem_charge_page+0x9f/0x170 [ 364.262453][T25842] __alloc_frozen_pages_noprof+0x18f/0x360 [ 364.262503][T25842] alloc_pages_mpol+0xb3/0x260 [ 364.262540][T25842] alloc_pages_noprof+0x90/0x130 [ 364.262635][T25842] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 364.262678][T25842] __kvmalloc_node_noprof+0x492/0x6b0 [ 364.262782][T25842] ? ip_set_alloc+0x24/0x30 [ 364.262847][T25842] ? ip_set_alloc+0x24/0x30 [ 364.262919][T25842] ? __slab_alloc+0x25/0x50 [ 364.262953][T25842] ip_set_alloc+0x24/0x30 [ 364.263023][T25842] hash_netiface_create+0x282/0x740 [ 364.263062][T25842] ? __pfx_hash_netiface_create+0x10/0x10 [ 364.263099][T25842] ip_set_create+0x3cc/0x970 [ 364.263195][T25842] ? __nla_parse+0x40/0x60 [ 364.263274][T25842] nfnetlink_rcv_msg+0x4c6/0x590 [ 364.263323][T25842] netlink_rcv_skb+0x123/0x220 [ 364.263496][T25842] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 364.263544][T25842] nfnetlink_rcv+0x167/0x16c0 [ 364.263614][T25842] ? kmem_cache_free+0xe3/0x3a0 [ 364.263643][T25842] ? __kfree_skb+0x109/0x150 [ 364.263672][T25842] ? nlmon_xmit+0x4f/0x60 [ 364.263694][T25842] ? consume_skb+0x49/0x150 [ 364.263765][T25842] ? nlmon_xmit+0x4f/0x60 [ 364.263788][T25842] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 364.263828][T25842] ? __dev_queue_xmit+0x138d/0x1ec0 [ 364.263860][T25842] ? __dev_queue_xmit+0x148/0x1ec0 [ 364.263946][T25842] ? ref_tracker_free+0x37d/0x3e0 [ 364.263977][T25842] ? __netlink_deliver_tap+0x4dc/0x500 [ 364.264129][T25842] netlink_unicast+0x5c0/0x690 [ 364.264164][T25842] netlink_sendmsg+0x58b/0x6b0 [ 364.264247][T25842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.264328][T25842] __sock_sendmsg+0x145/0x180 [ 364.264351][T25842] ____sys_sendmsg+0x31e/0x4a0 [ 364.264386][T25842] ___sys_sendmsg+0x17b/0x1d0 [ 364.264454][T25842] __x64_sys_sendmsg+0xd4/0x160 [ 364.264546][T25842] x64_sys_call+0x17ba/0x3000 [ 364.264575][T25842] do_syscall_64+0xca/0x2b0 [ 364.264638][T25842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.264663][T25842] RIP: 0033:0x7f4181dcf749 [ 364.264681][T25842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.264735][T25842] RSP: 002b:00007f418082f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.264757][T25842] RAX: ffffffffffffffda RBX: 00007f4182025fa0 RCX: 00007f4181dcf749 [ 364.264772][T25842] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000c [ 364.264787][T25842] RBP: 00007f4181e53f91 R08: 0000000000000000 R09: 0000000000000000 [ 364.264807][T25842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.264868][T25842] R13: 00007f4182026038 R14: 00007f4182025fa0 R15: 00007ffef084d748 [ 364.264889][T25842] [ 364.264897][T25842] memory: usage 307200kB, limit 307200kB, failcnt 1974 [ 364.268159][T25867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 364.278854][T25842] memory+swap: usage 307888kB, limit 9007199254740988kB, failcnt 0 [ 364.283127][T25867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 364.292782][T25842] kmem: usage 307016kB, limit 9007199254740988kB, failcnt 0 [ 364.296714][T25867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 364.298922][T25842] Memory cgroup stats for /syz5: [ 364.314032][T25842] cache 8192 [ 364.316819][T25867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 364.321097][T25842] rss 32768 [ 364.326253][T25867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 364.330541][T25842] shmem 0 [ 364.336439][T25867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 364.341338][T25842] mapped_file 0 [ 364.700683][T25842] dirty 0 [ 364.703647][T25842] writeback 0 [ 364.706951][T25842] workingset_refault_anon 56 [ 364.711561][T25842] workingset_refault_file 0 [ 364.716057][T25842] swap 704512 [ 364.719370][T25842] swapcached 4096 [ 364.722993][T25842] pgpgin 399971 [ 364.726448][T25842] pgpgout 399925 [ 364.730030][T25842] pgfault 498330 [ 364.733567][T25842] pgmajfault 19 [ 364.737014][T25842] inactive_anon 4096 [ 364.740943][T25842] active_anon 28672 [ 364.744737][T25842] inactive_file 151552 [ 364.748836][T25842] active_file 4096 [ 364.752593][T25842] unevictable 0 [ 364.756046][T25842] hierarchical_memory_limit 314572800 [ 364.761493][T25842] hierarchical_memsw_limit 9223372036854771712 [ 364.767627][T25842] total_cache 8192 [ 364.771353][T25842] total_rss 32768 [ 364.774985][T25842] total_shmem 0 [ 364.778443][T25842] total_mapped_file 0 [ 364.782447][T25842] total_dirty 0 [ 364.785891][T25842] total_writeback 0 [ 364.789732][T25842] total_workingset_refault_anon 56 [ 364.794885][T25842] total_workingset_refault_file 0 [ 364.800006][T25842] total_swap 704512 [ 364.803795][T25842] total_swapcached 4096 [ 364.808009][T25842] total_pgpgin 399971 [ 364.812114][T25842] total_pgpgout 399925 [ 364.816257][T25842] total_pgfault 498330 [ 364.820440][T25842] total_pgmajfault 19 [ 364.824443][T25842] total_inactive_anon 4096 [ 364.828831][T25842] total_active_anon 28672 [ 364.833149][T25842] total_inactive_file 151552 [ 364.837712][T25842] total_active_file 4096 [ 364.841943][T25842] total_unevictable 0 [ 364.845944][T25842] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.6543,pid=25841,uid=0 [ 364.860569][T25842] Memory cgroup out of memory: Killed process 25841 (syz.5.6543) total-vm:96016kB, anon-rss:1140kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 364.957276][T25842] syz.5.6543 (25842) used greatest stack depth: 6216 bytes left [ 364.978180][T25901] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 365.030783][T25901] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 365.047883][T25919] program syz.0.6560 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 365.088322][T25924] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 365.107347][ T8174] IPVS: starting estimator thread 0... [ 365.114631][T25930] net_ratelimit: 13 callbacks suppressed [ 365.114648][T25930] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 365.129429][T25924] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 365.209433][T25931] IPVS: using max 2304 ests per chain, 115200 per kthread [ 365.241667][T25948] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6564'. [ 365.306879][T25928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.315566][T25928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.793689][T25964] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 365.805433][T25964] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 365.813589][T25964] System zones: 1-12 [ 365.818514][T25964] EXT4-fs (loop6): 1 truncate cleaned up [ 365.846075][T25969] FAULT_INJECTION: forcing a failure. [ 365.846075][T25969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.859179][T25969] CPU: 0 UID: 0 PID: 25969 Comm: syz.0.6570 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 365.859281][T25969] Tainted: [W]=WARN [ 365.859288][T25969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.859302][T25969] Call Trace: [ 365.859309][T25969] [ 365.859318][T25969] __dump_stack+0x1d/0x30 [ 365.859345][T25969] dump_stack_lvl+0x95/0xd0 [ 365.859370][T25969] dump_stack+0x15/0x1b [ 365.859413][T25969] should_fail_ex+0x265/0x280 [ 365.859441][T25969] should_fail+0xb/0x20 [ 365.859465][T25969] should_fail_usercopy+0x1a/0x20 [ 365.859545][T25969] _copy_from_user+0x1c/0xb0 [ 365.859658][T25969] do_semtimedop+0x153/0x220 [ 365.859697][T25969] __x64_sys_semop+0x41/0x50 [ 365.859763][T25969] x64_sys_call+0x2d17/0x3000 [ 365.859792][T25969] do_syscall_64+0xca/0x2b0 [ 365.859854][T25969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.859879][T25969] RIP: 0033:0x7f184072f749 [ 365.859898][T25969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.859993][T25969] RSP: 002b:00007f183f18f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 365.860016][T25969] RAX: ffffffffffffffda RBX: 00007f1840985fa0 RCX: 00007f184072f749 [ 365.860030][T25969] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000000 [ 365.860122][T25969] RBP: 00007f183f18f090 R08: 0000000000000000 R09: 0000000000000000 [ 365.860137][T25969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.860151][T25969] R13: 00007f1840986038 R14: 00007f1840985fa0 R15: 00007ffeb4f861e8 [ 365.860172][T25969] [ 365.866633][T25973] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 365.881845][T25976] program syz.0.6572 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 365.901412][T25973] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 366.086310][T25980] program syz.0.6573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.144290][T25992] FAULT_INJECTION: forcing a failure. [ 366.144290][T25992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.144628][T25991] SELinux: failed to load policy [ 366.157646][T25992] CPU: 0 UID: 0 PID: 25992 Comm: syz.6.6575 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 366.157738][T25992] Tainted: [W]=WARN [ 366.157746][T25992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 366.157760][T25992] Call Trace: [ 366.157767][T25992] [ 366.157845][T25992] __dump_stack+0x1d/0x30 [ 366.157873][T25992] dump_stack_lvl+0x95/0xd0 [ 366.157902][T25992] dump_stack+0x15/0x1b [ 366.157932][T25992] should_fail_ex+0x265/0x280 [ 366.157959][T25992] should_fail+0xb/0x20 [ 366.157982][T25992] should_fail_usercopy+0x1a/0x20 [ 366.158011][T25992] _copy_from_user+0x1c/0xb0 [ 366.158079][T25992] __sys_bind+0x106/0x2a0 [ 366.158125][T25992] __x64_sys_bind+0x3f/0x50 [ 366.158150][T25992] x64_sys_call+0x2ceb/0x3000 [ 366.158192][T25992] do_syscall_64+0xca/0x2b0 [ 366.158292][T25992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.158316][T25992] RIP: 0033:0x7f8cda3df749 [ 366.158360][T25992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.158382][T25992] RSP: 002b:00007f8cd8e3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 366.158415][T25992] RAX: ffffffffffffffda RBX: 00007f8cda635fa0 RCX: 00007f8cda3df749 [ 366.158430][T25992] RDX: 0000000000000006 RSI: 0000200000000140 RDI: 0000000000000004 [ 366.158446][T25992] RBP: 00007f8cd8e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 366.158461][T25992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.158475][T25992] R13: 00007f8cda636038 R14: 00007f8cda635fa0 R15: 00007ffe2714b618 [ 366.158496][T25992] [ 366.312498][T26000] netlink: 19 bytes leftover after parsing attributes in process `syz.6.6577'. [ 366.330911][T25996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6578'. [ 366.363487][T25996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6578'. [ 366.387852][T25998] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 366.418877][T26008] program syz.3.6579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.430213][T26012] netlink: 'syz.5.6582': attribute type 1 has an invalid length. [ 366.430864][T25998] SELinux: failed to load policy [ 366.484364][T26018] program syz.3.6583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.532527][T26023] EXT4-fs: Ignoring removed nomblk_io_submit option [ 366.549037][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 366.549054][ T29] audit: type=1400 audit(1766980146.972:38605): avc: denied { execute } for pid=26029 comm="syz.3.6588" path="/142/file0" dev="tmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 366.609544][ T29] audit: type=1400 audit(1766980147.012:38606): avc: denied { read } for pid=26034 comm="syz.5.6589" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 366.632780][ T29] audit: type=1400 audit(1766980147.012:38607): avc: denied { open } for pid=26034 comm="syz.5.6589" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 366.658704][ T29] audit: type=1400 audit(1766980147.072:38608): avc: denied { create } for pid=26029 comm="syz.3.6588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 366.678562][ T29] audit: type=1400 audit(1766980147.072:38609): avc: denied { connect } for pid=26029 comm="syz.3.6588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 366.698393][ T29] audit: type=1400 audit(1766980147.072:38610): avc: denied { getopt } for pid=26029 comm="syz.3.6588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 366.718146][ T29] audit: type=1326 audit(1766980147.072:38611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26034 comm="syz.5.6589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4181dcf749 code=0x7ffc0000 [ 366.741786][ T29] audit: type=1326 audit(1766980147.072:38612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26034 comm="syz.5.6589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4181dcf749 code=0x7ffc0000 [ 366.765435][ T29] audit: type=1326 audit(1766980147.072:38613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26034 comm="syz.5.6589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4181dcf749 code=0x7ffc0000 [ 366.789068][ T29] audit: type=1326 audit(1766980147.072:38614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26034 comm="syz.5.6589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4181dcf749 code=0x7ffc0000 [ 366.947130][T26110] set_capacity_and_notify: 11 callbacks suppressed [ 366.947148][T26110] loop5: detected capacity change from 0 to 512 [ 367.003153][T26110] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 367.014963][T26110] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 367.023859][T26110] System zones: 1-12 [ 367.028530][T26110] EXT4-fs (loop5): 1 truncate cleaned up [ 367.034658][T26121] FAULT_INJECTION: forcing a failure. [ 367.034658][T26121] name failslab, interval 1, probability 0, space 0, times 0 [ 367.047396][T26121] CPU: 0 UID: 0 PID: 26121 Comm: syz.6.6598 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 367.047418][T26121] Tainted: [W]=WARN [ 367.047422][T26121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 367.047430][T26121] Call Trace: [ 367.047434][T26121] [ 367.047463][T26121] __dump_stack+0x1d/0x30 [ 367.047518][T26121] dump_stack_lvl+0x95/0xd0 [ 367.047532][T26121] dump_stack+0x15/0x1b [ 367.047544][T26121] should_fail_ex+0x265/0x280 [ 367.047559][T26121] should_failslab+0x8c/0xb0 [ 367.047593][T26121] kmem_cache_alloc_noprof+0x69/0x4b0 [ 367.047609][T26121] ? security_file_alloc+0x32/0x100 [ 367.047634][T26121] security_file_alloc+0x32/0x100 [ 367.047671][T26121] init_file+0x5c/0x1c0 [ 367.047688][T26121] alloc_empty_file+0x8b/0x200 [ 367.047752][T26121] alloc_file_pseudo+0xc6/0x160 [ 367.047771][T26121] hugetlb_file_setup+0x2a6/0x3d0 [ 367.047789][T26121] ksys_mmap_pgoff+0x157/0x310 [ 367.047806][T26121] x64_sys_call+0x16bb/0x3000 [ 367.047879][T26121] do_syscall_64+0xca/0x2b0 [ 367.047928][T26121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.047942][T26121] RIP: 0033:0x7f8cda3df749 [ 367.048026][T26121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.048038][T26121] RSP: 002b:00007f8cd8e3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 367.048059][T26121] RAX: ffffffffffffffda RBX: 00007f8cda635fa0 RCX: 00007f8cda3df749 [ 367.048067][T26121] RDX: 000000000000000b RSI: 0000000000c00000 RDI: 0000200000400000 [ 367.048075][T26121] RBP: 00007f8cd8e3f090 R08: ffffffffffffffff R09: 0000000000000000 [ 367.048083][T26121] R10: 0000000000059032 R11: 0000000000000246 R12: 0000000000000001 [ 367.048090][T26121] R13: 00007f8cda636038 R14: 00007f8cda635fa0 R15: 00007ffe2714b618 [ 367.048102][T26121] [ 367.236954][T26122] can0: slcan on ttyS3. [ 367.304583][T26128] netlink: 'syz.6.6599': attribute type 1 has an invalid length. [ 367.466712][T26137] loop6: detected capacity change from 0 to 512 [ 367.474680][T26137] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 367.510757][T26137] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 367.521405][T26137] ================================================================== [ 367.529498][T26137] BUG: KCSAN: data-race in fprop_reflect_period_percpu / fprop_reflect_period_percpu [ 367.538993][T26137] [ 367.541303][T26137] write to 0xffff8881021791c8 of 4 bytes by task 4461 on cpu 0: [ 367.548924][T26137] fprop_reflect_period_percpu+0x161/0x190 [ 367.554738][T26137] fprop_fraction_percpu+0x77/0x150 [ 367.559940][T26137] __wb_calc_thresh+0x89/0x2d0 [ 367.564703][T26137] domain_over_bg_thresh+0x225/0x300 [ 367.569988][T26137] wb_over_bg_thresh+0xac/0x100 [ 367.574840][T26137] wb_workfn+0x630/0x910 [ 367.579079][T26137] process_scheduled_works+0x4ce/0x9d0 [ 367.584536][T26137] worker_thread+0x582/0x770 [ 367.589124][T26137] kthread+0x489/0x510 [ 367.593191][T26137] ret_from_fork+0x149/0x290 [ 367.597775][T26137] ret_from_fork_asm+0x1a/0x30 [ 367.602537][T26137] [ 367.604846][T26137] read to 0xffff8881021791c8 of 4 bytes by task 26137 on cpu 1: [ 367.612462][T26137] fprop_reflect_period_percpu+0x31/0x190 [ 367.618186][T26137] __fprop_add_percpu_max+0x57/0x190 [ 367.623476][T26137] __wb_writeout_add+0x75/0x1b0 [ 367.628324][T26137] __folio_end_writeback+0x14b/0x360 [ 367.633612][T26137] folio_end_writeback_no_dropbehind+0x6d/0x1b0 [ 367.639846][T26137] folio_end_writeback+0x1c/0x70 [ 367.644776][T26137] __block_write_full_folio+0x5f3/0x8f0 [ 367.650323][T26137] block_write_full_folio+0x2c1/0x2e0 [ 367.655696][T26137] blkdev_writepages+0x88/0x100 [ 367.660542][T26137] do_writepages+0x1c6/0x310 [ 367.665132][T26137] filemap_flush+0xe4/0x120 [ 367.669626][T26137] sync_blockdev_nowait+0x29/0x40 [ 367.674641][T26137] sync_filesystem+0xe2/0x190 [ 367.679309][T26137] generic_shutdown_super+0x44/0x210 [ 367.684595][T26137] kill_block_super+0x2a/0x70 [ 367.689261][T26137] ext4_kill_sb+0x42/0x80 [ 367.693581][T26137] deactivate_locked_super+0x75/0x1c0 [ 367.698953][T26137] deactivate_super+0x97/0xa0 [ 367.703630][T26137] cleanup_mnt+0x2a9/0x320 [ 367.708054][T26137] __cleanup_mnt+0x19/0x20 [ 367.712464][T26137] task_work_run+0x131/0x1a0 [ 367.717058][T26137] exit_to_user_mode_loop+0x1fe/0x740 [ 367.722423][T26137] do_syscall_64+0x1e1/0x2b0 [ 367.727016][T26137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.732900][T26137] [ 367.735208][T26137] value changed: 0x0000006f -> 0x00000070 [ 367.740908][T26137] [ 367.743215][T26137] Reported by Kernel Concurrency Sanitizer on: [ 367.749351][T26137] CPU: 1 UID: 0 PID: 26137 Comm: syz.6.6602 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 367.760716][T26137] Tainted: [W]=WARN [ 367.764503][T26137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 367.774556][T26137] ================================================================== [ 367.788676][T26147] loop0: detected capacity change from 0 to 8192 [ 367.797684][T26153] loop5: detected capacity change from 0 to 128 [ 367.804653][T26147] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 367.819123][T26088] can0 (unregistered): slcan off ttyS3. [ 367.878894][T26137] loop6: detected capacity change from 0 to 512