last executing test programs: 1m30.168641408s ago: executing program 2 (id=265): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='kmem_cache_free\x00', r1, 0x0, 0xac5}, 0x18) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) 1m30.13907928s ago: executing program 2 (id=266): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xfffffffffffffe40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x22, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) sendmmsg$inet6(r0, &(0x7f0000001f80)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x13af}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000001c0)="0c1d95b5ff6ac763ad6e20ddacfe2d4ef67eb4d750", 0x15}, {&(0x7f00000002c0)="ef9fda3c04fddc28524e639f77a7b60f0ca89f0d68939812936484f2e8aa77459bf1169dd350eb58512bfae7b4ca15e7084fe5da0cc60e3a409e28c1d0f3502900c0e7a30714fe8b9bd12cd9396d7620e208ae2d00ca15f25c5db9e3636716fa558d34613e2e809afd09ba37ef1f67e334ec9a198e1efe77a0c1ba8b1c8f306a0125068274fb976c1d227f2a19782ee6d94125f16e0f6031529505137b7ea9ef286ea0905d08d1e0bc4e68268b904b308b411850b1cc7a5af5546297a8a336b14d72e11d36ecb8e009301483651720db02dfaaf05de491628ef771ff61f64080da19978ddba23b0b2bf581b8a4c3e2febeb0c930", 0xf4}, {&(0x7f0000000200)="40e163d3d7aa0ac579d87181acf65af11394cfd108588a9dd523500518530815", 0x20}, {&(0x7f00000004c0)="4b1a07db3c347c51c91929ec5db35117f5d8836e3b1fae922da80b94244ef9674369f1c80c8b9f7715c0fd5c0583190ca1166115de6f00f0b81752e637858d62bca409d843b7f27a1d4fcf7f37b36ecc67109bc84ffc395e90d9125121a3c7f0b1e49c5651990a90f7317b618db7de07e03fb1092137ba43bb9dda1615e8d50fd06fffc3f87778200b2a8db1e0ea1b143bc5f8c005c011acad30752e9c0c16d8047b663f461434e1757417289eb7915615fb2703961cd9f87c4b1c1b7acd08a695713881d2a4c4d0ca2cfa4900be501a32f4f8fd6af4e4483e0161bf4c4466a101411333", 0xe4}], 0x4, &(0x7f00000005c0)=[@hopopts={{0x20, 0x29, 0x36, {0x2f, 0x1, '\x00', [@ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x9}]}}}, @hopopts={{0x68, 0x29, 0x36, {0x32, 0x9, '\x00', [@ra={0x5, 0x2, 0x5}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @pad1, @calipso={0x7, 0x38, {0x3, 0xc, 0x5, 0x7fff, [0x400, 0x9, 0x0, 0x4, 0xfffffffffffffff9, 0xffffffffffffffff]}}, @enc_lim={0x4, 0x1, 0x81}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x21, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2a}]}}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000001b80)=[{0x0}, {&(0x7f0000000a00)="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", 0xffe}, {0x0}, {&(0x7f0000001a00)}, {&(0x7f0000001a80)="1001cdf26cd7242e01dc8a13eaccedf83366e74a090dcf268bbaebb22407de4ec53f507acf25c66af4ec97b63bab8c92fd9e02fb7d2d4b6a4b4b3f8f04acbcdd4d649f84f8501331da62452d3f399812b4e2e10bf50f6e61eabc43fb978112083e1fd6ee37da8fa218f059bb20372ad38e74a0100042e6baab83c1af6c0ca505cecba3eb29ab168feccec61dc43382a304268f64772c0f1158a87a3b0d77115ad259c6f5aefadacd96a73e31c3cc6f3815d88af348fb108ff257b751d71aa8a03b7da005eb16f2e356a5411727eb943c938ead360e10c0983b13e8fa17b9ce263fa902fceb87", 0xe6}], 0x5, &(0x7f0000001c00)=[@hopopts_2292={{0x100, 0x29, 0x36, {0x3c, 0x1d, '\x00', [@generic={0x4, 0xda, "789cd4ae428e554a8fd8e0a111a5b116b08ce8796d0588c57915994578aa3d1489ef7eed08fdd97e35167e063be9b08a3c68d4a821a56b871ec76b6a5b3fb7d3bab392fd6f7b488210b668dd300f199f6ad65375a4187d6878d0a07754f780ee2a5d3ef5c7917eca24e4d51a6d8ef6077c8dbf399f6ca175dbf27136744684ac010656a68c74a3638d8735d721156f34279a560002270133c00b39130143fe80ef8a7ffa6ce7bd5a441db9b8a1ff273a06fa137ab0156a2e668dd335e41f5f8be51571559e19fba6a4e55be7439e0496e09f61bd19ab1fb2848d"}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x3}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x412c}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x85, 0x10, 0x2, 0x7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2c}, @dev={0xfe, 0x80, '\x00', 0x2a}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @mcast1, @rand_addr=' \x01\x00', @loopback, @private2]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x89, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xf1}]}}}, @hopopts_2292={{0x60, 0x29, 0x36, {0x3b, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0x57}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x29}}, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4}, @pad1, @jumbo]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x5c, 0x0, 0x1, 0xd0}}}], 0x260}}], 0x2, 0x81) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r2) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010180}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x4}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x44, 0x7b1, &(0x7f00000004c0)="$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") r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002140), r3) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000002300)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x68, r7, 0x601, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004040}, 0x10044844) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback, 0x8004}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 1m29.985722505s ago: executing program 2 (id=267): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/cpu_byteorder', 0x200c0, 0x10) finit_module(r3, 0x0, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x1b, r5, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14) r6 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x7fffffff, 0x6c0101) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='thread_noise\x00', r6, 0x0, 0x8}, 0x4d) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) bind$packet(r4, &(0x7f0000000140)={0x11, 0xee, r7, 0x1, 0x8, 0x6, @broadcast}, 0x14) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x70, r8, 0x300, 0x70bd29, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) sendto$packet(r0, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8", 0x12, 0x0, &(0x7f0000000000)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) 1m29.92693262s ago: executing program 2 (id=270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x2400c004) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSaOxpQWVhRuNJsZgNNEFLms7kIaBGlqNIJFiDG5MDImujUujf4E7Y2LUlYlb3bgyJETZALqpuXfuLdNpp1A6ZWrn80lue869Z+ac79zXuefMBNCxBrI/ScS2iPg1Ivpq2YUFBmr/rl05O379ytnxJObmXvszyctdvXJ2vCxavm5rkRlMI9IPk6KShaZPnzk+Vq1WThX54ZkTbw1Pnz7zxDsnxo5VjlVOjh46dPDAyNNPjT7ZkjizuK7ueX9q7+4X37j48viRi2/++HXW3m3F9vo4WmUgC/yvuVzd6vxjerTVlbXZ9rp00t3GhrAiXRGR7a6e/Pzvi664sfP64oUP2to4YE1l96ZNzTfPzgEbWBLtbgHQHuWNPnv+LZc71PVYFy4/W3sAyuK+Viy1Ld2RFmV6Gp5vW2kgIo7M/v15tsQajUMAANT7ePyzw70R8d71r17K+h5981vSuCf//3v+d0cxh9IfEf+PiJ0RcVdE7IqIuyPysvdGxH2rbM/i/k96aZVvuays//dMMbe1sP9X9v6iv6vIbc/j70mOTlYr+4vPZDB6NmX5kWXq+Pb5Xz5ptq2+/5ctWf1lX7Box6XuhgG6ibGZsbxT2gKXz0fs6V4q/mR+JiCJiN0RsWdlb72jTEw+9uXeZoVuHv8yWjDPNPdFFt5sFv9sNMRfSurnJycXzU8Ob45qZf9weVQs9tPPF15tVv9AzN1+/C1wuRL/xMLjv7FIf1I/Xzu98jou/PZR02ea2zz+097k9XyeubdY9+7YzMypkYje5HCeX7B+9MZry3xZPjv+B/ctff7vLF6TxX9/RGQH8QMR8WBEPFS0/eGIeCQi9i0T/w/PNd9Wxh9pm/b/+YiJJa9/88d/w/5feaLr+PffNKv/1vb/wTw1WKzJr383sVRzsstFYwNX89kBAADAf0Wafwc+SYfm02k6NFT7Dv+u+F9anZqeefzo1NsnJ2rfle+PnrQc6eorxkOrk9XKSDJbvGNtfHS0GCsux0sPFOPGn3ZtyfND41PViTbHDp1ua5PzP/NHV7tbB6yxLUuuHe294w0B2qBxHj1dmD33SrgYwEbl99rQuZqf/5tjcXcA2Ejc/6FzLXX+n2vImwuAjcn9HzqX8x86VPpdu1sAtJH7P3Sk1fyufw0Tm9dHM9qTWK87JU9ElIl0XbRHYqWJLbdWuN1XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA///Xm+pu") sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r6 = inotify_init1(0x80800) inotify_add_watch(r6, &(0x7f0000000400)='.\x00', 0xa4000021) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$cont(0x15, r7, 0x80000001, 0x4) close(r6) 1m29.654364845s ago: executing program 2 (id=274): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001600)=ANY=[@ANYBLOB="0100000000002000000000ff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x40c0}, 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x64010100, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r6 = syz_io_uring_setup(0x4b9, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000080)=0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 1m27.749569731s ago: executing program 2 (id=313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='mm_page_free\x00', r3, 0x0, 0x800000000000002}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) 1m27.710827564s ago: executing program 32 (id=313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='mm_page_free\x00', r3, 0x0, 0x800000000000002}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) 1m17.918428187s ago: executing program 4 (id=496): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xfffffffffffffe40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) sendmmsg$inet6(r0, &(0x7f0000001f80)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x13af}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000001c0)="0c1d95b5ff6ac763ad6e20ddacfe2d4ef67eb4d750", 0x15}, {&(0x7f00000002c0)="ef9fda3c04fddc28524e639f77a7b60f0ca89f0d68939812936484f2e8aa77459bf1169dd350eb58512bfae7b4ca15e7084fe5da0cc60e3a409e28c1d0f3502900c0e7a30714fe8b9bd12cd9396d7620e208ae2d00ca15f25c5db9e3636716fa558d34613e2e809afd09ba37ef1f67e334ec9a198e1efe77a0c1ba8b1c8f306a0125068274fb976c1d227f2a19782ee6d94125f16e0f6031529505137b7ea9ef286ea0905d08d1e0bc4e68268b904b308b411850b1cc7a5af5546297a8a336b14d72e11d36ecb8e009301483651720db02dfaaf05de491628ef771ff61f64080da19978ddba23b0b2bf581b8a4c3e2febeb0c930", 0xf4}, {&(0x7f0000000200)="40e163d3d7aa0ac579d87181acf65af11394cfd108588a9dd523500518530815", 0x20}, {&(0x7f00000004c0)="4b1a07db3c347c51c91929ec5db35117f5d8836e3b1fae922da80b94244ef9674369f1c80c8b9f7715c0fd5c0583190ca1166115de6f00f0b81752e637858d62bca409d843b7f27a1d4fcf7f37b36ecc67109bc84ffc395e90d9125121a3c7f0b1e49c5651990a90f7317b618db7de07e03fb1092137ba43bb9dda1615e8d50fd06fffc3f87778200b2a8db1e0ea1b143bc5f8c005c011acad30752e9c0c16d8047b663f461434e1757417289eb7915615fb2703961cd9f87c4b1c1b7acd08a695713881d2a4c4d0ca2cfa4900be501a32f4f8fd6af4e4483e0161bf4c4466a101411333", 0xe4}], 0x4, &(0x7f00000005c0)=[@hopopts={{0x20, 0x29, 0x36, {0x2f, 0x1, '\x00', [@ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x9}]}}}, @hopopts={{0x68, 0x29, 0x36, {0x32, 0x9, '\x00', [@ra={0x5, 0x2, 0x5}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @pad1, @calipso={0x7, 0x38, {0x3, 0xc, 0x5, 0x7fff, [0x400, 0x9, 0x0, 0x4, 0xfffffffffffffff9, 0xffffffffffffffff]}}, @enc_lim={0x4, 0x1, 0x81}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x21, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2a}]}}}], 0xa8}}, {{&(0x7f0000000400)={0xa, 0x4e21, 0x8, @remote, 0x81}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000002000)="4f822e4d30b34f551e7fef4200473bcdf950199c9fd089c9204ff19a45c4a4f2ccafffdeadb378e965d42d61fb69e678c28d5f295b1067bda7f85554d9edba90f8103bad6d171935b00ba273d6a74079b38b54c37d22442869cd84b373b50b67fe33d34d097f7e5aa94da2a39e2c7070f20ca804b6c713d71fbcc7baf3ae8419fa244f496308e33448dbd3bf23c13e4c403883d2be1c0e8ad17e5c3e82da27368ba97c0bf97a85fc8e4960a0151e5f8172897bae62c6c60400499b6e1e57574096a3c53f74b09cf2a09a5c4ff850f6e292bf4707537cb8f98ec1cf1e15fcb85a7ec9716f56ef9a54", 0xe8}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000000780)="c642e9bf4753b3fec64f509bcdff43fcf8f99081af4d0e840ef59c9f180a924152fcfdcd262cb13655a8e32b0cf5126eb0c94f209061d05e76c362ac9c1ac11bbda3646bf7d302ee888d5076d51d65c230ca7003ea50590ede5ab9939bdbb93c77422c2f04bcf0c39c4c512c7532c41f44a1edcdb9d12dde3dc832ba8d4f64ff2c55525ef00716af9b8e0ae9e74534746e181647459db9fe1d1a11b63f9a0b4c56cdd045ac8bcedb3d31c11555b72583dc726e34bfd1f61e9e0de56662f18a528718", 0xc2}, {0x0}, {&(0x7f0000001a00)="b8b3cc80861d727c767def3ec3cb4be1561668035962a9ad5863", 0x1a}], 0x5, &(0x7f0000001c00)=[@hopopts_2292={{0x100, 0x29, 0x36, {0x3c, 0x1d, '\x00', [@generic={0x4, 0xda, "789cd4ae428e554a8fd8e0a111a5b116b08ce8796d0588c57915994578aa3d1489ef7eed08fdd97e35167e063be9b08a3c68d4a821a56b871ec76b6a5b3fb7d3bab392fd6f7b488210b668dd300f199f6ad65375a4187d6878d0a07754f780ee2a5d3ef5c7917eca24e4d51a6d8ef6077c8dbf399f6ca175dbf27136744684ac010656a68c74a3638d8735d721156f34279a560002270133c00b39130143fe80ef8a7ffa6ce7bd5a441db9b8a1ff273a06fa137ab0156a2e668dd335e41f5f8be51571559e19fba6a4e55be7439e0496e09f61bd19ab1fb2848d"}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x3}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x412c}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x85, 0x10, 0x2, 0x7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2c}, @dev={0xfe, 0x80, '\x00', 0x2a}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @mcast1, @rand_addr=' \x01\x00', @loopback, @private2]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x89, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xf1}]}}}, @hopopts_2292={{0x68, 0x29, 0x36, {0x3b, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0x57}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x29}}, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4}, @pad1, @jumbo, @ra={0x5, 0x2, 0x2}]}}}, @hopopts={{0x28, 0x29, 0x36, {0x2f, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0xa}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x5c, 0x14, 0x1, 0xd0, 0x0, [@mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}], 0x348}}], 0x2, 0x81) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r2) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010180}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x4}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x44, 0x7b1, &(0x7f00000004c0)="$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") r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000002300)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x68, 0x0, 0x601, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004040}, 0x10044844) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r7, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback, 0x8004}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 1m17.804616088s ago: executing program 4 (id=500): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f00000000c0)="3b256c7a40ff8cf30d776a89d5cfc3ce7467bd24", 0x14}], 0x1, 0x4) r2 = socket$inet(0x2, 0x3, 0x7f) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xfc, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200, 0x2, 0x40, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="24ad4b22be04b44a08e74a61a0ecc1ee3a2f79dd1af2ebd71ab937368a3eb31471f56069c12323c3d66904e6947fbbd0708aed0a7fa5f4c9a7a72885"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) close(r3) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 1m16.890959392s ago: executing program 4 (id=522): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61}, {}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x2, 0x0, 0xf8}, {0x6, 0x0, 0x0, 0x1000000}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x8) 1m16.80227889s ago: executing program 4 (id=523): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000240)={[{@i_version}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@jqfmt_vfsold}, {@quota}]}, 0x2, 0x447, &(0x7f0000000500)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='Tp\x00'/20, @ANYRES32=0x0, @ANYBLOB="63100400000000003c001280080001007369740030000280050009000400000014000b00ff0200000000000000000000000000010800140055000000080002007f000001"], 0x5c}, 0x1, 0x0, 0x0, 0x9000}, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410960030000000000000000000000000ffff00000000fe8000000000000000000000000000aa29000000000000007304000300000000fe8000000000000000000000000000bbfe880000000000000000000000000001"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xc, 0x6, 0x7ffc1ff8}]}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000800)=""/245) readahead(0xffffffffffffffff, 0x4, 0x800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) fchdir(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r7}, 0x18) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000006c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_clone(0x40108000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@usrjquota}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nojournal_checksum}, {@dax_never}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x33, 0x38, 0x33, 0x39, 0x0, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x63, 0x66, 0x64, 0x36, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x0, 0x479, &(0x7f0000001300)="$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") r9 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, 0x0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 1m16.285501778s ago: executing program 4 (id=535): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) fallocate(r1, 0x2e, 0x98e, 0x5) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x9}, 0x18) getpeername$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e0200000000000000000022211783af17dda3c9c8c7126fa13984bfd4379d54c1b12f713c00e1d568fe6da369df6c9631cdc0ed4007727a19bea0bb492d2792f7ba27c979c0ca2870543afcf56b2ac21d8fe4eb143998340d0be9c6e00ded258b557beb0f550ffd4e66d94b83c3d3f7d8c29095db48038a89a6e2314bd8e4a8acc192c9c5934446e886e96efe5bb1ed49046e1d0a7ef014bfac72", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00@\x00'/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000005000000050000000300"/24, @ANYRES32=r8, @ANYBLOB], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r7, 0x0, 0xe2, 0x43, &(0x7f0000000340)="5efd5181c8611a1b5e74534f7cc3c4a85303714b996b04652a7c333d51068c7f61d0600fc03d190649cce887e9baa6ea7f3890347a9cde74fc120a50b4930d4b91e10ad942f70b757847084ed251e838ecd9bcc1072ecd064f7db6df5e55b05526950f40b0f53c33d37d7e68c864a820c142d9bcac521f9e798095031a621ad87478a17cb52a50596307d1a419b44b90ac1ad3cd36ebbf41084dbff3b73e43add092265c38979508af685b561be1382be66c5dbf5eae8bc0b4fbd73141dfd01beaf9d4c8e48f8355565bbd34764fc07d4b4dfdd85984f85cef232237be6d38baf704", &(0x7f0000000640)=""/67, 0x7, 0x0, 0x0, 0xd2, &(0x7f0000000440), &(0x7f00000006c0)="51eebc29dea1865b0604dc12bb4f1c15434903dbea23bb5225bd5b0115b1c8e5506c9a902ecceba8af00526666d40b647b2f6374a835c4dadd909d0f782bae59cd0a33b6bbffdbdfe9611bae5cb7747409d01c85096761a4731ebc083c61024aaf6f1100647929e8733299f23a97099a469323839e7a8bea43793549a6f4d3f05696847097256a4cd585117de7f8b35b71e92d01f06e1a7aa46834bf79f1053da0bcb88498104a55df4560611f3c3f03e8cce18386c0468d9d7e902b3de229c8cb625fa025543139a02a891b16166f9504e7", 0x4, 0x0, 0xd81}, 0x50) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) bpf$ITER_CREATE(0x21, 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=@newtfilter={0x1b0, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r10, {0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x184, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x164, 0x5, {0x10, 0xdd, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x102, [{0x0, 0xcb, 0x10000, 0x7}, {0xa, 0x8, 0x0, 0x7}, {0x8, 0x0, 0x4, 0x8000000}, {0x20000f, 0x10, 0x3, 0x3}, {0x8, 0xec7f, 0xe, 0x8}, {0x17, 0x7f, 0x8}, {0xfffffff0, 0x6, 0x7, 0x3}, {0x9, 0x2, 0x6}, {0xe, 0x80, 0x6, 0x9}, {0x8, 0x7, 0x1ff, 0x2}, {0xb, 0x10000, 0x8, 0x9}, {0x14, 0x1000, 0x10000, 0xfff}, {0x5, 0x7fffffff, 0x8, 0x4}, {0x8d, 0x9, 0x4, 0x5}, {0xf9, 0xf84, 0x1, 0x1ac}, {0x6, 0x1000, 0x8, 0x4}, {0x80000000, 0x6, 0x8, 0x10001}, {0x5, 0x1, 0x400, 0xccc}, {0x1, 0x4, 0x7239, 0x9}, {0xe, 0x7, 0x3, 0x7fff}, {0x3c6, 0x1, 0x87, 0x7fffffff}]}}]}}]}, 0x1b0}}, 0x24040084) 1m13.681607728s ago: executing program 4 (id=580): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000100)}, 0x0, 0x2, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x5, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) fsetxattr$security_selinux(r1, &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:wireless_device_t:s0\x00', 0x27, 0x2) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) (async) unshare(0xc040480) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) lseek(r4, 0x8, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) (async) kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0) (async) r6 = socket(0x2b, 0x80801, 0x1) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r6, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0xe75001b60ea60cd8}, 0x6000c054) 1m13.675110528s ago: executing program 33 (id=580): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000100)}, 0x0, 0x2, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x5, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) fsetxattr$security_selinux(r1, &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:wireless_device_t:s0\x00', 0x27, 0x2) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) (async) unshare(0xc040480) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) lseek(r4, 0x8, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) (async) kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0) (async) r6 = socket(0x2b, 0x80801, 0x1) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r6, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0xe75001b60ea60cd8}, 0x6000c054) 22.862523702s ago: executing program 0 (id=1344): socket(0x2, 0x3, 0xff) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2, 0x0, 0x400000000000000}, 0x18) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000000000000000000000800010054454500"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000004c0)={0x1, 0x4, 0x3, 0x0, @vifc_lcl_addr=@private=0xa010102, @empty}, 0x10) close(0xffffffffffffffff) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 22.808856077s ago: executing program 0 (id=1346): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) stat(&(0x7f0000000040)='./file0\x00', 0x0) statx(r2, &(0x7f0000000080)='./file0\x00', 0x800, 0x4, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfb, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}]}}}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r1, 0x20, &(0x7f00000002c0)={&(0x7f00000004c0)=""/210, 0xd2, 0x0, &(0x7f0000000780)=""/139, 0x8b}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095", @ANYRES64=r8, @ANYRES64=r4, @ANYRES8=0x0, @ANYRES64=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x1d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r9}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) fgetxattr(r10, &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0) 22.472961498s ago: executing program 0 (id=1356): socket(0x2, 0x3, 0xff) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2, 0x0, 0x400000000000000}, 0x18) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000000000000000000000800010054454500"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000004c0)={0x1, 0x4, 0x3, 0x0, @vifc_lcl_addr=@private=0xa010102, @empty}, 0x10) close(0xffffffffffffffff) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 22.390089516s ago: executing program 0 (id=1359): r0 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40003}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x109}, {r1, 0x400}, {r0, 0x1001}], 0x3, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0xf]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bdbd98fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300121e0700240012800b00010067726574617000001400028005000a000000000005000900fd000000"], 0x44}, 0x1, 0x0, 0x0, 0x40041}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$pptp(0x18, 0x1, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x101}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0xe6c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9, 0xfffffffe}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0x81, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x1, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x80000007}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0x3, 0xfffffffc}, {0x0, 0x80000000, 0x80000000, 0xce4, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x1, 0xc, 0xffffffdd}, {0x7, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x5}, {0x8, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x1, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0x9, 0xfffffff9, 0x1}, {0x162, 0x0, 0x4b3, 0xcb5, 0x5, 0x7fffffdf}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x3}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x200, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x400001, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x4, 0xdd9f, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x5, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x100006, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x7, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x1000003, 0x3, 0xff36}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0xe65a, 0x9, 0xd32, 0xd4, 0x100, 0x1d}, {0x0, 0xb, 0xec36, 0x52, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x2}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1d, 0x40, 0x472, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x401, 0x6, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x6, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x6, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x9e7, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x2}, {0x2da, 0x0, 0x9, 0xa748, 0x4, 0xffffffff}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x3000000, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x3, 0x3, 0x1, 0x8, 0x600, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffffb}, {0x3eb, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x8, 0x2}, {0x10000000, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0xfffffffd, 0x7, 0x8, 0xfffffffb}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x40}, {0x73d, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffc, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xe, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x5}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0x3, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x8, 0x1}, {0x5}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x2}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe6c}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f0000001480)="$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") syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000001100)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) lgetxattr(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002100)=@known='trusted.overlay.redirect\x00', 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f00000002c0)=0x2, 0x17000000) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 21.47759096s ago: executing program 0 (id=1372): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r1, 0x4) 20.694620732s ago: executing program 0 (id=1388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) clock_getres(0x7, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) (async) clock_getres(0x7, &(0x7f0000000040)) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) (async) 20.694340202s ago: executing program 34 (id=1388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) clock_getres(0x7, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) (async) clock_getres(0x7, &(0x7f0000000040)) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) (async) 2.49817431s ago: executing program 5 (id=1663): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94) timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) preadv2(r1, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/53, 0x42}, {&(0x7f0000001a80)=""/4082, 0x1000}, {&(0x7f00000002c0)=""/208, 0xdd}], 0x3, 0x80, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) futex(&(0x7f0000000080), 0x10b, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x5, 0xa}, &(0x7f0000000500)=0x8) sendto$l2tp(r3, &(0x7f0000000140)="4d3d97d8de0a5f79a8cfad106180c8bc98217ea51be50ff275fb7dce5c519598d90d205ba7756343e581e1586d68eaba9459c978ec33d85a2b23d98147c5a1b3e92a44572bb3b3153e319b400ab6e57dee8d7d87134065569cc6adefddafc67f132f6c07c46042c217ea061255f51f2d43db99aea5a570443396dc44e6a38502b1a7b382f01ca460c16c9f693b8078dc5be3e0af4d3d0ec9446e6eead2a77bf6c4c25b3491b17aecce26e76c2b6ef4e24b8daa19b8d61f1228ebd5a928409be4cb3a92ecd9e4655cfb5112cc20c339caad7ae1b46c1d8f7068c98d6ca2a67b88faf778b0cf1afa7aa9a00e4c9771a7bf82a6439e", 0xf4, 0x4000005, &(0x7f0000000240)={0x2, 0x0, @multicast1, 0x4}, 0x10) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) 1.886836356s ago: executing program 3 (id=1669): socket(0x2, 0x3, 0xff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000004c0)={0x1, 0x4, 0x3, 0x0, @vifc_lcl_addr=@private=0xa010102, @empty}, 0x10) 1.623583s ago: executing program 1 (id=1676): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x78) r2 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00'}, 0x18) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 1.62273387s ago: executing program 3 (id=1677): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000200)={0xfffffffe, 0x4000400, 0x9, 0x81, 0x9, "ff0700000000000000000000000000008000", 0xfffffffe, 0x40407}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xd) 1.587031184s ago: executing program 3 (id=1680): r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2, 0x0, 0x400000000000000}, 0x18) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000004c0)={0x1, 0x4, 0x3, 0x0, @vifc_lcl_addr=@private=0xa010102, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r5) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x181000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000780)={{0x2, 0x0, 0x2dd9, 0x0, 0x8}, 0x6, 0x3, 'id0\x00', 'timer0\x00', 0x0, 0xd, 0x400, 0xc, 0x3}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x5) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$RTC_UIE_ON(r7, 0x7003) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x7, 0x17, 0x14, 0x10, 0x1, 0xe80, 0x5, 0x11b}}) close_range(r1, 0xffffffffffffffff, 0x0) 1.586404444s ago: executing program 5 (id=1681): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r5) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r6, 0x3405f8c17b4743e3, 0x70bd28, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0xc000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040026bd7000fedbdf25040000001c000680060005004e2100000500020000000000050002001000000004000180080004007800000005000500b5000000"], 0x44}, 0x1, 0x0, 0x0, 0x4044}, 0x810) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.374721263s ago: executing program 5 (id=1683): mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, 0x0, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) move_pages(r0, 0x3, &(0x7f0000000140)=[&(0x7f0000800000/0x800000)=nil, &(0x7f0000b33000/0x4000)=nil, &(0x7f00002c8000/0xc000)=nil], &(0x7f0000000400)=[0x0, 0x7ff, 0x5, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) unshare(0x22020600) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={r3, 0x1ff, 0xeb, 0x2}) ioctl$BLKROSET(r4, 0x125d, &(0x7f00000002c0)=0x2ac) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.201982179s ago: executing program 3 (id=1686): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x453) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb1c7}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000010000000200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x28) r2 = getpgrp(0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x301, 0x20001, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd17b, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x11014, 0x10000, 0x0, 0x8, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x11}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_read_part_table(0x5ff, &(0x7f0000000600)="$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") faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) r3 = syz_pidfd_open(r2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1210090, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESHEX], 0x1, 0x277, &(0x7f00000001c0)="$eJzs2s9rI2UYB/BnarXpLt1U/MUuiC96UC/DtmcPu0gFsaCoFVZBdtambuyYlE4oRMT2pFf/BM/i0Zsge/TSi3+BB2+99LgHMTJNWrOlaF3cppTP55A8zMx3frxv8vIEsvfat5+vr1X5WtGLqSyLqRuxE/ezmI+pOLQTr75865fn37v14Vs3l5cbo62LKaUrL/z80Zc/vHivd/mDH6/8NBO78x/v7S/+vvvs7tW9P9+/265Su0qdbq8+V7fbK+6UrbTartbzlN4pW0XVSu1O1drspSLdOdy/VnY3Nvqp6KzOXdrYbFVVKjr9tN7qp1439Tb7qfi0aHdSnudp7lJw4O7DxVa+vz8YxP7g8dsxGAxmv4vL92Lut2hG9mTKnrqRPXM7e24nu7o/GDSPR2f/h7tm4h56/rkQRov60rspNSLKb7ZWtlaG7/XeRtxci3aU0YrrMRt/RP0xGRnWb7y5vHQ9HZiPr8vtUX57a+WxiJipTzLML0Qz5k/OLwzz6TBfp+rXenU/uv5iNOPpk/OLx/LD6zfilZfG8nk049dPohtlrEadje3RECx9tZDS628vH8tfOzgOAOCiydORun+rm7ax/i0izx/YP9YfDfNj/WFzrD984oT+8Fh/NR3Xpif77ERU/S/Wi7JsbdY/8A6Koy2nKGZGZ/lvqXNezI4Pyz8WEdn4WD66G5t6YM7OeFimTzkaimGRXYyvQ8RnZ7kQMRF/T/q/Hto4kxsCAAAAAAAAAADgVM7i74STfkYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB8+ysAAP//8BK2LQ==") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r5}, 0x9) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000100000000000000000000018000000040000f5ffffff000700000085100000fbffffff186400000300000000000000020000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) fsetxattr$trusted_overlay_nlink(r3, &(0x7f00000018c0), 0x0, 0x0, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) 986.150839ms ago: executing program 1 (id=1690): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000200)={0xfffffffe, 0x4000400, 0x9, 0x81, 0x9, "ff0700000000000000000000000000008000", 0xfffffffe, 0x40407}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0xd) 914.446666ms ago: executing program 7 (id=1691): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)="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", 0x1be}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f00000000c0)="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", 0x117}, {&(0x7f0000000640)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bb010000007e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc0080000000000000b43ed522a35874f4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000000280)="b732b06fd220a6145520dbf60b0ebbf5380f98d4a1811f9a17f9b79521cb5554695fb065f2d1ed1bef797196270c000000000000002fe48164a445f3bb9289533f5ed32a8dc3a17c7f13e93222784f53df2d7e9f7bf3d47fa6440da1de8ac20000a8e1da8150f1a1d8f51c863c243979070cd1920b5bee99a922f970a6212dd6668cca002710d04c926de6e706ce3f00a3d0b32e9992768500000000000000", 0x9f}, {&(0x7f0000000a80)="ac6aed94fbb8c7fecccf1fbe0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc0a3448434dca51f5bc1972720dc071c5c5e2358a62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb96809ab4bfbc85cd9eed4820e2a821913e94ed62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fcb7b255b5fd8b3d9eda621defc3f398cc545fb03d6549353921bb4a52b3230008f967ddc1ad8635d58667b82a58ec030a57d199f14b1714330e476a95d3aa897b4161302835bee9582736b04c576bbfffe0c6cc0bb35685582b277d975a87c9be2814365f3f1962ee9db85d8ba8968bfee00e27db96abc49c734aefd019fc756e8d14e1f0f3ce6d6e0163d7367f0672c1b07dc28d6bd3ab", 0x131}], 0x6}}], 0x2, 0x2000c044) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000840)="924a", 0x2}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x1) 913.435456ms ago: executing program 7 (id=1693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed008e, &(0x7f0000000380)={[{@jqfmt_vfsold}, {@nolazytime}, {@debug}, {@noload}, {@min_batch_time={'min_batch_time', 0x3d, 0xd23b}}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@acl}, {@nolazytime}]}, 0xfe, 0x47d, &(0x7f0000000dc0)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r2, 0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0x0, 0xfff1}, {0xc, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x2099}]}}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB='\x00'/10, @ANYRES32=r5, @ANYRES32, @ANYRESOCT], 0x50) 797.424856ms ago: executing program 1 (id=1695): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x4, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r1, 0x0) (async) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 694.760666ms ago: executing program 6 (id=1697): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a0000000400e40008000000080000000000000093686e9a89a207431cd2a740df41d4c9a982fe95d59cf933f93e3eb41483e94a83a9c709cdf7f2ee290c1c5a66da651722cda4ad4ec944515fc69650364f6d3ab7813d370e4c7daa814e228436681ecbba2f0fba94202188609b04e731ec18ed7817f63fed3563b635df943d4df048fbe31b9854773aa6dd64c4bd93ac8e57e1f730d65b8e40e739793cff961b3683188d95f2941d73b5cf57edf7276a60f42e95f68c9937c8326f85bc0cff7205d18284e4e9021fa46cb2849bbec4826a54d4177f", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0xfd, r0}, 0x38) fcntl$setstatus(r1, 0x4, 0x40400) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r2, 0x8008551c, &(0x7f0000000180)={0x1, 0x18, 0x0, 0x1, 0x0, 0x0, 0x0}) 694.035616ms ago: executing program 7 (id=1698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xfffffffffffffe40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) sendmmsg$inet6(r0, &(0x7f0000001f80)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x13af}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000001c0)="0c1d95b5ff6ac763ad6e20ddacfe2d4ef67eb4d750", 0x15}, {&(0x7f00000002c0)="ef9fda3c04fddc28524e639f77a7b60f0ca89f0d68939812936484f2e8aa77459bf1169dd350eb58512bfae7b4ca15e7084fe5da0cc60e3a409e28c1d0f3502900c0e7a30714fe8b9bd12cd9396d7620e208ae2d00ca15f25c5db9e3636716fa558d34613e2e809afd09ba37ef1f67e334ec9a198e1efe77a0c1ba8b1c8f306a0125068274fb976c1d227f2a19782ee6d94125f16e0f6031529505137b7ea9ef286ea0905d08d1e0bc4e68268b904b308b411850b1cc7a5af5546297a8a336b14d72e11d36ecb8e009301483651720db02dfaaf05de491628ef771ff61f64080da19978ddba23b0b2bf581b8a4c3e2febeb0c930", 0xf4}, {&(0x7f0000000200)="40e163d3d7aa0ac579d87181acf65af11394cfd108588a9dd523500518530815", 0x20}, {&(0x7f00000004c0)="4b1a07db3c347c51c91929ec5db35117f5d8836e3b1fae922da80b94244ef9674369f1c80c8b9f7715c0fd5c0583190ca1166115de6f00f0b81752e637858d62bca409d843b7f27a1d4fcf7f37b36ecc67109bc84ffc395e90d9125121a3c7f0b1e49c5651990a90f7317b618db7de07e03fb1092137ba43bb9dda1615e8d50fd06fffc3f87778200b2a8db1e0ea1b143bc5f8c005c011acad30752e9c0c16d8047b663f461434e1757417289eb7915615fb2703961cd9f87c4b1c1b7acd08a695713881d2a4c4d0ca2cfa4900be501a32f4f8fd6af4e4483e0161bf4c4466a101411333", 0xe4}], 0x4, &(0x7f00000005c0)=[@hopopts={{0x20, 0x29, 0x36, {0x2f, 0x1, '\x00', [@ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x9}]}}}, @hopopts={{0x68, 0x29, 0x36, {0x32, 0x9, '\x00', [@ra={0x5, 0x2, 0x5}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @pad1, @calipso={0x7, 0x38, {0x3, 0xc, 0x5, 0x7fff, [0x400, 0x9, 0x0, 0x4, 0xfffffffffffffff9, 0xffffffffffffffff]}}, @enc_lim={0x4, 0x1, 0x81}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x21, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2a}]}}}], 0xa8}}, {{&(0x7f0000000400)={0xa, 0x4e21, 0x8, @remote, 0x81}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000000a00)="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", 0xbe0}, {&(0x7f0000000780)="c642e9bf4753b3fec64f509bcdff43fcf8f99081af4d0e840ef59c9f180a924152fcfdcd262cb13655a8e32b0cf5126eb0c94f209061d05e76c362ac9c1ac11bbda3646bf7d302ee888d5076d51d65c230ca7003ea50590ede5ab9939bdbb93c77422c2f04bcf0c39c4c512c7532c41f44a1edcdb9d12dde3dc832ba8d4f64ff2c55525ef00716af9b8e0ae9e74534746e181647459db9fe1d1a11b63f9a0b4c56cdd045ac8bcedb3d31c11555b72583dc726e34bfd1f61e9e0de5", 0xbb}, {&(0x7f0000000880)="72a08e9d895af0db14e9d7f35fc4c4e3b2318c87582200bb7310c92702c5bffa813a9ea07a6f07c91eecef526164e7a09f43be880466f0b89b47fd19d301bc48162307688ca09920000ff37844b507d51f2217a9fe176554ab56add3712a9dba62ef369c5c82c131166a3b3cf393db2bec8872a7dced094677559e9d4c5b55956611f80064daaf8a7cc9c2c2fd95f9b1a0bda8007864db1f483546a8176366d45dfd0072ce49df2902a99a8345e2126e9f998ef7649522deea0b57e809422da3429a3ddf3a1e91c2a6f1c8a8390efac9b4639b5aa0b9ce6803ed", 0xda}, {&(0x7f0000001a00)="b8b3cc80861d727c767def3ec3cb4be1561668035962a9ad5863", 0x1a}], 0x4, &(0x7f0000001c00)=[@hopopts_2292={{0x100, 0x29, 0x36, {0x3c, 0x1d, '\x00', [@generic={0x4, 0xda, "789cd4ae428e554a8fd8e0a111a5b116b08ce8796d0588c57915994578aa3d1489ef7eed08fdd97e35167e063be9b08a3c68d4a821a56b871ec76b6a5b3fb7d3bab392fd6f7b488210b668dd300f199f6ad65375a4187d6878d0a07754f780ee2a5d3ef5c7917eca24e4d51a6d8ef6077c8dbf399f6ca175dbf27136744684ac010656a68c74a3638d8735d721156f34279a560002270133c00b39130143fe80ef8a7ffa6ce7bd5a441db9b8a1ff273a06fa137ab0156a2e668dd335e41f5f8be51571559e19fba6a4e55be7439e0496e09f61bd19ab1fb2848d"}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x3}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x412c}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x85, 0x10, 0x2, 0x7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2c}, @dev={0xfe, 0x80, '\x00', 0x2a}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @mcast1, @rand_addr=' \x01\x00', @loopback, @private2]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x89, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xf1}]}}}, @hopopts_2292={{0x68, 0x29, 0x36, {0x3b, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0x57}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x29}}, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4}, @pad1, @jumbo, @ra={0x5, 0x2, 0x2}]}}}, @hopopts={{0x28, 0x29, 0x36, {0x2f, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0xa}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x5c, 0x14, 0x1, 0xd0, 0x0, [@mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}], 0x348}}], 0x2, 0x81) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r2) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010180}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x4}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x44, 0x7b1, &(0x7f00000004c0)="$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") r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000002300)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x68, 0x0, 0x601, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004040}, 0x10044844) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r7, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback, 0x8004}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 690.537757ms ago: executing program 6 (id=1699): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24004040) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) (fail_nth: 5) 681.997417ms ago: executing program 3 (id=1700): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="50000000100001040200"/20, @ANYRES32=0x0, @ANYBLOB="2825020000080000280012800c0001006d6163766c616e00180002800a0009000000000000000000080007000100000008000500", @ANYRES32=r4], 0x50}}, 0x800) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', r4, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r6, 0x0, 0xb}, 0x18) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f00000005c0)={@multicast2, @remote, 0x0, "ef932dead5bc17bb160da98e5fedc335e5ef899d23e18fd191139de1bf74a91a", 0x636, 0x2, 0x800, 0x1}, 0x3c) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r2, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x149200) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r9, 0x2000) ioctl$RTC_ALM_READ(r1, 0x40187013, 0x0) sendto$l2tp6(r0, &(0x7f0000000080)="7ae7cfe7efee220d319dcf1495fabceb47939af3095afb03ab4849db7a8b8bfb9912e10ea86cbc38f6e1ece9619a36d28ae6ca8c3d44b627aa0aea8e965e23c0457c3e56531e8f47d1fec12d73a6c5ab841738e332ba7c42894622a7ff57d70aaa7563279bc5e587b49d6efe4aab7a5cf4a94554887cc55cd090ad4851537d4197e9cbc2676982d3c475f2a7a7a572801574c68a1f5508066dc75956", 0x9c, 0x240000c0, &(0x7f0000000140)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00', 0x45, 0x2}, 0x20) readv(r7, &(0x7f0000000380)=[{&(0x7f0000000500)=""/130, 0x82}], 0x1) read$char_usb(r0, &(0x7f0000000200)=""/89, 0x59) 595.678155ms ago: executing program 1 (id=1701): socket(0x2, 0x3, 0xff) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000004c0)={0x1, 0x4, 0x3, 0x0, @vifc_lcl_addr=@private=0xa010102, @empty}, 0x10) 502.739584ms ago: executing program 1 (id=1702): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) lsm_set_self_attr(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="6500000000000000030000280900000043000000000000002300000000000000d7b8fdff5837aade64b91d51ac8959497b4317b4a87055e8d21b9668d9bb8cd00b723a"], 0x43, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000080)=0x7) 500.079734ms ago: executing program 6 (id=1703): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x245, &(0x7f0000000800)="$eJzs3T9oJFUcB/DvzO56l7tFTm0E8Q+IiAbC2Qk2sVEISAgiggoRERslEWKCXWJlY6G1SiqbIHZGS0kTbBTBKmqK2AgaLAwWWqzsTiIxWY26cUcynw9MZibz3vzesPN9u83sBmisa0mmk7SSTCbpJCmON7irWq4d7q5PbM8nvd7jPxaDdtV+5ajf1SRrSR5MslUWebGdrGw+vffzzqP3vrHcuee9zacmxnqRh/b3dh87eHf29Q9nHlj5/MvvZ4tMp/uH6zp/xZD/tYvk5v+i2P9E0a57BPwdc69+8FU/97ckuXuQ/07KVC/em0s3bHVy/zt/1vetH764bZxjBc5fr9fpvweu9YDGKZN0U5RTSartspyaqj7Df926Ur60uPTK5AuLywvP1z1TAeelm+w+8vGlj66eyP93rSr/wMXVz/8Tcxvf9LcPWnWPBhiL26tVP/+Tz67eF/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6zz14flH5pL/qG55B+a63j+AYBm6V2q+wlkoC51zz8AAAAAAAAAAAAAAAAAAMBp6xPb80fLuGp++nay/3CS9rD6rcHvESeXB3+v/FT0m/2uqLqN5Jk7RzzBiN6v+enrG7+9XGv9z+6otXxWF5K115Jcb7dP33/F4f337910xvHOcyMW+IeKE/sPPTne+if9ulFv/Zmd5JP+/HN92PxT5tbBevj80z37K5bP9PIvI54AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAsfktAAD//4qMbVQ=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11a) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)=0x8) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0xa, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000000)="3277febcc2d15c712c056b38522f87c68dcddb0652d610fa9f21614e5b3dbb1f7b499b14aa7cfa858a82ccef5ade1f1551", 0x31, 0x8080c61) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8000c61) 490.162565ms ago: executing program 1 (id=1704): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x1000880, &(0x7f0000000140)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYRES32, @ANYRES8=0x0], 0x1, 0x1299, &(0x7f0000003b40)="$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") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000940), 0xa, 0x5b9, &(0x7f0000001f80)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r4, &(0x7f0000000280), &(0x7f0000000300)=""/84}, 0x20) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) ioctl$EVIOCGABS20(r5, 0x80184520, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r7, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$TIOCNOTTY(r2, 0x5422) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000000), 0x4) 487.932515ms ago: executing program 7 (id=1705): r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2, 0x0, 0x400000000000000}, 0x18) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000000000000000000000800010054454500"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000004c0)={0x1, 0x4, 0x3, 0x0, @vifc_lcl_addr=@private=0xa010102, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r5) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x181000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000780)={{0x2, 0x0, 0x2dd9, 0x0, 0x8}, 0x6, 0x3, 'id0\x00', 'timer0\x00', 0x0, 0xd, 0x400, 0xc, 0x3}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x5) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$RTC_UIE_ON(r7, 0x7003) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x7, 0x17, 0x14, 0x10, 0x1, 0xe80, 0x5, 0x11b}}) close_range(r1, 0xffffffffffffffff, 0x0) 458.628818ms ago: executing program 6 (id=1706): socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0xfffffffe, 0x4000400, 0x9, 0x81, 0x9, "ff0700000000000000000000000000008000", 0xfffffffe, 0x40407}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xd) 406.876513ms ago: executing program 5 (id=1707): prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='ext4\x00') syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000140)={[{@inlinecrypt}, {@quota}, {@barrier}, {@jqfmt_vfsv0}, {@resgid}, {@inlinecrypt}, {@bh}, {@stripe={'stripe', 0x3d, 0x3}}]}, 0x6, 0x507, &(0x7f0000000680)="$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") listxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x100000) 406.038433ms ago: executing program 6 (id=1708): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)="0800c8460f2a2a", 0x7}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffff55, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x2, 0x40, 0x1, 0x6, 0x1003ff, 0xc2, 0x9, 0x1}}}}]}, 0x58}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) (async) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018, 0xffffffffffffffff}, './file0\x00'}) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e20, @local}}, 0xf58f, 0x101}, &(0x7f0000000480)=0x90) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000880)={r9, @in={{0x2, 0x4e21, @local}}, [0x3, 0x3, 0xfffffffffffffff8, 0x1, 0x6, 0x6, 0x3, 0xae9, 0x7ff, 0x6, 0xdc, 0x6, 0x4, 0x3, 0xe]}, &(0x7f0000000780)=0x100) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="393cacba6ecd0cbe4a159c4c5a644771da0b8f62a1e8c589be958ef2b18611a7060f68ce62a120cb26daba0f1da1ea8a0c83d7a950d08a54df691dc15a43c9a04cdd85fffefc826d7a0dc99126dc64f89a320934e8623b4512953f55ad39c41988e6d1f2015c85543cc9a2f507545f24274195421fc7924466ef841bee8c", @ANYBLOB="397dc1e2ec2e61cea1b39b8a9782ace8774e4d3bfad9c2f0a08dbb8fe72f7ae5a46ba56da24be64d2d81c1800f3afff8d1216d975f941b0c9f1695e2aacd0d9d27aedcebc816f85814a032419428e1c5104988bf505e820378f674c71d5482f61e4ce006acf78f0a8d297653c7b1cb499d8723125f964025e29ca7c2e9972d83365de5c05f2c1f6b415d0169aba26440a8bc365d8da8ea38838451a2c647202e4f02a679d8014bd3db28803afc56a4719e26e7cd8d1f76ccf43c13", @ANYBLOB="01002cbd7000ffdbdf2504000000"], 0x14}}, 0x80800) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000b40)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="b314002a00b30ec48a0fec7a94d020c28b9deb3769a749bd873550e20434fe481b7bef5002fa160b", @ANYRES32=0x0, @ANYRESHEX=r10], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c95}, 0x4008840) (async) sendmsg$GTP_CMD_ECHOREQ(r7, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8983, &(0x7f0000000640)={0x8, 'veth0_to_team\x00', {'bond_slave_0\x00'}, 0x6}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x24, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa}, {0xffff, 0x5}, {0x3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x37a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x3, 0x240, r11, &(0x7f0000000dc0)="bee58c20d5cd3f4b2fa67922cfbd23b2fb1c049ddfd0e7ebc347a8e1ac9efe310b86ba207da84a34940d8a7186ae90cf7f27e5cbfaeb2798f8f54216dd35d8a678ce88ceb62bb77bd3988511377828dce018a53c2b70c67ab499bdf62728f12e14339681a4b91fbba339fdf361a48afff13979ffd1ee648c580efb05e152e8138962d2bccdd6ebebf2ed3601710624406e13a5aeecbba35aff2cad7b9e54515bee8077f276f5b6a5756d", 0xaa, 0x2, 0x0, 0x5, r5}, &(0x7f0000000ac0)) 318.732011ms ago: executing program 6 (id=1709): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r2, &(0x7f00000094c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="eb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x2, 0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 269.057625ms ago: executing program 7 (id=1710): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x85}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r1, &(0x7f0000000040)=""/60, 0xdb, 0x40, 0x0, 0x0) r2 = memfd_secret(0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000200)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x7fffffffffffffff}, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) modify_ldt$write2(0x11, &(0x7f00000000c0)={0xff, 0x20001000, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@typedef={0xd, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x0, 0x1e, 0x5f, 0x61, 0x5f, 0x0, 0x2e, 0x2e, 0x1bcb1592f14f12ef, 0x5f]}}, &(0x7f0000000180), 0x30, 0x0, 0x0, 0x93e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x7, 0x1000, 0xff00, 0x8, r2, 0x68000, '\x00', 0x0, r6, 0x4, 0x4, 0x1}, 0x50) 126.601449ms ago: executing program 5 (id=1711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000200000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000020900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4040070}, 0x4) 70.568394ms ago: executing program 7 (id=1712): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000400)={0x6, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}]}) unshare(0x20040600) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = socket$inet(0x2, 0x1, 0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r5}, 0x10) listen(r4, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f00000002c0)=@get={0x1, &(0x7f0000002240)=""/4109, 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) creat(&(0x7f0000000040)='./file0\x00', 0x0) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='security.selinux\x00') r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="00006005ffffffffffffaaaaaaaaaabb88a8400088a8200008004515001c00670000ff3290780a012101ac1e030115944cda148281bb"], 0x36) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r11, 0x4}, 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r12, &(0x7f0000000080)="ae2b711379058b53a1731299043fee0ee4a5f3dbe4c6d2ef433435b3e66d1e085d7f454239dc476313ee4718af2446e683e68dc4725ffe472eb24771cb797825cdb7c80e798ac654818bb8e8e1ea0805f456fe4f10db0b5a6d325540a20dc0c4e3655c7f81c520cd6f65598c690117b31cf317f1818f1eafd89314b050a6c1caccd15e2ca3f0aad0e2bfc416d817fcd0f1dbd2c4d354e3f231dd76826850946221a5641cab878377dda67586a6a59662973914bb7067b880c7dc58f178c1af16b9106d43ae7fc39c8222410393cb1d23f058030c3e862976fcb789b9d6b6708188fe10ad3959215e40854bffed820a71618e", &(0x7f0000000180)=@buf="03385d3d9f0a11bcebb9730fa8606d211026fbe62dfc4752a5e1294478e197833c898df6545c9fb1998ac93d5ad3bf4475a86a990228e78f269ac3a70f3d4ec816aa2016d39e9bf87887acfde8cd11074e9a0e6fe57d1bb71b49507e059d075404e5862c553e616ae9df8b57c0ba3dbd79c7f2576fb0b293c42e62fd03ea8da7c3c4df93acd073425873e7d0b731f827859779feda56674730f4c6efeb9f321b9b0bf85fb6b312ae", 0x4}, 0x20) 70.056754ms ago: executing program 3 (id=1713): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x28, 0x3c, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x10d, 0x0, 0x0, @u64=0x401}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x2400c084) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0xe2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) write$P9_RREADLINK(r1, 0x0, 0x0) 0s ago: executing program 5 (id=1714): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) removexattr(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) rename(0x0, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000200), &(0x7f0000000340)='./file0\x00', 0x8, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x1000000000000008}, 0x18) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r10, &(0x7f0000000040)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x1d}}], 0x30, 0x4000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x4, r11, 0x1, 0x4, 0x6, @broadcast}, 0x14) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r2, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000b40)=@security={'security\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, &(0x7f0000000380), {[{{@ip={@remote, @local, 0xffffff00, 0xff000000, 'pimreg0\x00', 'nr0\x00', {}, {}, 0x32, 0x2, 0x22}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0x7, 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0x5, 0x6, 0x5, 0x1], 0x3, 0x4}, {0x1, [0x6, 0x3, 0x2, 0x4, 0x3, 0x2], 0x1, 0x6}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x9}}}}, {{@ip={@broadcast, @rand_addr=0x64010101, 0xff, 0xffffffff, 'syzkaller0\x00', 'wg0\x00', {0xff}, {}, 0x2f, 0x2, 0x44}, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x4, 0x3, 0x0, 0x6, 0x4], 0x4, 0x4}}}, @common=@ah={{0x30}, {[0x101, 0x1], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x2, 0x2, 0x0, 0x7, 0x3, 0x3], 0x4}, {0x4, [0x1, 0x0, 0x1, 0x2, 0x1, 0xf], 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 624978][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 99.632756][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 99.640203][ T10] rtc rtc0: __rtc_set_alarm: err=-22 [ 99.652345][ T6890] loop5: detected capacity change from 0 to 2048 [ 99.670337][ T6890] EXT4-fs mount: 23 callbacks suppressed [ 99.670356][ T6890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.712664][ T6890] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.1067: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 99.757040][ T6890] EXT4-fs (loop5): Remounting filesystem read-only [ 99.799021][ T4441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.904105][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 99.904120][ T29] audit: type=1400 audit(1766935896.258:8291): avc: denied { bind } for pid=6905 comm="syz.5.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.930569][ T29] audit: type=1400 audit(1766935896.258:8292): avc: denied { name_bind } for pid=6905 comm="syz.5.1068" src=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 99.951608][ T29] audit: type=1400 audit(1766935896.258:8293): avc: denied { node_bind } for pid=6905 comm="syz.5.1068" src=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 99.988188][ T6912] loop5: detected capacity change from 0 to 256 [ 99.995837][ T6912] vfat: Unknown parameter 'utÿ' [ 100.020994][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1068'. [ 100.032953][ T29] audit: type=1400 audit(1766935896.348:8294): avc: denied { setopt } for pid=6905 comm="syz.5.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.052543][ T29] audit: type=1400 audit(1766935896.378:8295): avc: denied { setopt } for pid=6905 comm="syz.5.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.162252][ T6893] loop1: detected capacity change from 0 to 32768 [ 100.265808][ T6893] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 100.271241][ T6893] loop1: p1 start 460800 is beyond EOD, truncated [ 100.278590][ T6893] loop1: p2 size 83886080 extends beyond EOD, truncated [ 100.337475][ T6893] loop1: p5 start 460800 is beyond EOD, truncated [ 100.343981][ T6893] loop1: p6 size 83886080 extends beyond EOD, truncated [ 100.374569][ T6924] dummy0: entered promiscuous mode [ 100.379828][ T6924] dummy0: entered allmulticast mode [ 100.476148][ T6935] netlink: 'syz.5.1072': attribute type 21 has an invalid length. [ 100.497881][ T6936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1071'. [ 100.516278][ T6935] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1072'. [ 100.551924][ T29] audit: type=1400 audit(1766935896.908:8296): avc: denied { getopt } for pid=6934 comm="syz.5.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.634063][ T4205] udevd[4205]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 100.646569][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 100.665015][ T4206] udevd[4206]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 100.677408][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 100.849375][ T29] audit: type=1326 audit(1766935897.198:8297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6954 comm="syz.0.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ff9ef749 code=0x7ffc0000 [ 100.873081][ T29] audit: type=1326 audit(1766935897.198:8298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6954 comm="syz.0.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ff9ef749 code=0x7ffc0000 [ 100.896560][ T29] audit: type=1326 audit(1766935897.198:8299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6954 comm="syz.0.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ff9ef749 code=0x7ffc0000 [ 100.920088][ T29] audit: type=1326 audit(1766935897.198:8300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6954 comm="syz.0.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87ff9ef749 code=0x7ffc0000 [ 101.029554][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'. [ 101.074380][ T6966] pim6reg9: entered allmulticast mode [ 101.173113][ T6966] syzkaller1: entered promiscuous mode [ 101.178709][ T6966] syzkaller1: entered allmulticast mode [ 101.285406][ T6969] rtc_cmos 00:00: Alarms can be up to one day in the future [ 101.501559][ T6978] pimreg: entered allmulticast mode [ 101.530805][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1084'. [ 101.532580][ T6981] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6981 comm=syz.0.1082 [ 101.553391][ T6978] pimreg: left allmulticast mode [ 101.588297][ T6983] netlink: 'syz.1.1085': attribute type 13 has an invalid length. [ 101.607675][ T6984] rtc_cmos 00:00: Alarms can be up to one day in the future [ 101.615781][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 101.623600][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 101.631402][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 101.639174][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 101.646608][ T3423] rtc rtc0: __rtc_set_alarm: err=-22 [ 101.657861][ T6983] gretap0: refused to change device tx_queue_len [ 101.674289][ T6983] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 101.851697][ T6993] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1089'. [ 101.894755][ T7000] loop3: detected capacity change from 0 to 1024 [ 101.905438][ T7000] EXT4-fs: inline encryption not supported [ 101.911345][ T7000] EXT4-fs: Ignoring removed orlov option [ 101.918700][ T3483] Process accounting resumed [ 101.926499][ T7000] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 101.946274][ T7000] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 102.169517][ T7011] pimreg: entered allmulticast mode [ 102.176359][ T7011] pimreg: left allmulticast mode [ 102.608520][ T7033] loop5: detected capacity change from 0 to 512 [ 102.651104][ T7033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.756492][ T7033] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.031094][ T7051] loop0: detected capacity change from 0 to 512 [ 103.043752][ T7051] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1107: invalid indirect mapped block 4294967295 (level 1) [ 103.090281][ T7051] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1107: invalid indirect mapped block 4294967295 (level 1) [ 103.106374][ T7051] EXT4-fs (loop0): 2 truncates cleaned up [ 103.112798][ T7051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.131202][ T7054] loop3: detected capacity change from 0 to 2048 [ 103.138602][ T7054] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.168455][ T7054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.188496][ T7054] tipc: Enabling of bearer rejected, already enabled [ 103.211019][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.279385][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.458834][ T4441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.525938][ T7087] loop1: detected capacity change from 0 to 2048 [ 103.533166][ T7087] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.629365][ T7087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.661294][ T7090] loop5: detected capacity change from 0 to 128 [ 103.710348][ T7087] tipc: Enabling of bearer rejected, already enabled [ 103.719095][ T7090] FAT-fs (loop5): bogus logical sector size 65535 [ 103.726273][ T7090] FAT-fs (loop5): Can't find a valid FAT filesystem [ 103.808361][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.109076][ T7101] __nla_validate_parse: 5 callbacks suppressed [ 104.109094][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1123'. [ 104.272813][ T7112] loop1: detected capacity change from 0 to 512 [ 104.291684][ T7112] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.475591][ T7112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.524971][ T7112] ext4 filesystem being mounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.615836][ T7112] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #18: comm syz.1.1127: corrupted inode contents [ 104.667872][ T7112] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #18: comm syz.1.1127: mark_inode_dirty error [ 104.742693][ T7112] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #18: comm syz.1.1127: corrupted inode contents [ 104.809172][ T7112] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #18: comm syz.1.1127: mark_inode_dirty error [ 104.875090][ T7112] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #18: comm syz.1.1127: mark inode dirty (error -117) [ 104.949258][ T7112] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 105.050940][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.128401][ T7126] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 105.183405][ T7129] pimreg: entered allmulticast mode [ 105.198913][ T7128] pimreg: left allmulticast mode [ 105.264778][ T7110] syz.0.1128 (7110) used greatest stack depth: 9288 bytes left [ 105.353881][ T7136] loop5: detected capacity change from 0 to 512 [ 105.370986][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1130'. [ 105.385476][ T7136] EXT4-fs: Ignoring removed bh option [ 105.438705][ T7136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.448518][ T7142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1134'. [ 105.460485][ T7136] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.544166][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1137'. [ 105.556916][ T4441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.595523][ T7151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.654910][ T7151] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.673100][ T7151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.745152][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 105.775236][ T7183] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 105.790811][ T7207] loop1: detected capacity change from 0 to 2048 [ 105.800237][ T7207] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.830987][ T7206] rtc_cmos 00:00: Alarms can be up to one day in the future [ 105.853004][ T7207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.867792][ T7207] tipc: Enabling of bearer rejected, already enabled [ 105.892928][ T7211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1142'. [ 105.903193][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 105.903211][ T29] audit: type=1400 audit(1766935902.258:8454): avc: denied { ioctl } for pid=7210 comm="syz.3.1142" path="socket:[17059]" dev="sockfs" ino=17059 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.941604][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.972562][ T7215] FAULT_INJECTION: forcing a failure. [ 105.972562][ T7215] name failslab, interval 1, probability 0, space 0, times 0 [ 105.985350][ T7215] CPU: 1 UID: 0 PID: 7215 Comm: syz.1.1143 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 105.985455][ T7215] Tainted: [W]=WARN [ 105.985461][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.985475][ T7215] Call Trace: [ 105.985482][ T7215] [ 105.985491][ T7215] __dump_stack+0x1d/0x30 [ 105.985525][ T7215] dump_stack_lvl+0x95/0xd0 [ 105.985627][ T7215] dump_stack+0x15/0x1b [ 105.985649][ T7215] should_fail_ex+0x265/0x280 [ 105.985675][ T7215] should_failslab+0x8c/0xb0 [ 105.985698][ T7215] kmem_cache_alloc_noprof+0x69/0x4b0 [ 105.985790][ T7215] ? skb_clone+0x151/0x1f0 [ 105.985909][ T7215] skb_clone+0x151/0x1f0 [ 105.985945][ T7215] __netlink_deliver_tap+0x2c9/0x500 [ 105.985996][ T7215] netlink_unicast+0x66b/0x690 [ 105.986038][ T7215] netlink_sendmsg+0x58b/0x6b0 [ 105.986094][ T7215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.986131][ T7215] __sock_sendmsg+0x145/0x180 [ 105.986152][ T7215] ____sys_sendmsg+0x31e/0x4a0 [ 105.986212][ T7215] ___sys_sendmsg+0x17b/0x1d0 [ 105.986257][ T7215] __x64_sys_sendmsg+0xd4/0x160 [ 105.986378][ T7215] x64_sys_call+0x17ba/0x3000 [ 105.986473][ T7215] do_syscall_64+0xca/0x2b0 [ 105.986521][ T7215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.986591][ T7215] RIP: 0033:0x7fb6dac7f749 [ 105.986612][ T7215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.986634][ T7215] RSP: 002b:00007fb6d96e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.986722][ T7215] RAX: ffffffffffffffda RBX: 00007fb6daed5fa0 RCX: 00007fb6dac7f749 [ 105.986739][ T7215] RDX: 0000000028040000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 105.986755][ T7215] RBP: 00007fb6d96e7090 R08: 0000000000000000 R09: 0000000000000000 [ 105.986771][ T7215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.986785][ T7215] R13: 00007fb6daed6038 R14: 00007fb6daed5fa0 R15: 00007ffddf8132e8 [ 105.986861][ T7215] [ 105.987435][ T7215] netlink: 'syz.1.1143': attribute type 1 has an invalid length. [ 106.201000][ T7213] loop3: detected capacity change from 0 to 4096 [ 106.239759][ T29] audit: type=1326 audit(1766935902.598:8455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.1.1146" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb6dac7f749 code=0x0 [ 106.274164][ T7213] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 106.325294][ T29] audit: type=1326 audit(1766935902.688:8456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.0.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ff9ef749 code=0x7ffc0000 [ 106.325572][ T7213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.354422][ T29] audit: type=1326 audit(1766935902.708:8457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.0.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87ff9ef749 code=0x7ffc0000 [ 106.385579][ T29] audit: type=1326 audit(1766935902.708:8458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.0.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ff9ef749 code=0x7ffc0000 [ 106.409152][ T29] audit: type=1326 audit(1766935902.708:8459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.0.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ff9ef749 code=0x7ffc0000 [ 106.432668][ T29] audit: type=1326 audit(1766935902.708:8460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.0.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87ff9ef749 code=0x7ffc0000 [ 106.441578][ T23] kernel read not supported for file /612/coredump_filter (pid: 23 comm: kworker/1:0) [ 106.456565][ T29] audit: type=1326 audit(1766935902.708:8461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.0.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ff9ef749 code=0x7ffc0000 [ 106.456663][ T29] audit: type=1326 audit(1766935902.708:8462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.0.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ff9ef749 code=0x7ffc0000 [ 106.456699][ T29] audit: type=1326 audit(1766935902.708:8463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.0.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f87ff9ef749 code=0x7ffc0000 [ 106.456946][ T3423] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 106.477391][ T7213] xfrm1: entered allmulticast mode [ 106.608713][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 106.616540][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 106.624345][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 106.632140][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 106.639562][ T10] rtc rtc0: __rtc_set_alarm: err=-22 [ 106.663181][ T7235] rtc_cmos 00:00: Alarms can be up to one day in the future [ 106.679634][ T7233] loop5: detected capacity change from 0 to 512 [ 106.736137][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.754583][ T7233] journal_path: Non-blockdev passed as './bus' [ 106.761034][ T7233] EXT4-fs: error: could not find journal device path [ 106.781827][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1153'. [ 106.797692][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1153'. [ 106.835347][ T7187] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 106.843226][ T7187] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 106.950182][ T7256] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 106.958524][ T7256] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 107.023678][ T7261] loop0: detected capacity change from 0 to 512 [ 107.033205][ T7261] msdos: Bad value for 'check' [ 107.334411][ T7280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.370839][ T7280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.402908][ T7278] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1161'. [ 107.531502][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1165'. [ 107.542981][ T7292] FAULT_INJECTION: forcing a failure. [ 107.542981][ T7292] name failslab, interval 1, probability 0, space 0, times 0 [ 107.555706][ T7292] CPU: 0 UID: 0 PID: 7292 Comm: syz.1.1166 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 107.555751][ T7292] Tainted: [W]=WARN [ 107.555772][ T7292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.555789][ T7292] Call Trace: [ 107.555823][ T7292] [ 107.555835][ T7292] __dump_stack+0x1d/0x30 [ 107.555911][ T7292] dump_stack_lvl+0x95/0xd0 [ 107.555942][ T7292] dump_stack+0x15/0x1b [ 107.555972][ T7292] should_fail_ex+0x265/0x280 [ 107.556004][ T7292] should_failslab+0x8c/0xb0 [ 107.556088][ T7292] kmem_cache_alloc_noprof+0x69/0x4b0 [ 107.556112][ T7292] ? fcntl_setlk+0x53/0x950 [ 107.556145][ T7292] fcntl_setlk+0x53/0x950 [ 107.556177][ T7292] ? avc_has_perm+0xf7/0x180 [ 107.556216][ T7292] ? should_fail_ex+0xdb/0x280 [ 107.556251][ T7292] do_fcntl+0x6a1/0xf60 [ 107.556295][ T7292] __se_sys_fcntl+0xb1/0x120 [ 107.556336][ T7292] __x64_sys_fcntl+0x43/0x50 [ 107.556377][ T7292] x64_sys_call+0x2d6f/0x3000 [ 107.556461][ T7292] do_syscall_64+0xca/0x2b0 [ 107.556507][ T7292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.556612][ T7292] RIP: 0033:0x7fb6dac7f749 [ 107.556629][ T7292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.556681][ T7292] RSP: 002b:00007fb6d96e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 107.556707][ T7292] RAX: ffffffffffffffda RBX: 00007fb6daed5fa0 RCX: 00007fb6dac7f749 [ 107.556725][ T7292] RDX: 0000200000000000 RSI: 0000000000000026 RDI: 0000000000000006 [ 107.556753][ T7292] RBP: 00007fb6d96e7090 R08: 0000000000000000 R09: 0000000000000000 [ 107.556772][ T7292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.556789][ T7292] R13: 00007fb6daed6038 R14: 00007fb6daed5fa0 R15: 00007ffddf8132e8 [ 107.556818][ T7292] [ 107.747242][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 107.755075][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 107.762855][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 107.770735][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 107.778172][ T3423] rtc rtc0: __rtc_set_alarm: err=-22 [ 107.794910][ T3423] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 107.811986][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1168'. [ 107.835845][ T7298] netlink: 'syz.3.1167': attribute type 1 has an invalid length. [ 107.843669][ T7298] netlink: 'syz.3.1167': attribute type 2 has an invalid length. [ 107.880191][ T7302] pimreg: entered allmulticast mode [ 107.898932][ T7302] pimreg: left allmulticast mode [ 108.853420][ T7377] loop0: detected capacity change from 0 to 512 [ 108.861904][ T7377] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 108.876560][ T7377] EXT4-fs (loop0): 1 truncate cleaned up [ 108.889788][ T7377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.969570][ T7383] FAULT_INJECTION: forcing a failure. [ 108.969570][ T7383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.982703][ T7383] CPU: 0 UID: 0 PID: 7383 Comm: syz.3.1192 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 108.982764][ T7383] Tainted: [W]=WARN [ 108.982838][ T7383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.982857][ T7383] Call Trace: [ 108.982867][ T7383] [ 108.982878][ T7383] __dump_stack+0x1d/0x30 [ 108.982913][ T7383] dump_stack_lvl+0x95/0xd0 [ 108.982942][ T7383] dump_stack+0x15/0x1b [ 108.982986][ T7383] should_fail_ex+0x265/0x280 [ 108.983016][ T7383] should_fail+0xb/0x20 [ 108.983044][ T7383] should_fail_usercopy+0x1a/0x20 [ 108.983229][ T7383] _copy_to_user+0x20/0xa0 [ 108.983260][ T7383] bpf_verifier_vlog+0x36e/0x5b0 [ 108.983331][ T7383] btf_verifier_log+0xad/0xe0 [ 108.983425][ T7383] ? btf_func_proto_log+0x37/0x4b0 [ 108.983469][ T7383] ? __btf_verifier_log+0x7f/0xb0 [ 108.983530][ T7383] btf_func_proto_log+0x4a/0x4b0 [ 108.983579][ T7383] __btf_verifier_log_type+0x26c/0x330 [ 108.983621][ T7383] btf_func_proto_check_meta+0xc6/0xf0 [ 108.983668][ T7383] btf_parse_type_sec+0x2a4/0x1570 [ 108.983700][ T7383] ? btf_check_sec_info+0x1cc/0x1f0 [ 108.983731][ T7383] ? btf_parse_hdr+0x39e/0x3b0 [ 108.983759][ T7383] btf_new_fd+0x2b9/0x790 [ 108.983794][ T7383] bpf_btf_load+0x112/0x130 [ 108.983894][ T7383] __sys_bpf+0x357/0x7c0 [ 108.983971][ T7383] __x64_sys_bpf+0x41/0x50 [ 108.984093][ T7383] x64_sys_call+0x28e1/0x3000 [ 108.984126][ T7383] do_syscall_64+0xca/0x2b0 [ 108.984189][ T7383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.984286][ T7383] RIP: 0033:0x7fa58179f749 [ 108.984302][ T7383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.984321][ T7383] RSP: 002b:00007fa5801ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 108.984381][ T7383] RAX: ffffffffffffffda RBX: 00007fa5819f5fa0 RCX: 00007fa58179f749 [ 108.984399][ T7383] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 108.984417][ T7383] RBP: 00007fa5801ff090 R08: 0000000000000000 R09: 0000000000000000 [ 108.984484][ T7383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.984502][ T7383] R13: 00007fa5819f6038 R14: 00007fa5819f5fa0 R15: 00007ffed0794ca8 [ 108.984529][ T7383] [ 109.244095][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.259744][ T7389] __nla_validate_parse: 4 callbacks suppressed [ 109.259837][ T7389] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1195'. [ 109.291605][ T3423] kernel write not supported for file bpf-prog (pid: 3423 comm: kworker/0:5) [ 109.328151][ T7396] netlink: 'syz.0.1196': attribute type 10 has an invalid length. [ 109.337095][ T7396] ipvlan0: entered allmulticast mode [ 109.342478][ T7396] veth0_vlan: entered allmulticast mode [ 109.349269][ T7396] team0: Device ipvlan0 failed to register rx_handler [ 109.835959][ T7398] Set syz1 is full, maxelem 65536 reached [ 109.857332][ T7414] loop0: detected capacity change from 0 to 512 [ 109.884994][ T7414] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.896736][ T7414] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 109.905125][ T7414] System zones: 1-12 [ 109.910628][ T7414] EXT4-fs (loop0): 1 truncate cleaned up [ 109.927093][ T7414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.025566][ T7418] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1203'. [ 110.223043][ T7431] loop3: detected capacity change from 0 to 512 [ 110.235767][ T7428] rtc_cmos 00:00: Alarms can be up to one day in the future [ 110.250231][ T7431] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.299356][ T7431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.350494][ T7431] ext4 filesystem being mounted at /252/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.432913][ T7438] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1209'. [ 110.476243][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.838261][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 110.846272][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 110.854077][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 110.862206][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 110.869602][ T3389] rtc rtc0: __rtc_set_alarm: err=-22 [ 110.879690][ T7442] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1211'. [ 110.898509][ T7414] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.931311][ T29] kauditd_printk_skb: 403 callbacks suppressed [ 110.931332][ T29] audit: type=1326 audit(1766935907.288:8867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58179f749 code=0x7ffc0000 [ 110.977492][ T29] audit: type=1326 audit(1766935907.328:8868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58179f749 code=0x7ffc0000 [ 111.001729][ T29] audit: type=1326 audit(1766935907.338:8869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58179f749 code=0x7ffc0000 [ 111.025906][ T29] audit: type=1326 audit(1766935907.338:8870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58179f749 code=0x7ffc0000 [ 111.049368][ T29] audit: type=1326 audit(1766935907.338:8871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa58179f749 code=0x7ffc0000 [ 111.073457][ T29] audit: type=1326 audit(1766935907.338:8872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58179f749 code=0x7ffc0000 [ 111.097778][ T29] audit: type=1326 audit(1766935907.338:8873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58179f749 code=0x7ffc0000 [ 111.123162][ T29] audit: type=1326 audit(1766935907.338:8874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58179f749 code=0x7ffc0000 [ 111.147508][ T29] audit: type=1326 audit(1766935907.338:8875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7443 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58179f749 code=0x7ffc0000 [ 111.155272][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 111.171381][ T29] audit: type=1326 audit(1766935907.368:8876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.0.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ff9ef749 code=0x7ffc0000 [ 111.207084][ T7447] loop0: detected capacity change from 0 to 512 [ 111.230187][ T7447] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 111.241876][ T7447] EXT4-fs (loop0): invalid journal inode [ 111.247642][ T7447] EXT4-fs (loop0): can't get journal size [ 111.254326][ T7447] EXT4-fs (loop0): 1 truncate cleaned up [ 111.267300][ T7447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.361719][ T7466] loop3: detected capacity change from 0 to 1024 [ 111.455132][ T7480] netlink: 'syz.6.1220': attribute type 10 has an invalid length. [ 111.463821][ T7466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.507142][ T7473] lo speed is unknown, defaulting to 1000 [ 111.530171][ T7484] loop1: detected capacity change from 0 to 4096 [ 111.550986][ T7484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.550986][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.727940][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.801090][ T7498] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1226'. [ 111.841447][ T7498] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1226'. [ 111.892010][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.911957][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1228'. [ 111.931604][ T7499] loop1: detected capacity change from 0 to 512 [ 111.968614][ T7502] 9p: Bad value for 'source' [ 112.008156][ T7499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.076046][ T7508] lo speed is unknown, defaulting to 1000 [ 112.112865][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.152389][ T7510] tipc: Enabling of bearer rejected, already enabled [ 112.278837][ T7518] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 112.309916][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1235'. [ 112.398691][ T7531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1237'. [ 112.583764][ T7542] loop0: detected capacity change from 0 to 512 [ 112.593786][ T7542] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 112.613763][ T7542] EXT4-fs (loop0): 1 orphan inode deleted [ 112.619731][ T7542] EXT4-fs (loop0): 1 truncate cleaned up [ 112.628807][ T7542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.727934][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.744030][ T7551] loop5: detected capacity change from 0 to 2048 [ 112.751328][ T7551] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.777068][ T7551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.849941][ T7551] tipc: Enabling of bearer rejected, already enabled [ 112.876614][ T4441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.903658][ T7557] loop0: detected capacity change from 0 to 512 [ 112.920632][ T7557] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 112.979939][ T7557] EXT4-fs (loop0): mount failed [ 113.057907][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1249'. [ 113.068666][ T7564] lo speed is unknown, defaulting to 1000 [ 113.079567][ T7569] netlink: 'syz.1.1249': attribute type 1 has an invalid length. [ 113.237084][ T3308] udevd[3308]: failed to send result of seq 11516 to main daemon: Connection refused [ 113.306472][ T7584] loop0: detected capacity change from 0 to 128 [ 113.324615][ T7584] syz.0.1255: attempt to access beyond end of device [ 113.324615][ T7584] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 113.343481][ T7584] syz.0.1255: attempt to access beyond end of device [ 113.343481][ T7584] loop0: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 113.357311][ T7584] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 113.367604][ T7584] syz.0.1255: attempt to access beyond end of device [ 113.367604][ T7584] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 113.381560][ T7584] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 113.391449][ T7584] syz.0.1255: attempt to access beyond end of device [ 113.391449][ T7584] loop0: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 113.410745][ T7582] loop1: detected capacity change from 0 to 512 [ 113.435649][ T7582] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 113.439165][ T7584] syz.0.1255: attempt to access beyond end of device [ 113.439165][ T7584] loop0: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 113.459365][ T7584] Buffer I/O error on dev loop0, logical block 83, lost async page write [ 113.469931][ T7582] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 113.479037][ T7582] System zones: 1-12 [ 113.489742][ T7582] EXT4-fs (loop1): 1 truncate cleaned up [ 113.496698][ T7582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.526933][ T7584] syz.0.1255: attempt to access beyond end of device [ 113.526933][ T7584] loop0: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 113.540746][ T7584] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 113.549861][ T7584] syz.0.1255: attempt to access beyond end of device [ 113.549861][ T7584] loop0: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 113.563796][ T7584] syz.0.1255: attempt to access beyond end of device [ 113.563796][ T7584] loop0: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 113.577667][ T7584] Buffer I/O error on dev loop0, logical block 95, lost async page write [ 113.586719][ T7584] syz.0.1255: attempt to access beyond end of device [ 113.586719][ T7584] loop0: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 113.600525][ T7584] Buffer I/O error on dev loop0, logical block 96, lost async page write [ 113.609335][ T7584] syz.0.1255: attempt to access beyond end of device [ 113.609335][ T7584] loop0: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 113.623154][ T7584] Buffer I/O error on dev loop0, logical block 99, lost async page write [ 113.631718][ T7584] Buffer I/O error on dev loop0, logical block 100, lost async page write [ 113.644022][ T7582] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.654557][ T7584] Buffer I/O error on dev loop0, logical block 111, lost async page write [ 113.663273][ T7584] Buffer I/O error on dev loop0, logical block 112, lost async page write [ 113.768555][ T7597] loop5: detected capacity change from 0 to 512 [ 113.781024][ T7597] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 113.792832][ T7597] EXT4-fs (loop5): 1 truncate cleaned up [ 113.800192][ T7597] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.825800][ T4441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.903792][ T7603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.917551][ T7603] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.996378][ T7603] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.003703][ T7603] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.095139][ T7603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.106857][ T7603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.212139][ T7190] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.227432][ T7190] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.249927][ T7190] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.265166][ T4441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.313622][ T7190] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.382252][ T7628] __nla_validate_parse: 5 callbacks suppressed [ 114.382275][ T7628] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1269'. [ 115.064174][ T7654] pimreg: entered allmulticast mode [ 115.079466][ T7654] pimreg: left allmulticast mode [ 115.134560][ T7657] rtc_cmos 00:00: Alarms can be up to one day in the future [ 115.405370][ T7662] bpf: Bad value for 'gid' [ 115.589404][ T7666] wireguard0: entered promiscuous mode [ 115.595132][ T7666] wireguard0: entered allmulticast mode [ 115.607959][ T3604] rtc_cmos 00:00: Alarms can be up to one day in the future [ 115.615861][ T3604] rtc_cmos 00:00: Alarms can be up to one day in the future [ 115.623633][ T3604] rtc_cmos 00:00: Alarms can be up to one day in the future [ 115.631916][ T3604] rtc_cmos 00:00: Alarms can be up to one day in the future [ 115.639276][ T3604] rtc rtc0: __rtc_set_alarm: err=-22 [ 115.664706][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1282'. [ 115.675332][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1282'. [ 115.756110][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1287'. [ 115.787950][ T7688] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1289'. [ 115.861043][ T7694] pimreg: entered allmulticast mode [ 115.863025][ T7696] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1293'. [ 115.879459][ T7694] pimreg: left allmulticast mode [ 115.935835][ T7703] rtc_cmos 00:00: Alarms can be up to one day in the future [ 116.373483][ T7719] lo speed is unknown, defaulting to 1000 [ 116.747452][ T3604] rtc_cmos 00:00: Alarms can be up to one day in the future [ 116.755244][ T3604] rtc_cmos 00:00: Alarms can be up to one day in the future [ 116.763035][ T3604] rtc_cmos 00:00: Alarms can be up to one day in the future [ 116.770934][ T3604] rtc_cmos 00:00: Alarms can be up to one day in the future [ 116.778361][ T3604] rtc rtc0: __rtc_set_alarm: err=-22 [ 116.943157][ T7727] set_capacity_and_notify: 2 callbacks suppressed [ 116.943178][ T7727] loop1: detected capacity change from 0 to 2048 [ 116.957369][ T7727] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.999610][ T7710] loop5: detected capacity change from 0 to 8192 [ 117.036113][ T7733] netlink: 'syz.6.1302': attribute type 1 has an invalid length. [ 117.043901][ T7733] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1302'. [ 117.057098][ T7727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.098971][ T7727] tipc: Enabling of bearer rejected, already enabled [ 117.129466][ T7736] loop0: detected capacity change from 0 to 512 [ 117.139587][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.175601][ T7736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.188834][ T7741] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1307'. [ 117.238580][ T7748] pimreg: entered allmulticast mode [ 117.256185][ T7750] netlink: 'syz.6.1304': attribute type 4 has an invalid length. [ 117.273390][ T7736] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.287126][ T7748] pimreg: left allmulticast mode [ 117.298162][ T7736] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 117.323443][ T7749] loop1: detected capacity change from 0 to 512 [ 117.338382][ T7749] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 117.349961][ T7752] rtc_cmos 00:00: Alarms can be up to one day in the future [ 117.359510][ T7749] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 117.367577][ T7749] System zones: 1-12 [ 117.372483][ T7749] EXT4-fs (loop1): 1 truncate cleaned up [ 117.379928][ T7749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.410626][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.448528][ T29] kauditd_printk_skb: 627 callbacks suppressed [ 117.448549][ T29] audit: type=1326 audit(1766935913.808:9503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ff9ef749 code=0x7ffc0000 [ 117.491815][ T29] audit: type=1326 audit(1766935913.808:9504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ff9ef749 code=0x7ffc0000 [ 117.496752][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.517225][ T29] audit: type=1326 audit(1766935913.808:9505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f87ff9ef749 code=0x7ffc0000 [ 117.548731][ T29] audit: type=1326 audit(1766935913.808:9506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ff9ef749 code=0x7ffc0000 [ 117.572261][ T29] audit: type=1326 audit(1766935913.808:9507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ff9ef749 code=0x7ffc0000 [ 117.595827][ T29] audit: type=1326 audit(1766935913.808:9508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87ff9ef749 code=0x7ffc0000 [ 117.607880][ T3604] rtc_cmos 00:00: Alarms can be up to one day in the future [ 117.621303][ T29] audit: type=1326 audit(1766935913.808:9509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ff9ef749 code=0x7ffc0000 [ 117.627165][ T3604] rtc_cmos 00:00: Alarms can be up to one day in the future [ 117.652159][ T29] audit: type=1326 audit(1766935913.808:9510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87ff9ef749 code=0x7ffc0000 [ 117.658129][ T3604] rtc_cmos 00:00: Alarms can be up to one day in the future [ 117.682891][ T29] audit: type=1326 audit(1766935913.808:9511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ff9ef749 code=0x7ffc0000 [ 117.688965][ T3604] rtc_cmos 00:00: Alarms can be up to one day in the future [ 117.713691][ T29] audit: type=1326 audit(1766935913.808:9512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.0.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87ff9ef749 code=0x7ffc0000 [ 117.719329][ T3604] rtc rtc0: __rtc_set_alarm: err=-22 [ 117.750832][ T7760] netlink: 'syz.0.1310': attribute type 9 has an invalid length. [ 117.758699][ T7760] netlink: 'syz.0.1310': attribute type 7 has an invalid length. [ 117.766520][ T7760] netlink: 'syz.0.1310': attribute type 8 has an invalid length. [ 117.782031][ T7760] netlink: 660 bytes leftover after parsing attributes in process `syz.0.1310'. [ 117.796827][ T7760] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 117.826937][ T7763] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 117.883009][ T7772] lo speed is unknown, defaulting to 1000 [ 118.092092][ T7783] netlink: 'syz.3.1319': attribute type 39 has an invalid length. [ 118.378937][ T7791] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1322'. [ 118.400772][ T7789] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 118.455262][ T7802] FAULT_INJECTION: forcing a failure. [ 118.455262][ T7802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.468492][ T7802] CPU: 0 UID: 0 PID: 7802 Comm: syz.5.1326 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 118.468527][ T7802] Tainted: [W]=WARN [ 118.468534][ T7802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.468548][ T7802] Call Trace: [ 118.468555][ T7802] [ 118.468565][ T7802] __dump_stack+0x1d/0x30 [ 118.468592][ T7802] dump_stack_lvl+0x95/0xd0 [ 118.468679][ T7802] dump_stack+0x15/0x1b [ 118.468701][ T7802] should_fail_ex+0x265/0x280 [ 118.468728][ T7802] should_fail+0xb/0x20 [ 118.468749][ T7802] should_fail_usercopy+0x1a/0x20 [ 118.468781][ T7802] _copy_from_user+0x1c/0xb0 [ 118.468812][ T7802] ___sys_sendmsg+0xc1/0x1d0 [ 118.468843][ T7802] ? trace_event_buffer_commit+0x196/0x5c0 [ 118.469023][ T7802] __sys_sendmmsg+0x178/0x300 [ 118.469074][ T7802] __x64_sys_sendmmsg+0x57/0x70 [ 118.469210][ T7802] x64_sys_call+0x1e28/0x3000 [ 118.469246][ T7802] do_syscall_64+0xca/0x2b0 [ 118.469287][ T7802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.469390][ T7802] RIP: 0033:0x7f326dc7f749 [ 118.469407][ T7802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.469480][ T7802] RSP: 002b:00007f326c6e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 118.469577][ T7802] RAX: ffffffffffffffda RBX: 00007f326ded5fa0 RCX: 00007f326dc7f749 [ 118.469591][ T7802] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 118.469605][ T7802] RBP: 00007f326c6e7090 R08: 0000000000000000 R09: 0000000000000000 [ 118.469618][ T7802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.469671][ T7802] R13: 00007f326ded6038 R14: 00007f326ded5fa0 R15: 00007fff50645638 [ 118.469695][ T7802] [ 118.703505][ T7814] IPVS: Error connecting to the multicast addr [ 119.081504][ T7830] loop3: detected capacity change from 0 to 2048 [ 119.125322][ T7830] loop3: p1 < > p4 [ 119.136672][ T7830] loop3: p4 size 8388608 extends beyond EOD, truncated [ 119.209937][ T7835] bridge_slave_0: left allmulticast mode [ 119.215777][ T7835] bridge_slave_0: left promiscuous mode [ 119.221533][ T7835] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.232359][ T7833] loop5: detected capacity change from 0 to 1024 [ 119.239676][ T7835] bridge_slave_1: left allmulticast mode [ 119.246252][ T7835] bridge_slave_1: left promiscuous mode [ 119.251996][ T7835] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.262517][ T7835] bond0: (slave bond_slave_0): Releasing backup interface [ 119.271250][ T7833] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.316127][ T7835] bond0: (slave bond_slave_1): Releasing backup interface [ 119.325267][ T7835] team0: Port device team_slave_0 removed [ 119.332146][ T7835] team0: Port device team_slave_1 removed [ 119.338530][ T7835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.358765][ T7835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.376201][ T7835] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 119.434356][ T4441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.707976][ T7847] tipc: Enabled bearer , priority 0 [ 119.716877][ T7846] tipc: Enabling of bearer rejected, already enabled [ 119.759598][ T7855] rtc_cmos 00:00: Alarms can be up to one day in the future [ 119.803933][ T7857] __nla_validate_parse: 1 callbacks suppressed [ 119.803953][ T7857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1344'. [ 119.838462][ T7859] netlink: 'syz.5.1345': attribute type 3 has an invalid length. [ 119.931500][ T7874] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 120.115112][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 120.130539][ T7885] netlink: 'syz.6.1355': attribute type 3 has an invalid length. [ 120.142740][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1353'. [ 120.214382][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1356'. [ 120.233604][ T7889] tipc: Enabling of bearer rejected, already enabled [ 120.266157][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1358'. [ 120.291596][ T7892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.299825][ T7892] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.309846][ T7892] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.336029][ T7898] loop0: detected capacity change from 0 to 256 [ 120.344142][ T7898] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.361569][ T7898] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.607557][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 120.615421][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 120.623159][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 120.630997][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 120.638340][ T3389] rtc rtc0: __rtc_set_alarm: err=-22 [ 120.678012][ T7919] loop3: detected capacity change from 0 to 512 [ 120.694180][ T7919] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.746185][ T7919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.773167][ T7926] pimreg: entered allmulticast mode [ 120.780091][ T7925] pimreg: left allmulticast mode [ 120.786054][ T7919] ext4 filesystem being mounted at /281/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.927607][ T7930] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #18: comm syz.3.1366: corrupted inode contents [ 120.961685][ T7930] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #18: comm syz.3.1366: mark_inode_dirty error [ 120.982347][ T7930] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #18: comm syz.3.1366: corrupted inode contents [ 121.010075][ T7930] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #18: comm syz.3.1366: mark_inode_dirty error [ 121.036717][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1370'. [ 121.050308][ T7933] pimreg: entered allmulticast mode [ 121.059554][ T7933] pimreg: left allmulticast mode [ 121.071523][ T7930] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #18: comm syz.3.1366: mark inode dirty (error -117) [ 121.090933][ T7930] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 121.152090][ T3320] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 121.159776][ T3320] FAT-fs (loop0): Filesystem has been set read-only [ 121.180145][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.198089][ T3320] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 121.211490][ T7938] tipc: Enabling of bearer rejected, already enabled [ 121.225552][ T7941] FAULT_INJECTION: forcing a failure. [ 121.225552][ T7941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.238833][ T7941] CPU: 0 UID: 0 PID: 7941 Comm: syz.3.1373 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 121.238870][ T7941] Tainted: [W]=WARN [ 121.238879][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.238941][ T7941] Call Trace: [ 121.238947][ T7941] [ 121.238955][ T7941] __dump_stack+0x1d/0x30 [ 121.238982][ T7941] dump_stack_lvl+0x95/0xd0 [ 121.239004][ T7941] dump_stack+0x15/0x1b [ 121.239036][ T7941] should_fail_ex+0x265/0x280 [ 121.239068][ T7941] should_fail+0xb/0x20 [ 121.239104][ T7941] should_fail_usercopy+0x1a/0x20 [ 121.239129][ T7941] _copy_from_user+0x1c/0xb0 [ 121.239237][ T7941] __sys_bpf+0x183/0x7c0 [ 121.239276][ T7941] __x64_sys_bpf+0x41/0x50 [ 121.239316][ T7941] x64_sys_call+0x28e1/0x3000 [ 121.239342][ T7941] do_syscall_64+0xca/0x2b0 [ 121.239457][ T7941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.239487][ T7941] RIP: 0033:0x7fa58179f749 [ 121.239507][ T7941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.239542][ T7941] RSP: 002b:00007fa5801ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.239565][ T7941] RAX: ffffffffffffffda RBX: 00007fa5819f5fa0 RCX: 00007fa58179f749 [ 121.239583][ T7941] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000022 [ 121.239600][ T7941] RBP: 00007fa5801ff090 R08: 0000000000000000 R09: 0000000000000000 [ 121.239618][ T7941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.239634][ T7941] R13: 00007fa5819f6038 R14: 00007fa5819f5fa0 R15: 00007ffed0794ca8 [ 121.239660][ T7941] [ 121.240594][ T7938] syzkaller0: entered promiscuous mode [ 121.414280][ T7938] syzkaller0: entered allmulticast mode [ 121.500033][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1379'. [ 121.612708][ T7968] tipc: Enabling of bearer rejected, already enabled [ 121.820931][ T7185] batadv1: left allmulticast mode [ 121.826202][ T7185] batadv1: left promiscuous mode [ 121.831447][ T7185] bridge0: port 3(batadv1) entered disabled state [ 121.864038][ T7185] bridge_slave_1: left allmulticast mode [ 121.870458][ T7185] bridge_slave_1: left promiscuous mode [ 121.877019][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.897828][ T7185] bridge_slave_0: left allmulticast mode [ 121.903653][ T7185] bridge_slave_0: left promiscuous mode [ 121.910354][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.007755][ T7980] rtc_cmos 00:00: Alarms can be up to one day in the future [ 122.020265][ T7185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.039460][ T7185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.050866][ T7185] bond0 (unregistering): Released all slaves [ 122.067941][ T7185] bond1 (unregistering): Released all slaves [ 122.095542][ T7977] pimreg: entered allmulticast mode [ 122.121485][ T7978] pimreg: left allmulticast mode [ 122.151720][ T7185] tipc: Disabling bearer [ 122.156831][ T7185] tipc: Left network mode [ 122.299091][ T7185] pimreg (unregistering): left allmulticast mode [ 122.387299][ T7185] team0 (unregistering): Port device team_slave_1 removed [ 122.407254][ T7185] team0 (unregistering): Port device team_slave_0 removed [ 122.538475][ T29] kauditd_printk_skb: 665 callbacks suppressed [ 122.538493][ T29] audit: type=1326 audit(1766935918.898:10178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8002 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0315f749 code=0x7ffc0000 [ 122.577120][ T8003] rtc_cmos 00:00: Alarms can be up to one day in the future [ 122.585110][ T7981] lo speed is unknown, defaulting to 1000 [ 122.602147][ T29] audit: type=1326 audit(1766935918.928:10179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8002 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0315f749 code=0x7ffc0000 [ 122.607464][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 122.627665][ T29] audit: type=1326 audit(1766935918.928:10180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8002 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec0315f749 code=0x7ffc0000 [ 122.633507][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 122.658356][ T29] audit: type=1326 audit(1766935918.928:10181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8002 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0315f749 code=0x7ffc0000 [ 122.664581][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 122.689376][ T29] audit: type=1326 audit(1766935918.928:10182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8002 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0315f749 code=0x7ffc0000 [ 122.695421][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 122.720172][ T29] audit: type=1326 audit(1766935918.928:10183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8002 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fec0315f749 code=0x7ffc0000 [ 122.725906][ T3389] rtc rtc0: __rtc_set_alarm: err=-22 [ 122.778282][ T29] audit: type=1326 audit(1766935918.958:10184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8002 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0315f749 code=0x7ffc0000 [ 122.802186][ T29] audit: type=1326 audit(1766935919.118:10185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8002 comm="syz.6.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec0315f749 code=0x7ffc0000 [ 122.879769][ T8007] loop1: detected capacity change from 0 to 2048 [ 122.929854][ T8007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.942659][ T8007] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.950782][ T7981] chnl_net:caif_netlink_parms(): no params data found [ 122.983220][ T7185] IPVS: stop unused estimator thread 0... [ 122.999679][ T8022] pimreg: entered allmulticast mode [ 123.046355][ T7981] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.053493][ T7981] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.092557][ T29] audit: type=1400 audit(1766935919.448:10186): avc: denied { setopt } for pid=8033 comm="syz.3.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.105639][ T7981] bridge_slave_0: entered allmulticast mode [ 123.126812][ T7981] bridge_slave_0: entered promiscuous mode [ 123.134234][ T7981] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.141442][ T7981] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.162948][ T7981] bridge_slave_1: entered allmulticast mode [ 123.170567][ T7981] bridge_slave_1: entered promiscuous mode [ 123.191526][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.258572][ T8035] loop3: detected capacity change from 0 to 512 [ 123.282505][ T8035] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 123.294681][ T7981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.313027][ T7981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.337789][ T8041] rtc_cmos 00:00: Alarms can be up to one day in the future [ 123.355665][ T8035] EXT4-fs (loop3): orphan cleanup on readonly fs [ 123.371786][ T29] audit: type=1326 audit(1766935919.728:10187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8043 comm="syz.5.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326dc7f749 code=0x7ffc0000 [ 123.419888][ T7981] team0: Port device team_slave_0 added [ 123.436803][ T8035] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 123.458659][ T7981] team0: Port device team_slave_1 added [ 123.487486][ T8035] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 123.508737][ T8035] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #13: comm syz.3.1404: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 123.527923][ T8035] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1404: couldn't read orphan inode 13 (err -117) [ 123.540719][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1409'. [ 123.552652][ T7981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.559885][ T7981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.585886][ T7981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.597607][ T8035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.611342][ T3604] rtc_cmos 00:00: Alarms can be up to one day in the future [ 123.619298][ T3604] rtc_cmos 00:00: Alarms can be up to one day in the future [ 123.627138][ T3604] rtc_cmos 00:00: Alarms can be up to one day in the future [ 123.634989][ T3604] rtc_cmos 00:00: Alarms can be up to one day in the future [ 123.642355][ T3604] rtc rtc0: __rtc_set_alarm: err=-22 [ 123.649305][ T7981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.656348][ T7981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.682355][ T7981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.712863][ T8034] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.724059][ T7981] hsr_slave_0: entered promiscuous mode [ 123.730285][ T8034] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 123.730817][ T7981] hsr_slave_1: entered promiscuous mode [ 123.750727][ T8034] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2856c09c, mo2=0002] [ 123.753509][ T8057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1412'. [ 123.795294][ T7981] debugfs: 'hsr0' already exists in 'hsr' [ 123.800996][ T8034] System zones: [ 123.801081][ T7981] Cannot create hsr debugfs directory [ 123.801080][ T8034] 0-2, 18-18, 34-34 [ 123.816493][ T8034] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 123.904051][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.017985][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1415'. [ 124.045783][ T8065] loop3: detected capacity change from 0 to 2048 [ 124.048807][ T7981] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 124.068145][ T7981] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 124.081323][ T7981] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 124.090618][ T8065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.105463][ T8065] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.125494][ T7981] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 124.175678][ T8079] 9p: Bad value for 'wfdno' [ 124.212243][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.236867][ T7981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.276919][ T7981] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.300896][ T8085] can0: slcan on ptm0. [ 124.320663][ T7185] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.327797][ T7185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.405133][ T8085] can0 (unregistered): slcan off ptm0. [ 124.422833][ T7185] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.429999][ T7185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.486922][ T8096] tipc: Enabling of bearer rejected, already enabled [ 124.565768][ T8110] pimreg: entered allmulticast mode [ 124.576311][ T8110] pimreg: left allmulticast mode [ 124.596737][ T7981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.629870][ T8110] rtc_cmos 00:00: Alarms can be up to one day in the future [ 124.872317][ T8136] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1435'. [ 124.960294][ T7981] veth0_vlan: entered promiscuous mode [ 124.977655][ T7981] veth1_vlan: entered promiscuous mode [ 124.990173][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1437'. [ 124.999301][ T7981] veth0_macvtap: entered promiscuous mode [ 125.003130][ T7981] veth1_macvtap: entered promiscuous mode [ 125.031657][ T8143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.058051][ T7981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.073992][ T7981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.095551][ T7183] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.129315][ T7183] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.133447][ T8147] loop5: detected capacity change from 0 to 1024 [ 125.153827][ T7183] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.166282][ T8150] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:2 [ 125.180035][ T7183] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.185176][ T8150] IPv6: NLM_F_CREATE should be specified when creating new route [ 125.199113][ T8147] EXT4-fs: Ignoring removed oldalloc option [ 125.205821][ T8147] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.224297][ T8150] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1439'. [ 125.248527][ T8147] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 125.257450][ T8147] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 125.422189][ T8168] rtc_cmos 00:00: Alarms can be up to one day in the future [ 125.569243][ T8171] pimreg: entered allmulticast mode [ 125.589350][ T8171] pimreg: left allmulticast mode [ 125.607219][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 125.615020][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 125.622744][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 125.630676][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 125.638180][ T3389] rtc rtc0: __rtc_set_alarm: err=-22 [ 125.648190][ T8173] rtc_cmos 00:00: Alarms can be up to one day in the future [ 125.733081][ T8175] tipc: Enabling of bearer rejected, failed to enable media [ 125.742664][ T8176] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 125.806604][ T8179] loop7: detected capacity change from 0 to 512 [ 125.815903][ T8179] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.838774][ T8179] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.860271][ T8179] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.915008][ T4441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.962775][ T8189] loop5: detected capacity change from 0 to 2048 [ 125.969826][ T8189] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.982276][ T7981] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.995049][ T8189] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.014450][ T8189] tipc: Enabling of bearer rejected, already enabled [ 126.040786][ T4441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.063980][ T8198] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1452'. [ 126.236792][ T8212] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1455'. [ 126.252969][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'. [ 126.295478][ T8212] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1455'. [ 126.304651][ T8212] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1455'. [ 126.333424][ T8212] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1455'. [ 126.381353][ T8215] rtc_cmos 00:00: Alarms can be up to one day in the future [ 126.607048][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 126.614931][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 126.622683][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 126.630905][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 126.638255][ T3389] rtc rtc0: __rtc_set_alarm: err=-22 [ 126.941314][ T8228] pimreg: entered allmulticast mode [ 126.961557][ T8228] pimreg: left allmulticast mode [ 126.991812][ T8232] loop7: detected capacity change from 0 to 2048 [ 126.999142][ T8232] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.011515][ T8228] rtc_cmos 00:00: Alarms can be up to one day in the future [ 127.028505][ T8232] tipc: Started in network mode [ 127.033474][ T8232] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 127.042644][ T8232] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 127.051335][ T8232] tipc: Enabled bearer , priority 10 [ 127.061371][ T8237] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1464'. [ 127.140127][ T8241] loop7: detected capacity change from 0 to 2048 [ 127.272251][ T7981] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 127.287962][ T7981] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 127.446193][ T8262] siw: device registration error -23 [ 127.519486][ T8265] loop7: detected capacity change from 0 to 2048 [ 127.537251][ T8265] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.601255][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 127.601276][ T29] audit: type=1400 audit(1766935923.958:10548): avc: denied { connect } for pid=8264 comm="syz.7.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.607214][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 127.618124][ T29] audit: type=1400 audit(1766935923.978:10549): avc: denied { write } for pid=8264 comm="syz.7.1473" laddr=172.20.20.10 lport=33807 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.628223][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 127.666441][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 127.674208][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 127.681575][ T3423] rtc rtc0: __rtc_set_alarm: err=-22 [ 127.711889][ T7185] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:36: bg 0: block 345: padding at end of block bitmap is not set [ 127.727962][ T7185] EXT4-fs (loop7): Remounting filesystem read-only [ 127.787652][ T8272] pimreg: entered allmulticast mode [ 127.800237][ T8272] pimreg: left allmulticast mode [ 127.854272][ T8273] rtc_cmos 00:00: Alarms can be up to one day in the future [ 127.928510][ T8277] blktrace: Concurrent blktraces are not allowed on loop10 [ 127.987933][ T29] audit: type=1400 audit(1766935924.348:10550): avc: denied { read } for pid=8274 comm="syz.7.1475" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 128.061091][ T3423] tipc: Node number set to 1 [ 128.124143][ T29] audit: type=1326 audit(1766935924.478:10551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.5.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326dc7f749 code=0x7ffc0000 [ 128.163241][ T29] audit: type=1326 audit(1766935924.508:10552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.5.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f326dc7f749 code=0x7ffc0000 [ 128.187594][ T29] audit: type=1326 audit(1766935924.508:10553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.5.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326dc7f749 code=0x7ffc0000 [ 128.211559][ T29] audit: type=1326 audit(1766935924.508:10554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.5.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326dc7f749 code=0x7ffc0000 [ 128.235903][ T29] audit: type=1326 audit(1766935924.508:10555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.5.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f326dc7f749 code=0x7ffc0000 [ 128.259437][ T29] audit: type=1326 audit(1766935924.508:10556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.5.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326dc7f749 code=0x7ffc0000 [ 128.273253][ T8290] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 128.284954][ T29] audit: type=1326 audit(1766935924.508:10557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.5.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326dc7f749 code=0x7ffc0000 [ 128.606900][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 128.614679][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 128.622643][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 128.630424][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 128.637762][ T3423] rtc rtc0: __rtc_set_alarm: err=-22 [ 128.756922][ T8306] ipt_ECN: cannot use operation on non-tcp rule [ 128.927669][ T8308] loop1: detected capacity change from 0 to 512 [ 128.962565][ T8308] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.1485: EA inode hash validation failed [ 129.013500][ T8308] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.1485: corrupted inode contents [ 129.031165][ T8308] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.1485: mark_inode_dirty error [ 129.044346][ T8308] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.1485: corrupted inode contents [ 129.057418][ T8308] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.1485: mark_inode_dirty error [ 129.070812][ T8308] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.1485: mark inode dirty (error -117) [ 129.084312][ T8308] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 129.094701][ T8308] EXT4-fs (loop1): 1 orphan inode deleted [ 129.311435][ T8329] loop5: detected capacity change from 0 to 256 [ 129.329089][ T8329] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.356102][ T8329] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.468660][ T8335] loop1: detected capacity change from 0 to 512 [ 129.485688][ T8335] msdos: Unknown parameter 'nodo~s' [ 129.620986][ T8340] loop5: detected capacity change from 0 to 512 [ 129.628610][ T8340] EXT4-fs: Ignoring removed i_version option [ 129.634679][ T8340] EXT4-fs: Ignoring removed bh option [ 129.667177][ T8340] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.777937][ T8346] loop1: detected capacity change from 0 to 512 [ 129.806685][ T4441] EXT4-fs unmount: 9 callbacks suppressed [ 129.806704][ T4441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.842379][ T8346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.868463][ T8346] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.911094][ T8346] FAULT_INJECTION: forcing a failure. [ 129.911094][ T8346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.924276][ T8346] CPU: 0 UID: 0 PID: 8346 Comm: syz.1.1499 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 129.924332][ T8346] Tainted: [W]=WARN [ 129.924341][ T8346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.924358][ T8346] Call Trace: [ 129.924367][ T8346] [ 129.924410][ T8346] __dump_stack+0x1d/0x30 [ 129.924515][ T8346] dump_stack_lvl+0x95/0xd0 [ 129.924539][ T8346] dump_stack+0x15/0x1b [ 129.924610][ T8346] should_fail_ex+0x265/0x280 [ 129.924649][ T8346] should_fail+0xb/0x20 [ 129.924751][ T8346] should_fail_usercopy+0x1a/0x20 [ 129.924783][ T8346] strncpy_from_user+0x27/0x260 [ 129.924907][ T8346] path_setxattrat+0xeb/0x310 [ 129.924962][ T8346] __x64_sys_fsetxattr+0x6b/0x80 [ 129.925065][ T8346] x64_sys_call+0x23c4/0x3000 [ 129.925100][ T8346] do_syscall_64+0xca/0x2b0 [ 129.925262][ T8346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.925296][ T8346] RIP: 0033:0x7fb6dac7f749 [ 129.925387][ T8346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.925415][ T8346] RSP: 002b:00007fb6d96e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 129.925434][ T8346] RAX: ffffffffffffffda RBX: 00007fb6daed5fa0 RCX: 00007fb6dac7f749 [ 129.925447][ T8346] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000009 [ 129.925511][ T8346] RBP: 00007fb6d96e7090 R08: 0000000000000000 R09: 0000000000000000 [ 129.925527][ T8346] R10: 00000000000003c8 R11: 0000000000000246 R12: 0000000000000001 [ 129.925544][ T8346] R13: 00007fb6daed6038 R14: 00007fb6daed5fa0 R15: 00007ffddf8132e8 [ 129.925571][ T8346] [ 130.131488][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.162215][ T7186] Bluetooth: hci0: Frame reassembly failed (-84) [ 130.235312][ T8363] SELinux: Context Ü is not valid (left unmapped). [ 130.252885][ T8367] __nla_validate_parse: 6 callbacks suppressed [ 130.252905][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1506'. [ 130.343999][ T8371] loop5: detected capacity change from 0 to 512 [ 130.366213][ T8371] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 130.379792][ T8373] syzkaller1: entered promiscuous mode [ 130.379875][ T8353] loop7: detected capacity change from 0 to 32768 [ 130.385475][ T8373] syzkaller1: entered allmulticast mode [ 130.394549][ T8371] EXT4-fs (loop5): 1 truncate cleaned up [ 130.404377][ T8371] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.437934][ T4441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.491136][ T8376] loop5: detected capacity change from 0 to 1024 [ 130.585090][ T8376] journal_path: Non-blockdev passed as './file1' [ 130.591663][ T8376] EXT4-fs: error: could not find journal device path [ 130.683297][ T8380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8380 comm=syz.1.1510 [ 130.696981][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1510'. [ 130.709462][ T8380] hsr_slave_1 (unregistering): left promiscuous mode [ 130.906152][ T8389] loop1: detected capacity change from 0 to 128 [ 130.919389][ T8389] veth0: entered promiscuous mode [ 130.936937][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1513'. [ 130.973979][ T8389] veth0 (unregistering): left promiscuous mode [ 131.001357][ T8390] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 131.009315][ T8390] FAT-fs (loop1): Filesystem has been set read-only [ 131.025368][ T8390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1513'. [ 131.034433][ T8390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1513'. [ 131.043438][ T8390] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1513'. [ 131.222480][ T8399] FAULT_INJECTION: forcing a failure. [ 131.222480][ T8399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.236527][ T8399] CPU: 1 UID: 0 PID: 8399 Comm: syz.1.1516 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 131.236585][ T8399] Tainted: [W]=WARN [ 131.236594][ T8399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.236612][ T8399] Call Trace: [ 131.236620][ T8399] [ 131.236628][ T8399] __dump_stack+0x1d/0x30 [ 131.236654][ T8399] dump_stack_lvl+0x95/0xd0 [ 131.236676][ T8399] dump_stack+0x15/0x1b [ 131.236700][ T8399] should_fail_ex+0x265/0x280 [ 131.236785][ T8399] should_fail+0xb/0x20 [ 131.236887][ T8399] should_fail_usercopy+0x1a/0x20 [ 131.236922][ T8399] _copy_from_user+0x1c/0xb0 [ 131.236961][ T8399] addrconf_del_ifaddr+0x5d/0xe0 [ 131.237017][ T8399] inet6_ioctl+0x84/0x190 [ 131.237058][ T8399] ? ioctl_has_perm+0x255/0x2a0 [ 131.237103][ T8399] sock_do_ioctl+0x73/0x220 [ 131.237134][ T8399] sock_ioctl+0x41b/0x610 [ 131.237218][ T8399] ? __pfx_sock_ioctl+0x10/0x10 [ 131.237317][ T8399] __se_sys_ioctl+0xce/0x140 [ 131.237350][ T8399] __x64_sys_ioctl+0x43/0x50 [ 131.237426][ T8399] x64_sys_call+0x14b0/0x3000 [ 131.237463][ T8399] do_syscall_64+0xca/0x2b0 [ 131.237513][ T8399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.237689][ T8399] RIP: 0033:0x7fb6dac7f749 [ 131.237709][ T8399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.237746][ T8399] RSP: 002b:00007fb6d96e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.237773][ T8399] RAX: ffffffffffffffda RBX: 00007fb6daed5fa0 RCX: 00007fb6dac7f749 [ 131.237855][ T8399] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000004 [ 131.237873][ T8399] RBP: 00007fb6d96e7090 R08: 0000000000000000 R09: 0000000000000000 [ 131.237890][ T8399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.237907][ T8399] R13: 00007fb6daed6038 R14: 00007fb6daed5fa0 R15: 00007ffddf8132e8 [ 131.237954][ T8399] [ 131.647210][ T8404] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 131.704282][ T8404] vhci_hcd vhci_hcd.2: invalid port number 96 [ 131.710474][ T8404] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 131.812195][ T8406] loop5: detected capacity change from 0 to 8192 [ 131.909606][ T8418] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.933416][ T8418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.955458][ T8421] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1526'. [ 131.977965][ T8418] tipc: New replicast peer: 255.255.255.255 [ 131.984133][ T8418] tipc: Enabled bearer , priority 10 [ 132.003718][ T8418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.194831][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 132.201057][ T3639] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 132.354396][ T8435] tipc: Bearer : already 2 bearers with priority 10 [ 132.362791][ T8435] tipc: Bearer : trying with adjusted priority [ 132.385606][ T8435] tipc: New replicast peer: 255.255.255.255 [ 132.391785][ T8435] tipc: Enabled bearer , priority 9 [ 132.534050][ T8444] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.611134][ T8444] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.624370][ T8444] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.775708][ T8457] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #18: comm syz.7.1533: corrupted inode contents [ 132.790379][ T8457] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #18: comm syz.7.1533: mark_inode_dirty error [ 132.807647][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 132.807670][ T29] audit: type=1326 audit(1766935929.169:10810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8458 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58179f749 code=0x7ffc0000 [ 132.843903][ T8457] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #18: comm syz.7.1533: corrupted inode contents [ 132.856418][ T29] audit: type=1326 audit(1766935929.169:10811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8458 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58179f749 code=0x7ffc0000 [ 132.880810][ T29] audit: type=1326 audit(1766935929.199:10812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8458 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa58179f749 code=0x7ffc0000 [ 132.904423][ T29] audit: type=1326 audit(1766935929.199:10813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8458 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58179f749 code=0x7ffc0000 [ 132.928660][ T29] audit: type=1326 audit(1766935929.199:10814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8458 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58179f749 code=0x7ffc0000 [ 132.952199][ T29] audit: type=1326 audit(1766935929.199:10815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8458 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa58179f749 code=0x7ffc0000 [ 132.976621][ T29] audit: type=1326 audit(1766935929.199:10816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8458 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58179f749 code=0x7ffc0000 [ 133.000194][ T29] audit: type=1326 audit(1766935929.199:10817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8458 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58179f749 code=0x7ffc0000 [ 133.024479][ T29] audit: type=1326 audit(1766935929.199:10818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8458 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa58179f749 code=0x7ffc0000 [ 133.048803][ T29] audit: type=1326 audit(1766935929.199:10819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8458 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58179f749 code=0x7ffc0000 [ 133.072566][ T8457] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3000: inode #18: comm syz.7.1533: mark_inode_dirty error [ 133.087016][ T8457] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3003: inode #18: comm syz.7.1533: mark inode dirty (error -117) [ 133.100197][ T8457] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -117) [ 133.167459][ T7981] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.200408][ T8467] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 133.237679][ T8472] pimreg: entered allmulticast mode [ 133.243370][ T8474] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1541'. [ 133.252797][ T8472] pimreg: left allmulticast mode [ 133.273703][ T8476] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1542'. [ 133.282782][ T8476] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1542'. [ 133.312810][ T8477] rtc_cmos 00:00: Alarms can be up to one day in the future [ 133.403550][ T8495] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.432370][ T8495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.451515][ T8495] ext4 filesystem being mounted at /314/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.464223][ T8498] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.479736][ T8498] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.550122][ T8498] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.557531][ T8498] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.566843][ T8506] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #18: comm syz.1.1549: corrupted inode contents [ 133.601549][ T8506] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #18: comm syz.1.1549: mark_inode_dirty error [ 133.607131][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 133.620654][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 133.628475][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 133.636234][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 133.643542][ T3389] rtc rtc0: __rtc_set_alarm: err=-22 [ 133.689869][ T8506] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #18: comm syz.1.1549: corrupted inode contents [ 133.719907][ T8506] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #18: comm syz.1.1549: mark_inode_dirty error [ 133.734528][ T8506] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #18: comm syz.1.1549: mark inode dirty (error -117) [ 133.751639][ T8498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.762222][ T8506] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 133.774485][ T8498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.823117][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.834430][ T7182] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.861458][ T7182] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.893662][ T7182] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.907277][ T8518] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 133.908944][ T7182] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.940210][ T7981] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.941574][ T8518] lo speed is unknown, defaulting to 1000 [ 134.379190][ T8518] netlink: 'syz.3.1555': attribute type 2 has an invalid length. [ 134.422224][ T8547] FAULT_INJECTION: forcing a failure. [ 134.422224][ T8547] name failslab, interval 1, probability 0, space 0, times 0 [ 134.435705][ T8547] CPU: 1 UID: 0 PID: 8547 Comm: syz.7.1559 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 134.435739][ T8547] Tainted: [W]=WARN [ 134.435746][ T8547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 134.435759][ T8547] Call Trace: [ 134.435767][ T8547] [ 134.435777][ T8547] __dump_stack+0x1d/0x30 [ 134.435810][ T8547] dump_stack_lvl+0x95/0xd0 [ 134.435841][ T8547] dump_stack+0x15/0x1b [ 134.435869][ T8547] should_fail_ex+0x265/0x280 [ 134.435902][ T8547] should_failslab+0x8c/0xb0 [ 134.435927][ T8547] kmem_cache_alloc_noprof+0x69/0x4b0 [ 134.435952][ T8547] ? vm_area_dup+0x33/0x2c0 [ 134.435996][ T8547] vm_area_dup+0x33/0x2c0 [ 134.436020][ T8547] dup_mmap+0x4b7/0xea0 [ 134.436068][ T8547] copy_mm+0x11a/0x370 [ 134.436097][ T8547] copy_process+0xcbc/0x1ef0 [ 134.436131][ T8547] kernel_clone+0x16c/0x5c0 [ 134.436156][ T8547] __x64_sys_clone+0xe6/0x120 [ 134.436190][ T8547] x64_sys_call+0x12d0/0x3000 [ 134.436224][ T8547] do_syscall_64+0xca/0x2b0 [ 134.436271][ T8547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.436294][ T8547] RIP: 0033:0x7fc2cc03f749 [ 134.436310][ T8547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.436328][ T8547] RSP: 002b:00007fc2caa5cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 134.436348][ T8547] RAX: ffffffffffffffda RBX: 00007fc2cc296180 RCX: 00007fc2cc03f749 [ 134.436364][ T8547] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040800200 [ 134.436377][ T8547] RBP: 00007fc2caa5d090 R08: 0000000000000000 R09: 0000000000000000 [ 134.436389][ T8547] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 134.436406][ T8547] R13: 00007fc2cc296218 R14: 00007fc2cc296180 R15: 00007ffc851155f8 [ 134.436433][ T8547] [ 135.088894][ T8552] set_capacity_and_notify: 4 callbacks suppressed [ 135.088915][ T8552] loop5: detected capacity change from 0 to 2048 [ 135.331797][ T8554] __nla_validate_parse: 9 callbacks suppressed [ 135.331812][ T8554] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1564'. [ 135.380723][ T8552] loop5: p2 < > p4 [ 135.408022][ T8564] loop7: detected capacity change from 0 to 512 [ 135.437370][ T8564] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.1564: invalid block [ 135.519618][ T8564] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1564: invalid indirect mapped block 4294967295 (level 1) [ 135.537162][ T8564] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1564: invalid indirect mapped block 4294967295 (level 1) [ 135.552005][ T8564] EXT4-fs (loop7): 2 truncates cleaned up [ 135.563736][ T8564] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.580934][ T8552] loop5: p4 size 262144 extends beyond EOD, truncated [ 135.618372][ T8579] loop1: detected capacity change from 0 to 2048 [ 135.628538][ T8579] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.643545][ T8582] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1573'. [ 135.657546][ T8579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.676499][ T8579] tipc: Enabling of bearer rejected, already enabled [ 135.721341][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.729154][ T8589] pimreg3: entered allmulticast mode [ 135.749303][ T8589] loop5: detected capacity change from 0 to 512 [ 135.796688][ T7981] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.822314][ T8595] loop1: detected capacity change from 0 to 512 [ 135.965106][ T8595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.006654][ T8595] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.047759][ T8606] pimreg: entered allmulticast mode [ 136.160217][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.191487][ T8620] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1587'. [ 136.221550][ T8621] loop1: detected capacity change from 0 to 2048 [ 136.229548][ T8621] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.240628][ T8623] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1588'. [ 136.252706][ T8621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.299818][ T8621] tipc: Enabling of bearer rejected, already enabled [ 136.310480][ T8629] FAULT_INJECTION: forcing a failure. [ 136.310480][ T8629] name failslab, interval 1, probability 0, space 0, times 0 [ 136.323279][ T8629] CPU: 1 UID: 0 PID: 8629 Comm: syz.7.1589 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 136.323465][ T8629] Tainted: [W]=WARN [ 136.323472][ T8629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.323487][ T8629] Call Trace: [ 136.323495][ T8629] [ 136.323505][ T8629] __dump_stack+0x1d/0x30 [ 136.323539][ T8629] dump_stack_lvl+0x95/0xd0 [ 136.323569][ T8629] dump_stack+0x15/0x1b [ 136.323596][ T8629] should_fail_ex+0x265/0x280 [ 136.323668][ T8629] ? __pfx_proc_alloc_inode+0x10/0x10 [ 136.323711][ T8629] should_failslab+0x8c/0xb0 [ 136.323734][ T8629] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 136.323823][ T8629] ? proc_alloc_inode+0x34/0x90 [ 136.323871][ T8629] ? __pfx_proc_alloc_inode+0x10/0x10 [ 136.323985][ T8629] proc_alloc_inode+0x34/0x90 [ 136.324023][ T8629] alloc_inode+0x40/0x170 [ 136.324044][ T8629] new_inode+0x1d/0xe0 [ 136.324116][ T8629] proc_pid_make_inode+0x1f/0xd0 [ 136.324139][ T8629] proc_pident_instantiate+0x44/0x180 [ 136.324167][ T8629] proc_fill_cache+0x1c4/0x240 [ 136.324189][ T8629] ? __pfx_proc_pident_instantiate+0x10/0x10 [ 136.324226][ T8629] proc_pident_readdir+0x1f7/0x2d0 [ 136.324331][ T8629] proc_tgid_base_readdir+0x29/0x40 [ 136.324441][ T8629] iterate_dir+0x114/0x330 [ 136.324516][ T8629] __se_sys_getdents64+0x88/0x1b0 [ 136.324580][ T8629] ? __pfx_filldir64+0x10/0x10 [ 136.324668][ T8629] __x64_sys_getdents64+0x43/0x50 [ 136.324776][ T8629] x64_sys_call+0x2f27/0x3000 [ 136.324809][ T8629] do_syscall_64+0xca/0x2b0 [ 136.324872][ T8629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.324902][ T8629] RIP: 0033:0x7fc2cc03f749 [ 136.324923][ T8629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.324948][ T8629] RSP: 002b:00007fc2caa9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 136.324975][ T8629] RAX: ffffffffffffffda RBX: 00007fc2cc295fa0 RCX: 00007fc2cc03f749 [ 136.324993][ T8629] RDX: 0000000000000fe5 RSI: 0000200000001fc0 RDI: 0000000000000003 [ 136.325020][ T8629] RBP: 00007fc2caa9f090 R08: 0000000000000000 R09: 0000000000000000 [ 136.325036][ T8629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.325048][ T8629] R13: 00007fc2cc296038 R14: 00007fc2cc295fa0 R15: 00007ffc851155f8 [ 136.325068][ T8629] [ 136.588383][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.703804][ T8640] pimreg: entered allmulticast mode [ 136.914240][ T8652] rtc_cmos 00:00: Alarms can be up to one day in the future [ 136.971155][ T8658] veth0: entered promiscuous mode [ 136.976740][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1601'. [ 136.986765][ T8658] veth0 (unregistering): left promiscuous mode [ 137.037515][ T8662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1601'. [ 137.048760][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1601'. [ 137.102528][ T8670] netlink: 'syz.5.1603': attribute type 3 has an invalid length. [ 137.116244][ T8670] netlink: zone id is out of range [ 137.121594][ T8670] netlink: zone id is out of range [ 137.126773][ T8670] netlink: zone id is out of range [ 137.131909][ T8670] netlink: get zone limit has 4 unknown bytes [ 137.145015][ T8672] loop7: detected capacity change from 0 to 512 [ 137.177162][ T8674] rtc_cmos 00:00: Alarms can be up to one day in the future [ 137.185861][ T8676] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1607'. [ 137.196231][ T8672] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.230599][ T8672] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.255072][ T8672] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.353143][ T7981] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.375791][ T8685] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 137.514565][ T8690] rtc_cmos 00:00: Alarms can be up to one day in the future [ 137.527194][ T8689] loop3: detected capacity change from 0 to 128 [ 137.561325][ T8689] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 137.585021][ T8689] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.606202][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 137.614047][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 137.621848][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 137.629663][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 137.637018][ T3389] rtc rtc0: __rtc_set_alarm: err=-22 [ 137.717346][ T8697] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1614'. [ 137.727191][ T8697] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1614'. [ 137.768796][ T8699] lo speed is unknown, defaulting to 1000 [ 137.821471][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.874330][ T8706] loop3: detected capacity change from 0 to 2048 [ 137.910895][ T8708] loop1: detected capacity change from 0 to 512 [ 137.917719][ T8708] EXT4-fs: Ignoring removed i_version option [ 137.923744][ T8708] EXT4-fs: Ignoring removed bh option [ 137.930519][ T8706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.944663][ T8706] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.969214][ T8708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.984494][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.995387][ T8708] ext4 filesystem being mounted at /326/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.037964][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 138.037984][ T29] audit: type=1400 audit(1766935934.399:11081): avc: denied { accept } for pid=8707 comm="syz.1.1619" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.077283][ T8717] rtc_cmos 00:00: Alarms can be up to one day in the future [ 138.086267][ T8716] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 138.107008][ T8716] System zones: 0-2, 18-18, 34-34 [ 138.113553][ T8716] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1620: bg 0: block 248: padding at end of block bitmap is not set [ 138.129136][ T8716] Quota error (device loop3): write_blk: dquota write failed [ 138.136591][ T8716] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 138.146827][ T8716] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1620: Failed to acquire dquot type 1 [ 138.159584][ T8716] EXT4-fs (loop3): 1 truncate cleaned up [ 138.182002][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.191433][ T8716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.211514][ T8725] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1624: bad orphan inode 134217728 [ 138.258546][ T8716] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.273830][ T8725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.357749][ T8716] syz.3.1620 (8716) used greatest stack depth: 9184 bytes left [ 138.397348][ T8725] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 48: comm syz.5.1624: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2, rec_len=4, size=1024 fake=1 [ 138.428176][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.444876][ T7183] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 138.454009][ T7183] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:34: Failed to release dquot type 1 [ 138.493504][ T29] audit: type=1400 audit(1766935934.849:11082): avc: denied { listen } for pid=8729 comm="syz.7.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 138.525880][ T4441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.541420][ T29] audit: type=1400 audit(1766935934.849:11083): avc: denied { accept } for pid=8729 comm="syz.7.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 138.591522][ T8742] program syz.5.1630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.606045][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 138.613835][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 138.621606][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 138.629517][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 138.636873][ T3389] rtc rtc0: __rtc_set_alarm: err=-22 [ 138.651733][ T8744] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 138.669264][ T8746] syzkaller0: entered promiscuous mode [ 138.675215][ T8746] syzkaller0: entered allmulticast mode [ 138.690853][ T8744] EXT4-fs (loop3): invalid journal inode [ 138.697372][ T8744] EXT4-fs (loop3): can't get journal size [ 138.703812][ T8746] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 138.706580][ T8744] EXT4-fs (loop3): 1 truncate cleaned up [ 138.725268][ T8744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.752615][ T29] audit: type=1400 audit(1766935935.079:11084): avc: denied { remount } for pid=8745 comm="syz.1.1631" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 138.831822][ T8754] rtc_cmos 00:00: Alarms can be up to one day in the future [ 138.864600][ T8757] EXT4-fs: Ignoring removed bh option [ 138.887556][ T8760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.900461][ T8760] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.912941][ T8757] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.951274][ T4441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.988033][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.010882][ T8766] hub 6-0:1.0: USB hub found [ 139.019615][ T8766] hub 6-0:1.0: 8 ports detected [ 139.077109][ T29] audit: type=1400 audit(1766935935.419:11085): avc: denied { associate } for pid=8770 comm="syz.3.1640" name="cgroup.freeze" dev="tmpfs" ino=1775 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@" [ 139.102712][ T29] audit: type=1400 audit(1766935935.429:11086): avc: denied { unlink } for pid=3314 comm="syz-executor" name="cgroup.freeze" dev="tmpfs" ino=1775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 139.229748][ T8785] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.266933][ T8785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.293206][ T8785] ext4 filesystem being mounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.370997][ T8793] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #18: comm syz.3.1643: corrupted inode contents [ 139.393520][ T29] audit: type=1400 audit(1766935935.749:11087): avc: denied { create } for pid=8765 comm="syz.5.1637" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=DC [ 139.417538][ T8793] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #18: comm syz.3.1643: mark_inode_dirty error [ 139.429422][ T8793] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #18: comm syz.3.1643: corrupted inode contents [ 139.441826][ T8793] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #18: comm syz.3.1643: mark_inode_dirty error [ 139.481392][ T8793] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #18: comm syz.3.1643: mark inode dirty (error -117) [ 139.527287][ T8793] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 139.581961][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.594529][ T8787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8787 comm=syz.7.1644 [ 139.608107][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 139.615869][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 139.623642][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 139.631402][ T3389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 139.638777][ T3389] rtc rtc0: __rtc_set_alarm: err=-22 [ 139.726511][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.775699][ T8826] tipc: Failed to remove unknown binding: 66,0,0/1:1808534384/1808534385 [ 139.776330][ T8822] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.818594][ T8828] rtc_cmos 00:00: Alarms can be up to one day in the future [ 139.862752][ T8822] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.890165][ T8840] FAULT_INJECTION: forcing a failure. [ 139.890165][ T8840] name failslab, interval 1, probability 0, space 0, times 0 [ 139.902885][ T8840] CPU: 0 UID: 0 PID: 8840 Comm: syz.1.1660 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 139.902950][ T8840] Tainted: [W]=WARN [ 139.902957][ T8840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.902970][ T8840] Call Trace: [ 139.902977][ T8840] [ 139.902985][ T8840] __dump_stack+0x1d/0x30 [ 139.903061][ T8840] dump_stack_lvl+0x95/0xd0 [ 139.903091][ T8840] dump_stack+0x15/0x1b [ 139.903112][ T8840] should_fail_ex+0x265/0x280 [ 139.903137][ T8840] should_failslab+0x8c/0xb0 [ 139.903168][ T8840] kmem_cache_alloc_noprof+0x69/0x4b0 [ 139.903237][ T8840] ? skb_clone+0x151/0x1f0 [ 139.903274][ T8840] skb_clone+0x151/0x1f0 [ 139.903318][ T8840] __hci_send_to_channel+0xf6/0x350 [ 139.903364][ T8840] ? skb_push+0x60/0x90 [ 139.903493][ T8840] hci_send_to_channel+0x36/0x50 [ 139.903527][ T8840] hci_sock_bind+0x740/0x9a0 [ 139.903560][ T8840] __sys_bind+0x1d1/0x2a0 [ 139.903611][ T8840] __x64_sys_bind+0x3f/0x50 [ 139.903641][ T8840] x64_sys_call+0x2ceb/0x3000 [ 139.903681][ T8840] do_syscall_64+0xca/0x2b0 [ 139.903729][ T8840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.903797][ T8840] RIP: 0033:0x7fb6dac7f749 [ 139.903816][ T8840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.903841][ T8840] RSP: 002b:00007fb6d96e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 139.903866][ T8840] RAX: ffffffffffffffda RBX: 00007fb6daed5fa0 RCX: 00007fb6dac7f749 [ 139.903883][ T8840] RDX: 0000000000000006 RSI: 0000200000000280 RDI: 0000000000000008 [ 139.903899][ T8840] RBP: 00007fb6d96e7090 R08: 0000000000000000 R09: 0000000000000000 [ 139.903914][ T8840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.903927][ T8840] R13: 00007fb6daed6038 R14: 00007fb6daed5fa0 R15: 00007ffddf8132e8 [ 139.903946][ T8840] [ 140.098070][ T8822] tipc: Enabling of bearer rejected, already enabled [ 140.166802][ T7981] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.267948][ T8826] tipc: Failed to remove unknown binding: 66,0,0/1:1808534384/1808534385 [ 140.359450][ T8856] netlink: 'syz.7.1664': attribute type 1 has an invalid length. [ 140.373552][ T8856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.382995][ T8856] __nla_validate_parse: 2 callbacks suppressed [ 140.383013][ T8856] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1664'. [ 140.419514][ T8859] tipc: Enabling of bearer rejected, already enabled [ 140.436370][ T8841] set_capacity_and_notify: 12 callbacks suppressed [ 140.436391][ T8841] loop3: detected capacity change from 0 to 2048 [ 140.527036][ T8841] loop3: p1 p2 p3 [ 140.605962][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 140.613784][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 140.621565][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 140.629377][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 140.636738][ T3423] rtc rtc0: __rtc_set_alarm: err=-22 [ 140.857425][ T3481] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 140.865739][ T3481] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 140.873180][ T3481] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 140.882054][ T3481] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 140.889607][ T3481] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 140.897826][ T3481] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 140.905303][ T3481] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 140.912755][ T3481] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 140.920303][ T3481] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 140.928503][ T3481] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 140.937166][ T3481] hid-generic 0000:0000:0000.0005: hidraw0: HID v8.00 Device [syz0] on syz0 [ 140.958368][ T8878] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1673'. [ 140.967603][ T8878] netem: change failed [ 141.011290][ T8881] rtc_cmos 00:00: Alarms can be up to one day in the future [ 141.038900][ T8886] loop1: detected capacity change from 0 to 512 [ 141.046496][ T8886] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.074631][ T8890] FAULT_INJECTION: forcing a failure. [ 141.074631][ T8890] name failslab, interval 1, probability 0, space 0, times 0 [ 141.087766][ T8890] CPU: 0 UID: 0 PID: 8890 Comm: syz.7.1679 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 141.087820][ T8890] Tainted: [W]=WARN [ 141.087828][ T8890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 141.087844][ T8890] Call Trace: [ 141.087853][ T8890] [ 141.087863][ T8890] __dump_stack+0x1d/0x30 [ 141.087892][ T8890] dump_stack_lvl+0x95/0xd0 [ 141.087922][ T8890] dump_stack+0x15/0x1b [ 141.087945][ T8890] should_fail_ex+0x265/0x280 [ 141.087973][ T8890] should_failslab+0x8c/0xb0 [ 141.088003][ T8890] __kmalloc_noprof+0xb9/0x5a0 [ 141.088033][ T8890] ? sock_kmalloc+0x85/0xc0 [ 141.088132][ T8890] ? terminate_walk+0x1e6/0x210 [ 141.088162][ T8890] ? path_openat+0x1d88/0x23b0 [ 141.088203][ T8890] sock_kmalloc+0x85/0xc0 [ 141.088277][ T8890] ____sys_sendmsg+0xf8/0x4a0 [ 141.088322][ T8890] ___sys_sendmsg+0x17b/0x1d0 [ 141.088396][ T8890] __x64_sys_sendmsg+0xd4/0x160 [ 141.088433][ T8890] x64_sys_call+0x17ba/0x3000 [ 141.088545][ T8890] do_syscall_64+0xca/0x2b0 [ 141.088611][ T8890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.088651][ T8890] RIP: 0033:0x7fc2cc03f749 [ 141.088691][ T8890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.088724][ T8890] RSP: 002b:00007fc2caa9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.088779][ T8890] RAX: ffffffffffffffda RBX: 00007fc2cc295fa0 RCX: 00007fc2cc03f749 [ 141.088834][ T8890] RDX: 0000000004004881 RSI: 0000200000000600 RDI: 0000000000000007 [ 141.088848][ T8890] RBP: 00007fc2caa9f090 R08: 0000000000000000 R09: 0000000000000000 [ 141.088861][ T8890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.088874][ T8890] R13: 00007fc2cc296038 R14: 00007fc2cc295fa0 R15: 00007ffc851155f8 [ 141.088895][ T8890] [ 141.303905][ T8886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.326391][ T8900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1680'. [ 141.339386][ T8886] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.358423][ T8900] rtc_cmos 00:00: Alarms can be up to one day in the future [ 141.393493][ T8905] loop7: detected capacity change from 0 to 512 [ 141.434179][ T8905] EXT4-fs: Ignoring removed i_version option [ 141.440309][ T8905] EXT4-fs: Ignoring removed bh option [ 141.445846][ T8905] ext4: Unknown parameter 'nouser_xattr' [ 141.458954][ T8886] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #18: comm syz.1.1676: corrupted inode contents [ 141.484463][ T8886] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #18: comm syz.1.1676: mark_inode_dirty error [ 141.497139][ T8886] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #18: comm syz.1.1676: corrupted inode contents [ 141.512074][ T8886] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #18: comm syz.1.1676: mark_inode_dirty error [ 141.530020][ T8886] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #18: comm syz.1.1676: mark inode dirty (error -117) [ 141.556874][ T8886] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 141.579274][ T8911] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1687'. [ 141.605919][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 141.613654][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 141.621445][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 141.629222][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 141.636559][ T3423] rtc rtc0: __rtc_set_alarm: err=-22 [ 141.671338][ T8909] loop3: detected capacity change from 0 to 2048 [ 141.679285][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.753694][ T8923] loop7: detected capacity change from 0 to 512 [ 141.760856][ T8923] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 141.762901][ T8909] loop3: p2 < > p4 [ 141.776909][ T8923] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 141.785323][ T8909] loop3: p4 size 262144 extends beyond EOD, truncated [ 141.792460][ T8923] System zones: 1-12 [ 141.802756][ T8923] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.1693: corrupted in-inode xattr: e_value size too large [ 141.819986][ T8923] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1693: couldn't read orphan inode 15 (err -117) [ 141.842782][ T8923] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.898028][ T8932] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1696'. [ 141.929537][ T7981] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.992228][ T8938] loop7: detected capacity change from 0 to 2048 [ 141.999599][ T8938] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.022779][ T8938] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.075847][ T8938] tipc: Enabling of bearer rejected, already enabled [ 142.141179][ T8947] SELinux: Context ׸ýÿX7ªÞd¹Q¬‰YI{C´¨pUèÒ–hÙ»ŒÐ r: is not valid (left unmapped). [ 142.176501][ T7981] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.266226][ T8959] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1705'. [ 142.281795][ T8950] loop1: detected capacity change from 0 to 8192 [ 142.293706][ T8961] loop5: detected capacity change from 0 to 512 [ 142.305862][ T8959] rtc_cmos 00:00: Alarms can be up to one day in the future [ 142.313282][ T8961] EXT4-fs: inline encryption not supported [ 142.323580][ T8961] EXT4-fs: inline encryption not supported [ 142.329546][ T8961] EXT4-fs: Ignoring removed bh option [ 142.336237][ T8961] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 142.358527][ T8961] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.394272][ T8961] ext4 filesystem being mounted at /224/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.408915][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1710'. [ 142.423733][ T8940] netlink: 'syz.3.1700': attribute type 9 has an invalid length. [ 142.444378][ T8961] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm ext4: corrupted xattr block 33: bad e_name length [ 142.458358][ T8961] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 142.469514][ T8961] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm ext4: corrupted xattr block 33: bad e_name length [ 142.482934][ T8961] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 142.493751][ T8961] EXT4-fs error (device loop5): ext4_xattr_block_list:766: inode #15: comm ext4: corrupted xattr block 33: bad e_name length [ 142.523578][ T4441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.559757][ T8977] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1711'. [ 142.568845][ T8977] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1711'. [ 142.574591][ T8979] netlink: zone id is out of range [ 142.590039][ T8979] loop3: detected capacity change from 0 to 512 [ 142.599226][ T8979] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 142.611121][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 142.618953][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 142.626803][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 142.634543][ T3423] rtc_cmos 00:00: Alarms can be up to one day in the future [ 142.642007][ T3423] rtc rtc0: __rtc_set_alarm: err=-22 [ 142.655554][ T8970] ================================================================== [ 142.663798][ T8970] BUG: KCSAN: data-race in fat12_ent_put / fat_mirror_bhs [ 142.670953][ T8970] [ 142.673315][ T8970] read-write to 0xffff888122497504 of 1 bytes by task 8950 on cpu 1: [ 142.681414][ T8970] fat12_ent_put+0xc4/0x170 [ 142.685985][ T8970] fat_alloc_clusters+0x4d1/0xa80 [ 142.691082][ T8970] fat_get_block+0x258/0x5e0 [ 142.695724][ T8970] __block_write_begin_int+0x400/0xf90 [ 142.701227][ T8970] cont_write_begin+0x5ff/0x970 [ 142.706114][ T8970] fat_write_begin+0x4f/0xe0 [ 142.710741][ T8970] generic_perform_write+0x184/0x490 [ 142.716070][ T8970] __generic_file_write_iter+0xec/0x120 [ 142.721653][ T8970] generic_file_write_iter+0x8d/0x2f0 [ 142.727055][ T8970] do_iter_readv_writev+0x4a1/0x540 [ 142.732293][ T8970] vfs_writev+0x2df/0x8b0 [ 142.736651][ T8970] __se_sys_pwritev2+0xfc/0x1c0 [ 142.741531][ T8970] __x64_sys_pwritev2+0x67/0x80 [ 142.746409][ T8970] x64_sys_call+0x2c9e/0x3000 [ 142.751131][ T8970] do_syscall_64+0xca/0x2b0 [ 142.755694][ T8970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.761648][ T8970] [ 142.763997][ T8970] read to 0xffff888122497400 of 512 bytes by task 8970 on cpu 0: [ 142.771735][ T8970] fat_mirror_bhs+0x1df/0x320 [ 142.776443][ T8970] fat_alloc_clusters+0x98b/0xa80 [ 142.781579][ T8970] fat_get_block+0x258/0x5e0 [ 142.786202][ T8970] __block_write_begin_int+0x400/0xf90 [ 142.791699][ T8970] cont_write_begin+0x5ff/0x970 [ 142.796581][ T8970] fat_write_begin+0x4f/0xe0 [ 142.801210][ T8970] generic_perform_write+0x184/0x490 [ 142.806554][ T8970] __generic_file_write_iter+0x9e/0x120 [ 142.812151][ T8970] generic_file_write_iter+0x8d/0x2f0 [ 142.817559][ T8970] vfs_write+0x52a/0x960 [ 142.821824][ T8970] ksys_write+0xda/0x1a0 [ 142.826117][ T8970] __x64_sys_write+0x40/0x50 [ 142.830730][ T8970] x64_sys_call+0x2847/0x3000 [ 142.835448][ T8970] do_syscall_64+0xca/0x2b0 [ 142.839996][ T8970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.845921][ T8970] [ 142.848268][ T8970] Reported by Kernel Concurrency Sanitizer on: [ 142.854434][ T8970] CPU: 0 UID: 0 PID: 8970 Comm: syz.1.1704 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 142.865749][ T8970] Tainted: [W]=WARN [ 142.869566][ T8970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.879645][ T8970] ================================================================== [ 142.912948][ T8979] EXT4-fs (loop3): 1 truncate cleaned up [ 142.919690][ T8979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.955626][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.